Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/FJUiOxTXzGFmWIMBOvr_wzpaOeU.roa
File:                     FJUiOxTXzGFmWIMBOvr_wzpaOeU.roa (raw, json)
Hash identifier:          GCcRYUa/VQ+5pFBJQ6mbRBciKYybY8Hwge/WeViyurE=
Subject key identifier:   14:95:22:3B:14:D7:CC:61:66:58:83:01:3A:FA:FF:C3:3A:5A:39:E5
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       018326DBD3D2C011FD325EE2B422BC9FD009
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/FJUiOxTXzGFmWIMBOvr_wzpaOeU.roa
Signing time:             Sat 10 Sep 2022 10:04:44 +0000
ROA not before:           Sat 10 Sep 2022 10:04:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21249
IP address blocks:        85.187.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:26:db:d3:d2:c0:11:fd:32:5e:e2:b4:22:bc:9f:d0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Sep 10 10:04:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1495223b14d7cc61665883013afaffc33a5a39e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:00:79:33:9e:4b:40:8a:4b:7d:e8:a6:8f:
                    17:5a:c2:e2:b3:3b:be:93:a1:87:c5:12:48:d1:40:
                    8a:bc:c5:94:d4:17:ce:35:62:0f:00:20:42:f8:02:
                    56:25:37:b2:0f:c9:e7:84:75:ba:ab:74:97:bd:23:
                    0f:e5:40:2e:9a:79:76:3f:0b:cd:52:ba:25:0e:e5:
                    45:e3:20:98:20:b5:5c:ac:78:b1:4f:a9:51:4f:88:
                    f0:2c:3c:15:c6:c7:88:8a:57:d1:d3:ad:1b:f6:6c:
                    46:52:e2:dc:59:08:47:cb:fd:a9:6a:45:9b:ae:19:
                    3e:af:88:55:c7:1a:0f:f4:b7:72:77:ce:bc:d3:fb:
                    8e:36:a3:25:6c:66:91:ee:7f:ac:6e:a6:9f:4e:57:
                    2c:dd:de:2d:5a:9a:37:60:9f:10:4b:5f:3c:d9:06:
                    e5:c4:7e:c8:47:52:8b:ae:56:1e:89:66:68:0c:75:
                    fe:b6:5a:fd:3e:5f:81:2d:d4:72:c3:f1:24:89:59:
                    33:87:3b:3e:94:96:36:4b:a1:19:b4:db:c4:aa:28:
                    a4:9a:7e:76:4b:e4:d1:0e:0e:bb:07:81:63:36:c5:
                    97:17:c3:fb:de:cb:72:df:14:6b:7c:df:0c:9c:d0:
                    bd:cc:52:74:5f:dd:29:ee:d4:f7:3b:79:de:68:78:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:22:3B:14:D7:CC:61:66:58:83:01:3A:FA:FF:C3:3A:5A:39:E5
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/FJUiOxTXzGFmWIMBOvr_wzpaOeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.187.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:5f:87:b2:2b:65:12:6d:16:7e:33:84:ed:b4:0b:d1:2a:8f:
         15:58:62:46:b1:8f:c2:67:a1:e7:b7:e8:3e:68:99:6f:71:0f:
         86:d1:e3:13:e1:85:60:46:60:95:1b:01:3e:63:e4:6d:73:2e:
         3c:da:f6:93:eb:13:be:84:5e:d3:2e:a6:ff:c4:5c:74:f4:a4:
         bd:8c:0e:cf:e6:63:e9:00:a0:9e:c6:86:cd:5a:f8:fc:c3:c5:
         33:fb:bb:2f:52:f1:2d:48:38:6f:4a:3c:e6:61:53:0c:18:1a:
         03:bb:dc:5b:de:8a:96:3c:cd:41:4d:53:3b:f2:5b:5c:cd:4c:
         6e:df:75:bb:3e:e2:45:d5:c5:b0:c2:40:fe:03:a6:a3:a7:a2:
         42:93:61:32:d8:81:b6:b3:d4:a1:46:c6:ed:93:ce:b2:f7:a6:
         79:f9:55:f6:8a:21:c5:55:0f:04:8e:55:55:49:aa:8f:e6:f2:
         ee:b9:cd:47:4f:2c:b2:1d:78:f8:69:e7:19:64:ea:5b:f5:f6:
         f3:25:56:c7:5c:0e:86:98:69:99:23:65:f7:23:71:98:60:52:
         61:61:a4:52:02:d4:e4:e1:63:8b:0d:27:93:3a:d1:39:83:ab:
         d1:b6:42:60:c6:48:c8:b2:32:98:87:b0:79:e3:76:c0:1e:2e:
         81:46:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org