Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ZTUx8aBxBstoMbGxu7tdFxItnHs.roa
File:                     ZTUx8aBxBstoMbGxu7tdFxItnHs.roa (raw, json)
Hash identifier:          u0tAZd5h4mxpczdXVLrbqyUsbjn7tgzyHoQ7qdvMYA0=
Subject key identifier:   65:35:31:F1:A0:71:06:CB:68:31:B1:B1:BB:BB:5D:17:12:2D:9C:7B
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       08EA0FE3
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ZTUx8aBxBstoMbGxu7tdFxItnHs.roa
Signing time:             Sat 01 Jan 2022 08:05:17 +0000
ROA not before:           Sat 01 Jan 2022 08:05:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44247
IP address blocks:        95.158.160.0/22 maxlen: 24
                          46.35.176.0/22 maxlen: 24
                          95.158.176.0/21 maxlen: 24
                          212.21.128.0/24 maxlen: 24
                          212.21.136.0/23 maxlen: 24
                          212.21.138.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149557219 (0x8ea0fe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 08:05:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=653531f1a07106cb6831b1b1bbbb5d17122d9c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:5f:57:1e:2b:a0:84:58:ac:72:8e:4a:96:
                    f6:bb:31:ab:c1:e9:32:02:bb:c0:83:8d:f9:d9:c3:
                    5e:e4:7f:2e:ee:90:0c:3e:91:8b:69:45:ea:26:d5:
                    51:7d:87:7a:a6:5a:54:8d:a9:11:6d:43:90:3e:f3:
                    84:16:8d:bf:c1:97:15:5c:be:f1:87:da:66:27:42:
                    09:70:10:f4:4e:fb:5a:6b:72:91:f9:7f:f8:b6:2d:
                    5f:53:43:fb:8e:4d:9c:f3:8f:d5:56:9b:76:08:b3:
                    58:26:22:9b:41:49:39:93:df:30:ce:28:f7:ea:52:
                    75:e9:7f:29:b0:72:2d:3d:04:10:00:11:64:72:2a:
                    e1:9c:b2:f9:5a:ef:5f:c5:f4:cc:a6:3c:b9:ba:71:
                    a8:b4:99:8e:08:13:82:c4:ec:3f:e3:ed:dd:89:c8:
                    03:9e:d0:db:50:41:5e:21:b3:5e:41:e8:5e:d0:ef:
                    3a:18:2d:a7:27:07:41:de:bf:fa:6e:d8:6a:15:ca:
                    2f:cd:d3:40:66:f4:ce:10:50:b4:65:a7:81:bc:2c:
                    79:fd:0d:6d:cf:73:1d:bc:6e:cf:f1:17:44:cc:23:
                    5a:2a:f1:9d:d6:37:ea:83:7e:7c:52:1c:b2:6a:17:
                    f1:cd:bc:b9:32:16:7b:e6:d1:99:8e:19:2e:30:93:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:35:31:F1:A0:71:06:CB:68:31:B1:B1:BB:BB:5D:17:12:2D:9C:7B
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ZTUx8aBxBstoMbGxu7tdFxItnHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.35.176.0/22
                  95.158.160.0/22
                  95.158.176.0/21
                  212.21.128.0/24
                  212.21.136.0-212.21.138.255

    Signature Algorithm: sha256WithRSAEncryption
         76:8f:36:e0:28:a1:5a:ae:d6:be:bd:bf:9c:3b:9c:18:50:26:
         1c:7a:a4:3a:10:c9:14:20:03:63:20:8e:f3:42:c5:ed:92:3c:
         4f:da:ec:fe:ad:f0:59:e1:b2:af:b2:b4:2d:47:1f:52:aa:14:
         14:bb:68:3b:6d:42:43:60:f2:66:a2:dc:f7:4e:3c:b8:38:b5:
         af:13:9e:6a:62:36:fb:cd:5d:ac:b8:7a:2f:9f:10:dc:95:2f:
         a3:15:e5:6a:ff:35:e7:c9:94:79:f3:01:03:90:d7:0a:d9:5c:
         3f:1a:da:14:4d:a8:fe:71:ee:9b:3b:aa:02:1a:a4:62:e7:83:
         5f:2c:0f:7e:e6:99:00:e5:c3:90:36:2d:97:e3:37:f8:2d:22:
         51:c5:67:e7:4d:9e:02:42:60:7f:76:5a:71:2a:bb:a5:f0:93:
         ed:0b:9e:69:c5:20:29:c7:59:61:7d:e0:7b:97:58:46:4f:a5:
         38:88:15:20:73:51:2a:fe:93:29:6e:35:5e:2e:e6:c2:0a:b0:
         49:2f:6e:90:0f:2e:4b:3f:fa:39:5e:48:5b:fd:2b:d1:d1:b4:
         56:b7:4f:b4:7b:55:75:b2:9e:56:89:2c:1c:be:4b:6f:ff:ec:
         bc:da:fd:fc:a1:8b:7c:6c:25:0c:a4:db:12:e1:7d:ef:01:3b:
         61:97:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org