Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/_ibS8BRgaZ4lsyewQW4NjPiHYXU.roa
File:                     _ibS8BRgaZ4lsyewQW4NjPiHYXU.roa (raw, json)
Hash identifier:          0d8N03R1BrNG4jwGQG2Td1pYTjDs3l0pbhx/ZFEtrXM=
Subject key identifier:   FE:26:D2:F0:14:60:69:9E:25:B3:27:B0:41:6E:0D:8C:F8:87:61:75
Certificate issuer:       /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial:       2233A7
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/_ibS8BRgaZ4lsyewQW4NjPiHYXU.roa
Signing time:             Mon 27 Jun 2022 10:14:42 +0000
ROA not before:           Mon 27 Jun 2022 10:14:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50889
IP address blocks:        185.136.71.0/24 maxlen: 24
                          77.111.248.0/24 maxlen: 24
                          77.111.249.0/24 maxlen: 24
                          80.84.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241447 (0x2233a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
        Validity
            Not Before: Jun 27 10:14:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe26d2f01460699e25b327b0416e0d8cf8876175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:2d:9d:18:98:4d:15:c5:51:2d:18:e3:db:
                    37:01:53:e0:9c:0f:05:2b:43:b9:a2:5b:3e:29:06:
                    54:4c:36:ea:90:5c:5a:83:98:28:1c:c9:93:d1:2a:
                    3b:9e:01:ff:71:6c:21:9b:11:fe:9a:fb:01:d8:10:
                    f0:dd:d1:34:6d:b2:3b:cd:86:d8:5d:d4:03:7f:41:
                    ad:8c:e1:b5:c5:46:06:7c:25:bd:5a:22:65:d0:0a:
                    78:7b:26:f0:10:3b:1c:bc:8f:bb:0c:70:2e:a1:1c:
                    0f:99:41:9c:6b:cd:fa:dd:9a:13:42:fa:21:0e:c2:
                    32:c5:84:d3:30:d1:32:8b:bb:71:3a:d3:a6:7f:6c:
                    06:b7:d3:bc:ba:23:93:99:7f:9b:65:c3:f5:c1:28:
                    8a:5e:6d:2b:c9:7d:4c:bf:72:9e:c6:c5:92:46:ec:
                    60:52:24:d8:1c:c3:53:59:3d:e4:59:6a:2d:33:a7:
                    90:53:29:cb:84:66:a5:10:04:b5:37:13:51:d0:35:
                    10:27:04:7d:d8:48:9d:38:8f:c1:4d:91:3b:87:27:
                    df:a4:95:e8:97:28:fc:a9:b0:4b:14:e2:bd:9c:5e:
                    33:85:c4:2d:be:e3:46:ed:ae:91:4d:09:21:b2:10:
                    40:9e:29:19:65:80:2b:e6:9c:9a:01:08:1d:7f:59:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:26:D2:F0:14:60:69:9E:25:B3:27:B0:41:6E:0D:8C:F8:87:61:75
            X509v3 Authority Key Identifier:
                keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/_ibS8BRgaZ4lsyewQW4NjPiHYXU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.248.0/23
                  80.84.167.0/24
                  185.136.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:c8:72:7a:a9:b2:e9:8b:17:e4:e1:49:0d:6b:8f:4a:e6:12:
         df:b4:89:43:4c:79:e5:73:fe:1c:2a:fd:eb:ef:93:33:92:fa:
         03:fe:2e:cc:2f:52:f6:62:83:7f:8c:20:eb:8c:9c:8e:11:33:
         29:b4:01:2b:3a:07:24:e2:4a:3a:26:cb:a6:02:e3:46:08:27:
         cf:56:f0:ea:55:48:b8:0f:bc:25:4d:d8:c7:3b:06:89:0a:32:
         09:3b:12:f8:aa:8e:06:fb:f9:a7:86:d3:28:56:c1:58:4f:13:
         02:cc:e0:33:1a:81:e9:7a:9d:da:de:e6:32:4f:47:45:a3:cb:
         28:43:90:78:19:45:7e:8a:39:8a:3a:fc:a0:f6:95:b8:be:5e:
         e2:e7:5b:f0:6c:03:91:40:93:a7:37:46:f2:2f:54:55:c6:60:
         53:74:e3:3f:67:a7:e6:41:b4:8b:02:c9:f6:62:d2:40:52:db:
         d5:75:44:2e:b7:5a:55:54:ee:b9:37:c8:3d:a6:82:3c:a3:4c:
         34:e7:8f:9b:69:ea:cf:76:0a:41:2f:b8:d6:ee:62:60:9d:9c:
         e1:b3:46:a8:ac:34:ae:81:98:16:c7:93:7a:15:73:75:84:4a:
         9d:8b:53:88:b8:b6:93:ce:8b:08:09:66:0b:05:cd:dd:8d:e1:
         7b:41:f0:77
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDIjOnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
YTBmNzE0M2ZmYTIyMTEzNDQyZGM4NTg5ZWUxMzUyZWJlM2RhYTMwHhcNMjIwNjI3
MTAxNDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmZTI2ZDJmMDE0NjA2
OTllMjViMzI3YjA0MTZlMGQ4Y2Y4ODc2MTc1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmrMtnRiYTRXFUS0Y49s3AVPgnA8FK0O5ols+KQZUTDbqkFxa
g5goHMmT0So7ngH/cWwhmxH+mvsB2BDw3dE0bbI7zYbYXdQDf0GtjOG1xUYGfCW9
WiJl0Ap4eybwEDscvI+7DHAuoRwPmUGca8363ZoTQvohDsIyxYTTMNEyi7txOtOm
f2wGt9O8uiOTmX+bZcP1wSiKXm0ryX1Mv3KexsWSRuxgUiTYHMNTWT3kWWotM6eQ
UynLhGalEAS1NxNR0DUQJwR92EidOI/BTZE7hyffpJXolyj8qbBLFOK9nF4zhcQt
vuNG7a6RTQkhshBAnikZZYAr5pyaAQgdf1m2VwIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFP4m0vAUYGmeJbMnsEFuDYz4h2F1MB8GA1UdIwQYMBaAFBOg9xQ/+iIRNELc
hYnuE1Lr49qjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iYi80NDNmODctNGFlMC00MTk4LWJjYjgtMTA0YTMzNDM3NjY1LzEv
X2liUzhCUmdhWjRsc3lld1FXNE5qUGlIWVhVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80
NDNmODctNGFlMC00MTk4LWJjYjgtMTA0YTMzNDM3NjY1LzEvRTZEM0ZEXzZJaEUw
UXR5RmllNFRVdXZqMnFNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBTW/4AwQAUFSnAwQAuYhHMA0GCSqG
SIb3DQEBCwUAA4IBAQB6yHJ6qbLpixfk4UkNa49K5hLftIlDTHnlc/4cKv3r75Mz
kvoD/i7ML1L2YoN/jCDrjJyOETMptAErOgck4ko6JsumAuNGCCfPVvDqVUi4D7wl
TdjHOwaJCjIJOxL4qo4G+/mnhtMoVsFYTxMCzOAzGoHpep3a3uYyT0dFo8soQ5B4
GUV+ijmKOvyg9pW4vl7i51vwbAORQJOnN0byL1RVxmBTdOM/Z6fmQbSLAsn2YtJA
UtvVdUQut1pVVO65N8g9poI8o0w054+baerPdgpBL7jW7mJgnZzhs0aorDSugZgW
x5N6FXN1hEqdi1OIuLaTzosICWYLBc3djeF7QfB3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:35 2024 by rpki-client on console-fra.rpki-client.org