Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/tzrqrRO5zw5vF17H8t30XqtPs0o.roa
File:                     tzrqrRO5zw5vF17H8t30XqtPs0o.roa (raw, json)
Hash identifier:          qDLLrzros2fyTPKthLsnzSbrSMM7vgX5XdlFg8ItwwI=
Subject key identifier:   B7:3A:EA:AD:13:B9:CF:0E:6F:17:5E:C7:F2:DD:F4:5E:AB:4F:B3:4A
Certificate issuer:       /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial:       0988940B
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/tzrqrRO5zw5vF17H8t30XqtPs0o.roa
Signing time:             Wed 29 Jun 2022 07:44:02 +0000
ROA not before:           Wed 29 Jun 2022 07:44:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12599
IP address blocks:        212.64.218.0/24 maxlen: 24
                          212.64.220.0/24 maxlen: 24
                          212.64.192.0/24 maxlen: 24
                          212.64.194.0/24 maxlen: 24
                          212.64.197.0/24 maxlen: 24
                          212.64.196.0/24 maxlen: 24
                          212.64.198.0/24 maxlen: 24
                          212.64.199.0/24 maxlen: 24
                          212.64.193.0/24 maxlen: 24
                          212.64.200.0/24 maxlen: 24
                          212.64.202.0/24 maxlen: 24
                          212.64.201.0/24 maxlen: 24
                          212.64.204.0/24 maxlen: 24
                          212.64.203.0/24 maxlen: 24
                          212.64.205.0/24 maxlen: 24
                          212.64.206.0/24 maxlen: 24
                          212.64.209.0/24 maxlen: 24
                          212.64.208.0/24 maxlen: 24
                          212.64.212.0/24 maxlen: 24
                          212.64.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159945739 (0x988940b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
        Validity
            Not Before: Jun 29 07:44:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b73aeaad13b9cf0e6f175ec7f2ddf45eab4fb34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:dd:82:4d:e7:59:e1:a3:94:a5:ce:06:b6:
                    dd:6a:0c:2e:3f:de:b4:68:15:5b:f7:04:03:c2:d6:
                    ed:77:99:92:83:7e:a2:1b:d1:ed:b4:ab:a8:21:b5:
                    b5:86:23:6a:49:ab:44:ad:d7:90:92:a6:92:18:c0:
                    33:20:7b:78:58:13:9c:e4:0b:ad:75:c0:77:7e:76:
                    3d:b6:fb:49:0f:d1:ce:52:c2:17:7a:47:98:ed:74:
                    45:6b:11:60:9e:4a:4b:cb:18:32:d5:5b:c4:f3:2e:
                    6c:9a:8d:67:a8:35:aa:b5:64:ce:d1:a9:aa:35:5f:
                    9d:03:e1:ed:1c:60:6d:17:f3:58:5c:fc:4c:cb:4c:
                    22:a1:a7:e6:f0:51:d8:58:e6:ed:27:4b:f0:9c:53:
                    60:f3:bb:16:bf:d0:d0:75:04:f1:2a:ba:d7:a9:85:
                    26:02:dd:25:3b:02:a3:bd:d5:fa:4b:cb:06:d5:b8:
                    d6:46:f5:b2:a7:58:25:2b:f1:fc:0f:19:7b:a5:6b:
                    c3:cd:92:df:e2:27:35:92:93:fb:cc:e5:57:df:3f:
                    27:29:07:89:48:0c:10:5e:93:60:47:29:a1:86:c6:
                    df:e1:89:53:11:ae:60:36:3b:12:dc:5b:8c:a0:48:
                    52:14:05:8f:02:98:17:0f:47:bd:ad:be:c3:b5:1e:
