Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/4zjc_iFop46ciADD6Iz4pWoW2ws.roa
File:                     4zjc_iFop46ciADD6Iz4pWoW2ws.roa (raw, json)
Hash identifier:          JgFP2NaXhkUE7g+w+M83p7qch9EZVHS5YO0GdQ2U1VA=
Subject key identifier:   E3:38:DC:FE:21:68:A7:8E:9C:88:00:C3:E8:8C:F8:A5:6A:16:DB:0B
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       0C321E95
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/4zjc_iFop46ciADD6Iz4pWoW2ws.roa
Signing time:             Wed 25 May 2022 06:21:13 +0000
ROA not before:           Wed 25 May 2022 06:21:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        185.255.56.0/23 maxlen: 24
                          185.240.132.0/23 maxlen: 24
                          185.240.134.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204611221 (0xc321e95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: May 25 06:21:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e338dcfe2168a78e9c8800c3e88cf8a56a16db0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bd:f7:f5:a8:16:94:fb:43:df:f0:71:7c:07:
                    2d:4a:dd:b7:25:95:e3:85:a7:14:ea:c2:e4:83:81:
                    90:82:3e:bc:5f:33:65:cd:03:12:31:c7:41:f5:1f:
                    a6:a3:d4:ec:ab:e3:4d:0e:4d:fd:b0:c5:69:d1:43:
                    c9:07:2c:64:db:51:df:95:ec:6a:38:79:70:9c:5d:
                    ac:ec:ef:a9:3c:52:f7:af:0f:fe:87:93:e6:28:be:
                    b7:54:17:cd:15:1d:97:51:57:28:ab:88:82:07:12:
                    1b:64:78:58:03:58:23:21:3b:1a:2d:f9:1f:15:e3:
                    2c:70:09:ab:b6:11:1e:af:29:92:dd:12:1e:7f:76:
                    6c:dd:ad:16:4f:10:e9:0e:39:7a:20:74:00:6c:4b:
                    db:5b:7f:0d:a8:84:5f:5a:76:36:35:03:15:9b:41:
                    f6:d5:1c:ae:20:9d:0c:36:df:fd:96:3b:f0:2e:f4:
                    0b:2e:a9:07:9f:e3:87:4d:bf:d5:73:b6:ef:2f:ed:
                    d3:a3:e7:96:79:5e:e3:7e:ee:53:d0:89:ea:92:10:
                    20:98:cb:fe:06:23:35:06:4b:07:02:6a:88:f9:d6:
                    0f:b6:02:3c:38:34:7e:7a:06:33:81:f5:79:d0:f2:
                    42:4b:0a:0e:48:7b:3b:10:7c:9a:6a:db:a4:28:85:
                    84:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:38:DC:FE:21:68:A7:8E:9C:88:00:C3:E8:8C:F8:A5:6A:16:DB:0B
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/4zjc_iFop46ciADD6Iz4pWoW2ws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.132.0/22
                  185.255.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:19:86:a5:11:53:16:8a:60:6b:d7:31:96:27:04:c9:ed:aa:
         f6:31:26:2b:9f:23:4c:7e:1d:ef:a5:f2:d3:f2:1a:59:c1:c3:
         e5:98:66:e7:23:e1:4b:60:3a:2f:1f:38:05:9f:70:06:ad:da:
         79:93:10:00:2f:0c:cc:e5:d7:99:b4:6f:58:a8:22:48:0d:1f:
         6d:13:b1:1f:06:69:f4:30:3a:69:85:5f:f5:82:b3:51:b2:7b:
         f9:a5:c1:26:b0:a5:1d:70:34:ea:35:66:16:93:d2:e4:4a:cb:
         8a:63:7d:a1:a3:ba:fb:28:9f:a1:e6:c5:4a:5e:41:fb:15:53:
         6a:16:ac:41:41:1c:d1:de:ec:4e:b1:a5:a3:24:32:50:ed:7d:
         b4:b2:cd:ae:f3:40:d5:8a:fd:69:26:6f:f0:4b:e6:32:40:0d:
         1f:30:77:42:c6:1c:15:09:f6:d0:45:44:4f:e2:91:00:71:83:
         55:ac:c3:36:ec:c1:75:58:7a:ae:ab:60:9c:9f:58:f3:cc:fd:
         f1:ea:51:07:35:97:d5:81:9d:62:62:83:de:1a:4b:52:be:78:
         ec:ad:c6:2e:dc:6d:7f:57:2c:df:ef:ae:c6:8e:62:61:15:c7:
         e6:b4:46:43:db:ad:be:49:09:01:7c:4a:37:ef:73:8f:30:fa:
         6d:ec:ea:68
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDDIelTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZWJmMzAyMDFmMTJhMDQwZDM4NmQyYjRlZWQ0NDg0NjIzZTRkMTFiMB4XDTIyMDUy
NTA2MjExM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTMzOGRjZmUyMTY4
YTc4ZTljODgwMGMzZTg4Y2Y4YTU2YTE2ZGIwYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOy99/WoFpT7Q9/wcXwHLUrdtyWV44WnFOrC5IOBkII+vF8z
Zc0DEjHHQfUfpqPU7KvjTQ5N/bDFadFDyQcsZNtR35Xsajh5cJxdrOzvqTxS968P
/oeT5ii+t1QXzRUdl1FXKKuIggcSG2R4WANYIyE7Gi35HxXjLHAJq7YRHq8pkt0S
Hn92bN2tFk8Q6Q45eiB0AGxL21t/DaiEX1p2NjUDFZtB9tUcriCdDDbf/ZY78C70
Cy6pB5/jh02/1XO27y/t06Pnlnle437uU9CJ6pIQIJjL/gYjNQZLBwJqiPnWD7YC
PDg0fnoGM4H1edDyQksKDkh7OxB8mmrbpCiFhPsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTjONz+IWinjpyIAMPojPilahbbCzAfBgNVHSMEGDAWgBT+vzAgHxKgQNOG
0rTu1EhGI+TRGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19yOHdJQjhTb0VEVGh0SzA3dFJJUmlQazBScy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8x
LzR6amNfaUZvcDQ2Y2lBREQ2SXo0cFdvVzJ3cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
ZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8xL19yOHdJQjhTb0VE
VGh0SzA3dFJJUmlQazBScy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArnwhAMEAbn/ODANBgkqhkiG9w0B
AQsFAAOCAQEAKhmGpRFTFopga9cxlicEye2q9jEmK58jTH4d76Xy0/IaWcHD5Zhm
5yPhS2A6Lx84BZ9wBq3aeZMQAC8MzOXXmbRvWKgiSA0fbROxHwZp9DA6aYVf9YKz
UbJ7+aXBJrClHXA06jVmFpPS5ErLimN9oaO6+yifoebFSl5B+xVTahasQUEc0d7s
TrGloyQyUO19tLLNrvNA1Yr9aSZv8EvmMkANHzB3QsYcFQn20EVET+KRAHGDVazD
NuzBdVh6rqtgnJ9Y88z98epRBzWX1YGdYmKD3hpLUr547K3GLtxtf1cs3++uxo5i
YRXH5rRGQ9utvkkJAXxKN+9zjzD6bezqaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org