Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/_GJO3_8bg1XG-A2YsAB4fI5gx4Y.roa
File:                     _GJO3_8bg1XG-A2YsAB4fI5gx4Y.roa (raw, json)
Hash identifier:          1lWW3lfV043A9S64uzeoi9STPe2z63BACbYvtPIfq0Y=
Subject key identifier:   FC:62:4E:DF:FF:1B:83:55:C6:F8:0D:98:B0:00:78:7C:8E:60:C7:86
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       2AFF7980
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/_GJO3_8bg1XG-A2YsAB4fI5gx4Y.roa
Signing time:             Sat 01 Jan 2022 13:58:00 +0000
ROA not before:           Sat 01 Jan 2022 13:58:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199371
IP address blocks:        178.16.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721385856 (0x2aff7980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 13:58:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc624edfff1b8355c6f80d98b000787c8e60c786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:28:07:43:a3:ad:5e:fc:77:0d:63:41:76:
                    f2:c3:7a:2e:22:15:d0:90:e7:9b:fe:80:89:af:fe:
                    73:b2:0d:c5:0c:55:be:72:4e:e1:0b:cd:ab:81:9b:
                    39:75:47:46:d2:33:46:82:c9:3f:1a:37:79:fa:d1:
                    6a:b2:01:a3:fa:fd:d1:84:06:88:f2:27:8b:10:17:
                    f5:38:5d:68:29:47:0c:82:88:48:64:67:a4:d9:b6:
                    c9:9e:b2:a6:5b:03:3d:03:d8:f6:ab:31:80:52:e6:
                    84:9b:df:37:d6:9b:ce:b1:76:3d:44:9a:40:1d:fa:
                    33:ed:90:08:54:ca:3b:8e:31:81:a3:ab:a0:f0:b9:
                    3d:8f:ee:32:e1:bb:c1:02:1c:d1:fa:89:7a:3c:03:
                    77:f2:a0:af:de:16:ef:4c:e9:91:78:30:e8:f5:e7:
                    30:ca:5a:cb:f1:b2:21:21:45:b6:59:6b:fb:0e:72:
                    d2:ca:20:83:59:f8:7e:ef:d0:c4:79:4d:b2:1a:35:
                    38:8c:9d:b5:a0:89:64:b6:26:fc:92:e1:c1:92:17:
                    dc:a8:45:86:bd:7f:d6:7e:2e:d5:29:4f:69:ec:de:
                    bb:e8:8a:4c:67:26:78:ad:42:cd:b0:ba:85:7f:d2:
                    2f:88:7f:eb:fe:cf:81:da:69:d0:d0:aa:5b:bb:49:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:62:4E:DF:FF:1B:83:55:C6:F8:0D:98:B0:00:78:7C:8E:60:C7:86
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/_GJO3_8bg1XG-A2YsAB4fI5gx4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.16.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:67:c7:d1:ba:7e:28:6f:db:9d:44:89:d2:79:60:73:3b:17:
         d6:00:db:e6:a1:ad:9e:c0:80:ba:fc:c6:64:91:6e:ba:0d:8b:
         c3:be:bb:a2:bf:31:17:40:f9:6e:5b:c7:ce:6b:35:ce:9d:eb:
         b9:58:9c:ed:10:68:26:c3:3f:c5:6c:60:be:dc:6e:ec:2a:18:
         da:dc:ef:b4:3f:1c:0d:0c:6c:e6:6e:53:73:3f:bd:88:60:7b:
         97:7d:81:81:b1:81:b5:70:a4:2c:84:6d:64:21:1a:4d:78:fa:
         d4:58:f7:1b:25:0e:14:b7:d6:ef:1e:b4:1c:f4:8b:a9:1c:4a:
         16:95:99:9b:70:f7:b0:fd:b5:1e:c1:4c:c7:b1:0a:20:0a:3d:
         66:a5:78:12:4c:28:60:75:98:8c:f8:3d:f9:86:58:ab:bb:ad:
         ef:7f:3f:77:e0:c3:b3:86:a9:0d:f3:9a:6a:9e:ba:15:38:cc:
         dd:ce:ae:a0:cb:fe:2a:91:ba:17:5b:2a:ad:c7:b0:c9:7d:93:
         c3:09:00:36:86:ff:9b:c4:9b:43:cf:b4:bb:c3:08:d3:0e:ab:
         8d:08:d4:e9:cd:d6:0b:95:a6:4f:74:0e:26:8f:4c:00:99:55:
         1a:8f:4b:36:ec:a7:57:4b:a8:0b:13:eb:0e:3d:a2:b8:4c:27:
         b5:c6:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org