Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/fkoa05TRHyz7BTbGrjIWAKmbCz8.roa
File:                     fkoa05TRHyz7BTbGrjIWAKmbCz8.roa (raw, json)
Hash identifier:          ImZfZM5kb+WG5bYKrJjESGU9VaIVlAfuGUUy+bwjB2s=
Subject key identifier:   7E:4A:1A:D3:94:D1:1F:2C:FB:05:36:C6:AE:32:16:00:A9:9B:0B:3F
Certificate issuer:       /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial:       0183228C997E26C9649CA5C963EA05B73CDA
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/fkoa05TRHyz7BTbGrjIWAKmbCz8.roa
Signing time:             Fri 09 Sep 2022 13:59:43 +0000
ROA not before:           Fri 09 Sep 2022 13:59:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        91.207.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:22:8c:99:7e:26:c9:64:9c:a5:c9:63:ea:05:b7:3c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
        Validity
            Not Before: Sep  9 13:59:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e4a1ad394d11f2cfb0536c6ae321600a99b0b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:8e:ce:7a:f2:49:b8:12:ff:42:e3:91:11:
                    87:3a:29:d6:55:e2:52:69:1c:37:fc:8b:0b:3c:29:
                    0f:e1:de:41:f7:eb:8a:a8:a0:89:09:01:3f:46:5b:
                    88:43:df:51:52:92:76:bd:cc:3a:4d:05:e6:2b:d9:
                    17:cf:23:59:02:26:93:25:ac:b2:af:b9:ba:23:a0:
                    dd:0c:91:d5:04:bd:b4:36:61:61:e4:e4:fa:13:6d:
                    b8:ca:20:bc:d1:6a:93:15:e2:2b:26:52:17:36:24:
                    b5:51:2b:fc:fc:7a:18:59:de:c1:f7:9f:e6:1c:00:
                    18:34:f8:48:37:fb:88:d6:68:a3:67:e4:a5:79:16:
                    d7:8d:3c:5a:e8:1d:90:fa:77:32:a6:fc:13:d6:bd:
                    d3:35:49:0a:91:a0:4e:6e:b0:c7:11:8e:a2:9d:31:
                    02:86:60:e9:3b:21:00:78:96:0f:9a:e3:2c:83:38:
                    81:dc:4f:2f:56:52:c9:eb:3d:a0:6e:d9:99:23:08:
                    85:5e:7f:3c:5b:1d:63:f8:02:89:d0:3c:31:2e:1b:
                    d4:73:25:5d:06:2f:82:49:a4:cb:f7:1a:b2:01:50:
                    c5:bb:67:2f:e6:1f:66:ad:49:55:3d:e1:20:4f:c2:
                    48:3c:92:99:ef:99:1c:98:30:1d:fa:a3:72:0a:5c:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4A:1A:D3:94:D1:1F:2C:FB:05:36:C6:AE:32:16:00:A9:9B:0B:3F
            X509v3 Authority Key Identifier:
                keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/fkoa05TRHyz7BTbGrjIWAKmbCz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.207.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:a1:8b:7d:f5:42:fe:7c:bc:b8:c3:d8:41:04:2a:d4:2c:bb:
         60:b7:0c:57:c7:61:83:fa:0b:6f:b0:87:f4:5e:b7:77:57:38:
         29:ee:9a:b2:d4:43:3e:55:1a:60:0e:52:27:52:39:71:4c:1f:
         5e:e1:2e:03:75:24:81:33:c8:65:30:34:73:ba:49:d4:75:6c:
         10:6d:a0:af:41:68:d7:dd:e8:dd:4a:69:74:b8:e5:42:23:6d:
         47:37:c7:65:97:9e:cf:61:8a:1a:2e:00:bb:28:fe:63:ca:14:
         f8:db:66:17:51:a2:08:bc:a4:24:7f:7c:0a:73:51:94:2b:4a:
         62:d3:69:eb:ca:36:79:d4:0c:70:9a:d1:4f:24:a5:ab:88:ae:
         00:99:fc:e7:ba:e4:fe:90:48:82:4c:d3:e3:1b:78:e2:b0:82:
         fe:d7:36:d1:d5:97:21:68:ca:1a:c8:07:64:db:e9:41:d3:21:
         f9:d2:73:db:d2:58:16:89:d7:af:96:53:9d:3f:dd:a7:76:5c:
         07:54:90:45:6d:f6:14:ba:ad:51:f6:4e:5c:bc:92:64:fa:10:
         35:ad:d0:c6:64:76:5b:c6:83:81:f6:eb:a8:a0:29:56:af:f2:
         b9:85:1a:11:21:54:a5:fc:62:b6:10:a6:72:23:2f:ee:ec:68:
         d1:d0:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org