Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/q75F8r4UZYW2RZ7RkedP_JjEBQs.roa
File:                     q75F8r4UZYW2RZ7RkedP_JjEBQs.roa (raw, json)
Hash identifier:          02B3fEC2LPhsKbLj+SWxNfYxLan/CbHbYt3L8x/5qX4=
Subject key identifier:   AB:BE:45:F2:BE:14:65:85:B6:45:9E:D1:91:E7:4F:FC:98:C4:05:0B
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       0A8E31EE
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/q75F8r4UZYW2RZ7RkedP_JjEBQs.roa
Signing time:             Sat 01 Jan 2022 16:07:18 +0000
ROA not before:           Sat 01 Jan 2022 16:07:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205129
IP address blocks:        85.187.48.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177091054 (0xa8e31ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Jan  1 16:07:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=abbe45f2be146585b6459ed191e74ffc98c4050b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:3a:40:78:d4:58:d0:fe:c7:34:62:80:ce:
                    4e:b3:61:e7:3a:b2:d9:5b:51:7d:65:41:0e:ff:2f:
                    21:18:f8:d0:ab:78:de:c0:cc:5a:07:2e:27:39:1d:
                    ff:d2:fd:66:e3:12:ab:b2:b8:ff:43:8f:61:d9:62:
                    8e:be:97:c1:d8:f0:82:49:33:fe:90:2c:82:87:e2:
                    bc:b4:65:fd:1f:98:54:db:26:c0:2e:1f:eb:18:43:
                    36:a6:d4:9b:52:6b:a2:54:19:7f:fd:b5:7a:18:75:
                    3c:52:b9:19:c7:56:24:44:62:1f:ea:08:d0:89:9b:
                    f1:44:59:6e:20:10:b5:b0:33:65:76:9a:b9:26:de:
                    4e:3e:35:c8:bf:3f:51:a5:6e:ea:58:c7:5c:53:24:
                    19:5b:b3:67:27:da:4d:7e:44:07:f8:5b:d7:f2:30:
                    79:bf:21:03:36:62:3c:ca:65:e8:bc:7b:d6:6e:53:
                    36:8f:9f:4f:b0:db:af:dd:91:15:87:bb:fe:f2:51:
                    cd:bb:0d:09:b8:a4:4a:58:87:51:c2:72:c6:50:cf:
                    4b:27:09:fc:53:32:8c:b5:8b:de:6d:99:14:da:25:
                    e0:7a:22:29:d8:09:c4:4f:0b:15:55:b1:be:59:a0:
                    c1:7f:b7:67:0d:82:70:a6:e8:c3:d2:da:fb:b9:31:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:45:F2:BE:14:65:85:B6:45:9E:D1:91:E7:4F:FC:98:C4:05:0B
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/q75F8r4UZYW2RZ7RkedP_JjEBQs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.187.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:96:be:f9:6c:d8:3c:d4:0e:ed:d5:56:7c:83:0f:a8:d8:
         b4:16:de:7c:8e:04:0f:fc:58:06:8a:cf:60:b0:c4:35:a5:6d:
         cb:11:f7:26:de:45:20:6c:50:c4:36:62:0b:29:b2:55:8e:e0:
         b1:66:0c:c4:ff:27:6f:97:8c:75:0a:8d:6b:bf:b1:87:2d:d8:
         8b:e1:5f:9d:81:b7:fc:42:56:1e:c5:fa:f3:e5:93:60:58:3f:
         01:5b:b4:1e:7f:fa:6c:0d:58:f5:03:92:17:5b:c3:5f:f4:10:
         5b:27:59:7c:c2:a3:ee:64:94:e1:6e:68:b4:3b:f6:2f:65:84:
         5e:b9:f9:ba:cb:f5:38:83:91:ae:b7:5c:1f:fa:01:cd:24:0f:
         b4:46:48:1b:fd:2a:33:6a:02:74:73:99:37:0b:81:fe:7a:e5:
         6d:53:fa:bb:ea:6e:1c:f5:43:bf:f0:3d:3b:f9:78:ce:44:76:
         e1:ab:db:f2:50:5e:8d:e4:31:a3:d2:f6:1b:99:c2:6c:ce:95:
         24:3f:6d:e4:5c:8f:d4:95:f5:40:4e:70:ed:b8:dd:c2:a5:ac:
         43:75:ec:21:54:7f:0b:c3:38:b1:70:53:ee:ce:95:f6:f3:6b:
         e4:a0:3e:bb:3d:cb:a0:71:8c:4c:09:82:f1:3a:9c:bd:80:11:
         ce:9f:c2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org