Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/FBg_cPcviXgWwi5UDGfwd7GSQb8.roa
File:                     FBg_cPcviXgWwi5UDGfwd7GSQb8.roa (raw, json)
Hash identifier:          svV1sUiIdWY4yGMsU1nasuNWrBeLpNACAaI4QsoZaxQ=
Subject key identifier:   14:18:3F:70:F7:2F:89:78:16:C2:2E:54:0C:67:F0:77:B1:92:41:BF
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       BC3439
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/FBg_cPcviXgWwi5UDGfwd7GSQb8.roa
Signing time:             Sat 01 Jan 2022 10:59:56 +0000
ROA not before:           Sat 01 Jan 2022 10:59:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49078
IP address blocks:        195.88.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12334137 (0xbc3439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Jan  1 10:59:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14183f70f72f897816c22e540c67f077b19241bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d3:83:a5:24:28:82:fd:c6:13:d7:1b:dc:02:
                    12:f1:78:dd:0c:7d:f6:1f:7b:24:a0:7f:a6:9f:fb:
                    29:e3:1a:d9:af:a1:75:19:97:40:4f:38:84:a2:6d:
                    0f:c9:78:11:3d:3b:d6:2e:3f:ec:f1:57:51:71:6c:
                    a1:c3:10:08:75:89:b6:7b:e0:b2:6e:4c:ef:a3:77:
                    c5:79:e4:05:ee:c3:87:7c:9c:ad:4b:f7:87:f1:e3:
                    de:4b:12:e1:a1:50:37:2f:54:c1:59:06:ce:ba:5b:
                    05:84:26:53:8e:19:4d:fb:e2:16:10:79:66:b0:46:
                    65:25:22:6f:42:6b:86:c8:bc:b7:ca:c7:4e:2f:dc:
                    0e:b6:37:75:df:37:f4:97:22:38:bb:41:e1:58:9a:
                    73:e9:cc:ef:19:af:b7:62:19:a1:6b:82:a5:d6:ad:
                    6e:ec:d6:4f:e0:6d:49:10:7d:d2:89:11:5e:e2:44:
                    5e:39:85:5f:de:8a:55:e5:29:c8:d7:86:fb:70:d2:
                    f4:50:47:60:fc:25:32:65:db:d2:68:20:fd:40:15:
                    1a:c4:cb:2e:ae:f9:d9:56:b2:ac:c8:d4:2a:71:86:
                    0d:93:5b:6b:4a:fe:9a:0e:0d:e6:9e:b3:74:fb:89:
                    8c:95:59:79:06:1a:aa:d8:74:e1:27:03:d4:18:59:
                    b4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:18:3F:70:F7:2F:89:78:16:C2:2E:54:0C:67:F0:77:B1:92:41:BF
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/FBg_cPcviXgWwi5UDGfwd7GSQb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:e9:a5:f9:23:42:03:89:28:26:97:68:1d:d1:2b:90:43:
         2a:d8:d3:d5:6a:59:bc:21:0e:7e:4b:52:d4:30:81:2f:be:b3:
         cf:c1:68:eb:81:76:28:f9:df:fa:ac:cb:c3:8d:88:88:6a:26:
         7c:7d:c7:e4:db:20:7d:7c:aa:2f:9a:82:e3:ec:4e:5d:82:29:
         5f:d3:54:65:c8:d7:30:f5:96:2b:97:74:a2:12:76:02:c8:6d:
         a9:ed:ba:d6:81:9f:3f:4d:47:fb:38:a6:6a:f8:cb:a4:f3:2d:
         70:a2:42:cc:66:55:c6:04:dd:9c:23:c0:15:9e:03:27:b4:de:
         42:a2:85:fd:30:58:3f:e7:64:3d:d8:15:13:2d:d9:6a:a3:30:
         3b:21:c6:9e:fc:60:a0:0c:31:8a:19:1a:9e:ab:89:d8:be:27:
         b9:5f:8a:f2:63:55:a7:ac:a0:49:bb:fd:44:f2:25:b9:d9:0b:
         73:5a:79:98:92:e4:1f:cc:0e:4c:61:2c:ac:1f:97:f1:76:ac:
         b0:9f:9e:4a:e6:8c:dd:1c:d8:39:36:76:b7:da:b9:c4:7f:5a:
         14:f3:8a:1f:12:97:91:f1:6f:27:3d:81:a4:b3:bd:6e:b8:fe:
         07:5b:6a:2a:e9:42:d4:d2:c3:22:b1:8a:8d:7a:b6:9c:0c:2f:
         d1:c6:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:24 2024 by rpki-client on console-fra.rpki-client.org