Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Feu_tK5cOTyeFHU3OLfH96vIpY0.roa
File:                     Feu_tK5cOTyeFHU3OLfH96vIpY0.roa (raw, json)
Hash identifier:          hPMklMVnZ4WkbJzY1QAKdSX2poagzq0HIdLpppigTOk=
Subject key identifier:   15:EB:BF:B4:AE:5C:39:3C:9E:14:75:37:38:B7:C7:F7:AB:C8:A5:8D
Certificate issuer:       /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial:       06D2FCB5
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Feu_tK5cOTyeFHU3OLfH96vIpY0.roa
Signing time:             Wed 04 May 2022 13:13:02 +0000
ROA not before:           Wed 04 May 2022 13:13:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201789
IP address blocks:        185.54.163.0/24 maxlen: 24
                          185.54.162.0/24 maxlen: 24
                          185.54.161.0/24 maxlen: 24
                          185.54.160.0/24 maxlen: 24
                          185.241.213.0/24 maxlen: 24
                          185.241.214.0/24 maxlen: 24
                          185.119.88.0/24 maxlen: 24
                          185.119.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114490549 (0x6d2fcb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
        Validity
            Not Before: May  4 13:13:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15ebbfb4ae5c393c9e14753738b7c7f7abc8a58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:88:0f:d2:fa:43:5b:a0:ed:11:22:8e:51:
                    d1:da:24:b9:73:00:d0:4a:59:11:7b:5d:c6:50:36:
                    84:fd:24:0b:3c:8a:f4:e5:7c:5e:e1:11:01:ae:3a:
                    90:31:1a:19:d9:90:b8:f7:5d:d3:62:9a:03:4c:97:
                    a5:b5:f5:1e:9f:2d:3e:a9:be:e1:53:45:b6:0e:b3:
                    0c:b8:4f:bf:91:79:c4:f9:71:ac:f5:db:7a:41:df:
                    af:54:69:31:a6:29:04:d3:dc:42:0c:7f:b2:69:42:
                    9b:3f:07:ca:92:46:54:64:03:a0:6d:52:4e:ff:8d:
                    30:18:73:14:d5:bd:91:da:56:54:5c:67:2a:19:00:
                    76:39:82:93:7a:c6:52:5d:d7:58:44:78:3f:4b:16:
                    7d:52:00:58:ea:d9:a7:0e:5c:2f:92:9a:cd:5b:9b:
                    a1:95:d9:73:60:51:91:6b:af:43:f4:65:a3:ec:36:
                    50:e5:14:0c:9f:5b:71:03:fb:cb:23:08:00:b0:c6:
                    1f:06:b1:f6:3f:ca:5d:2e:d4:f2:bb:c2:a3:62:75:
                    e0:61:74:f2:42:26:6b:6e:3c:5a:29:86:c2:00:a7:
                    7e:99:28:f0:79:bc:31:69:c5:85:34:e1:b9:19:fe:
                    23:c4:79:17:b1:40:c7:52:db:fb:17:7b:ce:88:aa:
                    26:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:BF:B4:AE:5C:39:3C:9E:14:75:37:38:B7:C7:F7:AB:C8:A5:8D
            X509v3 Authority Key Identifier:
                keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Feu_tK5cOTyeFHU3OLfH96vIpY0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.160.0/22
