Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1d2aCXyj74r_4wfDoYAYeE6Cp4Y.roa
File:                     1d2aCXyj74r_4wfDoYAYeE6Cp4Y.roa (raw, json)
Hash identifier:          5RBpvkyr+Fyxh3vr8m1KH6iSky/uJpgcgQ6T49Vn7vk=
Subject key identifier:   D5:DD:9A:09:7C:A3:EF:8A:FF:E3:07:C3:A1:80:18:78:4E:82:A7:86
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       0ACDFB36
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1d2aCXyj74r_4wfDoYAYeE6Cp4Y.roa
Signing time:             Mon 17 Jan 2022 18:45:21 +0000
ROA not before:           Mon 17 Jan 2022 18:45:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49773
IP address blocks:        151.237.33.0/24 maxlen: 24
                          151.237.34.0/23 maxlen: 23
                          185.242.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181271350 (0xacdfb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Jan 17 18:45:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d5dd9a097ca3ef8affe307c3a18018784e82a786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:ea:2f:cb:39:0c:88:90:06:cf:a7:3a:16:
                    8b:6c:b3:78:b8:23:9b:34:51:c2:38:09:90:2a:ec:
                    2e:15:05:38:30:9d:18:64:ad:c3:d8:eb:1d:04:e4:
                    e9:51:87:48:78:d3:5b:68:82:8e:e2:7d:ba:f7:a6:
                    0f:f1:21:cf:0a:5c:02:d6:63:af:04:db:71:c8:6c:
                    5d:f7:65:99:cf:d1:95:21:59:92:39:ed:31:bb:14:
                    21:54:de:2a:98:bc:df:57:0d:00:26:be:c8:71:25:
                    17:7f:62:e5:6a:2b:01:37:9e:cf:b3:1c:0b:6f:36:
                    d9:ae:cd:db:d1:20:9d:c9:f1:4c:d6:82:99:88:3a:
                    af:97:d8:33:ff:cb:fe:88:4a:de:90:78:8f:9f:d2:
                    0d:1a:64:ce:05:1f:3f:cd:eb:6d:9b:07:a8:c5:37:
                    97:4f:cb:65:96:c9:d8:dc:c3:2f:09:82:8e:34:b9:
                    af:0b:cd:93:c4:c7:15:9a:59:33:6a:8c:de:5b:14:
                    67:ba:93:83:24:87:74:72:dd:8e:96:e3:ea:cf:98:
                    d8:0e:02:31:fa:52:68:c4:4f:02:a5:52:a0:ae:36:
                    16:22:97:3a:58:60:ad:dd:a9:0f:cd:36:c5:67:e4:
                    3e:2c:b0:09:89:78:7e:68:b7:71:c9:01:7f:a3:36:
                    a2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DD:9A:09:7C:A3:EF:8A:FF:E3:07:C3:A1:80:18:78:4E:82:A7:86
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1d2aCXyj74r_4wfDoYAYeE6Cp4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.237.33.0-151.237.35.255
                  185.242.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d0:95:db:73:1b:d5:42:b3:ac:d0:e8:97:7b:eb:9c:e9:43:
         42:29:49:32:31:55:70:c7:cc:d8:0b:e4:1f:8a:66:b7:f7:96:
         b6:a1:b9:4b:cf:cd:ba:ab:26:40:d3:ee:c4:c0:08:b8:ca:2f:
         3f:6c:48:4c:1d:5c:fd:af:a1:ee:6d:7f:66:38:a9:f0:f1:77:
         03:08:bf:a6:83:6f:92:c4:58:f5:a4:9e:a9:65:47:47:61:36:
         1c:11:32:1c:37:f2:8d:48:c4:78:fc:84:00:9c:a5:e2:d4:02:
         b8:ac:61:e8:c8:28:1b:b9:72:c5:15:e8:71:db:c3:25:97:90:
         66:24:5c:ee:d9:84:18:db:ee:30:6b:11:a4:91:00:a6:27:3f:
         02:74:c4:f0:93:36:1e:ed:6a:bc:e2:c7:d3:e7:7d:d4:c3:3f:
         77:25:64:38:7d:2a:62:33:d4:c7:01:83:e8:ce:ae:c4:4b:38:
         ec:12:2a:95:1b:d8:ed:4c:7f:f3:58:a0:f0:f0:1c:b2:c6:bd:
         97:24:d4:38:05:a4:55:7c:24:de:34:a9:e1:6d:11:49:f0:4a:
         a2:c9:86:3d:6c:0b:89:f7:07:af:bb:95:11:da:48:68:f5:1f:
         37:d5:9c:80:91:8e:77:df:ed:20:36:3c:f2:5d:47:02:5f:82:
         4d:e1:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org