Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/p_FuKQpHvIxXwiCgscIs5-d_XeM.roa
File:                     p_FuKQpHvIxXwiCgscIs5-d_XeM.roa (raw, json)
Hash identifier:          Uy7t8oAZOBwbbKCTMHy3ipf18NqK+330o5TuqeSgRoA=
Subject key identifier:   A7:F1:6E:29:0A:47:BC:8C:57:C2:20:A0:B1:C2:2C:E7:E7:7F:5D:E3
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       17888416
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/p_FuKQpHvIxXwiCgscIs5-d_XeM.roa
Signing time:             Sat 01 Jan 2022 13:03:15 +0000
ROA not before:           Sat 01 Jan 2022 13:03:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12586
IP address blocks:        178.251.228.102/32 maxlen: 32
                          5.1.81.142/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394822678 (0x17888416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  1 13:03:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a7f16e290a47bc8c57c220a0b1c22ce7e77f5de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:7f:eb:bf:b2:44:34:ea:c1:89:0c:26:b0:
                    25:9f:47:73:a1:1b:b9:91:cd:18:36:e3:18:d0:c6:
                    d3:70:97:3f:0a:50:2f:17:0f:54:b4:0a:10:9c:a4:
                    ea:d2:9d:e1:0c:21:7c:8e:9a:a5:ed:4b:56:39:29:
                    d4:45:ec:59:ba:28:aa:c7:1b:4f:cf:63:f0:d2:96:
                    a0:dd:8b:6c:08:cf:9d:e7:93:73:d5:b9:28:3d:66:
                    d0:1d:79:3d:31:5c:ff:df:68:e1:3b:82:42:97:7e:
                    4e:bf:6a:ed:60:2e:af:c1:15:63:61:02:ec:59:76:
                    d7:75:e1:e5:8f:ab:de:80:3e:80:49:d1:96:0c:ee:
                    53:aa:82:f9:0e:22:c8:6c:eb:89:b7:29:1c:d2:9a:
                    c5:61:31:b2:96:1a:6f:6c:97:80:c6:a4:a0:40:5e:
                    57:06:60:0e:10:e5:6b:7c:8d:61:d2:89:8c:69:47:
                    05:d0:b0:5e:cb:0d:0f:23:fc:27:d8:14:ec:77:3c:
                    cc:b2:59:07:91:5e:34:70:dd:11:30:bc:06:21:be:
                    44:57:ac:7d:02:a3:06:5d:5c:94:d6:16:22:4d:fd:
                    12:4b:c4:16:17:39:13:ea:d5:ff:02:73:37:16:bc:
                    88:2d:ba:32:10:3a:fa:74:bb:55:82:af:db:12:a2:
                    e0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F1:6E:29:0A:47:BC:8C:57:C2:20:A0:B1:C2:2C:E7:E7:7F:5D:E3
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/p_FuKQpHvIxXwiCgscIs5-d_XeM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.81.142/32
                  178.251.228.102/32

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:24:13:7e:3a:fe:28:a6:42:3d:1b:ac:cc:d3:ec:10:5c:
         76:a8:8e:d3:3f:9e:97:d5:b8:b0:d2:31:2d:51:27:29:8e:a5:
         bc:bd:5f:76:91:1b:54:17:ad:da:34:97:fd:f0:7e:43:f0:3f:
         72:d2:06:d5:3e:5b:35:d0:5f:91:19:18:ae:1e:bc:f8:de:f7:
         f1:8b:a6:b3:00:63:2a:1f:f7:42:56:da:43:a9:5c:4f:92:f4:
         d1:68:43:37:d7:47:dd:0c:f5:2d:ed:73:a9:e2:77:37:d2:99:
         dd:94:50:90:53:f4:01:cf:83:61:e3:ba:20:d8:c9:e8:cc:e2:
         ed:37:df:93:38:14:68:f5:ce:a1:a1:38:6e:2d:70:08:12:5d:
         13:26:35:6f:f5:ff:99:bf:34:9d:04:aa:d1:0d:41:88:c7:3d:
         0a:c8:54:d8:9a:cb:1a:b0:b8:de:ce:f4:c1:ef:0b:17:c5:8c:
         88:ea:99:82:db:bb:84:75:cb:09:6b:7d:4f:1c:59:fa:8c:a9:
         13:7d:af:fd:57:11:32:d5:e1:72:1a:f8:4d:fc:72:35:0b:08:
         ab:0e:08:44:c7:b5:74:69:75:20:31:80:5d:35:a9:b6:41:bf:
         b7:95:27:ef:d2:b8:ec:7e:02:f0:c4:42:b2:e6:f5:4e:37:c1:
         b9:90:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:31 2024 by rpki-client on console-ams.rpki-client.org