Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Fq07RKsTH5wZBRtNUJ65BEKO4KY.roa
File:                     Fq07RKsTH5wZBRtNUJ65BEKO4KY.roa (raw, json)
Hash identifier:          eUAR4aZZ4Vwvx5EruzXdm+9dk9NDZf1k2VyrnShQxwM=
Subject key identifier:   16:AD:3B:44:AB:13:1F:9C:19:05:1B:4D:50:9E:B9:04:42:8E:E0:A6
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       01839DE278697E3B4E19259D4FA27B02F68D
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Fq07RKsTH5wZBRtNUJ65BEKO4KY.roa
Signing time:             Mon 03 Oct 2022 12:46:48 +0000
ROA not before:           Mon 03 Oct 2022 12:46:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        213.21.231.0/24 maxlen: 24
                          213.21.229.0/24 maxlen: 24
                          213.21.232.0/24 maxlen: 24
                          213.21.234.0/24 maxlen: 24
                          213.21.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:9d:e2:78:69:7e:3b:4e:19:25:9d:4f:a2:7b:02:f6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Oct  3 12:46:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16ad3b44ab131f9c19051b4d509eb904428ee0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f4:e8:e1:01:46:44:33:a4:35:a7:3d:6b:21:
                    d4:68:4a:72:4a:23:47:b0:85:7b:ae:ff:a3:c4:75:
                    70:c4:9f:17:61:42:20:2b:46:8f:97:2f:64:c7:76:
                    79:e9:16:e4:d9:cf:8f:d9:78:6b:ca:e7:c6:f4:08:
                    1e:4c:6d:6b:1f:15:46:81:eb:80:54:47:e5:07:35:
                    6d:fa:3c:72:8c:df:c8:31:05:6f:50:41:af:f5:b1:
                    fe:a7:31:11:b8:ed:26:7c:30:1d:91:5d:19:81:d4:
                    c9:21:b2:04:a7:87:fc:e4:4f:ef:67:14:9f:12:fd:
                    e3:da:5a:e2:1e:4c:42:59:bc:0b:de:3c:2e:03:0d:
                    2d:18:a6:cd:5d:24:45:98:e2:c1:18:64:37:fc:81:
                    99:a3:90:63:5a:f7:18:a0:cf:97:20:6f:96:43:d4:
                    8b:d3:bd:17:3c:fb:9c:f1:08:01:e1:9c:2a:d8:ff:
                    d8:35:4b:c9:f1:5d:ba:26:2b:1a:ae:e5:3d:be:b3:
                    dc:63:68:60:86:0d:3a:af:38:75:1a:7c:04:5a:cb:
                    07:5f:70:d3:1b:ec:4d:53:97:cc:b4:20:d5:18:c7:
                    58:27:fb:37:51:df:7c:91:96:47:d4:87:a8:5e:8c:
                    0e:18:c0:10:e7:11:96:d4:9f:28:2b:44:b9:d8:4b:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AD:3B:44:AB:13:1F:9C:19:05:1B:4D:50:9E:B9:04:42:8E:E0:A6
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Fq07RKsTH5wZBRtNUJ65BEKO4KY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.21.229.0/24
                  213.21.231.0-213.21.232.255
                  213.21.234.0/24
                  213.21.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c7:a2:ca:ca:9e:5a:5c:87:07:0b:90:7a:7c:69:8c:80:92:
         fb:71:19:86:ef:57:ec:27:4f:46:7c:11:57:d0:7e:1b:b9:61:
         e9:04:8f:93:09:28:e9:f9:58:a5:b9:60:fa:b4:5d:60:8b:7d:
         36:54:db:0f:21:69:24:c2:c9:ee:79:75:cd:60:65:b4:7e:95:
         d8:d6:17:8f:62:43:36:50:e8:c0:df:07:2c:df:e4:10:fe:de:
         d7:e4:15:b2:28:ea:7a:5b:0d:e6:3f:8d:c6:39:b5:b3:72:0a:
         36:74:a8:80:15:79:d0:db:7d:79:7e:2f:a1:d2:f3:96:f0:45:
         5f:5e:36:f9:b9:74:3d:cb:2e:30:ac:80:df:b8:9f:a2:2d:84:
         16:8c:ae:30:78:b0:f6:31:0e:66:cb:84:dd:d9:7c:a7:d1:c2:
         09:59:1c:61:17:45:f3:e3:c0:37:48:6f:e2:91:e5:dd:64:b0:
         18:77:2c:93:34:0b:c3:d7:e7:c2:4b:6b:60:dd:c7:b4:71:3e:
         c2:5b:7b:f5:28:ba:c3:14:fb:d7:7a:6c:06:e6:10:80:27:b3:
         4f:a5:12:6d:13:7b:c7:95:d6:5d:26:52:b6:2a:1c:2e:62:97:
         47:8e:5a:e1:ea:14:c2:4d:43:30:f1:b9:d8:d5:7e:f1:8e:8f:
         cc:6b:a8:2b
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYOd4nhpfjtOGSWdT6J7AvaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjIxMDAzMTI0NjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmFkM2I0NGFiMTMxZjljMTkwNTFiNGQ1MDllYjkwNDQyOGVlMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPTo4QFGRDOkNac9ayHUaEpySiNH
sIV7rv+jxHVwxJ8XYUIgK0aPly9kx3Z56Rbk2c+P2XhryufG9AgeTG1rHxVGgeuA
VEflBzVt+jxyjN/IMQVvUEGv9bH+pzERuO0mfDAdkV0ZgdTJIbIEp4f85E/vZxSf
Ev3j2lriHkxCWbwL3jwuAw0tGKbNXSRFmOLBGGQ3/IGZo5BjWvcYoM+XIG+WQ9SL
070XPPuc8QgB4Zwq2P/YNUvJ8V26JisaruU9vrPcY2hghg06rzh1GnwEWssHX3DT
G+xNU5fMtCDVGMdYJ/s3Ud98kZZH1IeoXowOGMAQ5xGW1J8oK0S52EvUqQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFBatO0SrEx+cGQUbTVCeuQRCjuCmMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvRnEwN1JLc1RINXdaQlJ0TlVKNjVCRUtPNEtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQA1RXlMAwD
BADVFecDBADVFegDBADVFeoDBADVFfQwDQYJKoZIhvcNAQELBQADggEBABDHosrK
nlpchwcLkHp8aYyAkvtxGYbvV+wnT0Z8EVfQfhu5YekEj5MJKOn5WKW5YPq0XWCL
fTZU2w8haSTCye55dc1gZbR+ldjWF49iQzZQ6MDfByzf5BD+3tfkFbIo6npbDeY/
jcY5tbNyCjZ0qIAVedDbfXl+L6HS85bwRV9eNvm5dD3LLjCsgN+4n6IthBaMrjB4
sPYxDmbLhN3ZfKfRwglZHGEXRfPjwDdIb+KR5d1ksBh3LJM0C8PX58JLa2Ddx7Rx
PsJbe/UousMU+9d6bAbmEIAns0+lEm0Te8eV1l0mUrYqHC5il0eOWuHqFMJNQzDx
udjVfvGOj8xrqCs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org