Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F6IDr1m-UqfZzOutgtJ5ch10M-0.roa
File:                     F6IDr1m-UqfZzOutgtJ5ch10M-0.roa (raw, json)
Hash identifier:          h6+ZQLcCsHw8DOJubNB0EM4QK+NYROsEpYjLcIrT67I=
Subject key identifier:   17:A2:03:AF:59:BE:52:A7:D9:CC:EB:AD:82:D2:79:72:1D:74:33:ED
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       01827E9924F8859A537403F4D5B358060824
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F6IDr1m-UqfZzOutgtJ5ch10M-0.roa
Signing time:             Mon 08 Aug 2022 17:55:41 +0000
ROA not before:           Mon 08 Aug 2022 17:55:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        91.226.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7e:99:24:f8:85:9a:53:74:03:f4:d5:b3:58:06:08:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Aug  8 17:55:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17a203af59be52a7d9ccebad82d279721d7433ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:89:92:4f:14:a4:61:ea:ee:0e:e4:5c:00:
                    d4:09:a6:2d:9d:bf:c0:22:ca:82:a8:7b:06:21:bf:
                    16:50:38:e6:d4:af:56:d1:3b:6a:15:e8:70:e5:70:
                    4d:65:0b:41:e2:ce:30:cf:33:3e:6b:c0:e5:f4:6f:
                    61:d0:96:47:64:77:e4:1c:72:60:d2:53:49:37:c4:
                    8c:3e:7b:9b:99:3a:86:a2:11:51:7b:72:94:7c:02:
                    d8:1a:b1:dd:8e:63:8b:ce:47:86:8b:d1:2f:b9:ef:
                    90:ba:c7:3c:df:b1:6c:f4:c6:9f:0b:72:97:39:93:
                    e1:e7:cd:b0:f1:01:80:4d:a5:2a:8d:d7:dd:46:67:
                    9e:b2:14:6b:a1:94:6c:d7:3e:2f:c7:63:f3:eb:ee:
                    00:3b:b8:3c:5f:1f:37:36:0f:2c:fd:f1:94:7a:43:
                    9e:90:39:3e:eb:4b:5d:2a:40:d7:fd:5d:7d:14:7a:
                    38:43:ed:1b:95:d8:48:a7:95:4a:7e:1b:52:6f:59:
                    c5:22:8b:da:c7:c4:ee:38:5f:ed:df:bf:5a:a8:27:
                    bb:73:b1:f6:0e:0c:77:e0:e9:2d:40:4e:81:f7:fc:
                    fa:96:be:05:f7:cc:68:54:20:5a:2c:c5:0a:4f:0b:
                    85:c3:16:a8:c4:e6:05:1b:f6:a4:fc:4f:11:4f:08:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A2:03:AF:59:BE:52:A7:D9:CC:EB:AD:82:D2:79:72:1D:74:33:ED
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F6IDr1m-UqfZzOutgtJ5ch10M-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:7e:fd:7c:83:bc:4c:52:64:57:ce:16:74:43:95:2f:4d:6b:
         c2:9c:d0:00:82:13:db:70:7d:9c:f2:cd:f5:eb:97:97:cb:83:
         ef:7f:e8:70:71:d8:a1:db:f9:7f:22:c3:33:36:cb:fe:5c:e0:
         91:1c:5a:61:87:e4:d3:b9:b5:e2:14:db:49:47:1a:2f:86:23:
         0d:db:34:8b:1d:e1:09:70:77:8d:16:29:f5:c2:72:6b:4a:b9:
         0e:00:48:7b:d6:eb:e8:54:c4:bd:7f:bb:d9:bb:d7:c0:5b:d9:
         e5:6e:75:03:d7:f5:04:e9:d9:19:09:43:8b:ea:8e:ff:31:0e:
         54:bc:9f:74:18:8b:e2:e4:43:77:ca:1b:54:11:4c:6f:8d:cf:
         b1:44:7d:9b:c7:8d:51:da:7c:ef:98:1b:18:09:92:bd:3e:b5:
         0c:0f:01:fc:92:0b:bd:89:22:bc:3d:9b:1e:73:39:58:c6:fb:
         95:c1:3d:22:20:64:02:f0:48:a4:28:03:2e:31:8d:80:32:60:
         31:39:9c:b1:e5:9e:b7:8c:5b:e0:cf:2c:f5:ef:84:89:87:45:
         3f:02:0d:10:9f:39:71:cf:22:6f:59:86:43:2f:6c:9b:8c:19:
         4c:61:eb:9b:a5:f0:ec:77:2c:f2:31:87:01:dd:bf:0d:50:74:
         88:6d:75:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org