Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/zE-s2daTiR8VrW9-HmDG7KpsnBQ.roa
File:                     zE-s2daTiR8VrW9-HmDG7KpsnBQ.roa (raw, json)
Hash identifier:          VE3EuQtD+ZeaEPlxl8tKFzRzqqhQyePJvqm7qfdiWjM=
Subject key identifier:   CC:4F:AC:D9:D6:93:89:1F:15:AD:6F:7E:1E:60:C6:EC:AA:6C:9C:14
Certificate issuer:       /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial:       026DDFDA
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/zE-s2daTiR8VrW9-HmDG7KpsnBQ.roa
Signing time:             Sat 01 Jan 2022 06:52:21 +0000
ROA not before:           Sat 01 Jan 2022 06:52:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47190
IP address blocks:        195.216.232.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40755162 (0x26ddfda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
        Validity
            Not Before: Jan  1 06:52:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc4facd9d693891f15ad6f7e1e60c6ecaa6c9c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:e2:b9:3a:81:2e:13:ff:7d:3c:14:c4:6e:
                    a8:41:ea:d4:19:4f:cc:ad:aa:96:8f:b0:06:cf:34:
                    27:84:b5:63:43:5f:ec:0f:d2:99:1a:5d:03:07:6c:
                    51:b0:ae:85:ef:7f:09:47:9c:8b:cb:cc:9a:9d:bf:
                    9d:0b:fd:f7:17:31:3a:49:a5:63:d8:bd:14:c0:fb:
                    e2:f0:4f:f7:ae:9c:4b:ac:16:15:9d:38:46:ae:53:
                    3e:ed:35:b0:19:de:b4:9b:f4:75:ff:f4:17:c4:cc:
                    cd:9d:12:3b:ba:05:3d:ef:fd:57:99:90:a9:c1:f6:
                    97:31:3c:46:6a:3d:10:07:fc:40:a2:90:86:ff:1e:
                    3c:25:5f:41:a1:21:20:be:d0:93:12:86:df:22:67:
                    3f:20:ef:96:ba:30:6b:73:30:5e:9f:16:11:5a:7e:
                    88:92:37:42:3f:da:55:18:79:34:6b:f9:01:3f:14:
                    2d:54:c8:eb:06:49:a9:f8:b5:fc:62:67:e3:dd:c0:
                    98:6f:6b:ed:e8:f3:73:d5:6e:98:7a:ac:7f:ea:81:
                    0a:8e:bb:da:ed:8b:c9:3b:98:c6:51:5d:97:ea:b6:
                    aa:6a:b7:26:06:aa:77:4d:cf:83:e3:6d:4b:c0:4d:
                    de:4d:df:1e:ff:29:e8:f2:f0:2c:7d:d3:b3:a3:4e:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4F:AC:D9:D6:93:89:1F:15:AD:6F:7E:1E:60:C6:EC:AA:6C:9C:14
            X509v3 Authority Key Identifier:
                keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/zE-s2daTiR8VrW9-HmDG7KpsnBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:0e:ef:af:6b:23:03:65:12:f6:75:8f:e5:2a:51:f6:5f:
         9b:d6:4f:c2:c2:e9:ee:e8:ea:62:f0:34:0e:97:34:3c:57:32:
         8a:e9:6d:86:ee:49:7a:30:60:04:3a:30:2e:f9:70:1c:75:65:
         76:9d:87:ce:85:2b:2c:70:30:2a:d3:b9:aa:6a:64:87:e7:75:
         8f:ae:a0:78:7a:62:13:af:7c:5b:6c:77:7b:89:d9:60:ca:2c:
         62:4f:54:94:72:c6:91:91:b5:1b:b6:8d:5f:24:28:ee:d3:83:
         ce:e7:a4:70:f4:eb:e3:23:33:c2:93:f5:7c:ae:2f:7b:4f:0f:
         17:48:1d:e8:1e:b2:4c:25:82:9a:e2:49:2f:0b:27:8a:fa:80:
         26:9b:6a:ce:34:1a:f6:29:85:4a:cc:7c:d7:3e:ed:2c:be:06:
         45:09:8f:75:b6:8b:44:e2:85:96:e2:b1:80:d2:f0:97:99:42:
         fb:3a:8f:1d:3f:ab:9a:67:6a:c4:0c:c4:4e:a8:8a:4e:8c:4e:
         1d:96:c1:17:1d:fb:6f:03:85:06:bd:c2:45:c2:80:23:bd:f7:
         81:8b:27:cf:9b:98:92:86:89:f5:54:67:dd:08:9f:39:45:98:
         05:9a:0a:e6:86:9a:98:bc:a1:ac:d1:ef:88:e8:6e:fc:57:e1:
         d9:13:76:21
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAm3f2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTE1YzE1NTgzYjljY2ZmOTQyY2ZiM2VlZTA0ZTJkZTk1NjQyNjYyMB4XDTIyMDEw
MTA2NTIyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2M0ZmFjZDlkNjkz
ODkxZjE1YWQ2ZjdlMWU2MGM2ZWNhYTZjOWMxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMAc4rk6gS4T/308FMRuqEHq1BlPzK2qlo+wBs80J4S1Y0Nf
7A/SmRpdAwdsUbCuhe9/CUeci8vMmp2/nQv99xcxOkmlY9i9FMD74vBP966cS6wW
FZ04Rq5TPu01sBnetJv0df/0F8TMzZ0SO7oFPe/9V5mQqcH2lzE8Rmo9EAf8QKKQ
hv8ePCVfQaEhIL7QkxKG3yJnPyDvlrowa3MwXp8WEVp+iJI3Qj/aVRh5NGv5AT8U
LVTI6wZJqfi1/GJn493AmG9r7ejzc9VumHqsf+qBCo672u2LyTuYxlFdl+q2qmq3
Jgaqd03Pg+NtS8BN3k3fHv8p6PLwLH3Ts6NOZgcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTMT6zZ1pOJHxWtb34eYMbsqmycFDAfBgNVHSMEGDAWgBQFFcFVg7nM/5Qs
+z7uBOLelWQmYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JSWEJWWU81elAtVUxQcy03Z1RpM3BWa0ptSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvM2U1YmE2LTZmNTEtNDdhYi04NTQwLWJlM2U3YTljZTE1Yi8x
L3pFLXMyZGFUaVI4VnJXOS1IbURHN0twc25CUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
M2U1YmE2LTZmNTEtNDdhYi04NTQwLWJlM2U3YTljZTE1Yi8xL0JSWEJWWU81elAt
VUxQcy03Z1RpM3BWa0ptSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMPY6DANBgkqhkiG9w0BAQsFAAOC
AQEAi8kO769rIwNlEvZ1j+UqUfZfm9ZPwsLp7ujqYvA0Dpc0PFcyiulthu5JejBg
BDowLvlwHHVldp2HzoUrLHAwKtO5qmpkh+d1j66geHpiE698W2x3e4nZYMosYk9U
lHLGkZG1G7aNXyQo7tODzuekcPTr4yMzwpP1fK4ve08PF0gd6B6yTCWCmuJJLwsn
ivqAJptqzjQa9imFSsx81z7tLL4GRQmPdbaLROKFluKxgNLwl5lC+zqPHT+rmmdq
xAzETqiKToxOHZbBFx37bwOFBr3CRcKAI733gYsnz5uYkoaJ9VRn3QifOUWYBZoK
5oaamLyhrNHviOhu/Ffh2RN2IQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:23 2025 by rpki-client