Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/FEI2SxRa0kCkGp6yCkQ0LP6HS5Q.roa
File:                     FEI2SxRa0kCkGp6yCkQ0LP6HS5Q.roa (raw, json)
Hash identifier:          SNUKOp3vPyYLl9CtNDINvUYwhco4NK0RA0ng/jltoW0=
Subject key identifier:   14:42:36:4B:14:5A:D2:40:A4:1A:9E:B2:0A:44:34:2C:FE:87:4B:94
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       0182E89CD95AC8AB1404142E3B82B57CDF53
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/FEI2SxRa0kCkGp6yCkQ0LP6HS5Q.roa
Signing time:             Mon 29 Aug 2022 07:59:29 +0000
ROA not before:           Mon 29 Aug 2022 07:59:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200436
IP address blocks:        95.81.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e8:9c:d9:5a:c8:ab:14:04:14:2e:3b:82:b5:7c:df:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: Aug 29 07:59:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1442364b145ad240a41a9eb20a44342cfe874b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:b8:bb:de:1c:1d:24:45:d7:b5:14:49:92:
                    da:e0:8c:df:6d:31:4c:99:32:85:1f:49:2a:0c:20:
                    9c:d6:49:63:42:63:19:2c:64:c3:9f:ec:05:60:f0:
                    b6:7f:d1:3b:79:16:ff:10:e9:46:07:c7:80:ff:d6:
                    70:49:13:7f:4c:03:7c:bc:0e:a3:dd:5b:e3:e6:a5:
                    5d:9c:84:0d:bd:a3:23:38:c4:3d:08:d7:1b:a1:37:
                    34:e2:44:34:73:38:7c:f7:5c:1d:c6:24:a0:b0:6c:
                    a1:c5:76:f8:53:71:1a:69:03:a8:cd:f5:76:75:7f:
                    ca:09:21:43:39:f8:c8:b4:b0:b9:34:db:6e:5e:f9:
                    c6:10:34:45:f3:d5:8a:e9:1c:29:4e:7c:55:54:5c:
                    9a:1c:b5:ad:59:a0:b6:ca:15:ed:09:ab:3e:19:7c:
                    84:2c:be:04:0b:44:00:15:81:07:00:6e:da:a0:c1:
                    2e:8c:02:0f:c1:5f:53:36:46:f7:81:6b:5f:c8:dd:
                    b1:0c:cf:d0:79:c7:ee:20:16:df:b7:7f:f5:34:39:
                    bf:f5:d6:b0:13:11:62:26:1f:6c:ce:15:c3:93:c9:
                    9e:0f:c0:20:ff:8d:e6:55:49:df:41:54:95:38:ef:
                    bb:8c:61:b9:87:59:46:20:95:22:1e:8a:a4:e7:be:
                    6e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:42:36:4B:14:5A:D2:40:A4:1A:9E:B2:0A:44:34:2C:FE:87:4B:94
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/FEI2SxRa0kCkGp6yCkQ0LP6HS5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.81.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:cd:b7:b3:98:36:b7:0d:09:7c:c5:df:28:00:50:bb:b0:66:
         86:ff:18:c4:61:e7:3b:a2:bf:98:09:f3:b5:a5:4a:2e:35:6c:
         8e:d5:fe:2f:49:59:fb:3b:17:38:c6:59:e8:7f:3b:00:4b:82:
         7b:ca:73:e4:81:4f:75:24:20:ef:81:38:96:6b:a2:11:48:dc:
         ac:2c:0d:eb:7d:af:dd:4b:38:cc:90:fd:77:38:d1:01:30:7c:
         40:6c:22:aa:82:d3:1f:00:2c:58:b8:d6:d5:e5:95:24:20:c1:
         2e:94:39:b3:76:db:e7:42:50:63:e7:a0:31:29:95:2d:6a:d1:
         09:91:21:ba:30:c7:1f:c5:5f:3b:f6:4f:b8:0a:8d:21:2b:e5:
         ab:61:b4:bd:7e:bd:09:03:4b:11:4c:62:61:11:9f:bd:79:b8:
         a1:e8:02:62:1f:64:22:d2:d9:c2:f2:c6:28:25:5a:20:f6:1b:
         1d:7d:ee:49:a8:e7:29:33:c4:9d:70:13:3a:42:e8:d9:08:b9:
         5e:4e:0f:41:29:23:b6:41:fd:f0:b3:80:d2:98:d8:cf:bc:1b:
         98:7d:06:7e:ae:f9:f7:ff:a0:62:d1:d1:5b:9a:98:5e:49:90:
         47:42:24:23:b6:fb:81:45:d6:50:2e:f7:d5:b8:8c:7e:bd:8e:
         09:e9:60:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLonNlayKsUBBQuO4K1fN9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjIwODI5MDc1OTI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDQyMzY0YjE0NWFkMjQwYTQxYTllYjIwYTQ0MzQyY2ZlODc0Yjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsty4u94cHSRF17UUSZLa4IzfbTFM
mTKFH0kqDCCc1kljQmMZLGTDn+wFYPC2f9E7eRb/EOlGB8eA/9ZwSRN/TAN8vA6j
3Vvj5qVdnIQNvaMjOMQ9CNcboTc04kQ0czh891wdxiSgsGyhxXb4U3EaaQOozfV2
dX/KCSFDOfjItLC5NNtuXvnGEDRF89WK6RwpTnxVVFyaHLWtWaC2yhXtCas+GXyE
LL4EC0QAFYEHAG7aoMEujAIPwV9TNkb3gWtfyN2xDM/QecfuIBbft3/1NDm/9daw
ExFiJh9szhXDk8meD8Ag/43mVUnfQVSVOO+7jGG5h1lGIJUiHoqk575ugQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBRCNksUWtJApBqesgpENCz+h0uUMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvRkVJMlN4UmEwa0NrR3A2eUNrUTBMUDZIUzVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1FfMA0G
CSqGSIb3DQEBCwUAA4IBAQA6zbezmDa3DQl8xd8oAFC7sGaG/xjEYec7or+YCfO1
pUouNWyO1f4vSVn7Oxc4xlnofzsAS4J7ynPkgU91JCDvgTiWa6IRSNysLA3rfa/d
SzjMkP13ONEBMHxAbCKqgtMfACxYuNbV5ZUkIMEulDmzdtvnQlBj56AxKZUtatEJ
kSG6MMcfxV879k+4Co0hK+WrYbS9fr0JA0sRTGJhEZ+9ebih6AJiH2Qi0tnC8sYo
JVog9hsdfe5JqOcpM8SdcBM6QujZCLleTg9BKSO2Qf3ws4DSmNjPvBuYfQZ+rvn3
/6Bi0dFbmpheSZBHQiQjtvuBRdZQLvfVuIx+vY4J6WCF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org