Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_i6gtH8FF0SF_GBhWiKeZaBp4Pg.roa
File:                     _i6gtH8FF0SF_GBhWiKeZaBp4Pg.roa (raw, json)
Hash identifier:          DHuv2YJbmN7oUin0PFdnkhW0JPD0mK8O1Qh0XIJjC98=
Subject key identifier:   FE:2E:A0:B4:7F:05:17:44:85:FC:60:61:5A:22:9E:65:A0:69:E0:F8
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       01845B2B71F97576D93E3997491561DA85F0
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_i6gtH8FF0SF_GBhWiKeZaBp4Pg.roa
Signing time:             Wed 09 Nov 2022 06:54:44 +0000
ROA not before:           Wed 09 Nov 2022 06:54:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17447
IP address blocks:        46.175.130.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5b:2b:71:f9:75:76:d9:3e:39:97:49:15:61:da:85:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Nov  9 06:54:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe2ea0b47f05174485fc60615a229e65a069e0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ce:04:20:34:3a:44:23:24:dc:39:63:e8:6b:
                    30:ce:ec:b7:bd:d2:e5:61:37:ec:8e:81:13:72:ac:
                    2f:a9:c7:9b:45:60:ea:5f:44:58:36:b5:50:66:23:
                    5d:fc:46:05:29:53:f4:89:d2:91:b6:8e:9f:27:3f:
                    95:18:98:b1:0b:b1:e4:4c:ee:a7:6b:22:2a:97:c0:
                    2f:73:f8:b3:12:7e:9b:b7:55:44:8a:c8:9e:de:c4:
                    08:4b:e6:c5:61:92:2d:8e:42:29:3c:0d:e8:23:ac:
                    d1:bb:d4:77:94:7d:74:07:16:32:fb:89:5f:50:b1:
                    42:15:20:a8:89:1a:ed:7a:36:83:de:b0:6e:3c:a8:
                    59:ce:a6:92:26:ea:06:3f:7b:80:0f:79:7d:e9:db:
                    5a:46:d9:a9:c0:2a:e7:67:7e:41:88:be:ae:0a:78:
                    f1:32:9f:82:c3:ae:5a:67:ed:9c:04:19:b9:c4:7c:
                    22:c1:93:96:eb:c8:36:f0:fa:df:59:52:0e:30:9f:
                    00:77:bc:8e:2b:18:dc:23:0d:02:5c:1c:98:c7:ab:
                    41:b0:a6:15:4e:63:23:26:13:39:36:a6:4d:55:3e:
                    3c:49:e3:fc:22:05:42:87:d9:08:4a:0e:80:50:f6:
                    ec:db:29:f0:87:99:61:a0:1a:3d:83:88:de:0a:e7:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2E:A0:B4:7F:05:17:44:85:FC:60:61:5A:22:9E:65:A0:69:E0:F8
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_i6gtH8FF0SF_GBhWiKeZaBp4Pg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.175.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:86:b6:2b:96:f8:d7:70:3c:45:03:97:1e:55:d8:c1:8f:a1:
         da:7e:21:67:69:03:21:32:14:84:37:b3:73:6b:12:13:2b:d8:
         b2:ec:e2:26:9c:b0:14:f3:48:3b:d2:7b:c5:43:91:31:cb:80:
         3e:2a:c8:a0:2a:06:c6:fc:b5:e4:3d:70:36:90:00:11:ce:2e:
         20:26:a5:43:6f:18:56:2c:0f:6e:b3:cc:2a:ab:74:53:69:32:
         ba:07:86:92:5f:e0:88:7b:53:1d:f7:b6:da:72:6f:23:04:22:
         3a:b2:57:9f:af:85:4b:9b:31:5a:1e:df:5d:90:8d:63:54:01:
         18:e3:cb:01:95:d4:0f:db:c2:cf:ab:ec:1a:9f:57:a9:41:03:
         bd:fe:59:c6:dd:97:6e:60:d5:cf:6a:27:0b:5e:e0:85:91:cd:
         3d:7e:4f:18:59:37:14:a3:db:2e:f5:1c:62:26:68:b5:48:8c:
         ab:c1:12:20:a6:d5:51:67:dd:c0:f4:a1:8e:ee:cb:e6:2e:bc:
         7a:21:4e:c9:d8:16:1e:22:67:f6:d9:a2:fb:e6:63:b5:c4:18:
         d1:41:66:c2:21:d5:84:3f:6c:b9:15:1a:17:4b:5a:02:94:7f:
         26:0c:1c:5b:d3:6d:82:16:86:81:2a:ca:27:5d:45:0f:ad:c3:
         c9:d6:8c:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRbK3H5dXbZPjmXSRVh2oXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjIxMTA5MDY1NDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTJlYTBiNDdmMDUxNzQ0ODVmYzYwNjE1YTIyOWU2NWEwNjllMGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl84EIDQ6RCMk3Dlj6Gswzuy3vdLl
YTfsjoETcqwvqcebRWDqX0RYNrVQZiNd/EYFKVP0idKRto6fJz+VGJixC7HkTO6n
ayIql8Avc/izEn6bt1VEisie3sQIS+bFYZItjkIpPA3oI6zRu9R3lH10BxYy+4lf
ULFCFSCoiRrtejaD3rBuPKhZzqaSJuoGP3uAD3l96dtaRtmpwCrnZ35BiL6uCnjx
Mp+Cw65aZ+2cBBm5xHwiwZOW68g28PrfWVIOMJ8Ad7yOKxjcIw0CXByYx6tBsKYV
TmMjJhM5NqZNVT48SeP8IgVCh9kISg6AUPbs2ynwh5lhoBo9g4jeCuca5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP4uoLR/BRdEhfxgYVoinmWgaeD4MB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvX2k2Z3RIOEZGMFNGX0dCaFdpS2VaYUJwNFBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALq+CMA0G
CSqGSIb3DQEBCwUAA4IBAQBRhrYrlvjXcDxFA5ceVdjBj6HafiFnaQMhMhSEN7Nz
axITK9iy7OImnLAU80g70nvFQ5Exy4A+KsigKgbG/LXkPXA2kAARzi4gJqVDbxhW
LA9us8wqq3RTaTK6B4aSX+CIe1Md97bacm8jBCI6slefr4VLmzFaHt9dkI1jVAEY
48sBldQP28LPq+wan1epQQO9/lnG3ZduYNXPaicLXuCFkc09fk8YWTcUo9su9Rxi
Jmi1SIyrwRIgptVRZ93A9KGO7svmLrx6IU7J2BYeImf22aL75mO1xBjRQWbCIdWE
P2y5FRoXS1oClH8mDBxb022CFoaBKsonXUUPrcPJ1oyP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org