Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/FBLLGJbsq5OYAqTimAJ-XM7BPSA.roa
File:                     FBLLGJbsq5OYAqTimAJ-XM7BPSA.roa (raw, json)
Hash identifier:          edCXzvkau/wXRdznLVsOq20xqEyDcMZrLvDProRhzAI=
Subject key identifier:   14:12:CB:18:96:EC:AB:93:98:02:A4:E2:98:02:7E:5C:CE:C1:3D:20
Certificate issuer:       /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial:       0975905C
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/FBLLGJbsq5OYAqTimAJ-XM7BPSA.roa
Signing time:             Sat 01 Jan 2022 06:56:07 +0000
ROA not before:           Sat 01 Jan 2022 06:56:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2119
IP address blocks:        193.160.2.0/23 maxlen: 23
                          193.160.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158699612 (0x975905c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
        Validity
            Not Before: Jan  1 06:56:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1412cb1896ecab939802a4e298027e5ccec13d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:ef:a5:60:8a:46:8d:c8:38:21:16:b6:87:
                    20:e3:98:ad:bc:5c:d1:6e:d2:69:fd:b8:ed:ac:c6:
                    b4:84:87:37:fa:a5:1d:38:20:7c:f9:06:42:99:83:
                    d2:69:64:77:85:d5:2e:40:ee:39:50:ea:09:81:c9:
                    8e:fe:8f:23:dd:d6:05:c0:d2:a5:89:1d:53:f4:91:
                    27:9c:51:3e:7d:43:59:7d:2a:e9:06:55:52:55:0a:
                    ca:60:c4:53:4c:02:86:7d:96:19:a1:80:c1:00:af:
                    12:34:9a:85:ac:c7:9a:76:75:56:5e:4e:00:bb:d8:
                    84:e7:40:9b:b9:3b:b2:34:df:93:df:15:59:e1:09:
                    a3:b3:51:3d:c4:87:40:0c:04:a5:8a:cb:99:f0:e2:
                    e1:17:19:c5:88:78:48:fb:51:bd:ef:48:66:89:86:
                    dd:6b:08:a2:3f:d5:63:bb:7a:9e:8e:4f:f1:78:71:
                    26:fc:d7:81:82:00:ae:cd:64:01:c8:ab:09:8a:3a:
                    f1:03:64:36:7d:84:47:7f:d4:ce:2a:60:a5:ca:87:
                    e0:aa:0a:69:23:f4:b0:39:ca:3d:59:b4:21:d1:a5:
                    ee:67:9e:0c:92:4f:74:74:8d:93:a5:47:de:41:5a:
                    ee:df:67:18:53:7d:14:d4:1a:22:40:dd:a7:23:9e:
                    77:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:12:CB:18:96:EC:AB:93:98:02:A4:E2:98:02:7E:5C:CE:C1:3D:20
            X509v3 Authority Key Identifier:
                keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/FBLLGJbsq5OYAqTimAJ-XM7BPSA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.1.0-193.160.3.255

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:0e:a9:ae:42:3b:17:ad:4a:94:6f:bf:c4:8f:82:fc:7e:
         9e:25:5a:6a:ea:0d:b3:dc:18:a7:6f:93:87:fb:f7:d7:ae:61:
         c2:46:22:9f:f1:cc:e2:d4:ed:86:88:9e:ef:09:af:95:22:22:
         4d:34:5f:ec:45:f9:ae:52:9e:93:06:b5:32:80:9b:42:f9:ad:
         72:a2:ff:3c:8a:c4:66:af:23:bf:c7:3a:4f:ff:d9:11:d0:e3:
         03:94:e5:1e:a1:47:c4:fd:2b:02:f5:cb:83:18:7d:a1:02:63:
         13:bc:71:95:f5:66:7c:5a:77:32:e3:80:3f:98:67:e1:ce:f6:
         b4:a8:c4:8a:2f:99:13:cd:42:6d:09:cf:62:46:75:28:9e:25:
         79:54:16:40:12:d5:b2:e4:fa:19:4c:ea:48:98:6a:91:05:7d:
         bc:09:00:34:79:86:5b:b6:e1:c1:b8:d4:73:c9:cd:b3:34:1c:
         78:f2:23:ad:4a:61:aa:dc:6c:7a:16:95:fe:e6:a7:b9:55:91:
         7b:de:3c:91:10:44:9c:ed:36:71:8e:43:bd:8c:7c:f4:29:32:
         4d:13:cc:27:16:77:51:24:51:37:10:83:6e:3c:37:71:79:cc:
         17:98:f4:f8:67:7d:fd:df:d7:5c:32:97:b1:36:90:23:0f:01:
         d1:1b:d5:58
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIECXWQXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZTY3YmE4MjA3YjgxYzFiNDcyNjNiMWZkZThmNzliOTk1OTcwMzdkMB4XDTIyMDEw
MTA2NTYwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQxMmNiMTg5NmVj
YWI5Mzk4MDJhNGUyOTgwMjdlNWNjZWMxM2QyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALYM76VgikaNyDghFraHIOOYrbxc0W7Saf247azGtISHN/ql
HTggfPkGQpmD0mlkd4XVLkDuOVDqCYHJjv6PI93WBcDSpYkdU/SRJ5xRPn1DWX0q
6QZVUlUKymDEU0wChn2WGaGAwQCvEjSahazHmnZ1Vl5OALvYhOdAm7k7sjTfk98V
WeEJo7NRPcSHQAwEpYrLmfDi4RcZxYh4SPtRve9IZomG3WsIoj/VY7t6no5P8Xhx
JvzXgYIArs1kAcirCYo68QNkNn2ER3/UzipgpcqH4KoKaSP0sDnKPVm0IdGl7mee
DJJPdHSNk6VH3kFa7t9nGFN9FNQaIkDdpyOed+UCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQUEssYluyrk5gCpOKYAn5czsE9IDAfBgNVHSMEGDAWgBQ+Z7qCB7gcG0cm
Ox/ej3m5lZcDfTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BtZTZnZ2U0SEJ0SEpqc2Yzbzk1dVpXWEEzMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvYTAyMTM2LWRiOWItNGJlZi1hZTEyLTRjMjVmY2JkZWRkMS8x
L0ZCTExHSmJzcTVPWUFxVGltQUotWE03QlBTQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
YTAyMTM2LWRiOWItNGJlZi1hZTEyLTRjMjVmY2JkZWRkMS8xL1BtZTZnZ2U0SEJ0
SEpqc2Yzbzk1dVpXWEEzMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAwaABAwQCwaAAMA0GCSqGSIb3
DQEBCwUAA4IBAQCCfw6prkI7F61KlG+/xI+C/H6eJVpq6g2z3Binb5OH+/fXrmHC
RiKf8czi1O2GiJ7vCa+VIiJNNF/sRfmuUp6TBrUygJtC+a1yov88isRmryO/xzpP
/9kR0OMDlOUeoUfE/SsC9cuDGH2hAmMTvHGV9WZ8Wncy44A/mGfhzva0qMSKL5kT
zUJtCc9iRnUoniV5VBZAEtWy5PoZTOpImGqRBX28CQA0eYZbtuHBuNRzyc2zNBx4
8iOtSmGq3Gx6FpX+5qe5VZF73jyREESc7TZxjkO9jHz0KTJNE8wnFndRJFE3EINu
PDdxecwXmPT4Z33939dcMpexNpAjDwHRG9VY
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:19 2024 by rpki-client on console-ams.rpki-client.org