Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/eePMhxc1bPW-_NnGe3F-TVcggrw.roa
File:                     eePMhxc1bPW-_NnGe3F-TVcggrw.roa (raw, json)
Hash identifier:          vLs4Ue8T1PE92xhoAlPCPHgB1/rSXzvi6D8uz///yTc=
Subject key identifier:   79:E3:CC:87:17:35:6C:F5:BE:FC:D9:C6:7B:71:7E:4D:57:20:82:BC
Certificate issuer:       /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial:       0A6D3CED
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/eePMhxc1bPW-_NnGe3F-TVcggrw.roa
Signing time:             Sat 01 Jan 2022 09:02:19 +0000
ROA not before:           Sat 01 Jan 2022 09:02:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57513
IP address blocks:        185.132.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174931181 (0xa6d3ced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
        Validity
            Not Before: Jan  1 09:02:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79e3cc8717356cf5befcd9c67b717e4d572082bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:4f:ec:ed:76:1c:c2:cb:ee:58:61:37:50:
                    eb:da:3c:ea:a6:9f:40:68:0d:40:c5:26:47:16:0d:
                    82:16:70:82:13:91:4c:78:a8:dd:e8:d6:7b:88:bd:
                    b7:31:a7:b3:04:c9:00:2e:a1:8b:4a:bb:c8:eb:e7:
                    91:18:cb:0e:36:ea:dd:5c:60:0a:03:3f:fd:3d:f3:
                    78:2a:f0:25:69:c7:8e:1d:c2:a3:16:54:76:5d:5b:
                    a6:bd:5c:b1:be:03:3c:9c:6f:a2:c2:45:64:86:ff:
                    e8:9d:04:16:fc:75:2b:b4:32:f6:c3:10:65:a0:b0:
                    08:1c:78:1e:e7:22:5c:e7:ab:57:9b:34:7a:fd:4a:
                    13:b6:55:f9:48:68:83:c9:d7:1e:3e:e6:3e:e9:ae:
                    8e:df:90:76:c0:cb:c8:39:e6:da:b0:14:26:c8:63:
                    ab:10:6e:49:cb:aa:65:85:64:57:25:c6:c5:a8:34:
                    a4:3b:85:9b:89:44:95:f3:4d:71:7b:ec:5a:86:28:
                    f8:e1:01:a3:db:5b:96:0b:12:bf:29:6d:06:4b:47:
                    fe:49:b5:73:ce:83:09:40:0d:5e:1d:3a:51:05:6b:
                    a2:4a:79:ca:46:2a:45:33:64:8c:ef:2f:00:02:d3:
                    9d:4b:f1:4c:10:cf:e5:95:69:9c:64:0f:a2:bc:d0:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E3:CC:87:17:35:6C:F5:BE:FC:D9:C6:7B:71:7E:4D:57:20:82:BC
            X509v3 Authority Key Identifier:
                keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/eePMhxc1bPW-_NnGe3F-TVcggrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.132.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:23:1f:d3:b1:09:85:16:23:0d:7c:cf:92:73:a3:fe:2f:
         ab:18:e4:58:6c:3a:71:70:92:83:e6:0b:71:b2:4b:58:1a:2e:
         56:18:a4:b5:2c:ec:ba:0f:78:56:f9:75:20:4a:b7:b7:6c:aa:
         23:62:ef:4a:52:3e:82:53:09:ff:a3:62:d5:9f:02:b7:b1:88:
         5f:71:58:da:50:ed:b3:82:29:58:7c:fb:8c:4d:af:a9:9f:74:
         86:3b:42:18:98:c0:c4:c1:6b:32:c6:13:7b:83:bb:b3:e8:29:
         cb:63:9c:54:4f:2f:7e:29:6a:95:ee:fc:d6:d9:bd:80:c6:0f:
         cc:79:ab:eb:84:6d:95:7a:87:ad:e3:a9:72:95:28:88:15:8a:
         90:98:e1:52:fe:5d:a4:d5:e9:62:e7:9c:98:16:78:09:ff:7c:
         49:52:ee:c3:cb:35:c3:72:c0:41:38:68:ec:a5:ed:3b:6f:a6:
         f2:d0:39:49:e8:57:26:b6:c1:0e:d5:e2:4f:d2:96:e7:a6:45:
         57:87:a6:3a:cf:92:d7:3c:62:e5:36:db:c8:72:a0:66:21:46:
         3a:26:f1:ab:f4:4c:fd:8d:e2:4b:20:8c:92:03:9f:55:28:89:
         9f:97:0a:59:ea:71:04:b4:4e:bd:b8:b0:56:f6:5c:1f:0f:a0:
         5e:9e:48:c4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECm087TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZWY0NjExNmExMWYxMWY1MWZjOWExZDIyNWEwYmZjZWZkYmVkNzg2MB4XDTIyMDEw
MTA5MDIxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzllM2NjODcxNzM1
NmNmNWJlZmNkOWM2N2I3MTdlNGQ1NzIwODJiYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMChT+ztdhzCy+5YYTdQ69o86qafQGgNQMUmRxYNghZwghOR
THio3ejWe4i9tzGnswTJAC6hi0q7yOvnkRjLDjbq3VxgCgM//T3zeCrwJWnHjh3C
oxZUdl1bpr1csb4DPJxvosJFZIb/6J0EFvx1K7Qy9sMQZaCwCBx4HuciXOerV5s0
ev1KE7ZV+Uhog8nXHj7mPumujt+QdsDLyDnm2rAUJshjqxBuScuqZYVkVyXGxag0
pDuFm4lElfNNcXvsWoYo+OEBo9tblgsSvyltBktH/km1c86DCUANXh06UQVrokp5
ykYqRTNkjO8vAALTnUvxTBDP5ZVpnGQPorzQmd0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR548yHFzVs9b782cZ7cX5NVyCCvDAfBgNVHSMEGDAWgBQ+9GEWoR8R9R/J
odIloL/O/b7XhjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1B2UmhGcUVmRWZVZnlhSFNKYUNfenYyLTE0WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODkvZDEwYTFjLTBhZGUtNGJjYi1iYmZjLTY3YmE3YTIxNTYzMC8x
L2VlUE1oeGMxYlBXLV9ObkdlM0YtVFZjZ2dydy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkv
ZDEwYTFjLTBhZGUtNGJjYi1iYmZjLTY3YmE3YTIxNTYzMC8xL1B2UmhGcUVmRWZV
ZnlhSFNKYUNfenYyLTE0WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmElDANBgkqhkiG9w0BAQsFAAOC
AQEATYUjH9OxCYUWIw18z5Jzo/4vqxjkWGw6cXCSg+YLcbJLWBouVhiktSzsug94
Vvl1IEq3t2yqI2LvSlI+glMJ/6Ni1Z8Ct7GIX3FY2lDts4IpWHz7jE2vqZ90hjtC
GJjAxMFrMsYTe4O7s+gpy2OcVE8vfilqle781tm9gMYPzHmr64RtlXqHreOpcpUo
iBWKkJjhUv5dpNXpYuecmBZ4Cf98SVLuw8s1w3LAQTho7KXtO2+m8tA5SehXJrbB
DtXiT9KW56ZFV4emOs+S1zxi5TbbyHKgZiFGOibxq/RM/Y3iSyCMkgOfVSiJn5cK
WepxBLROvbiwVvZcHw+gXp5IxA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net