Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/FEfbFEuFPrGjMiyrSSLZqKY0vBQ.roa
File:                     FEfbFEuFPrGjMiyrSSLZqKY0vBQ.roa (raw, json)
Hash identifier:          Pc5I05HETeBUHpFo/dY06Yc3zYQ2Xq94MEMKyPWmpLw=
Subject key identifier:   14:47:DB:14:4B:85:3E:B1:A3:32:2C:AB:49:22:D9:A8:A6:34:BC:14
Certificate issuer:       /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial:       0665EC10
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/FEfbFEuFPrGjMiyrSSLZqKY0vBQ.roa
Signing time:             Fri 25 Mar 2022 13:19:12 +0000
ROA not before:           Fri 25 Mar 2022 13:19:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        185.149.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107342864 (0x665ec10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
        Validity
            Not Before: Mar 25 13:19:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1447db144b853eb1a3322cab4922d9a8a634bc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:5f:60:96:c2:d9:62:d8:72:69:5a:12:ed:
                    94:c9:cc:0d:18:48:91:85:26:30:77:5d:ef:ab:b5:
                    4c:12:11:c8:86:6e:ab:b8:75:b7:51:ad:3d:f6:5a:
                    22:40:72:9c:40:49:52:e0:89:1a:85:36:67:c2:50:
                    76:69:c3:ca:d1:99:84:47:85:e3:b2:c8:4b:a4:56:
                    8d:e2:6e:5a:50:94:a4:81:ac:6f:56:e8:99:14:5b:
                    a6:63:bc:5d:8d:dc:b4:f1:24:02:91:43:97:9f:8e:
                    76:93:d6:28:4a:37:0f:2e:3e:10:73:e3:38:c7:38:
                    de:e3:2f:60:02:e4:68:f9:15:a5:7a:fb:12:45:55:
                    aa:26:5e:5a:61:28:c3:c3:92:d7:18:9c:5b:22:2f:
                    e2:2e:43:09:7a:62:6b:06:61:a6:19:96:5e:ee:fd:
                    74:23:ce:1d:a0:07:b9:05:44:a6:f9:bd:d0:93:1e:
                    47:f0:39:88:58:51:f9:c5:09:e3:d1:43:af:a4:4c:
                    a4:8c:b0:80:59:68:f2:a7:1d:fe:27:5a:c6:aa:a6:
                    70:27:01:5e:f8:ed:94:39:e4:83:8d:f6:52:13:92:
                    6e:b0:61:ac:a2:67:5e:1e:eb:6a:6e:b0:30:c2:25:
                    09:8d:9a:c6:ed:ce:b2:da:a8:53:42:78:cf:1f:51:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:47:DB:14:4B:85:3E:B1:A3:32:2C:AB:49:22:D9:A8:A6:34:BC:14
            X509v3 Authority Key Identifier:
                keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/FEfbFEuFPrGjMiyrSSLZqKY0vBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:45:b3:89:44:02:86:a2:b5:b3:2e:fc:f4:47:b5:38:69:00:
         8c:a0:a2:15:d2:0a:d2:34:ac:c8:0d:4f:4d:c6:70:0b:2e:68:
         e6:b1:ea:9b:3d:9b:3f:7b:ea:cc:89:2c:fc:92:97:37:cd:6a:
         67:4a:5a:84:e5:b2:b7:a3:66:7c:e6:27:d4:90:47:74:ce:e5:
         74:6a:a3:3a:37:08:27:73:0f:50:26:89:8b:26:f6:13:8a:49:
         11:dc:bd:3b:35:c5:fd:25:66:b3:50:1a:7d:81:5f:7e:ee:84:
         29:de:76:dc:97:72:15:ae:16:f3:5a:7d:b3:85:fa:b1:7f:6f:
         6b:e0:f7:74:93:cc:5e:8d:a1:6f:ec:32:6e:5e:12:61:c4:04:
         42:7b:1c:a8:3c:c9:bb:ad:fb:13:36:2a:b6:71:8b:bc:73:b0:
         a4:8f:00:35:4d:3d:a3:13:75:51:0c:a1:3a:d3:24:51:f1:73:
         c3:be:c1:34:5a:17:89:81:64:91:b3:6e:06:83:eb:ec:ed:5e:
         7f:5f:4c:96:82:b7:2f:ce:3b:be:32:d0:8c:ae:9a:18:4c:fa:
         42:de:32:95:e4:2d:7d:48:38:dd:fa:d4:f8:48:70:3a:2e:1b:
         b7:11:aa:38:ea:0a:d7:a3:36:68:64:26:95:f5:36:e7:17:36:
         62:ae:98:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org