Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/FQ1hOLy4z_rY2hjkLFAsX3uqF1Q.roa
File:                     FQ1hOLy4z_rY2hjkLFAsX3uqF1Q.roa (raw, json)
Hash identifier:          io8Q2dwh0mheTTS3cRHjFNV8dzprZlQGvpsv7W6DysM=
Subject key identifier:   15:0D:61:38:BC:B8:CF:FA:D8:DA:18:E4:2C:50:2C:5F:7B:AA:17:54
Certificate issuer:       /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial:       0444158E
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/FQ1hOLy4z_rY2hjkLFAsX3uqF1Q.roa
Signing time:             Sat 01 Jan 2022 05:55:41 +0000
ROA not before:           Sat 01 Jan 2022 05:55:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209565
IP address blocks:        131.117.225.0/24 maxlen: 24
                          131.117.224.0/24 maxlen: 24
                          131.117.228.0/24 maxlen: 24
                          131.117.233.0/24 maxlen: 24
                          185.21.138.0/24 maxlen: 24
                          185.21.137.0/24 maxlen: 24
                          185.21.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71570830 (0x444158e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
        Validity
            Not Before: Jan  1 05:55:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=150d6138bcb8cffad8da18e42c502c5f7baa1754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:fc:de:d9:ff:ef:4e:73:50:ca:4d:3c:20:
                    e3:a3:fe:f7:f2:a1:b1:51:d8:06:fc:8f:1a:e3:62:
                    ee:3a:8f:c3:0f:a1:66:f0:13:31:94:6b:66:3b:48:
                    24:0b:0c:7a:0c:ef:a4:80:b3:c9:ee:25:cd:e3:6b:
                    c4:41:f3:df:aa:58:e9:61:ed:fd:f1:14:32:1f:0d:
                    24:3b:81:b6:de:db:d0:2f:62:ab:c4:0d:c3:63:e0:
                    71:86:80:f6:75:33:82:e2:0a:9a:c2:01:28:41:64:
                    6a:6d:0a:e1:bb:58:3d:f2:f2:b2:e8:d1:61:2a:fa:
                    86:25:9f:94:64:4b:f0:f4:d2:d5:06:7a:39:c4:d2:
                    0e:71:5c:c1:48:f8:2a:b4:8f:4f:cb:bc:7b:98:c6:
                    91:88:d7:df:9b:d0:96:da:43:08:cc:5c:d8:42:8a:
                    73:19:65:9c:50:85:82:60:57:66:59:dc:46:0f:f9:
                    05:ac:34:03:67:58:84:b6:43:98:d4:5e:81:13:4a:
                    88:55:10:8e:6e:4c:62:3d:4c:a7:6a:9d:5a:93:0f:
                    09:a7:9b:db:45:8a:13:7a:e7:f7:3c:84:0c:58:17:
                    4c:d7:fb:5c:72:55:48:8b:16:cd:45:11:b0:8b:39:
                    cd:c7:87:6d:bc:a5:e4:cc:40:25:a1:5d:9e:01:1c:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0D:61:38:BC:B8:CF:FA:D8:DA:18:E4:2C:50:2C:5F:7B:AA:17:54
            X509v3 Authority Key Identifier:
                keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/FQ1hOLy4z_rY2hjkLFAsX3uqF1Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.117.224.0/23
                  131.117.228.0/24
                  131.117.233.0/24
                  185.21.136.0-185.21.138.255

    Signature Algorithm: sha256WithRSAEncryption
         1c:55:d0:c0:0a:aa:28:20:63:a3:cd:2f:e8:e5:5f:88:27:e0:
         23:67:e8:51:b4:9d:3e:56:eb:23:2b:10:bd:d1:85:67:3a:11:
         fd:e8:71:62:88:fc:a2:09:7d:6a:7d:cf:0d:37:71:50:c9:d0:
         bf:56:57:28:9b:86:c4:ad:78:80:dd:f7:cd:d0:65:4b:60:60:
         c3:75:a9:50:a4:04:b2:7a:4f:ea:f9:79:10:d1:8e:5c:af:63:
         16:38:58:d9:b3:7f:0b:34:51:6f:85:3e:0e:c3:b7:0d:8d:d1:
         94:ff:2b:f4:93:c9:ca:8f:ec:78:0d:2d:ea:25:af:84:69:c1:
         7f:d6:78:86:fb:53:08:c9:8b:0b:07:21:77:ab:9f:65:7b:61:
         45:96:65:28:be:f5:08:61:ed:fe:8c:32:33:68:18:3e:f3:c6:
         ae:c2:e6:d0:9c:f9:38:89:08:6e:41:8b:d8:1d:61:30:1b:13:
         a0:87:da:2b:64:6d:62:c7:a6:a5:17:a7:b8:47:d9:b4:8b:4f:
         2d:f7:a8:c0:74:93:9d:38:0d:3d:bc:ba:ae:fe:74:81:50:ec:
         db:8b:90:8a:3c:0f:64:82:95:f0:56:aa:13:58:3e:79:4d:d4:
         57:50:79:af:b3:cd:94:da:37:ae:08:2d:71:41:b1:d4:4b:e2:
         ed:cb:df:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org