Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Fucd7Dro3zlbAjWRz7wGy-QyHUk.roa
File:                     Fucd7Dro3zlbAjWRz7wGy-QyHUk.roa (raw, json)
Hash identifier:          paDPil99217oycS6S8A/k1xMfBrg1VAq7wxkPoPrmnI=
Subject key identifier:   16:E7:1D:EC:3A:E8:DF:39:5B:02:35:91:CF:BC:06:CB:E4:32:1D:49
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       28536BB6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Fucd7Dro3zlbAjWRz7wGy-QyHUk.roa
Signing time:             Sat 01 Jan 2022 16:10:14 +0000
ROA not before:           Sat 01 Jan 2022 16:10:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210188
IP address blocks:        93.170.100.0/24 maxlen: 24
                          31.148.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676555702 (0x28536bb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:10:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16e71dec3ae8df395b023591cfbc06cbe4321d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:3a:f8:db:86:e7:97:56:82:b7:ea:f7:dd:
                    9b:0f:3d:6a:84:53:c3:c2:b9:6d:96:b6:37:2b:a1:
                    5b:a2:ae:69:0a:84:3c:fa:0c:c8:2a:98:ea:ea:bc:
                    bc:01:36:58:4d:da:cd:41:83:82:fa:c1:73:ef:81:
                    10:e9:33:54:98:47:f2:dd:b6:09:7c:bd:cf:62:5a:
                    66:25:9d:c9:a3:b3:e8:57:b7:df:dd:1c:f9:88:fa:
                    f4:cf:7e:e5:48:7f:d4:5c:89:ae:61:b0:1b:c2:b7:
                    3a:a1:78:12:ec:c8:b1:b4:61:76:23:bb:75:ed:c7:
                    2a:92:60:ec:d4:48:27:79:8a:00:e8:2b:38:44:76:
                    2e:c7:b3:1e:08:e0:91:d0:cd:b1:c1:f4:9a:a3:1f:
                    d8:fb:5d:84:1c:d7:d9:d4:5d:55:94:e5:ca:64:68:
                    d1:e0:0a:f4:fc:fa:a5:a3:0e:86:44:a5:9d:78:04:
                    84:7c:ff:d2:bd:cb:c5:0f:bb:02:15:a9:9a:61:9b:
                    27:20:f2:dd:fd:15:42:1c:86:8b:68:0a:dd:a1:74:
                    30:61:ce:1a:2f:5b:4d:72:74:79:db:51:4e:72:69:
                    f3:81:09:93:3a:5c:05:95:00:60:cd:bd:18:be:94:
                    c4:ab:b9:00:e3:82:f0:31:98:0a:ac:14:bb:3f:39:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E7:1D:EC:3A:E8:DF:39:5B:02:35:91:CF:BC:06:CB:E4:32:1D:49
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Fucd7Dro3zlbAjWRz7wGy-QyHUk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.148.246.0/24
                  93.170.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:3a:d5:f4:ce:ee:ad:32:b7:82:34:39:4d:67:9e:a0:e6:26:
         ae:f6:20:ba:25:d6:18:8f:61:63:e7:f2:2d:73:3e:05:a1:eb:
         df:b0:5e:b6:2d:17:4d:da:bf:b3:be:5e:26:d0:00:89:00:f6:
         da:7b:7c:8c:e6:2b:4f:19:4d:f5:60:e9:e0:01:74:6d:83:cc:
         6f:7f:3d:15:c6:09:17:ab:1e:bd:90:2d:94:2b:82:00:b7:42:
         54:57:2b:16:40:24:77:16:bc:ae:45:f8:d2:9a:e2:4e:2e:e8:
         1d:8b:de:3b:0e:ee:9e:08:17:48:24:6c:58:0b:dc:90:83:0d:
         e0:21:14:14:09:8e:4c:be:d4:63:af:f4:c2:da:3f:4d:c8:ba:
         b6:1b:17:52:c3:ec:f9:63:1f:a9:ce:87:4b:9b:54:f3:ea:2d:
         43:a7:ac:2f:e0:65:f3:60:81:73:2f:e8:bb:0e:a9:6e:f9:42:
         ad:3c:a3:d6:3b:b0:61:04:64:d0:7b:33:ff:1d:08:0b:2a:ca:
         12:04:16:c0:a3:57:3e:b6:d5:13:7c:be:99:67:50:f0:ec:9c:
         dd:50:e6:c3:4c:4c:38:31:a2:01:9c:e3:c6:df:fd:54:c9:21:
         d1:4e:7a:14:48:b1:c6:31:48:14:c7:f8:9f:e6:2e:4a:2c:a8:
         5a:ad:27:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org