Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/Qh57gOEE6CZU_Vp3LFMQaXAW9LA.roa
File:                     Qh57gOEE6CZU_Vp3LFMQaXAW9LA.roa (raw, json)
Hash identifier:          w2LfjDoBlnukQ5gN/qTWputBrcCxCg0ralI+oVTSdUA=
Subject key identifier:   42:1E:7B:80:E1:04:E8:26:54:FD:5A:77:2C:53:10:69:70:16:F4:B0
Certificate issuer:       /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial:       099819F2
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/Qh57gOEE6CZU_Vp3LFMQaXAW9LA.roa
Signing time:             Fri 24 Jun 2022 16:38:15 +0000
ROA not before:           Fri 24 Jun 2022 16:38:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49801
IP address blocks:        185.166.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160963058 (0x99819f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
        Validity
            Not Before: Jun 24 16:38:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=421e7b80e104e82654fd5a772c5310697016f4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:2d:7a:4f:dc:41:f0:d5:c3:dc:52:d8:80:
                    d4:09:6e:7d:e1:f0:86:30:72:9a:c6:f2:7b:eb:da:
                    93:c2:1b:4c:83:1a:4b:eb:7d:6c:bd:61:ba:d4:f2:
                    d2:21:41:43:96:54:d3:b2:eb:be:4b:2e:cd:94:bc:
                    5f:57:06:4f:99:0c:c0:34:2e:91:ac:25:da:06:39:
                    58:5a:12:fb:5f:9a:88:83:95:b1:81:07:36:d6:4d:
                    14:b0:ea:d6:a2:9b:ea:ef:89:28:74:26:4a:a8:e4:
                    bc:86:46:82:28:eb:5f:26:18:49:65:2e:87:8d:8b:
                    df:ac:02:f1:22:fd:ec:6b:98:ba:5d:de:f8:8a:93:
                    1e:cf:d8:ef:8b:6e:d0:ac:7d:6b:2d:4f:56:70:e7:
                    99:22:63:42:ae:48:ac:84:2b:75:81:3a:ea:e7:1a:
                    d8:57:31:d4:42:f5:45:59:f4:1b:d9:c5:fc:f8:b2:
                    6d:90:f3:c1:42:e0:61:ae:77:97:40:4d:f2:e9:1c:
                    64:3e:a0:5f:a0:75:85:f1:7f:ab:38:9b:6e:13:d2:
                    4c:da:26:9a:ac:4b:09:90:4a:35:29:90:d1:f8:96:
                    29:9a:47:56:eb:b9:dc:e0:f1:16:73:89:3d:7a:69:
                    f9:5c:f0:89:64:69:11:c7:30:56:2f:3d:b4:84:ec:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1E:7B:80:E1:04:E8:26:54:FD:5A:77:2C:53:10:69:70:16:F4:B0
            X509v3 Authority Key Identifier:
                keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/Qh57gOEE6CZU_Vp3LFMQaXAW9LA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.166.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:27:a4:4a:38:68:c4:57:df:5b:28:d2:64:00:1b:f3:88:
         7a:81:9e:45:5f:ff:4e:bb:47:10:ab:c9:bf:7d:0e:cf:9f:18:
         93:54:a9:fe:09:18:96:f6:b2:9e:23:e3:4f:c7:b0:38:9a:4d:
         c9:14:46:7d:7b:3c:8b:41:c1:a6:82:b0:39:e1:ad:1a:5d:15:
         22:61:63:a3:51:54:72:92:ca:63:fd:a2:22:8e:75:d3:0c:6c:
         bc:50:24:66:e0:a8:02:23:e0:01:a9:da:f6:d6:81:da:0d:40:
         1e:d2:15:8c:0b:4c:c1:bc:77:88:91:fc:45:37:67:0f:1e:69:
         62:60:54:55:71:c8:09:a5:f9:56:8a:08:46:15:69:dd:3b:43:
         c3:73:d7:11:59:b6:5e:b4:0e:6d:7b:d5:7c:03:c5:5a:17:14:
         a2:ee:b7:3e:48:90:67:c8:4c:13:c5:b4:76:59:c9:53:71:fd:
         4d:d0:f3:6d:76:e3:a6:32:ee:23:d0:0c:72:79:6c:42:d9:96:
         18:0f:6e:b1:85:e9:45:49:cf:34:16:f4:8d:bb:3f:aa:24:bb:
         06:e0:f5:b6:44:a7:ee:2c:a1:39:1b:aa:12:b9:aa:0f:af:a8:
         86:9a:c1:03:d4:e2:17:23:3d:90:36:3c:b6:57:5d:2d:81:bf:
         6d:b0:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:22 2023 by rpki-client on console.sobornost.net