Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/FPG0JrMIAM_V2iuXH3xshA2XQqI.roa
File:                     FPG0JrMIAM_V2iuXH3xshA2XQqI.roa (raw, json)
Hash identifier:          41yr4//yBLnzX/2dnwZ72F9p72z31nXzxyoeNw1hc3o=
Subject key identifier:   14:F1:B4:26:B3:08:00:CF:D5:DA:2B:97:1F:7C:6C:84:0D:97:42:A2
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       02B69374
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/FPG0JrMIAM_V2iuXH3xshA2XQqI.roa
Signing time:             Sat 01 Jan 2022 10:02:50 +0000
ROA not before:           Sat 01 Jan 2022 10:02:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211448
IP address blocks:        94.176.161.0/24 maxlen: 24
                          94.176.160.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45519732 (0x2b69374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: Jan  1 10:02:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14f1b426b30800cfd5da2b971f7c6c840d9742a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:4f:20:63:a4:0e:fa:a1:54:6a:ab:7c:2c:
                    06:ac:14:3b:bd:e8:80:49:92:5a:da:8d:96:16:18:
                    95:89:92:34:0c:cb:8d:d0:dc:46:f7:eb:e3:69:21:
                    eb:c5:13:38:b9:fd:67:72:9c:08:c6:72:7f:10:93:
                    ab:e7:ef:17:82:1f:79:b7:e6:10:5a:65:cc:e4:c2:
                    aa:73:c6:d7:28:c4:fb:40:94:79:ae:bf:09:e6:00:
                    c8:fb:11:d2:40:cd:dc:1f:31:87:6f:1b:58:2a:a3:
                    76:b8:7d:e9:8b:fc:e6:fe:c3:8e:6b:43:2b:49:b6:
                    f3:f2:89:53:e3:46:30:b1:63:53:1e:16:d8:da:4f:
                    dd:f1:32:7d:d9:63:3c:81:e4:36:ac:ff:24:f8:f7:
                    de:34:b2:35:cc:e9:55:35:df:9c:cc:46:1a:ef:43:
                    82:9b:0e:3f:a1:55:b1:87:e1:33:4e:70:b9:a5:61:
                    c9:3a:13:3b:84:d9:a1:e5:be:8c:5b:fd:da:71:81:
                    e4:be:15:c6:b6:a6:8f:66:3e:65:54:f0:e8:b6:db:
                    fb:c9:6b:9f:fa:7c:1c:e4:b8:80:83:9b:26:5b:20:
                    7f:5e:ef:2d:41:c7:c6:9f:ed:29:b7:bc:48:76:84:
                    2d:85:c3:81:d3:26:45:b4:2d:8d:1e:85:15:d3:c1:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F1:B4:26:B3:08:00:CF:D5:DA:2B:97:1F:7C:6C:84:0D:97:42:A2
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/FPG0JrMIAM_V2iuXH3xshA2XQqI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.176.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:7e:8c:3f:a6:9e:8d:73:e8:7b:62:5c:e3:cf:54:9a:03:15:
         d4:73:cf:f1:33:e0:46:3c:71:65:8f:2c:d8:60:a5:07:42:d4:
         52:5c:10:b9:86:35:90:27:54:8d:de:e3:4c:22:b7:70:29:60:
         47:4a:e9:e1:bf:da:b7:40:60:25:16:34:9f:10:65:4a:9e:bc:
         86:b0:8f:68:50:5d:1e:d1:41:41:b0:53:6e:74:0e:18:53:df:
         ad:06:7c:c8:bb:0d:a7:ed:1b:32:11:1d:ab:d4:51:e6:fe:b5:
         2c:f9:71:c8:a5:4b:04:af:2f:f1:a1:cc:ba:f6:5c:08:43:8f:
         3c:b4:6b:1f:12:8a:2d:4a:d5:b4:ad:f5:68:83:4e:f5:fd:16:
         47:66:67:7b:3f:bb:46:47:53:89:9c:dc:dd:d5:70:f4:45:95:
         bd:aa:21:9b:d1:40:e1:e2:20:9a:be:0f:ba:10:1f:94:2c:64:
         18:b7:1f:d4:2b:77:2e:13:32:96:90:60:1a:64:4a:08:2d:75:
         e6:20:e5:6e:90:06:b7:0f:ac:4d:a9:79:b5:0d:3d:5f:0f:29:
         42:ee:fb:5a:f7:5a:b4:03:75:f9:48:e7:00:19:81:36:90:02:
         c1:20:8a:03:99:a3:29:cc:b1:1e:86:91:f1:42:5e:29:f5:62:
         ea:ea:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-fra.rpki-client.org