Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/FS76bvg7LbjG1KiY4vw6JJmRYwU.roa
File:                     FS76bvg7LbjG1KiY4vw6JJmRYwU.roa (raw, json)
Hash identifier:          VDybExIgQTXVOfMfuOOprnJPaxzhfyiejKKbs0YKma0=
Subject key identifier:   15:2E:FA:6E:F8:3B:2D:B8:C6:D4:A8:98:E2:FC:3A:24:99:91:63:05
Certificate issuer:       /CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
Certificate serial:       FF6D
Authority key identifier: 7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/FS76bvg7LbjG1KiY4vw6JJmRYwU.roa
Signing time:             Mon 25 Apr 2022 08:15:57 +0000
ROA not before:           Mon 25 Apr 2022 08:15:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49036
IP address blocks:        185.113.168.0/24 maxlen: 24
                          185.113.169.0/24 maxlen: 24
                          185.113.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65389 (0xff6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
        Validity
            Not Before: Apr 25 08:15:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=152efa6ef83b2db8c6d4a898e2fc3a2499916305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:cd:ba:a7:e4:44:46:c9:3f:2b:f1:f7:a9:91:
                    41:de:76:88:15:0e:75:c9:ee:39:bd:ee:5a:14:21:
                    72:63:51:d8:78:15:25:c2:d8:47:bd:23:a1:90:45:
                    80:b8:bb:8d:6a:59:bb:3e:85:25:a6:c8:e6:58:a6:
                    0a:b4:e6:a2:f6:df:62:8d:27:09:13:8c:00:8a:55:
                    41:c7:45:72:15:75:4d:e5:2c:75:27:25:8d:6d:ff:
                    06:97:de:5a:87:ce:8a:09:c0:f8:29:fd:d0:76:b8:
                    d6:e4:ae:25:4d:04:40:c7:e4:b2:78:ac:6b:4f:56:
                    17:9c:b6:a6:35:56:0a:5b:a4:3b:54:f1:87:ed:a7:
                    3f:ce:0b:92:ac:f9:c0:f1:ec:a7:67:02:48:a3:ea:
                    2a:86:ed:36:ce:ac:27:b8:51:12:2c:b2:e6:38:bd:
                    b4:b7:96:65:3c:d2:7e:b4:6e:e1:44:e4:34:e4:63:
                    80:41:e2:cc:54:dc:24:84:04:57:5d:db:68:a4:ae:
                    2b:f6:60:9a:c8:1d:84:08:aa:86:bd:d4:87:af:28:
                    f3:67:51:77:06:d6:9b:98:1b:86:9c:97:0f:ce:34:
                    93:08:fe:23:da:27:c4:9a:4f:1a:d5:f0:67:fe:6e:
                    f3:4b:43:f8:d9:f6:70:8d:e9:14:cb:95:1d:cf:9c:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2E:FA:6E:F8:3B:2D:B8:C6:D4:A8:98:E2:FC:3A:24:99:91:63:05
            X509v3 Authority Key Identifier:
                keyid:7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/FS76bvg7LbjG1KiY4vw6JJmRYwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.168.0-185.113.170.255

    Signature Algorithm: sha256WithRSAEncryption
         4e:40:ab:e0:8d:96:20:62:57:25:24:13:c7:82:19:e5:56:c1:
         7e:a3:90:db:16:91:8c:5b:bd:ec:cb:53:73:ea:1f:a5:41:cd:
         1d:f4:3d:0a:8b:96:e7:1a:62:09:3d:b5:26:95:22:2c:ce:51:
         35:38:9b:49:40:c5:4f:52:c3:d2:8b:1c:47:a0:06:6e:ff:9a:
         9e:0d:a0:4b:6b:d3:ab:c7:8f:46:c0:a4:6c:76:4c:61:bf:19:
         2d:91:e6:b3:e1:a1:0a:c4:98:ac:04:c4:e2:fb:bd:e7:e6:4e:
         e7:bd:ad:15:8f:80:ca:18:d6:46:0d:2b:9d:fb:e6:e2:ea:f7:
         65:11:da:6a:fa:e9:d8:d5:33:c7:b4:ff:3f:9f:e0:06:ca:eb:
         3e:2c:71:e1:b0:11:de:99:70:5f:fa:59:31:82:7c:a5:60:b0:
         13:66:d6:02:de:3c:82:30:53:59:35:5f:2d:f6:29:f1:7b:f5:
         3c:8b:81:f4:7e:f2:cc:6e:a3:f0:92:3e:f3:2e:8f:1e:23:01:
         d0:f4:4b:83:ad:54:cb:a7:b6:e2:92:3c:a2:3f:6c:e6:57:ab:
         a9:ed:a0:5d:ca:6b:55:e9:2f:ec:84:f4:ee:6b:2a:00:f8:5f:
         b1:d9:05:13:5d:f1:94:14:20:a8:a9:00:89:29:50:dd:fd:9b:
         51:8a:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-ams.rpki-client.org