Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/gaEWNCWK56rmbbftvub7zoXn0Ak.roa
File:                     gaEWNCWK56rmbbftvub7zoXn0Ak.roa (raw, json)
Hash identifier:          PmZEHgPuyxsSpDHcseGh+IXHUlyOTPCP4sC5oiCLgiw=
Subject key identifier:   81:A1:16:34:25:8A:E7:AA:E6:6D:B7:ED:BE:E6:FB:CE:85:E7:D0:09
Certificate issuer:       /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial:       013A70ED
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/gaEWNCWK56rmbbftvub7zoXn0Ak.roa
Signing time:             Thu 17 Feb 2022 14:45:35 +0000
ROA not before:           Thu 17 Feb 2022 14:45:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        91.206.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20607213 (0x13a70ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
        Validity
            Not Before: Feb 17 14:45:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=81a11634258ae7aae66db7edbee6fbce85e7d009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:39:37:39:f7:58:39:13:bc:8d:40:d2:78:
                    40:9b:32:6f:3d:6f:b0:03:7b:4c:27:e1:6e:81:51:
                    6f:42:2b:68:9e:05:4c:5d:f5:7e:ac:62:17:82:21:
                    46:8f:20:f6:38:77:05:28:e6:a9:1a:8a:0d:e6:37:
                    7a:49:97:28:3d:ed:85:91:c9:d0:2c:00:70:4e:0d:
                    33:e3:83:11:72:5d:05:b0:e5:8f:13:1e:1c:6e:04:
                    ac:b2:ab:fe:a2:5c:c5:d8:cc:3e:2b:5c:d0:09:ed:
                    c6:44:39:36:4a:a3:fa:00:24:9f:5c:8c:6e:4c:f0:
                    be:89:cb:42:5c:dc:16:a7:ad:22:1b:01:61:73:3b:
                    c0:7f:59:b5:35:4f:e6:bc:23:8d:f7:df:ba:cb:19:
                    ad:78:b4:a3:9d:d2:79:83:ba:b8:5d:d0:f4:1c:04:
                    48:a0:67:58:da:73:43:87:23:17:02:58:54:6e:62:
                    59:de:75:c3:45:72:97:65:54:a6:9d:86:43:d4:f3:
                    c3:f1:78:f0:70:8c:ec:16:d5:4a:c6:0b:85:22:31:
                    a7:b7:73:6b:7a:6c:77:76:0c:ab:ff:b8:76:72:3f:
                    50:5d:6e:fd:a7:3f:b5:38:0b:a3:dc:56:93:5f:0c:
                    01:3a:ba:d9:de:43:2b:87:a7:3c:d7:bb:c9:51:b7:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A1:16:34:25:8A:E7:AA:E6:6D:B7:ED:BE:E6:FB:CE:85:E7:D0:09
            X509v3 Authority Key Identifier:
                keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/gaEWNCWK56rmbbftvub7zoXn0Ak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:94:10:3e:64:c5:b3:74:d5:10:67:55:a0:67:23:7e:f9:28:
         93:7a:39:ea:b3:c4:95:02:a8:bd:e9:b8:84:00:64:c9:1b:02:
         02:38:52:37:f2:f1:66:d9:94:24:a3:42:5a:65:6f:5f:94:61:
         e1:8c:20:e1:c2:7a:d6:88:0f:a4:9b:6a:f2:f3:ea:d9:8b:9d:
         94:3e:6d:af:88:d4:c9:73:8e:34:15:cd:59:e9:c3:79:a8:a2:
         81:fc:d0:6c:21:b5:80:49:ec:14:ff:60:a1:45:33:5d:d1:26:
         0c:95:5b:56:69:25:82:6a:c1:16:e4:21:29:06:ba:cd:01:e0:
         da:d0:68:00:3e:d8:34:b6:81:2e:58:34:ee:de:ce:0f:9e:5f:
         d3:ed:c6:0f:ab:43:07:d2:7e:57:b9:5f:93:8c:47:81:9e:c0:
         da:65:b0:31:f0:86:5b:64:fa:47:1b:e5:b4:8a:3c:9f:f3:08:
         20:e9:82:0e:75:23:28:c3:70:89:98:5b:9e:b4:d6:80:9f:18:
         b5:25:53:42:de:a6:60:26:77:26:d4:21:e5:35:b2:83:52:ef:
         91:a7:57:2d:bb:e8:4f:6f:2f:6e:d2:9a:3c:ad:8c:5a:7f:c8:
         e6:bd:0c:94:aa:d0:76:f8:db:36:66:49:e2:78:7b:8b:4f:cc:
         99:6b:b2:d8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEATpw7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YzUxOTZkZWQ1YmE1ZDY4NmU3MDk1YzZkNWM2MzhjNmI4ZjhiYWRhMB4XDTIyMDIx
NzE0NDUzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODFhMTE2MzQyNThh
ZTdhYWU2NmRiN2VkYmVlNmZiY2U4NWU3ZDAwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPuOTc591g5E7yNQNJ4QJsybz1vsAN7TCfhboFRb0IraJ4F
TF31fqxiF4IhRo8g9jh3BSjmqRqKDeY3ekmXKD3thZHJ0CwAcE4NM+ODEXJdBbDl
jxMeHG4ErLKr/qJcxdjMPitc0AntxkQ5Nkqj+gAkn1yMbkzwvonLQlzcFqetIhsB
YXM7wH9ZtTVP5rwjjfffussZrXi0o53SeYO6uF3Q9BwESKBnWNpzQ4cjFwJYVG5i
Wd51w0Vyl2VUpp2GQ9Tzw/F48HCM7BbVSsYLhSIxp7dza3psd3YMq/+4dnI/UF1u
/ac/tTgLo9xWk18MATq62d5DK4enPNe7yVG3x9UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSBoRY0JYrnquZtt+2+5vvOhefQCTAfBgNVHSMEGDAWgBQcUZbe1bpdaG5w
lcbVxjjGuPi62jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hGR1czdFc2WFdodWNKWEcxY1k0eHJqNHV0by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvMTU5ZmEzLTMxNmUtNGY1ZS04YjYxLTIwYmYyNzVmZDBlNy8x
L2dhRVdOQ1dLNTZybWJiZnR2dWI3em9YbjBBay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
MTU5ZmEzLTMxNmUtNGY1ZS04YjYxLTIwYmYyNzVmZDBlNy8xL0hGR1czdFc2WFdo
dWNKWEcxY1k0eHJqNHV0by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvO0TANBgkqhkiG9w0BAQsFAAOC
AQEAQZQQPmTFs3TVEGdVoGcjfvkok3o56rPElQKovem4hABkyRsCAjhSN/LxZtmU
JKNCWmVvX5Rh4Ywg4cJ61ogPpJtq8vPq2YudlD5tr4jUyXOONBXNWenDeaiigfzQ
bCG1gEnsFP9goUUzXdEmDJVbVmklgmrBFuQhKQa6zQHg2tBoAD7YNLaBLlg07t7O
D55f0+3GD6tDB9J+V7lfk4xHgZ7A2mWwMfCGW2T6RxvltIo8n/MIIOmCDnUjKMNw
iZhbnrTWgJ8YtSVTQt6mYCZ3JtQh5TWyg1LvkadXLbvoT28vbtKaPK2MWn/I5r0M
lKrQdvjbNmZJ4nh7i0/MmWuy2A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org