Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/FUUwKTXUucVfRlueMkOsMzobfxI.roa
File:                     FUUwKTXUucVfRlueMkOsMzobfxI.roa (raw, json)
Hash identifier:          C0G6OBPcC3vu5KT6M7pEkcGBKRPG3GegW3Yl0bAL3AI=
Subject key identifier:   15:45:30:29:35:D4:B9:C5:5F:46:5B:9E:32:43:AC:33:3A:1B:7F:12
Certificate issuer:       /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial:       03A30715
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/FUUwKTXUucVfRlueMkOsMzobfxI.roa
Signing time:             Thu 05 May 2022 19:01:50 +0000
ROA not before:           Thu 05 May 2022 19:01:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205495
IP address blocks:        185.216.82.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61015829 (0x3a30715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
        Validity
            Not Before: May  5 19:01:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1545302935d4b9c55f465b9e3243ac333a1b7f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:df:a4:62:33:99:f4:46:54:e1:d3:cb:9d:
                    50:49:4a:9a:48:02:bd:e5:52:f6:7f:52:68:88:07:
                    53:2c:91:51:3f:77:4d:7d:c8:51:ca:39:a5:51:52:
                    86:e7:0c:a5:65:e3:d1:2a:1a:36:95:4a:95:7d:6e:
                    3b:b8:b3:66:f7:12:2d:07:41:20:2a:11:40:bc:20:
                    a1:fe:a5:d1:90:a3:ef:d7:ff:16:f1:1f:c7:75:43:
                    21:da:b7:d8:05:85:e9:ec:ad:02:54:d4:b1:a7:5f:
                    cb:21:04:54:a6:b2:b8:13:78:92:0b:6d:1f:81:73:
                    8f:04:df:2d:4a:6d:b5:d1:26:ee:e2:a8:fa:e1:fc:
                    e2:8f:53:be:60:d6:10:10:ad:a5:1a:79:cc:65:26:
                    1c:58:f1:5b:44:31:28:b1:cb:eb:7c:70:82:07:79:
                    26:64:39:62:c6:ad:af:27:f8:11:85:2b:d5:0b:7c:
                    00:59:8e:71:98:df:7f:83:51:22:70:ab:c7:77:dd:
                    e4:b6:00:eb:77:0a:f6:4c:a4:02:85:40:2c:7d:d7:
                    c8:c6:af:b1:de:4b:7e:55:53:e2:90:c5:d5:60:ce:
                    4a:62:33:4d:da:80:77:93:3a:37:03:0b:4e:aa:a7:
                    9d:c3:57:6a:22:75:8e:62:42:5b:00:55:28:df:91:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:45:30:29:35:D4:B9:C5:5F:46:5B:9E:32:43:AC:33:3A:1B:7F:12
            X509v3 Authority Key Identifier:
                keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/FUUwKTXUucVfRlueMkOsMzobfxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:05:25:1a:72:41:98:45:d9:93:21:4d:20:f6:9f:5d:f5:
         8c:e2:9c:fc:8f:af:c8:62:33:5a:d7:02:76:31:96:12:ba:a8:
         53:b4:a3:66:d2:46:8c:28:96:96:6e:fb:bb:7f:84:9e:54:fc:
         62:3e:5b:30:09:9b:9e:b4:8e:ea:25:e6:55:fa:10:97:ac:d8:
         d7:d1:e3:fe:24:1f:a9:4b:fc:37:88:a4:06:0c:d8:59:f3:53:
         63:fa:d7:9c:13:b3:69:68:c0:e6:ba:37:ca:b6:37:47:c8:91:
         58:38:30:55:32:92:16:f1:dc:36:6c:ad:d9:43:5a:d7:af:38:
         db:21:f3:82:99:0c:ed:0a:48:d4:f8:40:e2:b2:75:f1:6e:e6:
         e9:b9:97:bf:58:32:f7:2d:49:ce:37:a0:cf:18:26:df:2a:66:
         37:13:ca:13:79:36:7d:54:75:a3:3f:4f:61:3e:f6:7d:79:4b:
         27:87:6d:cb:31:b5:f0:55:e2:38:ce:1c:da:1d:5f:a7:92:f4:
         f4:28:c9:a6:e1:ff:81:d3:3d:f6:25:87:f6:e4:da:a5:5e:2a:
         d4:9a:3a:2e:87:4d:f7:31:92:ec:59:71:a5:70:2d:b0:7a:2d:
         f9:2f:e2:f0:ab:86:7d:a2:0d:90:21:23:2d:4c:92:9e:4d:a4:
         03:74:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:13 2024 by rpki-client on console-ams.rpki-client.org