Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pzz5Hv22NbwG9aMSAo6ly9vyMRk.roa
File:                     pzz5Hv22NbwG9aMSAo6ly9vyMRk.roa (raw, json)
Hash identifier:          k3TT0iATFVcD85YdFagg/c/AP5sYoMJ4wkw7JuMj+0o=
Subject key identifier:   A7:3C:F9:1E:FD:B6:35:BC:06:F5:A3:12:02:8E:A5:CB:DB:F2:31:19
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       0B0F32A4
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pzz5Hv22NbwG9aMSAo6ly9vyMRk.roa
Signing time:             Tue 08 Feb 2022 10:13:19 +0000
ROA not before:           Tue 08 Feb 2022 10:13:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        185.255.56.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185545380 (0xb0f32a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Feb  8 10:13:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a73cf91efdb635bc06f5a312028ea5cbdbf23119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3c:ef:ba:59:e4:cf:1c:37:c4:da:e4:6c:3f:
                    12:f2:71:9b:55:98:1c:99:0c:05:92:48:26:82:52:
                    6b:3a:39:03:1e:e1:be:11:31:6d:26:a5:7b:c9:ba:
                    89:8d:27:af:23:9f:72:34:03:1a:a7:bf:20:d3:20:
                    9d:11:33:b6:10:b7:6d:57:bf:90:08:8c:f3:bd:f9:
                    03:d9:31:ec:c5:a5:58:83:a4:87:56:46:f7:a4:4b:
                    da:e9:64:f6:36:a0:df:2e:71:e4:e9:f0:e1:d0:a0:
                    e3:23:eb:20:60:85:c7:fb:55:76:3b:8d:09:9c:b0:
                    67:6c:d8:af:52:48:eb:ce:c7:ba:a6:42:6f:e7:07:
                    12:cf:c4:ea:ac:68:79:d3:cc:45:a9:30:34:44:c6:
                    7c:0a:b5:b9:b1:b6:bd:a8:15:70:2b:6c:82:79:f9:
                    96:86:cc:ae:c4:8f:4c:b1:a2:62:88:be:e8:4d:d8:
                    c1:46:b0:ef:ae:db:8d:78:cb:61:a9:ec:11:08:0b:
                    2a:4e:98:70:4a:42:4d:3c:6b:f8:48:c2:e7:cb:4e:
                    ab:25:da:bf:0c:84:fa:d4:29:e4:17:36:86:61:a0:
                    25:cf:93:71:58:7f:12:a5:16:72:9e:14:05:f9:84:
                    88:03:fe:5e:17:12:7d:cd:ff:b2:04:f8:33:4b:d7:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3C:F9:1E:FD:B6:35:BC:06:F5:A3:12:02:8E:A5:CB:DB:F2:31:19
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pzz5Hv22NbwG9aMSAo6ly9vyMRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:f9:8b:b6:2e:62:c0:44:91:05:fc:f7:45:84:4f:d4:bf:30:
         e7:a1:b6:8c:d9:89:ad:35:aa:cb:a4:f7:69:c2:8b:8c:68:16:
         25:34:31:b9:8c:d5:88:48:3f:cc:a2:07:57:82:40:52:41:c8:
         cd:a7:f5:c3:f0:92:fb:3e:e2:b2:61:fc:98:92:11:20:cf:2e:
         3f:1e:90:96:79:99:ba:9a:a0:b0:33:77:fa:7e:37:87:44:bb:
         10:6d:9c:bf:f7:4b:16:29:88:37:0d:0b:a9:76:d6:c8:09:1e:
         2d:36:f2:2a:d9:ee:08:7d:57:04:2a:f8:93:b4:18:bb:0b:31:
         1a:02:78:80:15:64:c5:1b:ea:0e:03:4e:85:45:4c:91:79:70:
         05:6d:db:35:62:0a:5f:7d:a2:7b:59:e0:84:d6:1a:80:63:c9:
         03:e7:c1:30:5e:9c:0d:02:a7:ea:55:11:cf:7f:61:94:de:5e:
         f0:e2:f7:fe:3d:cd:ea:c0:94:30:1e:6a:a0:41:e6:71:cb:77:
         08:a8:a2:98:fb:d3:b1:f6:91:9e:25:a3:b0:5e:e5:c0:4f:91:
         28:4b:d6:d8:62:04:48:8d:3f:71:2d:37:23:49:f2:5b:2f:11:
         e9:bf:d4:23:92:df:62:be:16:23:b8:7c:1d:f5:a5:1a:4e:a9:
         67:f5:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org