Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/M6BfoDReATD9pCaFI9MXl4Y4UB8.roa
File:                     M6BfoDReATD9pCaFI9MXl4Y4UB8.roa (raw, json)
Hash identifier:          zgWJPwRMTpnBVTqDvF60eWct7PQoe7A4PcsHY8B7zWo=
Subject key identifier:   33:A0:5F:A0:34:5E:01:30:FD:A4:26:85:23:D3:17:97:86:38:50:1F
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       08BA14FC
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/M6BfoDReATD9pCaFI9MXl4Y4UB8.roa
Signing time:             Wed 02 Mar 2022 07:35:24 +0000
ROA not before:           Wed 02 Mar 2022 07:35:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42708
IP address blocks:        45.86.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146412796 (0x8ba14fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Mar  2 07:35:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=33a05fa0345e0130fda4268523d317978638501f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:b1:9a:7d:37:b7:c9:97:61:d4:a5:cc:0e:
                    e4:c5:38:c7:ab:da:4e:90:5d:04:35:c8:98:58:10:
                    42:cb:53:3c:d8:4b:f6:90:71:73:59:c8:72:32:c0:
                    8f:ef:41:23:3a:e3:ae:90:cb:90:4f:9d:39:0b:1f:
                    93:c2:db:96:29:23:5f:2c:1b:54:d3:f7:69:f9:7a:
                    b7:ee:fa:f5:92:3a:fc:78:84:26:fd:d8:90:42:9d:
                    ae:39:05:6f:38:73:48:ac:32:88:c6:17:4e:67:40:
                    fd:af:bf:89:97:f8:b7:9c:83:37:7a:a3:31:ae:74:
                    55:a2:05:88:e6:1b:58:45:ca:3d:e1:88:40:9d:78:
                    14:a2:9a:ca:fa:05:a8:16:b5:af:e8:15:64:5b:ad:
                    1a:f4:4d:29:19:5a:22:7b:b4:28:e8:17:5b:e3:f9:
                    66:3d:ff:dc:13:c1:19:ca:14:2c:ed:a3:80:df:f8:
                    f1:ea:8c:a4:16:a5:02:49:4a:1b:9e:df:56:78:0e:
                    f7:d5:17:0c:59:a6:6d:5b:9a:54:98:10:96:29:e7:
                    c8:28:a1:be:7b:48:fe:4c:f4:ba:43:6b:3f:21:e0:
                    62:f9:2b:ae:dc:45:45:9d:55:3d:c8:b5:d8:b3:7e:
                    a3:ab:b7:16:5f:1b:95:4b:90:79:0f:c8:bb:f7:e0:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A0:5F:A0:34:5E:01:30:FD:A4:26:85:23:D3:17:97:86:38:50:1F
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/M6BfoDReATD9pCaFI9MXl4Y4UB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:63:82:2d:30:be:d5:fe:75:b7:1f:46:1a:bb:6d:23:d2:d3:
         ed:0d:46:33:c5:32:15:5e:50:4e:cf:c4:0b:15:f8:54:a5:27:
         41:1d:2d:ed:72:dd:62:a0:a1:a2:01:0b:7b:38:c7:47:f4:42:
         e7:a8:33:67:1c:c2:56:64:1c:80:ad:b3:71:9b:ae:02:01:4c:
         26:27:17:6e:21:03:d6:ab:c2:dc:fa:84:e2:f6:72:ee:0f:c6:
         da:54:32:79:be:3d:ea:e0:7d:32:2b:c5:02:e2:cd:1a:e6:35:
         b7:af:cf:0c:fe:63:6c:36:f6:ae:e8:d8:00:f0:db:67:1a:25:
         ae:6d:65:d3:71:33:88:9c:94:0c:16:6a:ba:8b:f0:d5:cb:2c:
         71:8b:c0:b7:f8:58:bd:81:4e:45:6f:b6:2b:cc:76:b5:d5:05:
         e6:63:d2:75:64:cf:67:15:1c:6b:a5:6d:89:2f:9e:78:bf:57:
         f2:01:4c:cf:aa:c1:b3:05:5b:61:b3:97:91:09:de:d2:d3:9c:
         79:42:7c:51:d3:8c:42:a4:4f:90:af:39:f5:80:00:99:e3:29:
         1e:9d:a5:9e:a4:03:07:c0:87:46:73:71:bf:25:53:9d:45:02:
         d4:44:25:9d:78:e8:15:46:4b:fd:32:c3:e7:59:e3:50:c8:64:
         40:bd:ad:e8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECLoU/DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
Y2VhMDhlODQyMWRmMmYyNDVjN2NiMzMzZWU3NmExNGE4ODgyZDRhMB4XDTIyMDMw
MjA3MzUyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzNhMDVmYTAzNDVl
MDEzMGZkYTQyNjg1MjNkMzE3OTc4NjM4NTAxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKBJsZp9N7fJl2HUpcwO5MU4x6vaTpBdBDXImFgQQstTPNhL
9pBxc1nIcjLAj+9BIzrjrpDLkE+dOQsfk8LblikjXywbVNP3afl6t+769ZI6/HiE
Jv3YkEKdrjkFbzhzSKwyiMYXTmdA/a+/iZf4t5yDN3qjMa50VaIFiOYbWEXKPeGI
QJ14FKKayvoFqBa1r+gVZFutGvRNKRlaInu0KOgXW+P5Zj3/3BPBGcoULO2jgN/4
8eqMpBalAklKG57fVngO99UXDFmmbVuaVJgQlinnyCihvntI/kz0ukNrPyHgYvkr
rtxFRZ1VPci12LN+o6u3Fl8blUuQeQ/Iu/fg8cMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQzoF+gNF4BMP2kJoUj0xeXhjhQHzAfBgNVHSMEGDAWgBT86gjoQh3y8kXH
yzM+52oUqIgtSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19Pb0k2RUlkOHZKRng4c3pQdWRxRktpSUxVby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjUvZWE3ZTYxLTk4YjMtNDEyMC04M2NlLWMwNzdlMTcwMmJjNy8x
L002QmZvRFJlQVREOXBDYUZJOU1YbDRZNFVCOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUv
ZWE3ZTYxLTk4YjMtNDEyMC04M2NlLWMwNzdlMTcwMmJjNy8xL19Pb0k2RUlkOHZK
Rng4c3pQdWRxRktpSUxVby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1WaTANBgkqhkiG9w0BAQsFAAOC
AQEApWOCLTC+1f51tx9GGrttI9LT7Q1GM8UyFV5QTs/ECxX4VKUnQR0t7XLdYqCh
ogELezjHR/RC56gzZxzCVmQcgK2zcZuuAgFMJicXbiED1qvC3PqE4vZy7g/G2lQy
eb496uB9MivFAuLNGuY1t6/PDP5jbDb2rujYAPDbZxolrm1l03EziJyUDBZquovw
1csscYvAt/hYvYFORW+2K8x2tdUF5mPSdWTPZxUca6VtiS+eeL9X8gFMz6rBswVb
YbOXkQne0tOceUJ8UdOMQqRPkK859YAAmeMpHp2lnqQDB8CHRnNxvyVTnUUC1EQl
nXjoFUZL/TLD51njUMhkQL2t6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:53 2024 by rpki-client on console-ams.rpki-client.org