Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/FEyIUba-O_Wdt_VLKVvjUePHWzA.roa
File:                     FEyIUba-O_Wdt_VLKVvjUePHWzA.roa (raw, json)
Hash identifier:          35V4JfQRIFYAEpH7/1EFRgLpYTWO6wb+wDroI8GeFk8=
Subject key identifier:   14:4C:88:51:B6:BE:3B:F5:9D:B7:F5:4B:29:5B:E3:51:E3:C7:5B:30
Certificate issuer:       /CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Certificate serial:       07AB5105
Authority key identifier: 37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/FEyIUba-O_Wdt_VLKVvjUePHWzA.roa
Signing time:             Sat 01 Jan 2022 15:59:06 +0000
ROA not before:           Sat 01 Jan 2022 15:59:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40513
IP address blocks:        147.78.60.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128667909 (0x7ab5105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
        Validity
            Not Before: Jan  1 15:59:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=144c8851b6be3bf59db7f54b295be351e3c75b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:ee:40:cd:89:ac:81:34:65:c7:33:6b:9c:
                    3f:8a:5c:c8:f9:23:7c:fb:f7:31:ce:79:6a:d8:39:
                    64:4d:88:50:10:15:b9:81:a5:a5:79:9d:42:9e:3a:
                    2c:6d:d9:5c:6e:59:bb:b1:56:76:99:45:c5:79:3a:
                    09:f6:9e:54:09:65:43:56:db:f4:28:7e:8a:ea:53:
                    ce:b5:88:c5:b6:d9:ac:41:ee:6d:d6:d4:e7:8e:6a:
                    66:25:b0:a0:7d:67:6a:10:64:63:ad:d2:9f:3d:63:
                    ce:d7:20:73:77:2a:07:2f:46:a0:2d:f9:28:1b:aa:
                    5b:23:0a:dd:95:dc:0a:55:91:d1:45:53:6d:16:45:
                    9a:1b:32:35:10:9b:21:96:15:d8:cb:a9:97:e8:fb:
                    58:1a:f9:56:32:b7:e2:9b:17:90:95:ae:34:cd:57:
                    90:09:ff:ff:56:5c:6a:b1:3a:a2:88:41:79:fd:b7:
                    dd:64:6e:7b:5b:74:cf:1e:58:94:82:01:74:c8:3c:
                    54:42:b6:2b:5d:55:dc:24:12:70:11:43:92:42:53:
                    16:80:95:17:ee:ce:85:b8:81:4b:46:50:7d:c9:0f:
                    2b:97:02:a7:54:22:46:82:4b:fc:06:b3:b9:4e:29:
                    38:c9:45:85:2f:14:e6:b9:db:e3:a1:cb:b6:5e:00:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4C:88:51:B6:BE:3B:F5:9D:B7:F5:4B:29:5B:E3:51:E3:C7:5B:30
            X509v3 Authority Key Identifier:
                keyid:37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/FEyIUba-O_Wdt_VLKVvjUePHWzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:78:69:ef:6b:d9:ed:b4:46:43:27:19:91:25:07:ac:f2:bf:
         96:45:00:77:f3:e2:57:d3:f9:e0:8b:72:21:7e:ce:42:c4:2a:
         08:13:f1:d4:b4:94:ca:e2:d9:e0:16:06:cf:42:02:fd:4e:e0:
         82:a1:90:cb:ef:00:74:0f:d1:b2:2d:ab:69:40:1e:bd:c8:f4:
         63:42:b3:43:70:cb:e7:d0:ab:99:26:a7:d2:03:b5:9a:54:fa:
         df:da:87:d9:14:f3:3c:29:67:c4:32:19:95:24:01:b8:2c:33:
         a2:1f:4c:c7:4e:e8:91:86:4d:41:27:06:df:fb:3d:f3:1a:3d:
         c3:f4:48:f7:1c:c6:d0:18:c8:1b:31:5c:6b:ab:20:83:70:26:
         c3:34:4a:0a:5c:b5:e2:9d:aa:56:5e:df:7d:1e:f0:f7:2d:c3:
         d7:7d:37:d9:ec:33:57:1e:f8:fa:a1:41:53:62:42:02:95:3a:
         81:b4:83:b0:98:c9:b0:6f:cc:6d:c6:84:5c:a7:0e:59:ea:43:
         9f:63:03:ce:96:03:6d:11:7f:d8:d4:fb:ff:a7:1c:75:f6:e0:
         1c:6f:e1:07:1d:65:9d:ba:6d:24:e3:d9:a1:25:5c:0d:4c:99:
         ba:66:b8:38:38:73:b5:ee:66:07:f7:e1:bb:36:64:9c:8e:a8:
         b7:6b:61:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:20 2025 by rpki-client