Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/fcuT6Ms_cFJqAo7XXrBuKm6pFT8.roa
File:                     fcuT6Ms_cFJqAo7XXrBuKm6pFT8.roa (raw, json)
Hash identifier:          AMP5wKopuop6HqK03T9bvaCRLzuEXM/Ibx1uXJzIBUw=
Subject key identifier:   7D:CB:93:E8:CB:3F:70:52:6A:02:8E:D7:5E:B0:6E:2A:6E:A9:15:3F
Certificate issuer:       /CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Certificate serial:       8F77
Authority key identifier: B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/fcuT6Ms_cFJqAo7XXrBuKm6pFT8.roa
Signing time:             Tue 31 May 2022 07:29:01 +0000
ROA not before:           Tue 31 May 2022 07:29:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39516
IP address blocks:        194.50.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36727 (0x8f77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
        Validity
            Not Before: May 31 07:29:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7dcb93e8cb3f70526a028ed75eb06e2a6ea9153f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:e5:43:c3:e8:45:b5:0c:de:fb:e9:f4:e8:
                    ce:07:00:bd:42:5d:60:fd:3b:1c:07:fb:90:33:18:
                    bc:af:38:01:f3:16:af:fa:88:94:85:22:71:0e:84:
                    82:7c:33:53:34:e5:45:b9:36:3f:df:f2:f3:29:78:
                    2f:d5:03:f2:6d:dd:24:82:36:3f:3e:65:b2:04:bd:
                    06:da:32:08:b3:b3:ca:0e:72:14:58:99:7d:82:72:
                    b7:19:54:3e:a2:50:a8:80:59:b3:34:bf:fa:42:cd:
                    00:29:ec:0c:5d:90:8f:1f:61:13:8e:9c:e6:40:f5:
                    f7:83:8b:f6:27:75:82:dc:7c:89:d8:86:ca:98:a2:
                    54:10:3d:9c:e5:02:a8:95:9b:76:4b:78:43:55:50:
                    f9:6e:b1:73:91:c4:eb:2a:29:b0:1d:57:a3:7b:01:
                    ba:d5:f3:6f:ec:75:6a:11:e8:7d:62:30:92:63:85:
                    6f:d4:6f:99:19:45:9e:a1:9c:60:cc:86:18:8a:06:
                    08:f6:b1:5c:28:2e:dd:b1:61:15:64:a9:95:a5:2f:
                    00:66:a2:55:0e:64:61:9d:8a:1c:ab:d8:93:a0:9a:
                    de:56:56:c6:d1:33:a1:98:fb:1a:6d:3b:41:06:7f:
                    4e:91:43:37:53:02:63:38:bd:8e:e3:c0:52:20:c1:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CB:93:E8:CB:3F:70:52:6A:02:8E:D7:5E:B0:6E:2A:6E:A9:15:3F
            X509v3 Authority Key Identifier:
                keyid:B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/fcuT6Ms_cFJqAo7XXrBuKm6pFT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:83:68:72:c9:a4:e5:ad:79:f1:41:c3:29:0f:5e:e4:9f:ef:
         d6:29:4b:1d:47:64:93:62:9b:5a:f4:00:57:1e:51:6c:b0:4d:
         cb:bd:a9:1d:74:13:89:1d:52:40:e6:e8:9d:0f:f1:ea:5f:cd:
         38:2b:79:f6:7a:29:44:70:25:70:88:8d:f5:53:c8:9b:f1:82:
         2e:19:86:7b:1f:de:2a:2e:5c:e5:c4:fd:4b:15:bd:ec:5b:f4:
         60:96:52:6d:25:35:44:d6:f4:16:6a:fb:7f:ad:f3:aa:4e:60:
         41:f1:4c:33:a8:64:e2:ed:35:58:47:cd:73:50:ad:b1:d2:15:
         33:f2:51:f4:be:c9:d7:83:d3:37:58:b7:e1:2d:58:20:4e:c7:
         20:19:2b:15:60:d6:bb:3c:65:dd:87:91:76:27:6f:12:95:8e:
         e6:c2:d1:ce:bc:dd:39:73:a4:40:d4:52:4f:85:c4:c4:56:4a:
         c0:a6:95:d3:5e:c6:59:d8:7b:19:2c:bc:dd:39:32:3e:57:46:
         3f:2a:fb:12:e9:53:b1:5b:16:30:e5:0a:b1:60:46:d2:1d:fa:
         3b:94:1f:4f:59:25:1a:32:d1:71:9e:26:ee:8b:1b:25:10:ab:
         b2:17:e8:83:e3:36:35:ee:ea:7b:99:71:f4:13:9b:53:d3:bb:
         fb:ce:29:bd
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAI93MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI0
Mzk1ZjZjZWE5YTAxOGE0Y2M4NDgxOGU2YWEzNTIwZDMyMjIxOGIwHhcNMjIwNTMx
MDcyOTAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3ZGNiOTNlOGNiM2Y3
MDUyNmEwMjhlZDc1ZWIwNmUyYTZlYTkxNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyE3lQ8PoRbUM3vvp9OjOBwC9Ql1g/TscB/uQMxi8rzgB8xav
+oiUhSJxDoSCfDNTNOVFuTY/3/LzKXgv1QPybd0kgjY/PmWyBL0G2jIIs7PKDnIU
WJl9gnK3GVQ+olCogFmzNL/6Qs0AKewMXZCPH2ETjpzmQPX3g4v2J3WC3HyJ2IbK
mKJUED2c5QKolZt2S3hDVVD5brFzkcTrKimwHVejewG61fNv7HVqEeh9YjCSY4Vv
1G+ZGUWeoZxgzIYYigYI9rFcKC7dsWEVZKmVpS8AZqJVDmRhnYocq9iToJreVlbG
0TOhmPsabTtBBn9OkUM3UwJjOL2O48BSIMG68wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFH3Lk+jLP3BSagKO116wbipuqRU/MB8GA1UdIwQYMBaAFLQ5X2zqmgGKTMhI
GOaqNSDTIiGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dERsZmJPcWFBWXBNeUVnWTVxbzFJTk1pSVlzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hMy8xZTVjODgtYzNmYy00ZTc2LWJjNjUtMzkxZmVjMjY3ZGFlLzEv
ZmN1VDZNc19jRkpxQW83WFhyQnVLbTZwRlQ4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8x
ZTVjODgtYzNmYy00ZTc2LWJjNjUtMzkxZmVjMjY3ZGFlLzEvdERsZmJPcWFBWXBN
eUVnWTVxbzFJTk1pSVlzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjIsMA0GCSqGSIb3DQEBCwUAA4IB
AQCVg2hyyaTlrXnxQcMpD17kn+/WKUsdR2STYpta9ABXHlFssE3LvakddBOJHVJA
5uidD/HqX804K3n2eilEcCVwiI31U8ib8YIuGYZ7H94qLlzlxP1LFb3sW/RgllJt
JTVE1vQWavt/rfOqTmBB8UwzqGTi7TVYR81zUK2x0hUz8lH0vsnXg9M3WLfhLVgg
TscgGSsVYNa7PGXdh5F2J28SlY7mwtHOvN05c6RA1FJPhcTEVkrAppXTXsZZ2HsZ
LLzdOTI+V0Y/KvsS6VOxWxYw5QqxYEbSHfo7lB9PWSUaMtFxnibuixslEKuyF+iD
4zY17up7mXH0E5tT07v7zim9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:10 2024 by rpki-client on console-fra.rpki-client.org