Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fasmoYBxmq-iWAB6xoE2Jr4-eLc.roa
File:                     fasmoYBxmq-iWAB6xoE2Jr4-eLc.roa (raw, json)
Hash identifier:          SByIKwEMppI1n/n57tRik8lYZZqw8SbIGLb++x5enNE=
Subject key identifier:   7D:AB:26:A1:80:71:9A:AF:A2:58:00:7A:C6:81:36:26:BE:3E:78:B7
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       1A4EEA3B
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fasmoYBxmq-iWAB6xoE2Jr4-eLc.roa
Signing time:             Tue 31 May 2022 22:10:14 +0000
ROA not before:           Tue 31 May 2022 22:10:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25369
IP address blocks:        185.141.206.0/23 maxlen: 23
                          185.144.100.0/24 maxlen: 24
                          2a06:8ec4::/43 maxlen: 43

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441379387 (0x1a4eea3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: May 31 22:10:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7dab26a180719aafa258007ac6813626be3e78b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:a7:a8:39:d5:8a:64:f5:5f:25:ff:7e:ab:
                    d7:a6:98:b7:40:ae:88:2e:e5:35:d5:15:97:8b:f5:
                    ca:00:82:aa:8e:d8:94:f5:34:9e:3f:9e:7b:35:76:
                    6e:78:dd:01:e4:28:c6:fa:30:6a:d7:bc:a0:fc:0a:
                    ed:d7:e4:91:21:a2:14:56:46:87:6a:bc:49:9c:a6:
                    c6:4e:0a:6d:eb:7c:33:52:c4:7b:82:e9:bf:8c:ea:
                    bb:d1:f6:92:0f:b9:06:7a:ef:92:82:67:27:02:4e:
                    f0:db:ea:ad:c2:15:60:3a:36:1b:74:52:ac:13:b8:
                    25:65:fa:9d:3f:3b:9a:79:d2:46:d4:15:89:ed:cc:
                    1d:e0:04:e9:77:b2:e2:66:c9:7b:78:ae:ce:0a:9c:
                    f5:d6:fa:cb:c9:65:a9:ef:a9:b4:06:f3:5f:0f:8e:
                    7c:96:ce:76:04:4f:1c:d6:28:0a:67:c4:6a:ad:5e:
                    e0:4d:a9:73:b0:83:eb:53:d9:f5:c4:eb:51:78:c5:
                    b2:77:97:7d:25:9b:1e:3f:b2:44:d7:02:ee:8e:bc:
                    da:c5:46:9d:48:7f:cd:9e:08:4c:ff:80:b1:6c:6b:
                    da:8d:e7:c6:c2:13:eb:61:66:76:04:ce:d6:04:23:
                    d2:d3:1b:cb:4a:04:b8:ef:85:d5:53:47:8d:1d:1d:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AB:26:A1:80:71:9A:AF:A2:58:00:7A:C6:81:36:26:BE:3E:78:B7
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fasmoYBxmq-iWAB6xoE2Jr4-eLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.206.0/23
                  185.144.100.0/24
                IPv6:
                  2a06:8ec4::/43

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:87:d6:c2:ec:61:7d:19:54:eb:3d:2b:91:02:33:4f:ec:
         70:73:b3:cf:d3:9a:fa:2c:37:53:2c:8a:92:7c:65:f6:1f:e7:
         52:d7:4a:d5:92:db:45:60:f9:99:4b:4a:42:68:27:bf:9a:80:
         ec:e6:a2:5b:8f:ff:c0:0f:22:f0:31:d8:0f:4d:6d:6f:de:4a:
         de:ba:73:1c:c5:60:fd:39:77:c9:31:31:6d:a6:5a:5e:a6:43:
         03:29:06:1d:20:91:43:4f:04:72:57:33:2a:71:05:c0:22:8b:
         9a:73:77:4d:f7:fa:51:bc:30:57:bf:fb:b5:9b:d7:f7:51:dd:
         fa:6f:fc:2b:33:f3:68:40:b1:27:cb:d4:a0:34:9f:23:aa:d0:
         8c:9d:e8:f1:7f:b8:7b:1a:0f:24:43:6a:5f:5d:67:6c:e5:e0:
         13:8f:4d:37:b0:77:e7:90:16:27:08:a5:cf:21:1e:29:b5:92:
         d9:2d:ff:8b:14:8c:d4:46:5a:d6:9a:62:f5:a2:ce:60:c6:5b:
         f6:ed:6e:7f:8d:e3:b9:33:07:a7:ae:5a:2b:f0:06:74:26:cf:
         e6:46:53:20:ae:30:4e:2b:74:a9:35:cf:34:2a:c4:dd:c4:88:
         ac:ee:bd:ce:d4:24:9a:8c:88:fc:fd:36:c0:6f:96:34:03:27:
         b4:86:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org