Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/FIguAKf3gxTLlpQJVuccZfJn1QM.roa
File:                     FIguAKf3gxTLlpQJVuccZfJn1QM.roa (raw, json)
Hash identifier:          vwJpFr+b70Hlo9Oi/KHpmL5kZMRfMM3dwjKpIFgaVAo=
Subject key identifier:   14:88:2E:00:A7:F7:83:14:CB:96:94:09:56:E7:1C:65:F2:67:D5:03
Certificate issuer:       /CN=5a93259014f5b764847072c3734ecb528072218d
Certificate serial:       0B24F4B2
Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/FIguAKf3gxTLlpQJVuccZfJn1QM.roa
Signing time:             Sat 01 Jan 2022 05:00:21 +0000
ROA not before:           Sat 01 Jan 2022 05:00:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57729
IP address blocks:        194.31.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186971314 (0xb24f4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93259014f5b764847072c3734ecb528072218d
        Validity
            Not Before: Jan  1 05:00:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14882e00a7f78314cb96940956e71c65f267d503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:a0:66:31:52:a7:b3:84:f1:5d:0a:a1:53:
                    1d:da:49:b6:86:0e:d5:44:0c:57:eb:df:8a:71:67:
                    ea:ff:23:9e:c5:ba:6a:5f:96:6e:70:7b:53:20:a4:
                    63:5b:f4:59:7b:ef:9b:b3:50:38:c9:8f:e6:0a:2f:
                    a9:57:8c:53:0f:45:3f:22:1e:48:a1:ca:9a:96:d3:
                    b4:58:4c:2a:c3:82:45:12:de:ee:8d:df:78:3c:7f:
                    31:b1:6b:dd:7f:13:d2:1f:66:f1:92:3e:20:47:16:
                    b4:b8:d9:0f:d1:11:c3:8e:67:24:9b:f6:d3:09:46:
                    d7:8f:a7:2d:6b:71:43:9a:ed:ea:c4:52:52:72:3b:
                    b5:b0:b4:6c:82:5d:79:6e:7c:08:ca:9a:61:1f:e8:
                    59:2f:ce:30:16:f1:a0:64:92:d1:81:7f:e2:ec:53:
                    c9:92:fa:44:a5:8d:ea:63:26:73:22:7b:ad:14:9f:
                    8e:b2:0e:ce:1f:fc:dc:2b:e5:bc:36:90:58:15:a1:
                    6c:18:47:8c:26:f9:8c:03:c3:c3:f3:d2:b0:68:16:
                    6e:9f:3c:0b:95:a4:49:da:6f:60:f7:f4:16:70:5e:
                    df:a4:37:0c:c6:04:69:f7:00:18:11:d2:7c:01:26:
                    5f:28:08:1b:6c:42:cf:af:f2:9b:aa:4b:d4:06:7c:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:2E:00:A7:F7:83:14:CB:96:94:09:56:E7:1C:65:F2:67:D5:03
            X509v3 Authority Key Identifier:
                keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/FIguAKf3gxTLlpQJVuccZfJn1QM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:29:c2:c6:3f:29:87:4c:2f:d3:fa:01:27:08:bc:c7:1e:fb:
         c2:31:9a:5c:ad:ce:4b:7b:54:0f:e7:12:fb:dc:fd:f8:48:61:
         50:2e:7f:6f:3a:b1:63:8f:2b:85:3e:f6:7f:53:31:a9:29:3e:
         f8:2f:3d:0a:29:56:b1:d7:7e:da:ea:bc:63:68:34:59:dd:b5:
         49:42:e8:3f:8f:7e:9d:3b:1a:75:e9:dc:8b:b2:27:6e:98:28:
         7f:0b:6d:b3:dd:b6:4c:98:9b:6d:3c:65:b4:10:ff:bd:e2:c1:
         e3:97:8d:5d:4a:e8:b0:80:c3:4f:a2:b9:1d:6c:f5:bd:ae:b8:
         8b:81:4a:a0:4d:86:7f:57:fd:f7:0f:db:f0:bc:6a:86:ac:f1:
         7e:fe:39:49:e9:65:f9:83:12:9f:60:77:c5:0d:0a:3d:f6:30:
         5d:a3:ac:68:e9:df:f9:03:95:df:17:6c:41:2b:9a:35:d6:16:
         9f:4a:48:b7:03:75:0a:42:0f:70:46:d3:7e:50:54:ff:65:1f:
         05:ce:10:16:b3:fc:04:44:b3:bb:28:8f:b5:d4:64:e1:53:83:
         b7:ea:d8:6b:31:ca:43:5f:f0:a1:2f:2a:18:57:f0:ea:fe:98:
         48:61:68:dd:60:c1:3e:d1:4d:fe:4e:ef:ee:50:ac:b3:ca:6f:
         18:33:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org