Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6LBV8JgG7jWw5gJ5e4j7Zx4hGuc.roa
File:                     6LBV8JgG7jWw5gJ5e4j7Zx4hGuc.roa (raw, json)
Hash identifier:          ZNesrODtZuee5lLNELqtgWI/CdR4Ks6I/46znIx/V5w=
Subject key identifier:   E8:B0:55:F0:98:06:EE:35:B0:E6:02:79:7B:88:FB:67:1E:21:1A:E7
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       018249DE60D51ADBDE232E9B3FAAA3DDAD53
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6LBV8JgG7jWw5gJ5e4j7Zx4hGuc.roa
Signing time:             Fri 29 Jul 2022 12:11:26 +0000
ROA not before:           Fri 29 Jul 2022 12:11:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204168
IP address blocks:        92.52.204.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:49:de:60:d5:1a:db:de:23:2e:9b:3f:aa:a3:dd:ad:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Jul 29 12:11:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8b055f09806ee35b0e602797b88fb671e211ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:c5:8a:3f:00:ea:8a:6a:28:ca:8c:fb:37:
                    97:05:03:79:e4:c9:41:f1:c9:78:4e:5d:2b:7e:b8:
                    89:04:49:29:f8:36:3f:74:e8:75:09:67:9e:64:43:
                    c4:4d:f5:fa:19:c7:d5:f4:3b:cc:f8:79:c1:4a:65:
                    2f:ae:37:e0:d4:91:2d:20:fe:1c:0d:9a:d6:af:a0:
                    5d:9d:5a:0f:f9:5c:91:39:81:c9:13:72:be:ed:af:
                    ea:19:f0:7a:67:7f:68:32:85:69:6a:e2:4a:74:14:
                    11:75:59:31:0f:b5:f0:51:64:44:0e:3b:20:c8:cb:
                    b7:a0:59:7b:ea:e4:75:bd:96:44:7b:86:5d:1f:9b:
                    1c:ee:63:c7:82:f9:d8:8c:bc:ac:0c:ab:38:09:22:
                    37:50:ce:9d:ab:a9:bb:49:82:03:16:08:4a:c7:3d:
                    35:0f:0d:d2:f7:83:ab:93:31:23:a4:17:32:c4:91:
                    5a:59:a0:40:59:e8:09:97:47:b5:98:51:27:70:5f:
                    1e:a0:6f:9f:d4:fe:76:0f:94:4b:e3:1e:9d:df:41:
                    3c:51:8c:b3:d2:0a:6b:95:67:84:c3:67:34:f1:ed:
                    ff:b9:4c:fc:2e:a2:0c:6d:61:9b:79:b0:a2:3a:fc:
                    8a:9d:78:61:96:29:cb:05:ff:00:04:b1:ad:a4:66:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B0:55:F0:98:06:EE:35:B0:E6:02:79:7B:88:FB:67:1E:21:1A:E7
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6LBV8JgG7jWw5gJ5e4j7Zx4hGuc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.52.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:8b:e7:39:70:5f:2d:a0:e9:02:75:66:43:62:22:e0:ce:45:
         4d:ee:71:71:09:8e:84:57:43:f5:3d:38:5e:2a:5d:0f:86:ac:
         57:2c:87:d7:04:38:e3:39:64:91:bf:48:b0:6f:bf:14:75:7d:
         b9:ec:08:e5:f7:eb:65:bc:8b:9c:ad:ff:03:5d:c0:26:df:76:
         26:e7:7d:5d:e5:85:76:b5:79:eb:87:c8:68:e4:db:93:9a:e1:
         87:ae:32:70:c5:56:19:88:50:f8:89:02:55:1b:76:61:09:b3:
         36:6d:04:9e:17:9e:dd:78:6e:1a:de:5b:2b:01:63:75:3c:cd:
         1a:54:fa:17:ff:b2:64:eb:c4:a2:25:1a:1d:45:e9:d9:09:bd:
         51:66:6c:3e:52:df:a2:fe:e5:3c:e7:31:46:94:e2:89:97:0c:
         03:d0:c4:07:cf:19:f7:1b:12:ac:f2:cc:45:6a:c8:99:7a:f5:
         f8:32:a8:b3:5c:52:22:e0:df:cc:94:12:b2:4a:b0:50:3f:1a:
         15:55:38:5c:6e:f8:12:1f:9f:7e:90:52:fe:c7:8f:7a:c7:6d:
         cb:73:01:7e:b3:a8:9d:ce:c9:43:66:74:f6:83:7f:b7:65:02:
         92:87:6f:0c:89:df:5e:b9:c6:e7:a8:a4:78:9c:72:1a:34:9c:
         77:95:63:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJJ3mDVGtveIy6bP6qj3a1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjIwNzI5MTIxMTI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGIwNTVmMDk4MDZlZTM1YjBlNjAyNzk3Yjg4ZmI2NzFlMjExYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT7Fij8A6opqKMqM+zeXBQN55MlB
8cl4Tl0rfriJBEkp+DY/dOh1CWeeZEPETfX6GcfV9DvM+HnBSmUvrjfg1JEtIP4c
DZrWr6BdnVoP+VyROYHJE3K+7a/qGfB6Z39oMoVpauJKdBQRdVkxD7XwUWREDjsg
yMu3oFl76uR1vZZEe4ZdH5sc7mPHgvnYjLysDKs4CSI3UM6dq6m7SYIDFghKxz01
Dw3S94OrkzEjpBcyxJFaWaBAWegJl0e1mFEncF8eoG+f1P52D5RL4x6d30E8UYyz
0gprlWeEw2c08e3/uUz8LqIMbWGbebCiOvyKnXhhlinLBf8ABLGtpGYdvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiwVfCYBu41sOYCeXuI+2ceIRrnMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvNkxCVjhKZ0c3ald3NWdKNWU0ajdaeDRoR3VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXDTMMA0G
CSqGSIb3DQEBCwUAA4IBAQBpi+c5cF8toOkCdWZDYiLgzkVN7nFxCY6EV0P1PThe
Kl0PhqxXLIfXBDjjOWSRv0iwb78UdX257Ajl9+tlvIucrf8DXcAm33Ym531d5YV2
tXnrh8ho5NuTmuGHrjJwxVYZiFD4iQJVG3ZhCbM2bQSeF57deG4a3lsrAWN1PM0a
VPoX/7Jk68SiJRodRenZCb1RZmw+Ut+i/uU85zFGlOKJlwwD0MQHzxn3GxKs8sxF
asiZevX4MqizXFIi4N/MlBKySrBQPxoVVThcbvgSH59+kFL+x496x23LcwF+s6id
zslDZnT2g3+3ZQKSh28Mid9eucbnqKR4nHIaNJx3lWOz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org