Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/eg1dTj44-2gde9TqfqcZsmig7mI.roa
File:                     eg1dTj44-2gde9TqfqcZsmig7mI.roa (raw, json)
Hash identifier:          ppYXcR4sT3cVdV+NXg+6SLl2jKL7RSlRKpl6HtNvWYw=
Subject key identifier:   7A:0D:5D:4E:3E:38:FB:68:1D:7B:D4:EA:7E:A7:19:B2:68:A0:EE:62
Certificate issuer:       /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
Certificate serial:       100064D2
Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/eg1dTj44-2gde9TqfqcZsmig7mI.roa
Signing time:             Sat 01 Jan 2022 15:02:58 +0000
ROA not before:           Sat 01 Jan 2022 15:02:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     36924
IP address blocks:        185.183.228.0/22 maxlen: 24
                          185.56.48.0/22 maxlen: 32
                          2a0b:2080::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268461266 (0x100064d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
        Validity
            Not Before: Jan  1 15:02:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a0d5d4e3e38fb681d7bd4ea7ea719b268a0ee62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:26:4b:f8:b5:cd:ad:a4:18:2c:05:cb:af:
                    a0:e6:8d:d9:f9:f1:af:f6:9b:fb:13:63:54:50:21:
                    2e:e6:a3:a0:40:36:51:b7:f9:49:0a:de:94:3b:d8:
                    03:dc:a9:5e:1d:67:62:5e:44:f2:f7:bc:1e:4a:c0:
                    e3:97:59:e5:f1:a2:7d:57:66:16:a4:46:4a:f7:21:
                    60:65:10:0d:05:91:34:1a:fa:5d:ee:fc:5e:dd:6e:
                    2b:52:ea:35:8e:16:66:d1:cb:de:c5:09:2d:f6:62:
                    24:19:c3:f5:2a:36:05:bb:a8:f9:2e:23:dd:22:bd:
                    67:ec:03:a1:6b:2c:26:81:8e:23:79:da:55:5b:b3:
                    1c:4c:41:50:26:3a:bb:75:1b:7f:cd:f1:d7:a8:00:
                    b8:14:11:17:62:7a:fc:98:cd:25:aa:b8:9b:f8:d7:
                    40:89:42:86:94:d5:55:66:d1:74:df:7f:5e:31:41:
                    d2:9d:05:41:59:7d:52:5e:f3:ee:b7:83:15:7b:51:
                    1a:22:00:b6:85:f9:fe:85:f2:b1:da:02:e7:29:8c:
                    17:b6:2c:19:19:26:b5:3d:83:2b:8d:02:bb:78:75:
                    e3:4f:6c:c8:f4:cf:e5:3d:eb:41:ba:7e:0b:58:ba:
                    2f:9c:ad:2c:6e:27:93:33:1e:ca:12:76:6a:c3:16:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:5D:4E:3E:38:FB:68:1D:7B:D4:EA:7E:A7:19:B2:68:A0:EE:62
            X509v3 Authority Key Identifier:
                keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/eg1dTj44-2gde9TqfqcZsmig7mI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.48.0/22
                  185.183.228.0/22
                IPv6:
                  2a0b:2080::/29

    Signature Algorithm: sha256WithRSAEncryption
