Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/RRkLON2fvkufrjdU2oQESgWTWY8.roa
File:                     RRkLON2fvkufrjdU2oQESgWTWY8.roa (raw, json)
Hash identifier:          w8SHLuNMiirhWBmjWqBkhjdwhL/D7kkLpFrYVn0aA9s=
Subject key identifier:   45:19:0B:38:DD:9F:BE:4B:9F:AE:37:54:DA:84:04:4A:05:93:59:8F
Certificate issuer:       /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial:       02F9A3AF
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/RRkLON2fvkufrjdU2oQESgWTWY8.roa
Signing time:             Sat 01 Jan 2022 16:03:38 +0000
ROA not before:           Sat 01 Jan 2022 16:03:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142632
IP address blocks:        2a0e:46c4:10d::/48 maxlen: 48
                          2a0e:46c4:10b::/48 maxlen: 48
                          2a0e:46c4:10c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49914799 (0x2f9a3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
        Validity
            Not Before: Jan  1 16:03:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45190b38dd9fbe4b9fae3754da84044a0593598f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:39:af:52:65:ff:66:47:b4:ae:5a:24:97:
                    6d:18:71:fb:b8:88:e9:4c:02:8b:0b:15:c7:f0:5b:
                    0c:5b:c7:07:a0:3e:e2:87:3c:52:79:8f:e1:03:10:
                    da:ec:b1:62:f0:97:af:dc:48:84:1d:fb:13:fd:b5:
                    50:d6:05:15:b8:a0:0e:b8:67:69:ff:a9:e2:38:db:
                    d4:26:2d:4e:25:56:8d:60:24:7b:86:22:32:58:0b:
                    7d:e1:40:50:5e:31:2e:62:3d:ca:4f:61:90:0b:66:
                    a3:58:8b:ba:d8:3c:77:f8:a2:9f:7a:4d:e4:c8:d9:
                    7f:25:25:b9:33:6f:7c:21:68:8e:22:df:17:e2:14:
                    18:aa:07:af:b9:3f:1c:26:6c:bd:d6:6d:63:88:a7:
                    07:16:e9:a7:7d:9e:c7:fc:3a:8c:90:c3:f5:39:12:
                    21:e4:81:bf:6a:84:18:d2:f0:49:18:1f:09:c6:51:
                    a3:1b:72:49:3d:57:1f:f0:15:47:81:2b:4f:e8:6b:
                    57:24:cd:18:91:82:ba:52:9c:82:ec:47:5a:e9:77:
                    f1:e5:0c:b7:45:22:2b:3c:38:b9:ab:81:21:e7:e0:
                    79:71:a2:e9:76:5b:55:fe:b4:10:ed:0d:ec:5b:77:
                    83:65:e6:aa:2e:a5:75:74:5b:90:e7:59:37:5b:5c:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:19:0B:38:DD:9F:BE:4B:9F:AE:37:54:DA:84:04:4A:05:93:59:8F
            X509v3 Authority Key Identifier:
                keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/RRkLON2fvkufrjdU2oQESgWTWY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:46c4:10b::-2a0e:46c4:10d:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5a:85:63:fd:ad:98:12:ac:86:71:6b:44:76:84:bb:f1:7f:5e:
