Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/8CpMWMUVm29T3Igdqe8W-61xa_8.roa
File:                     8CpMWMUVm29T3Igdqe8W-61xa_8.roa (raw, json)
Hash identifier:          r6M4MIrZO4WL3GApy4IdXoXkx5RGkr88X3f/Z10hsYo=
Subject key identifier:   F0:2A:4C:58:C5:15:9B:6F:53:DC:88:1D:A9:EF:16:FB:AD:71:6B:FF
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       04A4E509
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/8CpMWMUVm29T3Igdqe8W-61xa_8.roa
Signing time:             Sat 30 Apr 2022 18:50:12 +0000
ROA not before:           Sat 30 Apr 2022 18:50:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208711
IP address blocks:        185.92.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77915401 (0x4a4e509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Apr 30 18:50:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f02a4c58c5159b6f53dc881da9ef16fbad716bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2a:b9:5a:2f:9e:8e:59:dc:29:ce:20:45:45:
                    a5:ea:aa:01:f0:06:5e:f6:6e:ee:01:52:46:cf:50:
                    d5:a5:2d:97:71:da:2b:6f:43:b1:17:ca:dd:ee:1c:
                    cf:6c:11:89:9a:82:cf:66:fe:80:57:b9:00:a9:76:
                    63:ee:77:85:e8:d2:50:87:55:5a:94:4b:b4:66:c9:
                    d4:13:17:0d:df:81:e1:4b:53:51:aa:50:4e:43:e9:
                    cd:cd:31:4f:e9:62:40:32:b8:2e:28:f0:03:bb:0e:
                    43:50:57:21:8d:26:32:0b:5b:fc:07:71:19:54:ab:
                    13:3f:a7:a4:4b:df:fb:88:ad:d8:d3:00:15:56:a8:
                    f2:98:1b:5a:d0:3b:81:00:1f:0d:e7:bf:ed:00:79:
                    07:44:06:fb:f1:50:fc:f4:dc:78:30:e9:fa:d4:8d:
                    c7:2c:ae:37:e4:bb:6d:fd:68:2c:15:05:44:5e:99:
                    fa:11:74:f3:7f:e1:b1:dc:07:f0:d8:aa:73:f4:98:
                    55:4b:3f:45:fd:ad:ac:3b:21:44:6f:dc:ad:58:af:
                    37:58:e3:c0:2c:17:9a:15:2d:6f:f7:37:8b:5a:94:
                    6b:a8:1a:60:86:f3:a0:1c:fc:42:6a:1e:16:5d:b7:
                    58:6a:2f:69:d7:aa:cf:7c:8f:74:b7:f3:8a:80:88:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2A:4C:58:C5:15:9B:6F:53:DC:88:1D:A9:EF:16:FB:AD:71:6B:FF
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/8CpMWMUVm29T3Igdqe8W-61xa_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:19:a6:5e:ba:dc:ab:5f:03:bd:5a:ef:86:9d:24:39:0c:70:
         dd:09:18:cc:12:6b:40:2c:21:e6:75:3e:ca:74:35:90:01:9b:
         dc:5e:2e:7b:74:2b:03:5c:3a:2e:53:c0:7a:56:8e:27:84:a9:
         f0:89:98:84:9b:b1:76:c0:3d:06:65:a5:60:58:cc:62:b8:e9:
         7b:7d:20:f7:07:aa:10:15:b0:f7:90:c8:5a:f4:64:26:f5:51:
         99:05:36:96:48:a0:c9:b5:9a:e3:12:87:88:fe:6a:69:fc:fa:
         7c:d0:d7:55:05:eb:a4:aa:c5:d0:c6:8c:aa:81:d1:47:c4:d5:
         c2:33:0f:d9:32:b6:21:39:58:05:09:52:e1:af:73:a9:79:bc:
         ef:1f:c2:8a:2c:55:49:d0:b6:1c:82:92:31:eb:e1:68:d7:15:
         83:fe:26:a3:9f:5e:52:5d:95:16:77:bb:e1:c7:73:87:71:12:
         39:70:4b:f3:b0:85:59:d3:5c:cb:5c:55:5b:d3:30:ca:e4:eb:
         b7:5c:52:8f:60:02:32:27:8a:c3:67:3d:7d:1d:e7:c8:1d:c4:
         ca:8c:ed:e5:4c:93:07:13:d5:16:ea:4b:08:ac:a1:d9:32:f9:
         41:3d:81:fd:a6:b5:9c:c4:bb:e3:fd:36:aa:6a:45:71:0b:36:
         f4:70:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:33 2024 by rpki-client on console-fra.rpki-client.org