                  185.119.88.0/24
                  185.119.91.0/24
                  185.241.213.0-185.241.214.255

    Signature Algorithm: sha256WithRSAEncryption
         6e:dc:49:60:16:be:48:c4:dc:ef:9b:8c:87:f5:b9:49:7a:4f:
         28:59:6f:4a:d5:ed:a3:a1:2a:2e:68:50:9e:89:18:85:a6:9e:
         58:d6:0d:2c:2e:f5:dd:4f:f8:24:18:ba:99:35:f3:4b:99:39:
         35:30:ee:d8:2b:38:c7:af:ce:04:40:b7:88:b2:91:a9:09:4c:
         e2:ff:6e:5c:22:b6:d1:c4:5e:e5:46:18:68:18:bb:36:c2:07:
         8c:f8:d8:20:83:d6:8c:d2:b3:7e:3f:ce:1a:09:6e:ec:1a:cc:
         8d:cd:b1:2a:fa:90:6a:70:cc:d4:af:d6:f4:a2:91:aa:66:16:
         87:c9:99:94:a1:c3:91:e4:8d:2c:84:da:69:4e:eb:28:6b:f0:
         ec:27:90:d8:12:e1:e6:6d:f1:db:48:8a:48:b3:58:17:17:36:
         c9:f8:c6:85:4b:4c:9c:f7:68:a8:b8:b1:ee:06:32:60:7b:48:
         65:62:b2:40:6d:10:c3:ac:2e:21:a3:bd:86:72:6b:0e:56:88:
         46:73:86:d8:ff:d8:47:80:9d:56:08:20:13:12:8f:c8:8f:0c:
         b0:61:2c:26:20:66:93:53:1e:0d:04:c5:ed:ac:da:e5:19:15:
         32:ff:3d:95:81:9a:b3:66:9b:2b:23:18:db:a9:98:43:56:8d:
         86:3a:c0:3c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEBtL8tTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NDVkMDQyZjY1ZTFiMTMwM2E0NGU0M2UwZTAyNzQ4YTc1ODM3YjQ0MB4XDTIyMDUw
NDEzMTMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTVlYmJmYjRhZTVj
MzkzYzllMTQ3NTM3MzhiN2M3ZjdhYmM4YTU4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANdPiA/S+kNboO0RIo5R0dokuXMA0EpZEXtdxlA2hP0kCzyK
9OV8XuERAa46kDEaGdmQuPdd02KaA0yXpbX1Hp8tPqm+4VNFtg6zDLhPv5F5xPlx
rPXbekHfr1RpMaYpBNPcQgx/smlCmz8HypJGVGQDoG1STv+NMBhzFNW9kdpWVFxn
KhkAdjmCk3rGUl3XWER4P0sWfVIAWOrZpw5cL5KazVuboZXZc2BRkWuvQ/Rlo+w2
UOUUDJ9bcQP7yyMIALDGHwax9j/KXS7U8rvCo2J14GF08kIma248WimGwgCnfpko
8Hm8MWnFhTThuRn+I8R5F7FAx1Lb+xd7zoiqJr8CAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBQV67+0rlw5PJ4UdTc4t8f3q8iljTAfBgNVHSMEGDAWgBSEXQQvZeGxMDpE
5D4OAnSKdYN7RDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hGMEVMMlhoc1RBNlJPUS1EZ0owaW5XRGUwUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGUvOTZkYmNkLTZhMzktNGMyMC05MTI4LWQ4YzM1MWQ5M2VjNi8x
L0ZldV90SzVjT1R5ZUZIVTNPTGZIOTZ2SXBZMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUv
OTZkYmNkLTZhMzktNGMyMC05MTI4LWQ4YzM1MWQ5M2VjNi8xL2hGMEVMMlhoc1RB
NlJPUS1EZ0owaW5XRGUwUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEArk2oAMEALl3WAMEALl3WzAMAwQA
ufHVAwQAufHWMA0GCSqGSIb3DQEBCwUAA4IBAQBu3ElgFr5IxNzvm4yH9blJek8o
WW9K1e2joSouaFCeiRiFpp5Y1g0sLvXdT/gkGLqZNfNLmTk1MO7YKzjHr84EQLeI
spGpCUzi/25cIrbRxF7lRhhoGLs2wgeM+Nggg9aM0rN+P84aCW7sGsyNzbEq+pBq
cMzUr9b0opGqZhaHyZmUocOR5I0shNppTusoa/DsJ5DYEuHmbfHbSIpIs1gXFzbJ
+MaFS0yc92iouLHuBjJge0hlYrJAbRDDrC4ho72GcmsOVohGc4bY/9hHgJ1WCCAT
Eo/IjwywYSwmIGaTUx4NBMXtrNrlGRUy/z2VgZqzZpsrIxjbqZhDVo2GOsA8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:21 2024 by rpki-client on console-ams.rpki-client.org