Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/B6me3dhJI1Mjnd_WVZTUGyc1Mos.roa
File:                     B6me3dhJI1Mjnd_WVZTUGyc1Mos.roa (raw, json)
Hash identifier:          3SfIODEPNKdEy4KByj7bb416rw1c9ZI2BG2Ic1QLQR8=
Subject key identifier:   07:A9:9E:DD:D8:49:23:53:23:9D:DF:D6:55:94:D4:1B:27:35:32:8B
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       0A908320
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/B6me3dhJI1Mjnd_WVZTUGyc1Mos.roa
Signing time:             Sat 01 Jan 2022 16:07:19 +0000
ROA not before:           Sat 01 Jan 2022 16:07:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206045
IP address blocks:        85.187.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177242912 (0xa908320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Jan  1 16:07:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07a99eddd8492353239ddfd65594d41b2735328b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:d1:c9:37:91:94:b5:83:76:69:8c:ac:4f:
                    1e:43:30:90:3f:8c:86:f5:ee:99:4f:02:fc:85:70:
                    91:79:c9:17:40:d8:31:25:7b:3e:21:56:7d:7f:46:
                    31:be:a7:40:1f:3d:1d:85:a3:bc:14:23:c2:28:0b:
                    f1:8d:a4:e8:a5:1b:fa:ec:87:26:20:fd:85:64:cd:
                    38:ed:6d:96:ae:af:9d:49:27:09:0c:81:7c:12:cc:
                    c3:46:7f:b2:d5:ef:53:35:56:dd:8e:35:c0:59:fb:
                    a5:7c:68:db:62:08:b7:c8:b4:d1:1f:6a:d7:9e:31:
                    35:76:15:41:d8:d5:6b:85:4a:28:0f:bc:f4:eb:f2:
                    17:e0:a8:3c:49:4a:9e:9d:22:5a:ac:21:86:6d:76:
                    93:00:4f:aa:9d:fe:ee:e0:af:74:7b:e0:61:99:b5:
                    b8:1a:7f:b6:db:df:33:2f:91:95:b9:c9:b6:28:18:
                    77:05:74:b9:9f:e5:0a:6a:ba:2d:05:be:d1:d1:a3:
                    55:d1:52:6f:2b:d0:63:35:19:ca:2b:b8:7f:48:91:
                    bb:db:a4:56:c5:5a:14:d5:13:a2:04:81:52:67:e8:
                    c4:3d:27:8d:7e:e8:79:91:18:f2:ad:eb:4a:4d:88:
                    c3:1c:34:12:06:38:94:86:4b:b5:ef:76:17:10:3b:
                    bb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A9:9E:DD:D8:49:23:53:23:9D:DF:D6:55:94:D4:1B:27:35:32:8B
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/B6me3dhJI1Mjnd_WVZTUGyc1Mos.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.187.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:3f:12:52:06:25:39:23:7f:63:c9:3f:2c:76:02:81:9f:20:
         30:af:16:07:ee:00:fb:a8:41:1b:b8:41:eb:8b:09:ad:99:e6:
         ed:02:31:4b:8f:12:e8:08:03:7f:b9:6f:01:12:ab:15:23:7c:
         15:82:ba:77:a3:9e:4a:35:17:74:f2:39:e2:ec:fd:75:39:16:
         68:16:ae:cb:97:5a:d0:2d:cb:ba:a6:c2:87:4f:d9:10:70:10:
         4f:e4:46:b8:ee:15:d2:28:92:5a:e0:44:98:82:76:24:71:40:
         84:ec:63:f6:57:48:56:9f:ec:5d:38:17:41:b9:0a:58:4c:39:
         a9:5d:cc:84:da:ff:55:25:8e:d6:f6:4e:af:f1:55:60:b9:00:
         7e:1b:e2:02:81:be:1b:d2:d8:36:3b:e4:dd:53:2f:37:d2:b7:
         d6:32:11:42:46:0d:68:43:88:b4:a2:d4:ed:b0:02:01:fd:9b:
         fa:b9:0d:d5:d4:03:14:75:01:40:f9:52:93:92:a4:97:5a:a1:
         95:40:6a:df:0d:9a:d5:a6:f3:75:62:96:e5:24:45:86:29:a4:
         ee:88:4e:6c:79:d5:f6:c3:39:b1:00:d2:5d:2a:41:09:42:67:
         17:e7:8b:61:21:94:fb:0b:ff:1a:81:32:c4:58:a0:7a:9e:46:
         c5:fd:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org