Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/FL6gnow0jT7YBeIPJQRvY2MohcY.roa
File:                     FL6gnow0jT7YBeIPJQRvY2MohcY.roa (raw, json)
Hash identifier:          Eb6Q8LfAiT+Tssfz4eESNUCJOtrByzUivYk7R41rXBQ=
Subject key identifier:   14:BE:A0:9E:8C:34:8D:3E:D8:05:E2:0F:25:04:6F:63:63:28:85:C6
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       061121
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/FL6gnow0jT7YBeIPJQRvY2MohcY.roa
Signing time:             Tue 25 Jan 2022 11:49:49 +0000
ROA not before:           Tue 25 Jan 2022 11:49:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209324
IP address blocks:        185.107.199.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397601 (0x61121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Jan 25 11:49:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14bea09e8c348d3ed805e20f25046f63632885c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:b0:65:9c:02:9e:be:f3:11:86:ac:ce:b7:
                    75:9d:83:f5:b0:ae:83:77:59:4c:88:ec:01:b0:e1:
                    dd:07:35:17:0b:1a:04:7a:4c:7e:60:a7:b8:83:8c:
                    40:2d:b8:e2:f7:3b:49:79:31:48:58:c1:86:a4:41:
                    33:09:9d:c1:6d:57:01:f8:6b:a7:68:9c:14:73:6a:
                    45:20:4e:41:15:e2:8b:fb:94:32:77:d4:f9:c1:7e:
                    1c:4c:64:7d:98:a0:2f:ba:b8:ec:20:8f:18:df:58:
                    2a:44:6b:0f:fb:f2:ad:58:82:c7:ba:ef:f6:01:07:
                    0f:53:ff:30:b6:c0:7f:57:b6:13:25:f6:ef:9f:3e:
                    ff:a4:83:3b:ea:74:02:bc:f9:67:91:b8:a1:e7:ca:
                    78:ad:cb:a3:01:31:ed:76:6d:8f:2e:fa:ab:4a:5a:
                    c7:49:ac:d9:ce:ea:8f:bf:8b:62:e3:82:41:f9:b7:
                    1e:80:f6:97:63:dd:86:17:30:e8:72:a7:bc:83:f8:
                    3f:1f:4f:92:c7:1a:5d:be:25:cf:a5:8c:f8:80:71:
                    c5:7f:dc:0c:15:cb:3f:da:c5:96:45:d0:14:b9:85:
                    be:fa:0c:03:bf:aa:a7:8f:ca:ee:c3:72:9d:da:8b:
                    94:cb:45:25:a4:ec:0e:e7:f2:ab:b9:88:dc:78:79:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BE:A0:9E:8C:34:8D:3E:D8:05:E2:0F:25:04:6F:63:63:28:85:C6
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/FL6gnow0jT7YBeIPJQRvY2MohcY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.107.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d5:d5:1f:08:41:e5:9b:93:8f:73:2c:e5:50:4f:3d:c6:88:
         08:3f:e9:9d:ee:d5:5c:2b:55:75:bf:5c:c6:31:de:d3:87:d5:
         58:b2:5a:d8:17:43:d8:e9:aa:8b:ec:0a:40:9b:2e:ea:4a:e5:
         6e:be:bb:61:a1:3f:15:0b:2d:d1:42:e0:95:36:a6:60:60:c3:
         d1:08:87:27:73:3d:95:2e:43:d4:e3:56:26:8e:52:6e:0f:2d:
         e1:27:ee:9f:82:15:a0:8f:eb:43:54:2c:9a:6f:d5:52:44:5d:
         49:16:25:28:2b:2b:5d:3f:3a:39:91:e3:f7:b1:ee:d5:8c:1b:
         1e:3b:19:19:d5:3c:d1:0e:77:de:ec:48:9b:8f:cc:c0:2a:36:
         69:4e:2f:c1:37:fc:bb:7a:98:9d:f3:90:10:b9:18:39:6c:7d:
         c9:7a:28:29:b7:0a:70:9c:63:07:31:12:3f:25:1d:c0:9d:0b:
         3c:ec:55:b8:48:13:8a:aa:dd:a5:e0:3a:02:ff:f2:f0:12:e9:
         aa:3a:d6:36:81:72:e8:49:7c:26:80:37:9d:ce:91:98:1c:0e:
         45:2c:05:b5:5b:21:20:fe:64:b8:8f:ad:63:a1:1d:d8:bc:e7:
         02:0c:f1:6b:30:48:c0:51:f1:ad:52:96:90:1b:9f:12:1f:f8:
         f8:d6:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:42 2024 by rpki-client on console-fra.rpki-client.org