Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/F8HNGNeDOR8YBiXDAr8d02M5KTM.roa
File:                     F8HNGNeDOR8YBiXDAr8d02M5KTM.roa (raw, json)
Hash identifier:          7U9i8msjDP/+ej8bLEhgWctfS3nBfZRQZVTujCSwkGI=
Subject key identifier:   17:C1:CD:18:D7:83:39:1F:18:06:25:C3:02:BF:1D:D3:63:39:29:33
Certificate issuer:       /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial:       01831CCE4570CFAE20AEA501069167D80D01
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/F8HNGNeDOR8YBiXDAr8d02M5KTM.roa
Signing time:             Thu 08 Sep 2022 11:13:43 +0000
ROA not before:           Thu 08 Sep 2022 11:13:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199562
IP address blocks:        185.207.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:1c:ce:45:70:cf:ae:20:ae:a5:01:06:91:67:d8:0d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
        Validity
            Not Before: Sep  8 11:13:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17c1cd18d783391f180625c302bf1dd363392933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:d6:34:11:8e:03:ee:20:de:ea:2c:df:5a:
                    c1:15:40:df:8c:0a:08:b8:08:6c:00:fa:bd:cf:4f:
                    a5:5f:de:09:6e:04:3c:b4:6b:d5:a3:a2:4a:06:ad:
                    bb:a0:79:8a:20:2b:bb:2e:a5:88:88:b5:24:f4:a6:
                    89:62:42:5c:22:c7:ea:8b:25:28:9f:1c:7b:b8:12:
                    b6:e9:82:84:ab:62:e8:98:de:dd:31:17:d2:44:42:
                    0d:e0:4a:7e:ef:f8:02:78:f6:bc:5a:45:a4:8e:7d:
                    61:54:cd:db:75:5d:0b:fd:e5:48:a9:7c:07:ea:94:
                    14:16:24:50:7f:e9:07:17:32:12:60:cf:59:78:34:
                    1c:c1:38:ac:2a:f3:97:b2:b7:47:13:c6:92:08:b2:
                    b2:39:46:31:24:74:66:b0:03:6d:d1:cf:5d:c9:cb:
                    0c:d0:a3:40:1d:34:89:88:d7:08:a7:be:16:4d:fc:
                    f9:a4:88:15:d3:46:4f:04:21:39:dd:8c:f2:de:26:
                    ca:cf:52:0d:d0:79:f6:b4:d8:fe:93:2a:65:1e:ad:
                    bb:ea:a4:50:d6:bf:e5:f0:b9:20:f5:19:0b:cb:60:
                    1c:f2:0c:3a:de:6a:2b:c4:12:94:63:16:38:d0:c5:
                    ed:57:4d:dd:44:07:39:f4:67:09:53:f1:97:e9:c1:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:CD:18:D7:83:39:1F:18:06:25:C3:02:BF:1D:D3:63:39:29:33
            X509v3 Authority Key Identifier:
                keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/F8HNGNeDOR8YBiXDAr8d02M5KTM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:17:0a:8e:aa:36:58:11:0c:2d:a5:9a:07:4d:2d:69:70:
         bc:58:de:7b:b1:df:2b:2b:9c:06:68:fa:2b:a6:8f:63:40:24:
         73:e0:ee:d2:27:07:ba:d4:ef:53:09:08:72:c8:86:d8:7f:b6:
         cc:41:cf:a2:f7:97:a6:04:99:d3:e6:90:f0:55:02:bb:40:4f:
         ff:1e:7e:84:c5:04:ff:a0:75:32:a8:70:ed:a7:70:d5:a1:6d:
         02:ea:c0:28:2a:b4:9f:2c:fa:26:d8:3c:74:5d:2c:3e:86:51:
         bd:f8:41:2b:b7:15:fb:08:d5:e3:6e:3e:e0:42:2e:e4:ad:88:
         25:39:b5:fb:e2:e4:de:8b:a9:e2:db:c8:fe:61:ca:9a:f3:f0:
         a3:0c:a4:ea:d8:17:0d:51:1e:91:d2:ee:97:93:07:cf:8b:78:
         38:fe:29:69:c0:5d:52:8c:e1:a3:18:97:26:3d:78:61:2e:6c:
         06:d7:c1:a5:77:9c:0e:68:2b:a6:aa:6d:62:95:6f:33:ca:8d:
         18:42:10:ec:52:b4:21:f8:dd:a7:4f:6d:16:5b:32:54:71:a4:
         02:72:95:32:11:77:91:2c:23:2e:f0:13:98:89:c7:4d:3c:49:
         1d:7a:b0:38:d8:96:06:2f:fb:e1:60:f8:9f:c8:ce:8f:74:98:
         e6:20:bb:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMczkVwz64grqUBBpFn2A0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNWUzZDZmNjlmYTJiNDI1MTc5MTFlYWU1Njk1NzMwMzA3
OTkxNTYwHhcNMjIwOTA4MTExMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2MxY2QxOGQ3ODMzOTFmMTgwNjI1YzMwMmJmMWRkMzYzMzkyOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA017WNBGOA+4g3uos31rBFUDfjAoI
uAhsAPq9z0+lX94JbgQ8tGvVo6JKBq27oHmKICu7LqWIiLUk9KaJYkJcIsfqiyUo
nxx7uBK26YKEq2LomN7dMRfSREIN4Ep+7/gCePa8WkWkjn1hVM3bdV0L/eVIqXwH
6pQUFiRQf+kHFzISYM9ZeDQcwTisKvOXsrdHE8aSCLKyOUYxJHRmsANt0c9dycsM
0KNAHTSJiNcIp74WTfz5pIgV00ZPBCE53Yzy3ibKz1IN0Hn2tNj+kyplHq276qRQ
1r/l8Lkg9RkLy2Ac8gw63morxBKUYxY40MXtV03dRAc59GcJU/GX6cHMkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBfBzRjXgzkfGAYlwwK/HdNjOSkzMB8GA1UdIwQY
MBaAFO9ePW9p+itCUXkR6uVpVzAweZFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQt
ZmNmZjllODQ3Y2EyLzEvRjhITkdOZURPUjhZQmlYREFyOGQwMk01S1RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQtZmNmZjllODQ3Y2Ey
LzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc/XMA0G
CSqGSIb3DQEBCwUAA4IBAQBdVxcKjqo2WBEMLaWaB00taXC8WN57sd8rK5wGaPor
po9jQCRz4O7SJwe61O9TCQhyyIbYf7bMQc+i95emBJnT5pDwVQK7QE//Hn6ExQT/
oHUyqHDtp3DVoW0C6sAoKrSfLPom2Dx0XSw+hlG9+EErtxX7CNXjbj7gQi7krYgl
ObX74uTei6ni28j+Ycqa8/CjDKTq2BcNUR6R0u6XkwfPi3g4/ilpwF1SjOGjGJcm
PXhhLmwG18Gld5wOaCumqm1ilW8zyo0YQhDsUrQh+N2nT20WWzJUcaQCcpUyEXeR
LCMu8BOYicdNPEkderA42JYGL/vhYPifyM6PdJjmILtI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:20 2024 by rpki-client on console-fra.rpki-client.org