Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/9pi3_-G5udSxnklOGLXuDk7BtvE.roa
File:                     9pi3_-G5udSxnklOGLXuDk7BtvE.roa (raw, json)
Hash identifier:          ieAuV35OnU4CpzSRT4KCLuQXAyslCfSc/DCj2UMX6Qw=
Subject key identifier:   F6:98:B7:FF:E1:B9:B9:D4:B1:9E:49:4E:18:B5:EE:0E:4E:C1:B6:F1
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       06F63D2A
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/9pi3_-G5udSxnklOGLXuDk7BtvE.roa
Signing time:             Sun 29 May 2022 07:47:13 +0000
ROA not before:           Sun 29 May 2022 07:47:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203279
IP address blocks:        2a0a:4540:101::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116800810 (0x6f63d2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: May 29 07:47:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f698b7ffe1b9b9d4b19e494e18b5ee0e4ec1b6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:20:81:78:51:6c:c4:68:fa:48:a2:fa:5c:
                    51:82:4a:19:48:ac:3b:b7:70:eb:67:7c:a0:f0:83:
                    6b:49:84:7a:57:95:8f:ba:15:d9:e7:7a:bf:70:d7:
                    17:01:26:8a:93:80:59:dc:24:ba:87:39:0f:83:5d:
                    15:e6:31:9e:6e:2a:90:5c:ad:a6:80:e8:cd:55:27:
                    65:83:3c:e5:0a:a9:85:0e:dd:b6:ce:fe:c8:7c:25:
                    cd:28:e1:74:76:ac:9d:b4:55:79:24:31:7e:be:d2:
                    9c:1e:41:22:ec:04:fa:57:1d:51:f7:09:65:34:16:
                    39:ca:1c:a6:6a:d7:f7:0d:e4:cb:ac:d8:03:20:dd:
                    e4:de:bb:3b:08:df:1b:2c:0f:00:1e:5b:27:74:48:
                    08:79:92:72:d9:7d:5d:d8:8a:ee:2d:10:48:86:a7:
                    52:00:8d:3a:d3:fd:a2:38:52:b1:5b:51:64:55:f1:
                    2f:37:94:86:13:78:61:37:65:f2:63:a4:87:6f:e0:
                    1c:82:ec:87:da:e9:7f:4f:3c:07:3b:21:10:de:e7:
                    13:21:15:ba:88:05:0b:a5:94:64:f7:f9:6a:72:f4:
                    32:65:49:8a:96:6e:13:24:8c:0d:2f:fe:46:af:e8:
                    d5:8f:9e:4e:b8:b4:1a:1f:e1:79:36:c3:e1:a4:b2:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:98:B7:FF:E1:B9:B9:D4:B1:9E:49:4E:18:B5:EE:0E:4E:C1:B6:F1
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/9pi3_-G5udSxnklOGLXuDk7BtvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:4540:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:a1:88:49:17:a7:55:cf:c6:cc:a1:4e:a6:98:10:9a:81:79:
         f2:02:ee:01:be:a7:3b:21:ee:34:9e:a5:d6:7f:fe:ca:10:52:
         44:4e:e0:0a:11:3d:24:ae:09:1e:b8:35:ba:74:c3:b9:f8:c3:
         07:d8:36:14:ff:b4:88:54:da:cc:e7:1a:70:cd:f6:5a:06:ee:
         8b:44:cc:c3:c9:b0:a4:a6:60:e3:b2:f3:c7:6b:19:f1:90:67:
         03:82:cd:96:5b:af:19:5e:4d:43:39:b2:7a:91:99:fa:c4:f4:
         8f:c4:a5:7e:71:7f:0a:d9:09:51:41:01:e9:43:8c:8e:20:85:
         3e:1a:61:32:46:69:19:e3:97:b1:c6:26:f6:25:1b:29:f5:51:
         15:c3:b8:13:16:e6:81:f5:7e:81:ab:67:48:1f:14:11:25:a2:
         d4:ad:c4:4f:1a:5a:40:a4:8f:df:44:0f:6d:dc:b3:3b:6b:c9:
         85:e5:f2:5a:9c:18:bd:7d:f4:73:aa:32:2b:96:35:9c:e2:cc:
         c2:cc:ee:89:5a:11:12:43:da:d1:ad:ca:71:f1:1e:ce:b5:d7:
         75:40:26:e4:bd:68:f0:42:90:89:4f:59:92:8a:66:ef:9a:ca:
         0f:6b:aa:35:f6:75:10:b1:63:e9:c3:86:09:3e:c2:4a:07:3c:
         02:c9:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org