Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/TTV3R6Ya2uUKk3B6o_3qpy4ACAE.roa
File:                     TTV3R6Ya2uUKk3B6o_3qpy4ACAE.roa (raw, json)
Hash identifier:          DJISjnc95BxTfaGJyXAaFH+h1GA3gWTjjPyrFEW7Uic=
Subject key identifier:   4D:35:77:47:A6:1A:DA:E5:0A:93:70:7A:A3:FD:EA:A7:2E:00:08:01
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       0B0ABBBC
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/TTV3R6Ya2uUKk3B6o_3qpy4ACAE.roa
Signing time:             Tue 08 Feb 2022 09:36:06 +0000
ROA not before:           Tue 08 Feb 2022 09:36:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        185.255.56.0/24 maxlen: 24
                          185.255.57.0/24 maxlen: 24
                          185.255.56.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185252796 (0xb0abbbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Feb  8 09:36:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d357747a61adae50a93707aa3fdeaa72e000801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:e3:86:ea:72:42:3f:2e:5f:3a:ca:24:2e:
                    39:c6:d9:45:14:22:df:c5:e2:e0:5d:8a:72:01:a4:
                    0d:b4:7b:23:d5:07:5a:2f:94:de:ca:6c:5f:dc:c8:
                    56:21:20:4c:52:29:ac:7c:b5:be:9d:2e:8d:cc:da:
                    42:6a:a1:fe:16:c3:ed:b3:e2:af:1a:24:a2:e9:59:
                    54:c2:da:57:e7:7f:11:a4:39:27:6f:f5:78:9a:54:
                    a0:a1:33:fb:55:be:08:0d:d5:09:03:e1:3c:f6:f1:
                    45:c4:59:ad:bc:25:17:07:c3:4b:48:0d:83:e6:ab:
                    5c:38:f3:c1:9e:6a:6a:22:63:3c:a4:08:93:ed:24:
                    44:b1:94:30:94:6f:16:8a:83:c6:17:81:28:e0:ea:
                    0a:07:35:7c:90:ca:9c:d5:45:1a:d1:f6:85:cf:d2:
                    54:ee:a3:69:10:f4:82:97:d4:2e:fe:25:cb:34:dc:
                    c3:00:a8:4f:64:a2:75:9b:55:60:48:2d:43:80:fd:
                    03:98:19:24:06:00:a8:23:b4:b1:d7:d2:44:76:67:
                    ec:78:25:89:24:9c:ef:7c:6d:e1:7b:59:78:64:b5:
                    2e:e2:19:66:e7:73:27:4b:da:3f:97:ec:bf:45:c0:
                    38:3a:cd:23:41:cf:bd:a3:ff:a8:ec:50:13:a4:27:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:35:77:47:A6:1A:DA:E5:0A:93:70:7A:A3:FD:EA:A7:2E:00:08:01
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/TTV3R6Ya2uUKk3B6o_3qpy4ACAE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:a2:0c:95:dd:6d:aa:02:a4:29:78:73:0a:0f:22:6b:7e:
         62:bf:fc:52:1c:c3:8a:90:1e:69:d4:b0:ac:60:a2:03:8e:75:
         d7:5f:91:2e:02:ce:dc:f0:98:2e:88:ac:47:0f:39:90:6c:88:
         b9:8f:39:f3:2c:2b:59:ba:b7:06:2d:77:3e:70:06:78:ba:7c:
         97:52:8c:e1:99:bf:e3:dd:e5:84:2b:32:e2:28:fd:76:44:5f:
         d3:1d:b6:fa:d3:39:64:d2:f7:dd:c1:9e:7e:06:3b:96:8e:91:
         ba:4a:03:14:2c:0a:ec:1c:52:80:06:07:a5:43:37:6d:57:61:
         71:bf:54:4f:ab:9e:55:ce:5e:d1:20:b0:30:bd:e3:ce:32:95:
         82:af:29:bb:de:ff:62:37:08:70:a9:19:27:00:38:67:ee:8f:
         99:fd:fe:a0:b8:49:24:d6:b9:da:10:54:34:c8:ef:31:c8:55:
         b4:17:c3:48:48:5e:4e:43:89:b3:a0:70:bf:be:c5:7e:6a:89:
         ee:36:40:c2:53:2c:67:65:5f:8d:c1:82:13:ce:94:57:bf:94:
         46:2a:cf:79:c2:d8:6b:23:30:a4:4c:95:91:7f:02:0d:d5:f6:
         47:7c:77:95:0a:af:f1:03:52:0c:e7:ad:51:1b:13:83:c3:64:
         d9:61:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org