Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/75BsKLdYiHNgTB8qOKr4PE_74-A.roa
File:                     75BsKLdYiHNgTB8qOKr4PE_74-A.roa (raw, json)
Hash identifier:          Bf8OklBKCM34OqtkCh+9E6n1QZs6U+Ufw9215Frc1Qk=
Subject key identifier:   EF:90:6C:28:B7:58:88:73:60:4C:1F:2A:38:AA:F8:3C:4F:FB:E3:E0
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       09C6AA4B
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/75BsKLdYiHNgTB8qOKr4PE_74-A.roa
Signing time:             Fri 13 May 2022 16:23:27 +0000
ROA not before:           Fri 13 May 2022 16:23:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        46.3.116.0/22 maxlen: 22
                          46.3.220.0/23 maxlen: 23
                          46.3.230.0/23 maxlen: 23
                          46.3.120.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164014667 (0x9c6aa4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: May 13 16:23:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef906c28b7588873604c1f2a38aaf83c4ffbe3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:3a:62:1d:96:d1:49:e9:6c:24:28:3f:13:
                    ca:54:16:54:30:dd:20:6a:d7:57:48:5d:20:e1:33:
                    05:19:4a:a8:5e:df:8c:2b:4e:20:14:d3:64:67:52:
                    36:e6:bd:d3:c8:87:80:28:70:79:11:3c:09:82:2c:
                    6c:ab:98:1c:74:2c:73:2a:75:82:c7:68:dd:41:3f:
                    75:47:45:67:40:df:24:d6:0a:f5:1f:73:d6:49:03:
                    a7:cb:0e:f6:78:b7:fe:32:ca:0b:80:3b:3d:f9:f1:
                    ff:d8:ed:61:f5:43:c4:1c:14:8e:3a:be:b8:8f:9b:
                    b6:ee:c9:bf:7f:a0:06:fc:10:33:cc:70:1c:2e:db:
                    78:0f:65:46:21:00:2e:d9:d8:3d:16:a8:99:05:44:
                    33:b1:0a:1c:9b:42:f7:60:e9:62:e3:c7:a2:d4:31:
                    df:4c:ee:dd:45:66:c3:0f:f4:4e:89:da:67:ff:ba:
                    6e:b2:b7:7b:b7:1b:d3:de:66:ba:a8:73:f6:86:70:
                    d1:76:e5:ab:7d:2c:ec:54:e1:d7:fe:49:0d:61:7c:
                    ad:c1:dc:73:64:f3:c8:f3:0b:9a:a6:ee:86:fe:02:
                    c6:11:b6:cf:36:de:12:97:35:64:c7:ba:bb:79:0a:
                    ad:b9:04:86:67:41:e0:52:46:03:bc:30:2e:8f:af:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:90:6C:28:B7:58:88:73:60:4C:1F:2A:38:AA:F8:3C:4F:FB:E3:E0
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/75BsKLdYiHNgTB8qOKr4PE_74-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.3.116.0-46.3.127.255
                  46.3.220.0/23
                  46.3.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:b2:7b:b2:c1:a6:84:2a:d7:cf:89:07:ee:87:16:a2:96:
         87:37:01:8a:0b:01:65:a6:37:2d:a3:f6:06:98:4b:34:f0:b9:
         93:93:c3:44:ea:e2:c5:26:21:9e:8a:b2:eb:4a:d0:42:05:8b:
         96:9a:98:f6:ab:f2:3a:76:c5:0e:0c:61:c2:0d:2c:11:ab:b9:
         85:b8:50:0f:e1:03:a3:aa:a8:7b:f6:5a:c7:ec:ba:f2:d5:98:
         b3:ff:f8:4d:84:e7:3a:d7:be:b8:b7:24:8e:db:3c:bd:ab:78:
         be:3d:3c:b5:84:cf:2c:6d:11:ef:96:e6:3e:9d:6a:5f:33:eb:
         a9:09:ae:47:80:14:94:c4:04:a8:a7:d9:e1:77:8c:54:67:d0:
         22:7b:ff:3c:b6:1e:90:dd:16:92:4f:37:21:56:39:ce:f9:91:
         06:5b:8a:0b:36:81:b6:66:64:43:2a:a7:69:79:cb:bd:e4:53:
         58:b4:c0:56:cc:6e:5c:fb:6f:26:64:2a:52:d9:82:8c:01:d8:
         a8:d6:a7:1a:57:38:f4:ec:57:ab:2c:57:00:1b:9e:35:41:07:
         09:68:89:de:62:f1:27:eb:a8:e3:dd:78:7f:33:e9:90:13:2c:
         8b:7d:63:8f:d4:70:a9:2d:5b:36:a7:96:c9:50:98:53:c9:e3:
         e4:6a:ed:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIECcaqSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTg4ZjE5N2Y5N2U4OTAwNzU1NTQ0ZTgxMGNkZGVmOWQ5MGZiYzQxMB4XDTIyMDUx
MzE2MjMyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWY5MDZjMjhiNzU4
ODg3MzYwNGMxZjJhMzhhYWY4M2M0ZmZiZTNlMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvyOmIdltFJ6WwkKD8TylQWVDDdIGrXV0hdIOEzBRlKqF7f
jCtOIBTTZGdSNua908iHgChweRE8CYIsbKuYHHQscyp1gsdo3UE/dUdFZ0DfJNYK
9R9z1kkDp8sO9ni3/jLKC4A7Pfnx/9jtYfVDxBwUjjq+uI+btu7Jv3+gBvwQM8xw
HC7beA9lRiEALtnYPRaomQVEM7EKHJtC92DpYuPHotQx30zu3UVmww/0TonaZ/+6
brK3e7cb095muqhz9oZw0Xblq30s7FTh1/5JDWF8rcHcc2TzyPMLmqbuhv4CxhG2
zzbeEpc1ZMe6u3kKrbkEhmdB4FJGA7wwLo+vl+MCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBTvkGwot1iIc2BMHyo4qvg8T/vj4DAfBgNVHSMEGDAWgBRViPGX+X6JAHVV
ROgQzd752Q+8QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZZanhsX2wtaVFCMVZVVG9FTTNlLWRrUHZFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8x
Lzc1QnNLTGRZaUhOZ1RCOHFPS3I0UEVfNzQtQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
NjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8xL1ZZanhsX2wtaVFC
MVZVVG9FTTNlLWRrUHZFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQCLgN0AwQHLgMAAwQBLgPcAwQB
LgPmMA0GCSqGSIb3DQEBCwUAA4IBAQCEzbJ7ssGmhCrXz4kH7ocWopaHNwGKCwFl
pjcto/YGmEs08LmTk8NE6uLFJiGeirLrStBCBYuWmpj2q/I6dsUODGHCDSwRq7mF
uFAP4QOjqqh79lrH7Lry1Ziz//hNhOc61764tySO2zy9q3i+PTy1hM8sbRHvluY+
nWpfM+upCa5HgBSUxASop9nhd4xUZ9Aie/88th6Q3RaSTzchVjnO+ZEGW4oLNoG2
ZmRDKqdpecu95FNYtMBWzG5c+28mZCpS2YKMAdio1qcaVzj07FerLFcAG541QQcJ
aIneYvEn66jj3Xh/M+mQEyyLfWOP1HCpLVs2p5bJUJhTyePkau1D
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org