Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/w8sFODBij03K7cJ_AdYI1N-cWks.roa
File:                     w8sFODBij03K7cJ_AdYI1N-cWks.roa (raw, json)
Hash identifier:          rkPAe9NHQPlHDrmT7uiPGgJ8uqmKC3Zl1WP/px6i1F4=
Subject key identifier:   C3:CB:05:38:30:62:8F:4D:CA:ED:C2:7F:01:D6:08:D4:DF:9C:5A:4B
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       018414506F085A542219D41F7DF0B9B35065
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/w8sFODBij03K7cJ_AdYI1N-cWks.roa
Signing time:             Wed 26 Oct 2022 12:42:06 +0000
ROA not before:           Wed 26 Oct 2022 12:42:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        185.240.134.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:14:50:6f:08:5a:54:22:19:d4:1f:7d:f0:b9:b3:50:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Oct 26 12:42:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3cb053830628f4dcaedc27f01d608d4df9c5a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:aa:8a:93:d9:56:08:91:a3:43:68:55:88:89:
                    33:7c:04:a6:57:0a:6a:f0:b8:af:12:ad:8f:21:e7:
                    08:5e:c2:2b:1a:06:32:7f:7f:7f:b4:b5:f4:13:5c:
                    8a:76:50:ac:db:b2:69:52:d7:5a:2a:27:54:69:56:
                    b2:0f:3d:b7:aa:d7:12:36:be:ac:11:5b:23:14:bc:
                    cb:e9:41:f9:1f:de:4d:ce:13:ac:ea:2e:4d:25:44:
                    60:f7:5e:91:a0:d2:b6:da:14:a3:54:74:8e:0c:58:
                    65:58:11:db:26:d8:38:56:5e:7a:dc:f2:69:ef:65:
                    c7:29:3c:0d:f6:31:83:3c:8f:a5:41:87:fa:ea:6d:
                    71:b4:64:02:93:ed:60:a5:1c:dd:46:9b:07:e2:bc:
                    b0:f1:c1:49:bb:71:9a:9b:d8:16:00:93:25:46:15:
                    6c:4f:bf:38:6a:4c:cf:60:73:4e:5b:ec:c4:e9:9b:
                    d2:ed:eb:c2:fb:e5:1b:58:01:90:85:fd:7f:16:fa:
                    b5:15:a2:ee:39:de:8a:e9:8e:bc:ed:08:34:4d:fc:
                    9c:3c:db:07:d2:81:46:eb:e8:ec:d6:c6:e4:f8:40:
                    fb:3e:3a:06:7a:1e:db:91:76:61:94:52:94:8e:db:
                    91:2b:0f:39:d4:64:81:86:0a:4f:31:d0:02:a5:31:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CB:05:38:30:62:8F:4D:CA:ED:C2:7F:01:D6:08:D4:DF:9C:5A:4B
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/w8sFODBij03K7cJ_AdYI1N-cWks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:6f:d1:e1:e9:bb:aa:d7:44:56:6d:01:11:ed:a3:6c:d3:e8:
         06:6a:08:76:fe:f0:49:aa:17:79:53:cb:f8:29:4e:3c:78:84:
         d6:87:8b:b2:91:0c:29:e9:e5:ea:11:71:f0:13:8d:16:46:9e:
         26:e0:7d:25:2b:12:0b:f7:de:f6:56:85:71:9c:09:85:c0:0b:
         9a:0b:fc:28:f3:65:9f:5d:4a:62:9e:63:7c:a1:2a:f0:ef:7c:
         a8:5d:1a:96:9b:dc:47:20:02:35:ec:1b:16:42:d7:cb:c0:46:
         83:18:cf:e8:ca:73:9a:68:1f:17:8a:61:e2:54:0a:97:4b:9c:
         2b:58:4a:85:c8:10:f5:3f:5f:ae:6f:5a:bd:82:0a:c4:32:07:
         a9:8f:22:ba:74:1c:32:7b:40:f4:f2:7b:bf:0b:b4:f5:64:35:
         eb:04:ae:70:22:3e:a0:ab:19:29:89:fd:ac:73:9e:0c:b1:8e:
         a0:35:6b:11:2f:55:23:1b:6b:9b:68:15:66:80:e4:69:08:f9:
         ca:d2:bc:82:38:ca:90:0d:6d:70:5c:13:60:24:17:d4:75:12:
         e9:38:49:af:e8:d0:dc:2b:de:8a:1e:32:66:e5:80:ac:e2:8b:
         fb:f0:12:41:9a:61:3e:d4:23:77:2a:dd:37:8f:04:54:7d:5d:
         35:8a:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org