Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/7H5h9big6gIJDG5_aBpZRywflZ0.roa
File:                     7H5h9big6gIJDG5_aBpZRywflZ0.roa (raw, json)
Hash identifier:          wClu7K/tR7OdO7kYL//1j/qwwAw7Bk5FHIFSqfCrIVw=
Subject key identifier:   EC:7E:61:F5:B8:A0:EA:02:09:0C:6E:7F:68:1A:59:47:2C:1F:95:9D
Certificate issuer:       /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Certificate serial:       07CCCE22
Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/7H5h9big6gIJDG5_aBpZRywflZ0.roa
Signing time:             Wed 26 Jan 2022 21:26:45 +0000
ROA not before:           Wed 26 Jan 2022 21:26:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197595
IP address blocks:        193.187.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130862626 (0x7ccce22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
        Validity
            Not Before: Jan 26 21:26:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec7e61f5b8a0ea02090c6e7f681a59472c1f959d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:ee:6d:75:2d:ff:f6:98:4b:35:e6:1a:b3:
                    87:4a:c0:fe:3b:f7:95:a8:1a:b3:36:a0:72:07:33:
                    e2:8e:f2:bd:74:f5:8d:20:04:c3:3b:cd:65:38:13:
                    68:9f:ba:a1:b4:b1:62:df:be:2e:88:e1:fc:80:da:
                    6f:3b:07:1f:06:2b:31:2b:5a:af:54:5e:38:c7:b2:
                    63:04:e2:04:a2:33:30:c1:ce:3c:ce:ad:9c:e6:ff:
                    9a:93:27:0e:4d:94:b8:c9:c2:e2:56:f3:33:85:6f:
                    45:1a:5c:16:05:0b:94:b8:71:3a:fc:dd:b2:1c:b9:
                    e1:19:26:cf:6f:0f:f4:ac:4c:83:ab:01:1a:13:0d:
                    4f:09:7d:4a:20:1d:e8:3d:9a:00:fc:b0:76:1c:63:
                    cf:c0:3a:b9:41:aa:18:f2:57:f4:f3:8f:74:98:d6:
                    e1:ad:77:3b:96:d1:9e:9e:39:5b:87:ca:a8:12:7b:
                    0e:c6:11:aa:23:2f:54:53:77:18:1b:6c:21:74:be:
                    57:4b:61:ac:ba:9c:3f:62:df:16:d3:31:8d:72:16:
                    ef:89:c2:8a:67:ad:53:20:3b:ab:d5:89:d8:6a:24:
                    ae:a9:6b:6d:41:4d:aa:ba:55:16:15:28:9b:6d:7f:
                    93:72:f0:47:27:2d:a7:d6:46:78:d1:36:21:82:56:
                    b3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7E:61:F5:B8:A0:EA:02:09:0C:6E:7F:68:1A:59:47:2C:1F:95:9D
            X509v3 Authority Key Identifier:
                keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/7H5h9big6gIJDG5_aBpZRywflZ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:b8:4b:f5:3f:5e:3c:37:43:fd:0f:f4:78:10:4a:ba:06:bc:
         f9:e5:e7:a6:a5:03:00:81:78:27:66:ad:e8:1f:9a:48:2e:b9:
         6f:e0:0f:48:17:3e:28:3b:f6:f9:fe:68:c5:04:b4:47:14:b0:
         66:d4:c4:76:5b:6d:d8:ec:aa:ac:34:29:15:e0:c0:de:6b:ae:
         ec:7a:60:b1:88:60:ac:9b:84:a7:63:d1:ec:f7:08:0b:33:64:
         63:5e:64:da:6d:68:3c:b9:49:a6:15:41:4f:98:ad:d4:3b:30:
         be:ec:af:c4:8f:23:f0:12:94:4a:24:fc:29:de:4f:ca:22:d5:
         70:57:42:33:b4:e0:80:6a:4b:24:10:16:db:de:ce:ba:12:b7:
         d3:02:29:60:d5:0b:43:72:b6:9c:36:a5:0e:fe:1e:7a:df:0b:
         d6:4f:f8:4b:a3:8b:c2:a9:98:c8:c1:3f:fe:a3:f2:5d:65:3e:
         ef:a2:5b:ab:da:44:43:40:b0:75:7d:c8:e7:5b:c3:0b:2b:da:
         39:7b:f4:e3:b6:11:e6:3b:9b:c6:cc:40:2f:f1:89:ea:51:32:
         05:ed:ec:66:82:91:b0:48:f5:de:18:e9:64:3a:58:bf:31:ce:
         67:f6:ab:61:27:c9:ed:59:d0:4e:ea:1c:b6:c3:ce:0b:96:6c:
         a0:9f:22:4f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB8zOIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MTQ2MWRiZDc3NDQ4MzdiOGY5YTNlYWNmNjBlZDc5ZDY2OTgwNDc0MB4XDTIyMDEy
NjIxMjY0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWM3ZTYxZjViOGEw
ZWEwMjA5MGM2ZTdmNjgxYTU5NDcyYzFmOTU5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALi67m11Lf/2mEs15hqzh0rA/jv3lagaszagcgcz4o7yvXT1
jSAEwzvNZTgTaJ+6obSxYt++Lojh/IDabzsHHwYrMStar1ReOMeyYwTiBKIzMMHO
PM6tnOb/mpMnDk2UuMnC4lbzM4VvRRpcFgULlLhxOvzdshy54Rkmz28P9KxMg6sB
GhMNTwl9SiAd6D2aAPywdhxjz8A6uUGqGPJX9POPdJjW4a13O5bRnp45W4fKqBJ7
DsYRqiMvVFN3GBtsIXS+V0thrLqcP2LfFtMxjXIW74nCimetUyA7q9WJ2Gokrqlr
bUFNqrpVFhUom21/k3LwRyctp9ZGeNE2IYJWs5kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTsfmH1uKDqAgkMbn9oGllHLB+VnTAfBgNVHSMEGDAWgBTBRh29d0SDe4+a
Pqz2DtedZpgEdDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dVWWR2WGRFZzN1UG1qNnM5ZzdYbldhWUJIUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNTVmZGYzLTRkNmEtNDU4Mi1iOWI4LTRmOGNmZWIyMTBkOS8x
LzdINWg5YmlnNmdJSkRHNV9hQnBaUnl3ZmxaMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NTVmZGYzLTRkNmEtNDU4Mi1iOWI4LTRmOGNmZWIyMTBkOS8xL3dVWWR2WGRFZzN1
UG1qNnM5ZzdYbldhWUJIUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMG7WzANBgkqhkiG9w0BAQsFAAOC
AQEACLhL9T9ePDdD/Q/0eBBKuga8+eXnpqUDAIF4J2at6B+aSC65b+APSBc+KDv2
+f5oxQS0RxSwZtTEdltt2OyqrDQpFeDA3muu7HpgsYhgrJuEp2PR7PcICzNkY15k
2m1oPLlJphVBT5it1DswvuyvxI8j8BKUSiT8Kd5PyiLVcFdCM7TggGpLJBAW297O
uhK30wIpYNULQ3K2nDalDv4eet8L1k/4S6OLwqmYyME//qPyXWU+76Jbq9pEQ0Cw
dX3I51vDCyvaOXv047YR5jubxsxAL/GJ6lEyBe3sZoKRsEj13hjpZDpYvzHOZ/ar
YSfJ7VnQTuoctsPOC5ZsoJ8iTw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org