Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/fUjc9O0bQm5D-xluHWm5hI8oAgY.roa
File:                     fUjc9O0bQm5D-xluHWm5hI8oAgY.roa (raw, json)
Hash identifier:          w892kO6XLpW982T6XonmZLnNAgdza4SFRyazRg3LhkM=
Subject key identifier:   7D:48:DC:F4:ED:1B:42:6E:43:FB:19:6E:1D:69:B9:84:8F:28:02:06
Certificate issuer:       /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial:       01832D2D8D3CFC714899B6F7FCFB9B8D17CE
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/fUjc9O0bQm5D-xluHWm5hI8oAgY.roa
Signing time:             Sun 11 Sep 2022 15:31:43 +0000
ROA not before:           Sun 11 Sep 2022 15:31:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205007
IP address blocks:        185.48.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:2d:2d:8d:3c:fc:71:48:99:b6:f7:fc:fb:9b:8d:17:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
        Validity
            Not Before: Sep 11 15:31:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d48dcf4ed1b426e43fb196e1d69b9848f280206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:e7:f9:3e:fe:76:6b:35:39:38:73:d4:67:
                    8f:95:a5:15:24:cb:96:29:15:7f:a4:f8:4c:89:8b:
                    9d:f8:c6:e0:20:20:68:b8:42:26:1e:8f:8a:2b:2c:
                    5f:78:7e:82:fb:a6:1f:af:9f:2f:f4:43:c2:6b:30:
                    46:5d:b8:0d:bf:6d:45:8b:c5:86:35:30:aa:08:e2:
                    e7:5f:d0:d3:7c:13:62:cf:c3:1e:20:49:5c:7c:1c:
                    61:35:ea:93:da:a7:db:37:e4:6a:13:c3:80:65:63:
                    46:23:85:46:9c:dc:5c:dd:0c:22:4c:5b:01:ca:3e:
                    8c:37:24:6d:c9:8d:63:27:64:a5:4f:09:47:f4:05:
                    66:f2:36:92:e6:a1:b9:81:90:e4:3c:69:dd:96:42:
                    31:cd:98:90:d4:ab:b4:ce:de:00:74:3e:2a:04:08:
                    e4:c1:47:5f:13:6c:b5:2d:12:81:21:d7:b6:a2:08:
                    48:99:03:b0:d9:b7:53:b2:d1:e6:b2:0e:15:96:a3:
                    9a:07:f1:a3:23:2d:e4:54:33:54:8b:41:93:f3:93:
                    75:4b:dc:d5:28:75:94:53:89:86:13:73:38:98:d0:
                    03:ca:e6:4c:ce:88:a8:ce:6f:a1:06:66:21:a1:61:
                    3c:e9:1e:50:9c:52:97:d9:c8:4d:d1:67:40:74:cd:
                    2f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:48:DC:F4:ED:1B:42:6E:43:FB:19:6E:1D:69:B9:84:8F:28:02:06
            X509v3 Authority Key Identifier:
                keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/fUjc9O0bQm5D-xluHWm5hI8oAgY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.48.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:75:76:a6:bd:00:4c:f3:1e:96:3a:14:87:9b:8a:9d:54:64:
         10:2d:6b:1b:4c:96:2a:f8:b5:12:00:68:47:80:9b:d5:a1:00:
         9f:e7:1c:46:d1:df:18:2d:f9:20:46:44:7b:32:b9:3a:2d:53:
         32:b9:00:99:ca:70:c2:16:57:f5:b3:47:95:15:df:a6:b0:3e:
         dd:90:58:9f:3f:ef:11:05:5d:f7:f9:ed:81:1d:ba:5c:e9:c1:
         e9:35:77:70:66:bf:d8:ef:49:38:3d:f0:2e:a8:dc:ba:12:17:
         16:28:c2:f1:73:b0:18:e2:e9:32:b4:c4:67:1a:ae:7f:f3:9b:
         7f:8d:d8:14:8c:67:1b:1b:20:35:eb:65:97:93:96:8a:89:2e:
         bf:e1:87:16:3c:de:98:13:95:d0:f4:85:5c:aa:dd:4c:6d:8b:
         05:ba:f1:bb:8d:94:71:0d:5e:2b:48:16:64:20:cf:eb:9c:83:
         c0:77:77:bd:24:1c:f1:d2:86:d8:16:a8:f0:f7:d0:9a:74:ae:
         db:d7:10:cb:b2:8c:49:2d:a5:f3:c7:82:25:4a:da:2f:c7:9b:
         bd:35:49:9c:bf:f9:19:78:c6:e0:96:6e:d0:c5:23:ab:a6:d3:
         35:44:9d:1b:23:44:e4:3e:85:77:f6:b4:d1:07:a6:c9:33:a7:
         44:e3:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-fra.rpki-client.org