Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/FtSt5mFBoAIhn9bSUKmW3_8Rf0E.roa
File:                     FtSt5mFBoAIhn9bSUKmW3_8Rf0E.roa (raw, json)
Hash identifier:          RxF/yDf0A/MmP7qxuvIzr2bUrD7rmpyp/yV2xy/lS/o=
Subject key identifier:   16:D4:AD:E6:61:41:A0:02:21:9F:D6:D2:50:A9:96:DF:FF:11:7F:41
Certificate issuer:       /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial:       0903E811
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/FtSt5mFBoAIhn9bSUKmW3_8Rf0E.roa
Signing time:             Sat 01 Jan 2022 10:54:50 +0000
ROA not before:           Sat 01 Jan 2022 10:54:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208103
IP address blocks:        185.182.181.0/24 maxlen: 24
                          185.182.180.0/24 maxlen: 24
                          185.182.183.0/24 maxlen: 24
                          185.182.180.0/22 maxlen: 22
                          185.182.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151250961 (0x903e811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
        Validity
            Not Before: Jan  1 10:54:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16d4ade66141a002219fd6d250a996dfff117f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:a7:6b:3c:7f:c9:a1:80:4b:c4:0b:f7:67:
                    a3:3e:eb:93:42:00:ca:4b:8a:28:eb:6c:16:44:f8:
                    91:a4:27:05:c9:e5:5d:80:f3:52:07:1b:ef:0b:ce:
                    b0:04:ff:2a:dc:33:1f:4a:95:dc:c4:a3:a5:1d:80:
                    63:af:71:1c:24:5c:9f:c4:ba:d8:9c:de:3b:7d:6e:
                    9d:95:98:13:24:03:dd:b4:4b:80:24:ed:5f:ab:d9:
                    79:09:89:b5:10:06:67:9c:b5:e3:c7:fe:c3:26:f3:
                    37:7e:73:d1:a9:48:a5:0f:8f:d2:c0:95:05:50:a2:
                    b2:b1:aa:5f:94:b3:d6:51:bd:ff:25:3f:4b:30:a1:
                    c8:0c:73:99:61:8e:68:7f:6c:7e:29:1f:c3:4f:85:
                    e7:67:25:af:f8:af:66:91:08:d7:27:70:a9:72:16:
                    78:6c:5d:35:80:f8:bf:5d:03:5a:a3:8a:43:7c:15:
                    b0:a6:fb:19:07:bd:af:18:c5:72:5a:8a:74:46:3d:
                    47:ff:ec:57:c3:10:7b:81:ad:ba:f0:91:50:49:67:
                    53:37:b6:3e:dd:79:19:84:52:2e:97:cc:35:aa:eb:
                    01:74:8f:23:32:e5:bf:ec:d5:48:c8:96:e3:88:95:
                    b6:c2:ab:b4:76:0f:e5:5d:48:60:df:ec:ec:2d:9b:
                    36:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D4:AD:E6:61:41:A0:02:21:9F:D6:D2:50:A9:96:DF:FF:11:7F:41
            X509v3 Authority Key Identifier:
                keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/FtSt5mFBoAIhn9bSUKmW3_8Rf0E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:7b:82:90:38:bb:7e:ac:cb:94:ce:48:f6:3f:9c:4e:4e:0f:
         57:52:43:ad:0d:03:ee:fe:50:f5:b7:1c:66:50:ea:1f:78:a3:
         d3:a2:97:64:eb:f8:ec:21:2e:04:c0:ec:4f:56:a1:45:d7:ce:
         68:6e:a9:2f:9b:99:32:de:c3:6e:61:9e:74:cc:ec:c1:e2:aa:
         65:42:c1:e1:13:bc:b7:e3:3f:14:3a:28:f7:46:1b:68:bf:07:
         c0:bd:88:49:67:34:13:13:08:fe:08:c1:3a:69:7a:22:07:ad:
         08:73:4b:49:ae:4a:e3:a3:46:8d:1d:e9:7c:ef:bc:ba:60:a8:
         4b:21:aa:83:bd:65:32:33:d7:01:01:27:fe:6b:4f:46:7a:d4:
         9b:b8:f5:78:f5:a8:d4:b3:ff:53:dc:4f:82:4a:b5:31:3b:a9:
         99:e7:b7:6f:25:d8:68:64:6d:7c:35:e8:23:56:5f:65:a0:20:
         49:f6:cd:2c:4c:e6:17:f0:1b:4f:7b:59:2a:d1:66:45:59:28:
         e1:b4:c2:92:7b:2f:17:da:f6:bb:b9:fb:34:a5:1b:b0:19:e4:
         93:ef:60:7d:f6:53:7a:27:bd:8b:bf:9c:f0:95:ca:66:7a:64:
         e7:4b:67:ca:25:2b:c7:66:d4:b0:24:20:02:9d:27:dd:36:c0:
         f9:e8:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org