Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fsp08dxTb6_b2Eo1bTTgpJk6DdQ.roa
File:                     fsp08dxTb6_b2Eo1bTTgpJk6DdQ.roa (raw, json)
Hash identifier:          BQzr7GM197k/N0Fyjs8YdK1tVSVRDL4Ye8I3EMbgK+M=
Subject key identifier:   7E:CA:74:F1:DC:53:6F:AF:DB:D8:4A:35:6D:34:E0:A4:99:3A:0D:D4
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1E1CB1A3
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fsp08dxTb6_b2Eo1bTTgpJk6DdQ.roa
Signing time:             Mon 30 May 2022 06:27:58 +0000
ROA not before:           Mon 30 May 2022 06:27:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17941
IP address blocks:        77.47.144.0/22 maxlen: 24
                          77.47.148.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505196963 (0x1e1cb1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: May 30 06:27:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7eca74f1dc536fafdbd84a356d34e0a4993a0dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:62:26:57:a4:58:1a:63:2e:d2:6a:04:f0:
                    4b:4a:8b:97:6e:7b:51:e2:ce:77:79:1d:86:84:d7:
                    b9:75:45:e3:ef:ce:ff:3a:e5:34:d5:a1:0a:e8:fb:
                    0f:6a:84:c2:01:0e:59:8b:bf:9f:47:f9:3d:ea:2a:
                    3a:90:26:33:bd:aa:f9:f0:97:7a:b3:fb:03:b8:8c:
                    9d:67:5b:fd:94:09:0f:2e:28:cd:4e:33:99:92:1b:
                    57:69:51:39:11:93:fd:c5:76:11:aa:a7:a3:cd:35:
                    77:5e:7d:4d:94:24:fe:fa:57:9b:83:41:e8:9c:db:
                    28:bc:6f:b5:fb:a0:46:6e:1b:74:7c:80:df:f6:ad:
                    1e:14:ad:01:50:99:0e:23:67:71:a7:e1:a0:25:11:
                    7a:e5:df:6e:92:5f:ff:1e:d4:5e:09:43:13:c6:f5:
                    31:8e:47:aa:95:99:df:6c:83:c8:ba:f8:cd:a1:a6:
                    0b:e8:dd:49:b2:f5:93:45:91:f4:93:54:22:52:5b:
                    00:68:d9:2c:31:2a:75:81:21:2c:00:5c:93:f0:03:
                    c9:65:de:c9:69:62:92:b0:6a:31:32:6d:bd:19:af:
                    c1:9c:c7:d2:4a:df:62:be:0b:a4:74:6f:f9:ab:b9:
                    28:3e:21:d3:36:fc:f9:f0:09:32:96:08:9c:b2:ff:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CA:74:F1:DC:53:6F:AF:DB:D8:4A:35:6D:34:E0:A4:99:3A:0D:D4
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fsp08dxTb6_b2Eo1bTTgpJk6DdQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:13:5f:66:74:67:6a:8e:2e:c4:ab:10:53:24:e4:0a:b7:26:
         47:cd:b2:de:56:ce:f4:5a:08:0f:4c:37:67:90:22:38:6b:7c:
         cf:57:a7:69:d9:a1:9f:a3:45:15:7d:0f:80:2a:a7:ba:99:9d:
         64:ad:90:3e:f4:0e:f2:a0:ff:3f:5d:e4:fc:d7:ac:ce:33:8e:
         44:fe:d7:0e:bc:c3:a9:56:24:ab:56:a0:25:b6:05:c5:19:ac:
         91:d3:b5:8a:4b:bc:de:91:31:a6:a7:5f:cb:29:40:c2:41:b0:
         4b:cf:71:92:89:8e:0b:40:78:26:3b:7b:7c:3b:0d:c1:9a:04:
         37:e7:9b:55:10:4b:b4:09:60:0c:4c:93:16:04:24:fa:58:3c:
         93:5a:aa:66:f8:d0:87:ba:0f:81:50:04:94:c2:08:cb:37:70:
         0e:5a:b0:d7:b5:c0:e0:5a:88:db:be:02:07:12:3f:21:93:8a:
         4e:23:32:46:51:26:01:be:a7:77:29:b3:c5:3a:af:55:d1:fb:
         b9:1b:81:23:8d:3c:b4:51:25:e9:21:0a:99:aa:fe:c7:0c:64:
         bc:c0:14:de:8a:02:d7:99:05:7f:9a:e9:7c:e0:a6:4c:bc:fd:
         2a:7d:8d:8f:c3:c5:3a:c3:4c:76:6b:bd:f7:88:05:b1:ab:2c:
         69:fb:4d:29
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHhyxozANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDUz
MDA2Mjc1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2VjYTc0ZjFkYzUz
NmZhZmRiZDg0YTM1NmQzNGUwYTQ5OTNhMGRkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALa7YiZXpFgaYy7SagTwS0qLl257UeLOd3kdhoTXuXVF4+/O
/zrlNNWhCuj7D2qEwgEOWYu/n0f5PeoqOpAmM72q+fCXerP7A7iMnWdb/ZQJDy4o
zU4zmZIbV2lRORGT/cV2Eaqno801d159TZQk/vpXm4NB6JzbKLxvtfugRm4bdHyA
3/atHhStAVCZDiNncafhoCUReuXfbpJf/x7UXglDE8b1MY5HqpWZ32yDyLr4zaGm
C+jdSbL1k0WR9JNUIlJbAGjZLDEqdYEhLABck/ADyWXeyWlikrBqMTJtvRmvwZzH
0krfYr4LpHRv+au5KD4h0zb8+fAJMpYInLL/njkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR+ynTx3FNvr9vYSjVtNOCkmToN1DAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L2ZzcDA4ZHhUYjZfYjJFbzFiVFRncEprNkRkUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA00vkDANBgkqhkiG9w0BAQsFAAOC
AQEAEhNfZnRnao4uxKsQUyTkCrcmR82y3lbO9FoID0w3Z5AiOGt8z1enadmhn6NF
FX0PgCqnupmdZK2QPvQO8qD/P13k/NeszjOORP7XDrzDqVYkq1agJbYFxRmskdO1
iku83pExpqdfyylAwkGwS89xkomOC0B4Jjt7fDsNwZoEN+ebVRBLtAlgDEyTFgQk
+lg8k1qqZvjQh7oPgVAElMIIyzdwDlqw17XA4FqI274CBxI/IZOKTiMyRlEmAb6n
dymzxTqvVdH7uRuBI408tFEl6SEKmar+xwxkvMAU3ooC15kFf5rpfOCmTLz9Kn2N
j8PFOsNMdmu994gFsassaftNKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org