Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6vBapA3-EJaae-ml8978_Ty-tQ8.roa
File:                     6vBapA3-EJaae-ml8978_Ty-tQ8.roa (raw, json)
Hash identifier:          y8WSfpgIWLM8kvrHOcWkzMOJ2q5ocCI3a3G/5GEchaQ=
Subject key identifier:   EA:F0:5A:A4:0D:FE:10:96:9A:7B:E9:A5:F3:DE:FC:FD:3C:BE:B5:0F
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       0181D496A1B45540A56EBE9BBFBB9ADD5263
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6vBapA3-EJaae-ml8978_Ty-tQ8.roa
Signing time:             Wed 06 Jul 2022 17:37:30 +0000
ROA not before:           Wed 06 Jul 2022 17:37:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204084
IP address blocks:        185.102.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d4:96:a1:b4:55:40:a5:6e:be:9b:bf:bb:9a:dd:52:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Jul  6 17:37:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eaf05aa40dfe10969a7be9a5f3defcfd3cbeb50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:a2:7a:6c:ed:86:5c:d0:18:57:f4:74:31:
                    ae:81:b2:dd:50:0b:be:30:28:c3:4f:83:f5:aa:2e:
                    21:63:7c:ac:75:14:87:36:01:89:e6:58:92:16:6d:
                    14:2e:c0:06:76:10:0a:1a:f8:c6:e7:41:24:1b:92:
                    fc:8a:69:51:04:b7:6a:be:62:26:73:9b:a0:c7:59:
                    39:44:0a:00:e3:fc:d4:14:a6:f1:a5:55:93:81:a0:
                    b9:a6:3c:c5:3b:a6:03:cc:55:69:56:89:46:c1:8e:
                    29:9e:47:7b:42:18:db:aa:1d:4f:0d:ce:65:d8:06:
                    7a:34:22:f3:7c:55:7e:5b:ca:b7:ce:74:eb:a4:2b:
                    1f:bd:d5:1a:0b:b6:41:e4:af:6b:d6:0f:ef:45:06:
                    94:da:78:75:ae:d7:46:6f:03:33:9c:8d:23:6b:be:
                    8e:6b:40:3a:db:fa:18:fe:bc:d5:6e:ac:59:c3:26:
                    a5:57:97:1f:0c:98:61:05:17:2a:a0:87:03:65:66:
                    44:e3:00:17:dd:61:10:89:25:50:89:68:c9:4c:a7:
                    1d:23:dc:9b:b5:93:e3:bd:f8:e8:00:ec:58:8b:fd:
                    64:78:2f:2a:0e:39:08:c5:f6:1e:25:8c:1d:d0:9f:
                    ef:30:98:fe:4c:04:c0:d1:37:e7:09:91:42:9a:cb:
                    36:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:5A:A4:0D:FE:10:96:9A:7B:E9:A5:F3:DE:FC:FD:3C:BE:B5:0F
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6vBapA3-EJaae-ml8978_Ty-tQ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.102.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:da:82:09:23:1e:c7:3e:d8:82:e1:0b:82:55:0a:f9:70:
         05:f4:fe:77:c9:8a:58:2c:06:f6:81:31:ef:78:0b:51:57:1a:
         06:4e:79:b7:ff:49:71:86:81:87:74:37:22:ab:70:fd:ca:bb:
         c0:da:13:70:60:48:ed:2f:95:92:d3:d3:76:3d:2f:a9:4e:cd:
         bb:9d:b2:ab:6c:08:5f:7e:f2:c1:e9:94:1d:3d:99:2b:66:5d:
         dd:72:85:4a:3f:bd:b3:ab:9d:25:ed:2c:73:24:bc:49:5f:42:
         b4:f8:ed:c4:f4:7d:de:8f:9a:ac:f8:92:bd:4b:5f:94:b3:d7:
         5b:4f:41:f2:b1:a1:9c:2a:df:9f:f3:64:1d:77:0f:7b:22:c4:
         5f:9c:c1:db:8f:3d:ef:ac:a5:3d:ef:51:38:0b:45:14:d2:2f:
         b5:b2:a4:74:e6:11:a3:0e:fa:b9:86:92:c4:98:c0:8f:b6:52:
         7f:ef:25:4c:4c:ab:14:47:c8:2a:df:5a:1f:07:77:a9:1c:75:
         72:52:bc:2a:61:d4:5a:26:4b:ad:67:d7:1a:04:5d:37:0b:0a:
         d6:f0:b1:4e:91:bd:86:df:11:01:ae:d3:21:44:ba:3c:05:d7:
         53:d9:fc:8d:55:c8:5a:9a:a8:55:8f:06:b5:e9:ac:ae:ad:77:
         5a:ea:22:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHUlqG0VUClbr6bv7ua3VJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjIwNzA2MTczNzMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWYwNWFhNDBkZmUxMDk2OWE3YmU5YTVmM2RlZmNmZDNjYmViNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKiemzthlzQGFf0dDGugbLdUAu+
MCjDT4P1qi4hY3ysdRSHNgGJ5liSFm0ULsAGdhAKGvjG50EkG5L8imlRBLdqvmIm
c5ugx1k5RAoA4/zUFKbxpVWTgaC5pjzFO6YDzFVpVolGwY4pnkd7Qhjbqh1PDc5l
2AZ6NCLzfFV+W8q3znTrpCsfvdUaC7ZB5K9r1g/vRQaU2nh1rtdGbwMznI0ja76O
a0A62/oY/rzVbqxZwyalV5cfDJhhBRcqoIcDZWZE4wAX3WEQiSVQiWjJTKcdI9yb
tZPjvfjoAOxYi/1keC8qDjkIxfYeJYwd0J/vMJj+TATA0TfnCZFCmss2LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOrwWqQN/hCWmnvppfPe/P08vrUPMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvNnZCYXBBMy1FSmFhZS1tbDg5NzhfVHktdFE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWaJMA0G
CSqGSIb3DQEBCwUAA4IBAQA/p9qCCSMexz7YguELglUK+XAF9P53yYpYLAb2gTHv
eAtRVxoGTnm3/0lxhoGHdDciq3D9yrvA2hNwYEjtL5WS09N2PS+pTs27nbKrbAhf
fvLB6ZQdPZkrZl3dcoVKP72zq50l7SxzJLxJX0K0+O3E9H3ej5qs+JK9S1+Us9db
T0HysaGcKt+f82Qddw97IsRfnMHbjz3vrKU971E4C0UU0i+1sqR05hGjDvq5hpLE
mMCPtlJ/7yVMTKsUR8gq31ofB3epHHVyUrwqYdRaJkutZ9caBF03CwrW8LFOkb2G
3xEBrtMhRLo8BddT2fyNVchamqhVjwa16ayurXda6iJJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org