         87:5e:69:55:bf:4d:57:b4:9d:3d:7c:9a:49:c0:b2:c5:77:21:
         d6:df:67:98:0d:25:88:ae:d4:4b:4f:39:9f:59:47:62:d4:a5:
         9d:c6:27:35:80:3b:a4:32:d6:83:6f:54:be:29:eb:00:12:ad:
         19:d5:9b:e5:de:c7:2d:48:81:66:2d:ca:c9:e8:ab:00:3e:0c:
         bd:3a:b2:b1:9a:4b:5d:0e:49:f3:1b:9b:b0:b8:3a:95:30:68:
         71:41:2f:8b:1a:86:ea:86:da:43:ef:1a:4d:07:b9:42:db:58:
         bc:fa:a9:79:17:bc:c4:48:f5:38:2a:a3:79:46:56:fb:e7:c0:
         09:d7:b2:19:7e:cc:3a:0c:67:11:af:aa:a5:53:00:6b:33:e0:
         13:71:bb:76:5e:04:d7:74:71:8f:ae:e3:9b:82:0c:25:db:16:
         33:99:44:43:f4:7c:8e:e4:a3:4b:0f:ba:44:3b:81:d0:2a:42:
         b2:2e:f1:fe:88:47:4f:92:fd:14:03:a2:a5:33:67:61:54:ae:
         80:c8:40:ab:4e:42:70:c2:b4:86:69:b0:cd:e0:57:aa:f6:56:
         1b:fa:32:74:03:85:be:1d:57:a6:bf:f1:30:1f:b8:70:0d:2f:
         2d:f1:42:90:22:d9:c5:fb:a2:0b:07:8c:28:07:c4:df:3b:7a:
         75:f5:ae:3b
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEEABk0jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGViZDE5ZGE5OGMyN2ZhYmFiN2IyZjI5NGJjZjllYzZhZjQ0OTA1MB4XDTIyMDEw
MTE1MDI1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2EwZDVkNGUzZTM4
ZmI2ODFkN2JkNGVhN2VhNzE5YjI2OGEwZWU2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANCzJkv4tc2tpBgsBcuvoOaN2fnxr/ab+xNjVFAhLuajoEA2
Ubf5SQrelDvYA9ypXh1nYl5E8ve8HkrA45dZ5fGifVdmFqRGSvchYGUQDQWRNBr6
Xe78Xt1uK1LqNY4WZtHL3sUJLfZiJBnD9So2Bbuo+S4j3SK9Z+wDoWssJoGOI3na
VVuzHExBUCY6u3Ubf83x16gAuBQRF2J6/JjNJaq4m/jXQIlChpTVVWbRdN9/XjFB
0p0FQVl9Ul7z7reDFXtRGiIAtoX5/oXysdoC5ymMF7YsGRkmtT2DK40Cu3h1409s
yPTP5T3rQbp+C1i6L5ytLG4nkzMeyhJ2asMW8LkCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBR6DV1OPjj7aB171Op+pxmyaKDuYjAfBgNVHSMEGDAWgBRt69GdqYwn+rq3
svKUvPnsavRJBTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JldlJuYW1NSl9xNnQ3THlsTHo1N0dyMFNRVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvMWFkMzQ5LWVkZmUtNDE1MC05ZDM3LTI2NGFiOTMzN2ZhMC8x
L2VnMWRUajQ0LTJnZGU5VHFmcWNac21pZzdtSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
MWFkMzQ5LWVkZmUtNDE1MC05ZDM3LTI2NGFiOTMzN2ZhMC8xL2JldlJuYW1NSl9x
NnQ3THlsTHo1N0dyMFNRVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArk4MAMEArm35DANBAIAAjAHAwUD
KgsggDANBgkqhkiG9w0BAQsFAAOCAQEAh15pVb9NV7SdPXyaScCyxXch1t9nmA0l
iK7US085n1lHYtSlncYnNYA7pDLWg29UvinrABKtGdWb5d7HLUiBZi3KyeirAD4M
vTqysZpLXQ5J8xubsLg6lTBocUEvixqG6obaQ+8aTQe5QttYvPqpeRe8xEj1OCqj
eUZW++fACdeyGX7MOgxnEa+qpVMAazPgE3G7dl4E13Rxj67jm4IMJdsWM5lEQ/R8
juSjSw+6RDuB0CpCsi7x/ohHT5L9FAOipTNnYVSugMhAq05CcMK0hmmwzeBXqvZW
G/oydAOFvh1Xpr/xMB+4cA0vLfFCkCLZxfuiCweMKAfE3zt6dfWuOw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:43 2023 by rpki-client on console-fra.rpki-client.org