Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/FK8sLppAGB8MvVuiyP2si7IH82Y.roa
File:                     FK8sLppAGB8MvVuiyP2si7IH82Y.roa (raw, json)
Hash identifier:          TY5DAuNZ/LkekD2PqRE8AjqEwXqLPJ4MPWH+4S6r7zM=
Subject key identifier:   14:AF:2C:2E:9A:40:18:1F:0C:BD:5B:A2:C8:FD:AC:8B:B2:07:F3:66
Certificate issuer:       /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial:       8F46E5
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/FK8sLppAGB8MvVuiyP2si7IH82Y.roa
Signing time:             Fri 08 Apr 2022 09:21:48 +0000
ROA not before:           Fri 08 Apr 2022 09:21:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        185.187.46.0/23 maxlen: 23
                          92.42.20.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9389797 (0x8f46e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
        Validity
            Not Before: Apr  8 09:21:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14af2c2e9a40181f0cbd5ba2c8fdac8bb207f366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:46:14:39:22:72:0d:fc:64:09:e7:da:75:
                    96:68:08:46:69:b8:e8:47:23:43:7e:94:58:4e:91:
                    c3:1e:a2:0f:d6:cb:f6:57:1b:93:90:3d:a2:7d:a4:
                    7d:c6:cb:4d:50:09:79:57:b1:0a:af:9b:f5:dd:74:
                    f3:b5:a9:48:1d:57:16:f7:08:5d:e8:38:a2:8c:4f:
                    64:b5:b5:39:c0:36:b4:34:9c:67:b1:f0:51:3a:0c:
                    8e:3b:83:47:06:a6:46:2d:77:80:0f:69:ad:80:03:
                    9c:07:41:ea:fb:66:44:96:ab:ed:ac:b0:f3:39:9c:
                    72:4b:d8:04:34:a4:3d:3c:28:d8:bd:a7:84:c7:0c:
                    33:c3:4a:89:97:45:58:f3:41:34:0e:ef:89:94:26:
                    77:6e:05:5f:14:60:66:1d:73:94:6f:8f:d1:93:9b:
                    77:2e:d0:1e:8c:f2:f5:58:27:1b:e5:0b:35:a1:96:
                    d5:fd:b8:9a:fd:d8:bc:a9:d1:13:87:d7:7e:38:b6:
                    e7:49:ef:7a:3d:bd:17:8b:ab:79:61:f7:2e:79:20:
                    92:1c:c8:a0:f9:ee:c3:47:2e:3e:23:1b:87:ee:9e:
                    0f:3a:e0:39:eb:fa:bc:2c:78:ae:30:a6:ae:54:b4:
                    12:d7:a6:56:46:b7:0d:9b:11:90:34:06:a0:52:7a:
                    ee:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AF:2C:2E:9A:40:18:1F:0C:BD:5B:A2:C8:FD:AC:8B:B2:07:F3:66
            X509v3 Authority Key Identifier:
                keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/FK8sLppAGB8MvVuiyP2si7IH82Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.42.20.0/22
                  185.187.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:e8:75:25:37:17:4e:11:82:0a:5c:ab:3c:e0:27:72:0f:bf:
         37:87:93:7d:47:1f:83:9f:41:fe:43:a6:c2:90:b1:12:1e:3f:
         73:e8:30:e0:41:dd:86:cf:80:a7:1f:8e:ed:3f:e0:f9:e0:e2:
         a5:fd:c0:80:72:ab:d8:e4:81:ed:29:2e:e1:50:ca:e7:25:24:
         82:31:81:48:8f:c4:44:e1:35:9f:55:fd:8d:78:b2:56:99:2b:
         c9:06:2c:63:04:1c:19:13:15:07:0b:9f:f6:ab:2c:69:9a:b8:
         6b:66:8f:22:93:75:bc:78:96:4c:87:62:e0:e2:4d:67:0b:86:
         ec:e0:52:de:e0:82:79:92:05:59:f0:91:e8:2f:5e:54:47:99:
         18:ac:9d:fd:0d:ba:47:63:b3:c7:45:87:c9:67:7e:86:b3:9a:
         c0:1a:da:47:eb:c8:73:42:7c:b5:90:0a:3f:2b:7a:bb:f4:62:
         18:45:e8:6f:55:ea:de:ce:16:1c:69:c7:19:a0:09:76:06:3f:
         71:23:25:3a:64:74:57:83:c2:5a:4f:c7:7c:2c:4a:1b:27:7a:
         c3:f7:11:1f:91:e5:09:56:2f:9d:83:01:2c:ef:a9:d1:5a:bf:
         7b:c5:aa:3f:51:80:8f:af:ce:85:96:bc:a6:66:2d:aa:21:fb:
         78:fc:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:03 2024 by rpki-client on console-ams.rpki-client.org