Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/hB1zRILPFFgMGvavMOH7K5jZdQ8.roa
File:                     hB1zRILPFFgMGvavMOH7K5jZdQ8.roa (raw, json)
Hash identifier:          viJ/GVoInoWSdc46jK4S4Lp7h4GLwRkQxtiuX+xtqRY=
Subject key identifier:   84:1D:73:44:82:CF:14:58:0C:1A:F6:AF:30:E1:FB:2B:98:D9:75:0F
Certificate issuer:       /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial:       479089
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/hB1zRILPFFgMGvavMOH7K5jZdQ8.roa
Signing time:             Wed 16 Mar 2022 11:04:06 +0000
ROA not before:           Wed 16 Mar 2022 11:04:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50414
IP address blocks:        212.46.55.0/24 maxlen: 24
                          2a12:bc0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4690057 (0x479089)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
        Validity
            Not Before: Mar 16 11:04:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=841d734482cf14580c1af6af30e1fb2b98d9750f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:ad:04:be:2b:a5:03:d4:e8:cd:26:31:00:
                    30:8b:b3:ea:f0:37:e5:77:c1:41:8c:86:12:d8:86:
                    43:2f:c7:0a:d4:5b:d2:e2:7d:ec:95:ef:b7:aa:e7:
                    0d:59:6f:fb:81:89:24:bb:35:5e:eb:6d:38:d9:9f:
                    5c:fc:21:65:19:bf:8c:61:2e:3c:6e:0e:68:32:7f:
                    42:45:00:07:ca:be:19:1a:73:09:6e:ee:11:6e:58:
                    9b:ca:54:ef:2a:6a:2a:9e:7a:73:e9:1a:49:1f:91:
                    37:24:37:d5:aa:51:a8:d2:74:bd:6c:0c:35:98:49:
                    47:89:a5:f1:2d:e9:5b:46:b3:72:09:51:3a:fe:85:
                    83:97:bf:e4:aa:87:16:3d:e0:af:70:f9:2d:ca:0d:
                    a6:79:77:35:00:8c:6a:5c:74:06:4d:fe:9d:22:5b:
                    82:08:90:ac:22:a4:47:2c:c3:05:bd:50:a6:0c:4e:
                    54:39:31:c9:33:f3:41:be:bf:7b:e0:ac:68:4e:a4:
                    bc:96:cb:4a:fe:0c:25:e3:44:57:3c:15:3e:5f:26:
                    aa:38:b0:5c:7e:f8:d7:1f:6c:6c:4f:d1:c8:77:1d:
                    57:45:5f:69:81:a5:1f:df:cd:8a:29:60:62:a7:ba:
                    5a:6d:74:41:6d:c2:73:80:ca:82:b9:cc:4a:7e:89:
                    be:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1D:73:44:82:CF:14:58:0C:1A:F6:AF:30:E1:FB:2B:98:D9:75:0F
            X509v3 Authority Key Identifier:
                keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/hB1zRILPFFgMGvavMOH7K5jZdQ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.55.0/24
                IPv6:
                  2a12:bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:31:d9:0d:3f:54:ee:f8:9c:e9:1a:6d:d9:7b:a5:14:2f:32:
