Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/beqeCMHNSrBrlhUBQgvhkuCB-kM.roa
File:                     beqeCMHNSrBrlhUBQgvhkuCB-kM.roa (raw, json)
Hash identifier:          XE9/EeThD3jv7B3lu1FKPPObki8Ywx90wFcsllIxRgY=
Subject key identifier:   6D:EA:9E:08:C1:CD:4A:B0:6B:96:15:01:42:0B:E1:92:E0:81:FA:43
Certificate issuer:       /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial:       19DF490C
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/beqeCMHNSrBrlhUBQgvhkuCB-kM.roa
Signing time:             Sat 01 Jan 2022 04:55:11 +0000
ROA not before:           Sat 01 Jan 2022 04:55:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206136
IP address blocks:        185.195.104.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434063628 (0x19df490c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
        Validity
            Not Before: Jan  1 04:55:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6dea9e08c1cd4ab06b961501420be192e081fa43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4b:c1:eb:0b:76:d8:1b:29:8d:57:c4:63:e8:
                    1f:3f:81:f5:c8:8e:c4:3a:48:a0:8c:8b:7a:56:88:
                    bc:cf:9f:dc:4c:b5:67:d8:f8:83:69:02:79:f3:9c:
                    36:69:09:ef:51:d6:47:4c:8a:12:3f:06:7f:02:88:
                    81:e2:fb:84:11:61:b8:ce:13:85:1c:84:3c:55:3d:
                    fa:ba:6d:b4:92:ad:bf:c9:d4:e9:3d:b5:cf:90:2b:
                    7c:85:8e:0b:d6:8d:db:6a:b4:d3:13:99:d6:fc:fb:
                    93:5f:9f:da:6b:4d:2f:92:c9:5a:c3:69:52:f9:ba:
                    6c:08:33:02:82:e8:10:47:07:ec:7a:36:29:34:ff:
                    e0:54:f7:0b:0a:ce:66:3b:49:b7:d3:7f:e6:e2:11:
                    51:62:77:64:c0:31:d9:6a:d1:ed:6b:3e:0e:6d:33:
                    53:90:0f:f5:e8:45:b6:5d:ae:68:a2:53:41:0a:ae:
                    04:6e:84:08:a9:59:0b:dd:4f:bf:02:4a:6c:29:67:
                    1f:bd:c4:2c:54:23:2f:f2:c3:ea:36:6e:7a:9d:95:
                    c9:13:87:7b:a5:0b:b7:ef:33:9d:19:54:11:82:b0:
                    8f:83:ac:f1:f6:99:6a:4b:ce:b1:e6:a8:9e:a5:2b:
                    99:ed:b2:d0:48:31:bf:30:19:0e:ae:2e:f5:49:b8:
                    be:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EA:9E:08:C1:CD:4A:B0:6B:96:15:01:42:0B:E1:92:E0:81:FA:43
            X509v3 Authority Key Identifier:
                keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/beqeCMHNSrBrlhUBQgvhkuCB-kM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:dc:80:77:5f:a2:6b:57:24:46:4a:d9:10:15:85:59:bf:f2:
         12:d1:ab:11:21:0f:e7:49:25:d1:5d:c7:c3:7b:1b:15:64:07:
         37:d0:e7:fc:2d:62:1c:ef:38:5b:a1:78:95:61:32:0a:ad:6e:
         57:72:a4:17:ea:38:29:58:48:22:38:1f:e2:01:db:58:90:91:
         d6:14:3a:b1:ca:74:cc:93:5a:23:35:f0:82:8c:c8:66:4e:88:
         a8:f4:97:1d:03:1e:85:fd:51:fe:d5:bf:24:08:55:a9:c4:62:
         c6:07:ec:76:70:ae:dc:a3:ac:4e:20:81:a5:5a:1d:60:0f:fc:
         0b:4f:5e:b9:73:a8:09:18:6e:ac:4a:ce:e5:ef:55:7b:3a:5b:
         f2:61:0d:6f:5b:0e:46:33:17:21:0a:9c:fb:05:c3:fc:7c:50:
         fc:24:22:a6:73:ca:c7:20:55:eb:8e:10:ab:bf:ed:32:30:52:
         66:c0:cb:ee:96:83:74:98:3a:56:12:5e:03:c5:b3:a2:a8:b4:
         93:bf:5d:99:06:35:f6:38:36:81:f4:f2:76:d1:4e:56:b0:99:
         89:d5:9e:6a:08:ab:08:4a:b4:14:f4:6e:7c:cc:b1:33:0b:e6:
         b8:6b:0d:28:d6:1a:50:8f:ed:59:1f:a0:88:02:46:d3:d5:4d:
         f2:d6:20:33
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGd9JDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZmRlYzRhNDZhNmU2ZTRmOWE5MmQwYmEyZTBiM2FiNTY1OGJlMWJkMB4XDTIyMDEw
MTA0NTUxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmRlYTllMDhjMWNk
NGFiMDZiOTYxNTAxNDIwYmUxOTJlMDgxZmE0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN9LwesLdtgbKY1XxGPoHz+B9ciOxDpIoIyLelaIvM+f3Ey1
Z9j4g2kCefOcNmkJ71HWR0yKEj8GfwKIgeL7hBFhuM4ThRyEPFU9+rpttJKtv8nU
6T21z5ArfIWOC9aN22q00xOZ1vz7k1+f2mtNL5LJWsNpUvm6bAgzAoLoEEcH7Ho2
KTT/4FT3CwrOZjtJt9N/5uIRUWJ3ZMAx2WrR7Ws+Dm0zU5AP9ehFtl2uaKJTQQqu
BG6ECKlZC91PvwJKbClnH73ELFQjL/LD6jZuep2VyROHe6ULt+8znRlUEYKwj4Os
8faZakvOseaonqUrme2y0EgxvzAZDq4u9Um4vsECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRt6p4Iwc1KsGuWFQFCC+GS4IH6QzAfBgNVHSMEGDAWgBT/3sSkam5uT5qS
0LouCzq1ZYvhvTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L185N0VwR3B1YmstYWt0QzZMZ3M2dFdXTDRiMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvMTFlNWIzLTQzYWEtNDI3OS05NDQxLTdlOGM2ZDRkOWJlZi8x
L2JlcWVDTUhOU3JCcmxoVUJRZ3Zoa3VDQi1rTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
MTFlNWIzLTQzYWEtNDI3OS05NDQxLTdlOGM2ZDRkOWJlZi8xL185N0VwR3B1Ymst
YWt0QzZMZ3M2dFdXTDRiMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnDaDANBgkqhkiG9w0BAQsFAAOC
AQEAjdyAd1+ia1ckRkrZEBWFWb/yEtGrESEP50kl0V3Hw3sbFWQHN9Dn/C1iHO84
W6F4lWEyCq1uV3KkF+o4KVhIIjgf4gHbWJCR1hQ6scp0zJNaIzXwgozIZk6IqPSX
HQMehf1R/tW/JAhVqcRixgfsdnCu3KOsTiCBpVodYA/8C09euXOoCRhurErO5e9V
ezpb8mENb1sORjMXIQqc+wXD/HxQ/CQipnPKxyBV644Qq7/tMjBSZsDL7paDdJg6
VhJeA8Wzoqi0k79dmQY19jg2gfTydtFOVrCZidWeagirCEq0FPRufMyxMwvmuGsN
KNYaUI/tWR+giAJG09VN8tYgMw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org