Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/FN-uF6Pte48wcOb-4r0Om09cStc.roa
File:                     FN-uF6Pte48wcOb-4r0Om09cStc.roa (raw, json)
Hash identifier:          wDWBwrP4qEa5johb9HTjfw8tr0hS71cWZ0NJ/+XfB0I=
Subject key identifier:   14:DF:AE:17:A3:ED:7B:8F:30:70:E6:FE:E2:BD:0E:9B:4F:5C:4A:D7
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       1765C44C
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/FN-uF6Pte48wcOb-4r0Om09cStc.roa
Signing time:             Sat 01 Jan 2022 09:54:05 +0000
ROA not before:           Sat 01 Jan 2022 09:54:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200649
IP address blocks:        62.228.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392545356 (0x1765c44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan  1 09:54:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14dfae17a3ed7b8f3070e6fee2bd0e9b4f5c4ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:bc:77:26:2f:56:bc:0a:72:c7:9e:1d:66:
                    79:20:5a:93:45:48:a0:dc:6d:a5:22:66:eb:ec:53:
                    d8:d7:66:47:58:58:ea:e6:68:bb:04:b4:4a:f3:87:
                    c0:06:5e:cf:92:3e:9e:56:df:3f:9f:c0:ea:e0:03:
                    7a:b5:b1:54:dc:0c:fe:3d:c0:57:5c:36:50:2c:fe:
                    cd:64:13:00:e2:74:b3:bd:59:b6:25:2a:4c:46:52:
                    a8:78:45:3a:84:9d:a4:bc:83:b8:e0:9b:ef:d0:ff:
                    98:2b:a0:d4:a7:db:e0:9a:30:f1:8e:a9:3a:c8:ea:
                    22:41:0f:d3:64:9b:17:03:7e:13:45:01:c6:46:6d:
                    31:b0:2b:d6:d7:1f:22:b2:73:22:bf:fe:3e:94:40:
                    b3:c9:f8:a5:fd:2c:13:7f:91:03:43:42:6a:48:34:
                    bd:2e:7d:97:ff:01:18:7e:65:a0:cb:63:d2:b4:82:
                    9c:93:4d:b9:38:50:89:85:ca:95:4f:88:68:b5:dd:
                    67:31:d6:86:f3:9e:b0:b2:e9:6f:c2:c6:a8:ec:dd:
                    ee:db:eb:50:6c:5f:c3:ba:50:f4:3d:b0:ee:48:d0:
                    9e:61:15:9c:09:f1:4b:6d:7b:43:c2:0d:54:30:b3:
                    84:10:0d:44:17:1d:f9:1c:4d:3a:15:61:bf:ce:14:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DF:AE:17:A3:ED:7B:8F:30:70:E6:FE:E2:BD:0E:9B:4F:5C:4A:D7
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/FN-uF6Pte48wcOb-4r0Om09cStc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.228.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:78:7f:37:6c:2b:01:96:b4:fb:87:a5:7b:68:e3:1e:05:
         08:24:b4:47:3b:e3:13:cd:83:d9:77:73:34:87:91:45:05:82:
         ed:40:78:da:e2:fe:01:80:1b:27:fc:61:3a:b7:af:85:1f:b1:
         73:42:9a:13:db:4f:f4:2b:4f:d7:91:36:6a:4f:31:5e:9f:20:
         54:88:a6:99:f3:08:44:a0:8e:d7:e7:85:e2:bd:e3:22:02:42:
         d4:12:80:be:59:53:09:3d:73:73:b8:3c:48:72:ba:50:12:b4:
         25:c5:0a:3d:a7:e1:65:27:ab:39:8f:ee:23:13:52:25:22:27:
         f0:cb:d0:49:61:ac:6e:5e:f7:fb:f1:e0:5d:18:3e:ed:c1:cf:
         f8:66:08:7c:50:36:c3:05:e8:02:d6:b7:b5:2f:47:19:e6:3f:
         52:11:90:67:45:ef:7b:17:83:59:89:d2:73:f6:86:4f:bc:2b:
         4a:27:be:38:5b:ec:a0:ba:00:4e:85:d2:07:08:fa:db:f2:b0:
         4e:6d:c2:53:03:d6:f5:4e:41:45:44:1d:ac:7e:2c:b1:01:18:
         9c:85:75:f9:f4:eb:3d:06:5b:b9:6f:68:b9:b6:e3:71:b5:ce:
         41:90:fb:46:60:e7:92:c9:47:3e:57:52:ac:ee:23:1e:8b:23:
         50:f6:98:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org