Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/fi0GRO-4tIMbO4aWWRS4c4vnMsc.roa
File:                     fi0GRO-4tIMbO4aWWRS4c4vnMsc.roa (raw, json)
Hash identifier:          1QGFCOY2hmosMjwETCIJeEx8j1Xr4swE7+kUkTmGlXk=
Subject key identifier:   7E:2D:06:44:EF:B8:B4:83:1B:3B:86:96:59:14:B8:73:8B:E7:32:C7
Certificate issuer:       /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial:       07DA54D3
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/fi0GRO-4tIMbO4aWWRS4c4vnMsc.roa
Signing time:             Wed 20 Apr 2022 14:24:04 +0000
ROA not before:           Wed 20 Apr 2022 14:24:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208011
IP address blocks:        194.156.190.0/23 maxlen: 24
                          194.156.198.0/24 maxlen: 24
                          194.156.198.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131749075 (0x7da54d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
        Validity
            Not Before: Apr 20 14:24:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e2d0644efb8b4831b3b86965914b8738be732c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:ca:36:c5:ea:aa:ad:ab:95:d0:f5:b9:23:
                    17:38:91:73:b8:b3:de:e5:10:36:7d:36:fc:a3:4e:
                    6f:4c:1c:16:21:93:42:c1:f9:72:0d:1e:d6:aa:9d:
                    19:a7:59:83:80:1c:75:fa:e8:7c:2d:56:50:44:2a:
                    e9:b7:7e:15:27:1f:d1:a9:d9:24:5d:1f:42:31:27:
                    04:56:2f:c0:8e:69:c9:ba:91:86:c0:7f:61:97:7d:
                    14:87:c9:ac:6c:c3:a1:87:4c:6c:48:49:da:d5:8b:
                    1d:1b:19:9c:d1:9e:6d:49:27:a0:08:fa:82:7b:30:
                    b4:0b:fb:b9:98:50:30:0c:b2:83:0e:0e:1d:d2:e6:
                    f8:2f:98:40:27:4b:d7:53:30:6a:6b:ec:a5:12:1a:
                    f7:55:72:ab:a5:33:98:14:ec:af:c7:7f:04:cb:64:
                    f3:98:e2:80:76:3a:2f:50:aa:87:c8:99:3f:21:84:
                    cc:20:8e:a5:65:b7:3a:df:ca:5c:5c:5a:da:2d:dd:
                    a4:d2:5f:4f:d6:50:0a:d1:e2:27:14:1d:00:b8:4d:
                    a2:37:69:ba:08:f8:cb:17:5c:4f:0e:b8:74:67:22:
                    38:61:94:39:4b:33:17:98:7e:5d:e1:9f:45:ac:3e:
                    36:1e:94:3f:80:62:f0:ff:6a:be:07:ce:aa:ca:c5:
                    be:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2D:06:44:EF:B8:B4:83:1B:3B:86:96:59:14:B8:73:8B:E7:32:C7
            X509v3 Authority Key Identifier:
                keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/fi0GRO-4tIMbO4aWWRS4c4vnMsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.190.0/23
                  194.156.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:f9:5f:22:d0:c6:70:ee:c0:8a:17:f2:71:fa:7f:c6:0b:
         7c:18:51:81:d9:cf:a3:eb:ed:4e:1b:4f:89:6a:5a:84:bc:9f:
         91:e8:58:c0:3c:73:29:d2:3d:6e:b5:cc:67:f2:99:24:4d:a3:
         c9:58:3c:68:27:11:34:e6:b8:20:ea:a3:7a:6a:a2:31:24:89:
         f6:ca:2d:c1:9c:9a:99:a3:82:62:13:8f:15:c7:50:7a:b6:2c:
         50:d6:46:db:d0:4a:66:f0:c1:70:20:e8:5b:c2:98:78:3a:6a:
         8d:8e:84:d0:63:af:5c:25:68:92:25:a9:0a:ff:4a:3e:0f:e2:
         f0:95:7c:b5:61:c6:b5:07:7c:db:0a:7b:25:0c:c0:21:30:3b:
         9e:f4:2d:50:ab:56:fe:e5:48:34:4f:2a:ca:ee:47:34:0f:c8:
         bd:c5:17:e6:d1:2b:d1:7d:49:96:77:7a:b4:90:6d:22:35:25:
         20:8b:75:e7:02:c4:8d:e7:99:9f:c2:46:13:6a:d0:b4:7b:76:
         6c:57:c6:03:a9:3b:54:4f:63:7b:ba:80:d3:fc:a2:d4:08:7a:
         5f:6e:bc:31:9f:6f:3f:e6:23:00:11:27:77:b8:30:99:66:1f:
         1e:f8:d5:3d:c9:9b:b9:50:b8:92:7c:84:35:3e:a6:81:4d:b9:
         e3:6d:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org