Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fq3o7yc6A_U118IABa0t0ng-5Nw.roa
File:                     fq3o7yc6A_U118IABa0t0ng-5Nw.roa (raw, json)
Hash identifier:          ip5wyif3hSxdrbCj9XsvlUvr0WR2wg8l3T0m/USesL0=
Subject key identifier:   7E:AD:E8:EF:27:3A:03:F5:35:D7:C2:00:05:AD:2D:D2:78:3E:E4:DC
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       16D4634C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fq3o7yc6A_U118IABa0t0ng-5Nw.roa
Signing time:             Sat 01 Jan 2022 12:01:31 +0000
ROA not before:           Sat 01 Jan 2022 12:01:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52006
IP address blocks:        141.101.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383017804 (0x16d4634c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  1 12:01:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7eade8ef273a03f535d7c20005ad2dd2783ee4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ba:51:6d:4b:b0:de:50:90:c3:30:2c:c8:d6:
                    97:b6:7f:87:52:cd:87:6a:94:df:e1:aa:b2:1d:59:
                    00:d9:42:10:fe:d0:6b:4b:b8:44:08:a6:cb:45:9c:
                    56:34:ea:ec:e6:83:ac:20:90:98:75:ad:8e:00:df:
                    97:b4:a5:7b:3b:27:1e:6d:3d:fe:f0:86:3e:a6:c1:
                    a7:33:b8:9e:9c:2d:c5:82:b5:3c:95:5b:1f:d3:69:
                    59:cd:f9:1a:c7:be:3d:c6:0c:c0:0a:31:12:d9:73:
                    0d:3f:eb:d1:97:df:65:ae:04:fd:4e:e6:5c:13:f2:
                    a3:f7:33:79:84:db:cd:c5:71:d2:a8:49:c6:2a:dd:
                    56:0b:61:82:25:8e:b7:5e:51:53:21:7e:d9:99:a8:
                    53:c7:c5:48:1c:61:af:62:79:5f:13:a9:87:6b:ee:
                    96:da:5d:33:21:fc:6b:1d:00:05:73:e8:f4:93:b0:
                    66:ed:1d:37:96:9f:88:3d:4d:c5:0c:5d:8a:cb:3f:
                    c4:8a:16:f2:a4:5d:81:d4:46:41:3c:e9:79:1f:c0:
                    01:fd:a5:b3:08:ed:a5:47:7e:c2:da:a8:4b:89:99:
                    36:75:58:9b:26:2b:7e:ea:5f:2d:22:11:66:d1:1c:
                    27:1a:6c:4f:2c:55:61:de:80:93:6c:6f:6b:ce:8a:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:E8:EF:27:3A:03:F5:35:D7:C2:00:05:AD:2D:D2:78:3E:E4:DC
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fq3o7yc6A_U118IABa0t0ng-5Nw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:25:75:ac:f6:32:5e:75:54:b1:89:8a:aa:90:77:e1:db:a7:
         c2:4a:5b:57:97:5b:ff:30:be:dd:b4:50:07:f7:46:1f:62:d4:
         00:29:c7:02:43:0e:19:86:6f:f1:f8:d3:59:12:cb:0f:44:0d:
         68:37:67:aa:9c:28:bd:84:4c:0e:f7:e6:03:7f:fe:2b:79:8a:
         df:8b:cc:7c:56:a6:48:89:30:cd:5a:7a:c3:48:e5:ec:ba:e6:
         53:94:e9:87:4f:5c:ee:92:2d:df:9d:ed:35:16:69:01:89:a4:
         c3:73:87:be:85:de:dd:64:8e:27:55:82:34:e5:be:7c:e2:5a:
         86:d1:1d:d3:f2:3f:4c:d2:1e:21:35:5e:87:3e:16:cf:f9:2d:
         3e:5e:4c:84:1e:2f:14:61:ea:cb:a1:e9:33:29:63:77:82:ff:
         5c:96:cf:91:04:82:c8:81:9f:79:af:b7:fd:bf:c4:96:13:ec:
         ac:03:84:87:79:da:ad:b9:1b:20:1b:06:8b:13:dd:1d:07:0f:
         47:ef:b8:6d:af:a6:50:f2:d5:b6:5d:ba:ff:23:ed:fc:62:c5:
         1c:2f:5b:82:79:a5:7b:f3:6d:0b:5f:89:6a:25:07:e0:6c:6c:
         55:4a:78:dd:61:04:62:d9:f4:89:dc:22:f9:7c:d1:1b:92:7a:
         a4:a1:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org