Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/u__oqRqNdYwfGzfF5duLG9z6doM.roa
File:                     u__oqRqNdYwfGzfF5duLG9z6doM.roa (raw, json)
Hash identifier:          HVbiNZ0qGcLQQJPKI1YDCIh6MWVaq6u3ybjHw0hz0aw=
Subject key identifier:   BB:FF:E8:A9:1A:8D:75:8C:1F:1B:37:C5:E5:DB:8B:1B:DC:FA:76:83
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       0A92A2A9
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/u__oqRqNdYwfGzfF5duLG9z6doM.roa
Signing time:             Sat 01 Jan 2022 16:07:20 +0000
ROA not before:           Sat 01 Jan 2022 16:07:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209142
IP address blocks:        185.72.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177382057 (0xa92a2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Jan  1 16:07:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bbffe8a91a8d758c1f1b37c5e5db8b1bdcfa7683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:3e:b9:eb:d4:7d:8e:18:ef:6d:5e:73:c3:
                    60:a5:7d:f3:22:c7:ed:26:7d:d1:ef:9a:42:ce:ce:
                    a2:5a:6b:04:c8:b2:90:6c:f4:a7:86:38:f0:6b:49:
                    4c:af:c5:96:29:4e:57:34:ef:03:1c:94:5a:48:ce:
                    da:66:3e:39:93:1e:5c:ea:5e:b4:2f:99:9a:60:c0:
                    b2:04:26:2a:0b:e9:04:23:7e:4f:9d:45:61:d9:28:
                    d1:6d:ca:80:f2:97:8e:be:2e:91:ba:00:c0:1e:6f:
                    a2:1b:66:50:6f:87:b2:5a:4a:8e:be:45:11:48:a7:
                    4a:3a:3e:ef:1a:06:e6:ec:a4:90:7e:77:74:e7:cb:
                    20:a2:9f:4b:b6:a7:ee:12:a9:af:03:7c:b0:82:c7:
                    40:82:e7:db:0f:aa:8e:36:bc:85:24:14:45:65:d4:
                    91:83:ff:8a:c0:a2:b8:33:ef:e8:99:ec:b3:dc:62:
                    6e:70:00:2b:cf:ae:bf:1b:c7:94:98:fe:ac:6f:8f:
                    ce:b4:cc:9d:fa:42:93:3c:36:80:38:1d:6c:5f:ea:
                    16:36:65:66:44:d2:ee:35:b0:38:31:1c:ac:b1:31:
                    39:73:fc:d8:f4:91:c4:b4:e2:5d:c9:ba:0e:28:2f:
                    69:10:77:5e:6f:8c:b2:02:bc:7f:59:a1:0b:ed:50:
                    1e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FF:E8:A9:1A:8D:75:8C:1F:1B:37:C5:E5:DB:8B:1B:DC:FA:76:83
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/u__oqRqNdYwfGzfF5duLG9z6doM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.72.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:33:58:97:6e:19:10:d5:0d:6e:99:12:35:75:bf:71:e8:62:
         fe:81:4c:1f:1c:e3:10:45:56:93:0d:55:bc:ee:09:ff:0a:08:
         c4:8b:ca:9e:50:75:4f:a3:bd:15:4f:1f:d5:85:cc:fb:d2:f0:
         98:a1:d0:77:fe:85:82:ef:23:cf:64:00:76:e1:79:f9:0f:af:
         a9:28:0c:f2:4f:42:51:f7:ab:20:69:44:77:42:12:42:42:9d:
         7e:d1:e3:e6:ea:3f:fe:39:13:86:ef:b9:90:af:8f:f2:45:88:
         ae:9b:3d:0e:bd:97:d1:37:ae:1d:8d:74:37:73:44:29:12:6e:
         f6:d9:8c:3d:48:b4:5e:f4:f8:5d:33:30:08:54:5f:e9:25:2a:
         eb:12:e3:39:ce:ba:ed:b9:79:e9:3f:40:30:20:2b:88:ea:1e:
         9f:f0:c9:f9:74:b0:75:9b:5d:6f:61:54:bd:25:61:0d:fc:84:
         b2:7f:1c:1b:7d:f9:41:a7:ed:a7:24:e0:77:f2:1b:bb:ad:74:
         9b:71:32:83:a9:bb:e9:9c:b7:81:a7:e9:c6:22:02:55:a5:82:
         b1:f9:48:b6:cf:b4:52:86:c5:97:f8:2c:9e:a1:c0:2c:4c:28:
         4f:19:cb:c8:49:37:93:eb:bc:d7:0a:52:64:1b:2d:2e:0f:c9:
         ad:fb:00:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org