                    db:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3A:EA:AD:13:B9:CF:0E:6F:17:5E:C7:F2:DD:F4:5E:AB:4F:B3:4A
            X509v3 Authority Key Identifier:
                keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/tzrqrRO5zw5vF17H8t30XqtPs0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.64.192.0-212.64.194.255
                  212.64.196.0-212.64.209.255
                  212.64.212.0/24
                  212.64.218.0/24
                  212.64.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:4e:ea:6b:4c:11:bf:99:92:db:27:dc:21:91:9f:aa:86:a3:
         c8:dc:43:a9:0b:be:87:d1:32:96:26:4b:1d:e5:3e:0c:31:27:
         a8:14:89:2d:40:ac:09:2f:96:ff:a3:03:8e:75:ff:65:92:a6:
         35:93:f6:3d:70:d3:08:79:2e:2b:48:c8:22:2f:31:93:43:c7:
         73:c6:a7:5e:ab:08:1b:01:18:27:2f:1a:b4:5d:11:9c:d4:25:
         d1:86:ff:88:8e:cb:f4:1c:36:53:9c:e2:0d:b5:d6:3e:d2:8c:
         aa:36:f8:f4:0f:7e:04:67:d4:f3:17:7f:e7:49:bd:61:48:b8:
         43:a9:43:5d:f6:46:63:95:56:52:7e:73:2d:a3:3c:6e:ab:fc:
         70:3d:cb:99:55:5d:1e:88:73:c8:eb:44:48:10:2d:d7:86:12:
         3a:71:41:fd:38:13:b2:ab:b0:44:77:01:b5:77:61:ed:12:19:
         a3:be:ea:bf:2b:40:06:8a:ed:50:cf:a5:8b:59:27:2e:c2:26:
         22:d5:e1:9b:26:14:63:69:c5:cb:4f:78:a6:5f:5d:33:17:a9:
         3c:fe:8b:b8:cd:c3:88:69:28:bd:bb:6c:df:c5:42:4b:0c:96:
         6b:60:9c:82:02:36:d5:f2:ce:70:f7:7b:34:36:15:a8:e0:d7:
         0f:92:b1:36
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIECYiUCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NjQwZjg5Y2UyMjY0NWI5NzI5N2Q3ODAzNzI2ZGMyZmIwZTVmNGI5MB4XDTIyMDYy
OTA3NDQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjczYWVhYWQxM2I5
Y2YwZTZmMTc1ZWM3ZjJkZGY0NWVhYjRmYjM0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAInQ3YJN51nho5Slzga23WoMLj/etGgVW/cEA8LW7XeZkoN+
ohvR7bSrqCG1tYYjakmrRK3XkJKmkhjAMyB7eFgTnOQLrXXAd352Pbb7SQ/RzlLC
F3pHmO10RWsRYJ5KS8sYMtVbxPMubJqNZ6g1qrVkztGpqjVfnQPh7RxgbRfzWFz8
TMtMIqGn5vBR2Fjm7SdL8JxTYPO7Fr/Q0HUE8Sq616mFJgLdJTsCo73V+kvLBtW4
1kb1sqdYJSvx/A8Ze6Vrw82S3+InNZKT+8zlV98/JykHiUgMEF6TYEcpoYbG3+GJ
UxGuYDY7EtxbjKBIUhQFjwKYFw9Hva2+w7Ue28kCAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBS3OuqtE7nPDm8XXsfy3fReq0+zSjAfBgNVHSMEGDAWgBRmQPic4iZFuXKX
14A3JtwvsOX0uTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1prRDRuT0ltUmJseWw5ZUFOeWJjTDdEbDlMay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmMvYzNhZDJlLWI1MmUtNDQxYy04OWJhLTQ0YWI3YTlkN2RlYS8x
L3R6cnFyUk81enc1dkYxN0g4dDMwWHF0UHMwby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMv
YzNhZDJlLWI1MmUtNDQxYy04OWJhLTQ0YWI3YTlkN2RlYS8xL1prRDRuT0ltUmJs
eWw5ZUFOeWJjTDdEbDlMay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwNAQCAAEwLjAMAwQG1EDAAwQA1EDCMAwDBALUQMQD
BAHUQNADBADUQNQDBADUQNoDBADUQNwwDQYJKoZIhvcNAQELBQADggEBAAZO6mtM
Eb+Zktsn3CGRn6qGo8jcQ6kLvofRMpYmSx3lPgwxJ6gUiS1ArAkvlv+jA451/2WS
pjWT9j1w0wh5LitIyCIvMZNDx3PGp16rCBsBGCcvGrRdEZzUJdGG/4iOy/QcNlOc
4g211j7SjKo2+PQPfgRn1PMXf+dJvWFIuEOpQ132RmOVVlJ+cy2jPG6r/HA9y5lV
XR6Ic8jrREgQLdeGEjpxQf04E7KrsER3AbV3Ye0SGaO+6r8rQAaK7VDPpYtZJy7C
JiLV4ZsmFGNpxctPeKZfXTMXqTz+i7jNw4hpKL27bN/FQksMlmtgnIICNtXyznD3
ezQ2Fajg1w+SsTY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:48 2024 by rpki-client on console-fra.rpki-client.org