Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/6jvzdsk-SPxwo4dMbNB4uu4bGg0.roa
File:                     6jvzdsk-SPxwo4dMbNB4uu4bGg0.roa (raw, json)
Hash identifier:          ATura59fANVjJ7UVufRHe/J37hkzGhJ7ZIbAD2xhDcw=
Subject key identifier:   EA:3B:F3:76:C9:3E:48:FC:70:A3:87:4C:6C:D0:78:BA:EE:1B:1A:0D
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       058E99EA
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/6jvzdsk-SPxwo4dMbNB4uu4bGg0.roa
Signing time:             Sat 01 Jan 2022 04:53:06 +0000
ROA not before:           Sat 01 Jan 2022 04:53:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        194.50.176.0/24 maxlen: 24
                          2a0a:4540:10::/48 maxlen: 48
                          2a0a:4540:1000::/48 maxlen: 48
                          2a0a:4540:220::/48 maxlen: 48
                          2a0a:4540:11::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93231594 (0x58e99ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Jan  1 04:53:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea3bf376c93e48fc70a3874c6cd078baee1b1a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:35:a5:76:96:81:62:3e:96:2e:37:4b:f9:
                    a4:2b:6c:90:37:73:32:53:3a:c1:de:b8:97:33:5b:
                    27:d6:2a:f6:87:94:de:b4:71:80:08:6d:16:f9:9d:
                    be:7a:77:a3:bd:b4:a5:a8:d6:c4:2e:25:20:87:82:
                    9b:41:b7:fa:1f:79:f4:85:e3:d7:0a:02:1c:d2:76:
                    8d:c7:29:9b:38:c1:d8:66:26:1a:10:94:75:09:57:
                    ff:34:2c:49:91:11:9b:53:2f:e8:2c:3d:54:c3:5a:
                    4d:c6:bb:1b:f4:f1:4a:3a:d5:91:fd:d0:d4:13:c2:
                    18:90:d4:9c:12:9f:6f:cf:ea:cc:a0:01:d5:7c:c0:
                    33:d1:2c:45:d0:9e:99:74:e1:43:92:bc:14:73:d3:
                    1a:57:5a:00:64:5b:eb:ae:4c:e5:80:9c:9a:e9:6a:
                    b5:ad:6a:43:d2:be:c1:ee:ef:a3:39:7e:9e:a0:bb:
                    7c:af:fe:44:c1:d0:af:11:3a:20:e5:1e:77:dc:b2:
                    e4:f9:98:8b:29:18:1c:05:d4:de:e8:62:a6:01:4c:
                    3d:9a:02:81:63:08:2e:f5:dd:08:39:20:69:cb:e2:
                    72:b4:46:b0:26:51:72:b9:dc:bb:51:4b:d3:ae:df:
                    c2:61:aa:73:f8:5e:11:ad:16:15:2b:18:9e:59:26:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3B:F3:76:C9:3E:48:FC:70:A3:87:4C:6C:D0:78:BA:EE:1B:1A:0D
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/6jvzdsk-SPxwo4dMbNB4uu4bGg0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.176.0/24
                IPv6:
                  2a0a:4540:10::/47
                  2a0a:4540:220::/48
                  2a0a:4540:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:b8:65:11:cb:5e:d2:81:9a:9b:c2:c1:ab:a3:42:ff:d9:a8:
         4d:d5:37:c8:b4:08:d8:d1:e2:d7:6f:7d:3e:24:e1:ef:07:a9:
         eb:0a:bb:a3:70:bc:b4:99:90:a2:48:d8:62:62:54:fd:88:07:
         ec:d0:7b:0e:7f:12:a0:05:6f:29:65:21:65:f9:d8:1e:ed:09:
         22:9e:13:3d:54:37:78:a8:b8:c1:e0:a2:8e:43:0d:67:4b:68:
         a7:f4:78:b2:8f:8c:d6:96:0b:e1:7b:6d:62:5e:95:f4:85:48:
         3d:dc:96:e9:0d:0c:d0:a6:2a:57:fe:b4:5b:46:b3:51:cc:21:
         1b:50:3f:56:7c:fc:28:04:89:34:85:9a:4c:76:4c:ec:c4:24:
         8b:89:ab:e1:43:cb:33:93:e5:d9:3f:18:80:68:09:e7:3c:df:
         a5:fb:04:2c:85:80:b7:4b:3b:b6:a8:7d:55:99:9a:83:75:cf:
         3e:64:42:eb:c5:c3:70:35:d6:e6:39:d9:3b:09:50:a6:2e:23:
         c0:c5:21:68:f2:81:55:f3:25:3e:7d:f1:c5:ed:03:20:20:70:
         45:0f:0c:6a:a3:f8:d8:67:e9:bd:2f:ba:e9:58:3b:2c:20:9a:
         90:12:54:46:66:71:fe:57:41:74:78:5c:bf:37:06:2b:b7:29:
         40:44:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:15 2024 by rpki-client on console-ams.rpki-client.org