Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/Ki_pLz7WxTg4QHoZg54pG-4U5F4.roa
File:                     Ki_pLz7WxTg4QHoZg54pG-4U5F4.roa (raw, json)
Hash identifier:          4N/I/PX2mlZDJheNh15m+nI1LG8T4Rsof7YfSbYZy1U=
Subject key identifier:   2A:2F:E9:2F:3E:D6:C5:38:38:40:7A:19:83:9E:29:1B:EE:14:E4:5E
Certificate issuer:       /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial:       0E752050
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/Ki_pLz7WxTg4QHoZg54pG-4U5F4.roa
Signing time:             Sat 01 Jan 2022 06:59:01 +0000
ROA not before:           Sat 01 Jan 2022 06:59:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205594
IP address blocks:        185.81.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242557008 (0xe752050)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
        Validity
            Not Before: Jan  1 06:59:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2a2fe92f3ed6c53838407a19839e291bee14e45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:0b:45:83:90:5f:9b:ea:e7:d1:0e:e0:74:
                    51:ec:0f:4c:53:a1:21:68:f6:3b:da:e2:98:c8:7a:
                    e9:8f:3b:89:4b:27:17:bb:c5:77:c1:33:8c:0e:bc:
                    04:9c:b9:43:c2:8d:3b:99:53:06:bd:16:82:b4:a1:
                    a1:4c:30:57:4b:6c:70:37:7b:67:ac:b8:1a:ce:e5:
                    44:79:d6:ac:f5:47:89:b8:b8:7b:ec:a9:0f:09:31:
                    5a:9b:92:6a:f1:78:4c:cb:c4:f2:b1:cc:94:d9:d3:
                    64:9a:38:fc:cd:33:83:c0:b0:16:cd:df:5f:8c:8e:
                    1d:ca:a4:d9:df:01:d9:cf:11:fd:1f:06:5d:79:f2:
                    c2:29:84:28:26:cf:6f:1a:8d:84:e7:33:d7:a2:91:
                    2a:31:a8:fc:91:0c:4c:ba:04:db:8a:19:b7:86:1b:
                    5f:01:87:58:49:ad:df:f2:ff:90:c9:e0:9e:17:4e:
                    6d:85:a6:74:c2:32:83:34:a3:6d:2f:5f:05:cd:5d:
                    be:71:ad:57:ed:39:86:8b:53:cf:20:89:23:42:11:
                    b0:5c:e0:41:25:07:a7:ee:e5:f7:68:24:9d:fb:22:
                    4a:3a:3a:8a:53:76:f0:fc:08:23:01:4f:88:83:ce:
                    1e:66:0b:8e:49:60:e9:89:d2:91:f0:df:a8:8e:e9:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2F:E9:2F:3E:D6:C5:38:38:40:7A:19:83:9E:29:1B:EE:14:E4:5E
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/Ki_pLz7WxTg4QHoZg54pG-4U5F4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:8d:d3:3e:ec:1f:fc:fb:5d:6c:f6:4c:0e:7d:45:c3:dd:12:
         65:73:2c:40:57:10:b7:7e:b2:1a:b9:9a:70:d2:83:e7:4f:b1:
         50:eb:d3:bd:1e:45:53:43:46:6a:b4:bc:34:12:db:2b:7f:d5:
         51:a7:8b:d6:a3:0b:56:57:65:d8:8b:be:dd:48:33:16:40:7b:
         f0:7d:e7:e5:94:d3:f6:53:c4:6b:1f:29:3f:9d:38:15:f5:de:
         3f:dd:14:da:56:e9:2b:e2:fa:5a:55:0b:b2:58:ea:14:c1:bd:
         69:48:6b:5c:f4:d7:80:5b:a5:d3:39:42:b9:9e:de:b2:12:20:
         b6:60:33:83:02:3f:5c:7b:bd:48:64:1b:bc:d3:72:be:fa:0d:
         4c:4b:11:9b:1d:c8:f4:62:f8:3b:3f:60:fa:26:ff:67:0b:02:
         ff:a4:2a:94:48:4a:5e:cb:67:33:87:1b:f3:0e:3b:23:0b:7e:
         a6:55:66:3c:55:c8:ca:f6:f4:6c:67:29:3c:1e:60:3f:a9:23:
         26:4a:df:0b:25:14:10:25:60:8f:96:37:54:17:93:8e:e0:08:
         6b:cd:f3:c6:15:b6:33:ca:2f:25:ab:eb:b6:a7:06:e3:7e:5c:
         d1:70:aa:cf:2e:b4:d5:b2:94:e9:74:8b:2a:76:8a:a3:39:e2:
         d4:d9:c2:44
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDnUgUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NDNiYWM0YTFiYmJhNTZjYzQzNDg2MWE0Yzc2OWZmOWNlMmQxNWVjMB4XDTIyMDEw
MTA2NTkwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmEyZmU5MmYzZWQ2
YzUzODM4NDA3YTE5ODM5ZTI5MWJlZTE0ZTQ1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJr3C0WDkF+b6ufRDuB0UewPTFOhIWj2O9rimMh66Y87iUsn
F7vFd8EzjA68BJy5Q8KNO5lTBr0WgrShoUwwV0tscDd7Z6y4Gs7lRHnWrPVHibi4
e+ypDwkxWpuSavF4TMvE8rHMlNnTZJo4/M0zg8CwFs3fX4yOHcqk2d8B2c8R/R8G
XXnywimEKCbPbxqNhOcz16KRKjGo/JEMTLoE24oZt4YbXwGHWEmt3/L/kMngnhdO
bYWmdMIygzSjbS9fBc1dvnGtV+05hotTzyCJI0IRsFzgQSUHp+7l92gknfsiSjo6
ilN28PwIIwFPiIPOHmYLjklg6YnSkfDfqI7pc+UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQqL+kvPtbFODhAehmDnikb7hTkXjAfBgNVHSMEGDAWgBTkO6xKG7ulbMQ0
hhpMdp/5zi0V7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVEdXNTaHU3cFd6RU5JWWFUSGFmLWM0dEZldy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjcvZjJhYjBmLWJlNDMtNDY2NS1iYmFhLTFjZDNjYjA3ZWY1ZC8x
L0tpX3BMejdXeFRnNFFIb1pnNTRwRy00VTVGNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcv
ZjJhYjBmLWJlNDMtNDY2NS1iYmFhLTFjZDNjYjA3ZWY1ZC8xLzVEdXNTaHU3cFd6
RU5JWWFUSGFmLWM0dEZldy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlRaTANBgkqhkiG9w0BAQsFAAOC
AQEAOY3TPuwf/PtdbPZMDn1Fw90SZXMsQFcQt36yGrmacNKD50+xUOvTvR5FU0NG
arS8NBLbK3/VUaeL1qMLVldl2Iu+3UgzFkB78H3n5ZTT9lPEax8pP504FfXeP90U
2lbpK+L6WlULsljqFMG9aUhrXPTXgFul0zlCuZ7eshIgtmAzgwI/XHu9SGQbvNNy
vvoNTEsRmx3I9GL4Oz9g+ib/ZwsC/6QqlEhKXstnM4cb8w47Iwt+plVmPFXIyvb0
bGcpPB5gP6kjJkrfCyUUECVgj5Y3VBeTjuAIa83zxhW2M8ovJavrtqcG435c0XCq
zy601bKU6XSLKnaKozni1NnCRA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:10 2024 by rpki-client on console-fra.rpki-client.org