         06:b0:ac:ae:8d:b1:c3:5c:0c:30:79:34:9d:4b:f3:96:cc:97:
         d0:79:3f:0f:77:17:e0:3c:fe:33:8a:84:7f:f6:70:d0:0a:20:
         fd:e9:7b:8c:d3:2a:48:7e:b0:4c:16:74:44:dc:61:72:e9:8b:
         f1:0e:d0:39:a2:8d:08:d1:da:83:d2:51:e4:6c:1d:54:03:55:
         42:d1:db:53:46:2a:d1:c4:0e:ec:ab:6a:b6:9a:d6:20:4b:c7:
         b0:7a:f0:49:5c:47:d7:95:cd:a5:7f:d7:45:34:50:06:ca:b4:
         5a:ba:ea:18:43:6f:6c:6a:a3:4a:f0:7e:62:79:41:6a:5f:3d:
         5f:b6:71:83:47:41:34:a2:33:35:9a:8b:68:19:8c:b4:25:05:
         f5:bd:99:96:43:6a:21:09:21:6d:e2:34:47:6c:12:6b:c8:72:
         9e:f4:cc:32:e7:af:bd:26:2e:eb:18:34:e1:31:d2:13:7c:80:
         d6:3c:05:16:49:ef:6b:05:41:28:2c:1f:09:dd:f8:e4:12:a8:
         8c:0b:58:f7:83:b4:8c:0a:8e:a8:39:9f:86:f5:4f:ad:53:79:
         79:c7:a5:7a:0e:ee:93:db:bd:e4:e7:e8:21:62:3f:48:e9:71:
         6d:5f:73:a5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIDR5CJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
YjVmZmQyNGQyZWI1ZDVjMWUxY2ZlNzhiMDAzYzRiYWI1YTJmMTMwHhcNMjIwMzE2
MTEwNDA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4NDFkNzM0NDgyY2Yx
NDU4MGMxYWY2YWYzMGUxZmIyYjk4ZDk3NTBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoq6tBL4rpQPU6M0mMQAwi7Pq8Dfld8FBjIYS2IZDL8cK1FvS
4n3sle+3qucNWW/7gYkkuzVe62042Z9c/CFlGb+MYS48bg5oMn9CRQAHyr4ZGnMJ
bu4RblibylTvKmoqnnpz6RpJH5E3JDfVqlGo0nS9bAw1mElHiaXxLelbRrNyCVE6
/oWDl7/kqocWPeCvcPktyg2meXc1AIxqXHQGTf6dIluCCJCsIqRHLMMFvVCmDE5U
OTHJM/NBvr974KxoTqS8lstK/gwl40RXPBU+XyaqOLBcfvjXH2xsT9HIdx1XRV9p
gaUf382KKWBip7pabXRBbcJzgMqCucxKfom+NQIDAQABo4ICGjCCAhYwHQYDVR0O
BBYEFIQdc0SCzxRYDBr2rzDh+yuY2XUPMB8GA1UdIwQYMBaAFKm1/9JNLrXVweHP
54sAPEurWi8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cWJYXzBrMHV0ZFhCNGNfbml3QThTNnRhTHhNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iMi8wMzAxZDQtNDgwNS00MDVjLWE2ZTAtYTQyZTFmMWY0Nzk4LzEv
aEIxelJJTFBGRmdNR3Zhdk1PSDdLNWpaZFE4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8w
MzAxZDQtNDgwNS00MDVjLWE2ZTAtYTQyZTFmMWY0Nzk4LzEvcWJYXzBrMHV0ZFhC
NGNfbml3QThTNnRhTHhNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG
CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1C43MA8EAgACMAkDBwAqEgvAAAAw
DQYJKoZIhvcNAQELBQADggEBABsx2Q0/VO74nOkabdl7pRQvMgawrK6NscNcDDB5
NJ1L85bMl9B5Pw93F+A8/jOKhH/2cNAKIP3pe4zTKkh+sEwWdETcYXLpi/EO0Dmi
jQjR2oPSUeRsHVQDVULR21NGKtHEDuyraraa1iBLx7B68ElcR9eVzaV/10U0UAbK
tFq66hhDb2xqo0rwfmJ5QWpfPV+2cYNHQTSiMzWai2gZjLQlBfW9mZZDaiEJIW3i
NEdsEmvIcp70zDLnr70mLusYNOEx0hN8gNY8BRZJ72sFQSgsHwnd+OQSqIwLWPeD
tIwKjqg5n4b1T61TeXnHpXoO7pPbveTn6CFiP0jpcW1fc6U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:21 2024 by rpki-client on console-fra.rpki-client.org