Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FPo3M-8_Yj74_t5af7pUI-P_bvE.roa
File:                     FPo3M-8_Yj74_t5af7pUI-P_bvE.roa (raw, json)
Hash identifier:          ttVDp8sDUGpjepo22OwFRvZNxSj8z+P3aSiX8nxlQlA=
Subject key identifier:   14:FA:37:33:EF:3F:62:3E:F8:FE:DE:5A:7F:BA:54:23:E3:FF:6E:F1
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       05C71DD1
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FPo3M-8_Yj74_t5af7pUI-P_bvE.roa
Signing time:             Wed 01 Jun 2022 17:29:20 +0000
ROA not before:           Wed 01 Jun 2022 17:29:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209759
IP address blocks:        193.233.244.0/22 maxlen: 22
                          193.233.198.0/23 maxlen: 23
                          193.233.201.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96935377 (0x5c71dd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Jun  1 17:29:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14fa3733ef3f623ef8fede5a7fba5423e3ff6ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:73:c5:2f:91:dd:fd:69:f9:ca:11:4a:ac:
                    6e:2d:ac:12:b0:e3:71:a1:58:dd:ad:f9:55:18:f5:
                    f7:38:8e:d3:bd:5d:96:1a:84:0e:13:fc:ec:63:32:
                    d4:82:3c:80:c2:82:12:bd:0c:0e:22:6e:84:bd:bd:
                    37:c1:c1:6a:5b:b2:dd:c5:e6:72:65:4c:01:5a:6e:
                    d8:e7:db:05:0b:75:b3:0a:71:c6:65:59:f2:ac:b8:
                    e2:40:af:37:dd:7c:b9:f0:62:c9:db:c5:22:55:1c:
                    3c:f6:c5:e7:80:4e:2f:36:46:e1:6f:2a:95:e3:ec:
                    da:7a:4d:c0:46:e2:b4:62:52:21:c9:6d:ea:12:8e:
                    f9:0d:5d:1f:ed:3b:25:f7:b9:28:28:62:f5:5b:e2:
                    02:44:89:1e:63:01:23:5e:ab:1d:f2:41:e1:75:9c:
                    fd:d6:3e:ee:1e:7a:47:73:19:cf:3e:e4:17:14:5f:
                    42:5b:d3:cd:0c:bb:93:42:ae:bd:37:53:17:3d:b4:
                    44:52:c0:71:a4:9f:49:66:c5:e9:ce:86:5e:41:a7:
                    1b:ab:d8:b0:72:d7:9a:bf:41:fd:72:a9:f2:3c:e2:
                    bb:63:84:a2:87:24:9e:22:ef:1e:75:29:89:78:8b:
                    f1:80:25:01:56:39:21:11:a8:96:df:07:cd:76:94:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FA:37:33:EF:3F:62:3E:F8:FE:DE:5A:7F:BA:54:23:E3:FF:6E:F1
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FPo3M-8_Yj74_t5af7pUI-P_bvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.198.0/23
                  193.233.201.0/24
                  193.233.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:8b:06:b6:6f:61:fa:2c:fd:a3:74:47:d0:42:92:e3:35:3a:
         41:9f:d8:31:8c:ac:f5:89:cc:69:37:3b:7d:31:6c:31:cc:c3:
         4c:5d:59:9b:16:a9:a9:56:67:44:44:8d:89:3d:1b:56:84:80:
         72:90:ed:cd:3d:80:85:82:0e:0d:17:27:3d:dd:de:08:6e:69:
         46:c1:45:8c:1d:46:ed:1f:5d:aa:85:af:22:e5:64:22:62:f2:
         df:c5:23:d5:99:65:8b:fd:e9:92:b2:d4:52:43:20:a4:64:76:
         36:7c:e0:ca:d5:cd:5b:69:ac:08:ea:98:72:68:6e:1a:d5:79:
         ed:7b:7c:44:68:a1:c3:40:57:9c:93:7c:70:25:08:43:e9:24:
         e9:77:de:52:9c:23:cc:0e:1d:ce:25:c4:5f:a3:0f:04:22:09:
         d1:fd:bc:4b:75:b7:cf:4e:57:86:bd:a1:1f:da:6f:96:d2:f6:
         54:9c:ba:5b:91:e3:03:d8:41:ba:d9:42:a3:f3:fb:c6:64:83:
         d6:d8:5b:56:bc:06:f3:ac:80:03:19:a7:f8:bf:d3:d0:f5:a6:
         83:39:a1:7d:2f:2a:2e:e8:6f:23:b1:6c:e3:53:f0:55:84:a1:
         6a:6b:2b:fa:a0:eb:c9:7f:2e:1f:fb:db:de:42:9c:3c:54:02:
         50:b2:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org