         f8:17:1d:83:ee:d2:85:a3:4e:2f:5b:88:d9:d3:23:b0:78:22:
         ac:f0:e6:87:c3:2c:14:48:05:9d:d1:55:50:62:89:78:37:e8:
         f6:aa:75:32:e4:a7:03:ea:2e:11:5b:f6:18:bc:03:27:4b:10:
         53:5d:a8:f1:9d:17:f5:52:43:32:aa:fa:ca:e9:48:ea:c7:30:
         28:67:2b:fb:d5:33:0e:85:82:84:c9:f2:cc:35:3e:71:3f:7d:
         65:c6:a7:d6:c5:cc:a4:2f:27:87:7b:78:d2:82:07:41:07:79:
         ff:45:fa:b9:8c:a2:58:95:d2:a0:ae:b7:0c:c1:36:3e:ed:6b:
         04:62:fe:68:b8:4f:1c:4f:68:f0:27:a7:73:f7:22:de:02:ea:
         0e:9a:c6:ec:a7:27:d8:95:a6:7c:9b:57:7e:41:3e:88:23:bd:
         b0:1f:cf:df:cb:51:20:53:81:8f:7e:d1:1e:1b:72:e5:39:ab:
         f9:4e:1c:4e:95:e4:1d:e0:6b:8b:76:63:4c:e3:a2:0e:70:2f:
         4a:a7:97:1c:6a:23:cd:9a:71:29:d4:fa:7d:21:0b:42:11:ed:
         e7:2c:13:76:d8:f9:ff:67:11:e5:55:6c:ad:e9:92:11:0f:35:
         c4:5b:02:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEAvmjrzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NzBlNTQ1MGQxNDg2NzgwYWJhNTRmMDQ1ZWM0ODAyZjE5ZjBiNGY3MB4XDTIyMDEw
MTE2MDMzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDUxOTBiMzhkZDlm
YmU0YjlmYWUzNzU0ZGE4NDA0NGEwNTkzNTk4ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALaBOa9SZf9mR7SuWiSXbRhx+7iI6UwCiwsVx/BbDFvHB6A+
4oc8UnmP4QMQ2uyxYvCXr9xIhB37E/21UNYFFbigDrhnaf+p4jjb1CYtTiVWjWAk
e4YiMlgLfeFAUF4xLmI9yk9hkAtmo1iLutg8d/iin3pN5MjZfyUluTNvfCFojiLf
F+IUGKoHr7k/HCZsvdZtY4inBxbpp32ex/w6jJDD9TkSIeSBv2qEGNLwSRgfCcZR
oxtyST1XH/AVR4ErT+hrVyTNGJGCulKcguxHWul38eUMt0UiKzw4uauBIefgeXGi
6XZbVf60EO0N7Ft3g2Xmqi6ldXRbkOdZN1tcqJ0CAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBRFGQs43Z++S5+uN1TahARKBZNZjzAfBgNVHSMEGDAWgBQ3DlRQ0UhngKul
TwRexIAvGfC09zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L053NVVVTkZJWjRDcnBVOEVYc1NBTHhud3RQYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvZjBmNzBjLTA2ZTctNDFhYy1hMmI4LTg1OGRjZTU3ZmNkYi8x
L1JSa0xPTjJmdmt1ZnJqZFUyb1FFU2dXVFdZOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
ZjBmNzBjLTA2ZTctNDFhYy1hMmI4LTg1OGRjZTU3ZmNkYi8xL053NVVVTkZJWjRD
cnBVOEVYc1NBTHhud3RQYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAIwFDASAwcAKg5GxAELAwcBKg5GxAEMMA0G
CSqGSIb3DQEBCwUAA4IBAQBahWP9rZgSrIZxa0R2hLvxf174Fx2D7tKFo04vW4jZ
0yOweCKs8OaHwywUSAWd0VVQYol4N+j2qnUy5KcD6i4RW/YYvAMnSxBTXajxnRf1
UkMyqvrK6UjqxzAoZyv71TMOhYKEyfLMNT5xP31lxqfWxcykLyeHe3jSggdBB3n/
Rfq5jKJYldKgrrcMwTY+7WsEYv5ouE8cT2jwJ6dz9yLeAuoOmsbspyfYlaZ8m1d+
QT6II72wH8/fy1EgU4GPftEeG3LlOav5ThxOleQd4GuLdmNM46IOcC9Kp5ccaiPN
mnEp1Pp9IQtCEe3nLBN22Pn/ZxHlVWyt6ZIRDzXEWwJ6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:40 2024 by rpki-client on console-ams.rpki-client.org