Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/6_5w6C7jKO7qhGn6mLF2HOG-Niw.roa
File:                     6_5w6C7jKO7qhGn6mLF2HOG-Niw.roa (raw, json)
Hash identifier:          3Xy5h4GRI2mcqgdC0OpeW2QHM6m2PYNO3cXV26/ouvs=
Subject key identifier:   EB:FE:70:E8:2E:E3:28:EE:EA:84:69:FA:98:B1:76:1C:E1:BE:36:2C
Certificate issuer:       /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial:       35819F66
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/6_5w6C7jKO7qhGn6mLF2HOG-Niw.roa
Signing time:             Sat 01 Jan 2022 06:01:13 +0000
ROA not before:           Sat 01 Jan 2022 06:01:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49936
IP address blocks:        178.22.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897687398 (0x35819f66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
        Validity
            Not Before: Jan  1 06:01:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebfe70e82ee328eeea8469fa98b1761ce1be362c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4b:4e:fb:03:15:81:4a:dc:a1:cc:d9:83:84:
                    4d:5e:94:63:06:c6:2f:ca:f6:92:60:83:59:a6:34:
                    f4:90:89:a2:f8:62:05:93:89:c5:a4:5a:98:2c:54:
                    d9:0f:c4:06:45:65:21:a5:db:91:d2:a7:33:98:fb:
                    b8:79:d7:1e:e1:f7:2d:6c:e1:7a:9e:a1:a7:9f:83:
                    06:8b:75:93:4a:e7:d1:20:c4:cb:b5:e8:80:d6:f9:
                    ab:56:42:0e:80:53:61:f3:65:86:c0:db:4a:23:11:
                    04:a6:f7:38:10:23:00:ed:fc:13:1f:97:dc:04:39:
                    b0:49:c9:15:4e:56:f8:13:10:64:55:f9:19:1e:91:
                    6d:9e:cf:a8:27:24:33:af:af:ba:b6:bb:0b:32:08:
                    59:89:fb:67:84:16:98:45:f3:1e:f8:ca:d7:04:c1:
                    40:76:77:56:bd:89:8d:a0:dd:0e:14:36:b1:b3:f1:
                    ee:69:bd:5a:08:08:09:1b:b8:1b:ab:0a:d9:00:26:
                    24:58:aa:98:8d:ea:c1:43:7b:22:05:94:9f:e7:f3:
                    2e:6e:13:f8:ce:3d:be:7f:f4:57:b3:6f:ad:80:77:
                    4b:04:1c:7b:64:a2:bd:21:bc:bd:73:a4:50:30:7b:
                    d4:73:a0:41:8c:a5:04:a7:04:9e:86:e5:58:0c:47:
                    b2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:70:E8:2E:E3:28:EE:EA:84:69:FA:98:B1:76:1C:E1:BE:36:2C
            X509v3 Authority Key Identifier:
                keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/6_5w6C7jKO7qhGn6mLF2HOG-Niw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.22.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:78:93:f4:f7:43:7f:dd:c2:c0:fa:35:e7:17:70:f0:ff:e0:
         98:82:ae:bd:66:d4:f2:cc:3f:fa:c1:2d:bd:35:a9:e7:cc:30:
         77:3c:6b:d3:01:97:66:af:72:63:fc:1f:17:27:61:e5:36:cc:
         1d:85:a3:51:fb:1c:4c:0a:76:6a:07:36:58:5c:2a:17:c8:58:
         1c:39:aa:08:21:3a:c9:02:ce:16:94:1c:07:cb:b1:1e:0b:7f:
         2a:e6:da:d1:b7:cb:c0:e1:93:54:09:d2:17:8e:ed:5c:a9:06:
         51:a9:96:4c:32:3c:05:1a:bb:2c:24:b1:34:77:6e:f0:a0:a9:
         46:5c:95:af:94:f8:39:59:18:bc:c3:a5:73:d3:c5:25:98:f0:
         18:0d:df:9d:83:be:b8:7e:6a:cb:ba:96:33:43:32:f7:b4:80:
         88:5c:76:e8:a3:6a:a4:74:11:fa:d5:a5:65:e6:3b:d7:27:9f:
         aa:95:a4:b7:b2:e7:12:3d:a3:97:0f:cf:11:57:27:3a:ad:69:
         12:5f:d1:40:93:93:f0:ad:77:ce:8a:32:74:e5:0d:49:64:03:
         7b:8d:ca:f0:5f:96:6e:5f:ed:79:2a:77:5b:5b:e8:8b:29:f9:
         47:b2:a5:1f:be:4b:fd:ee:8a:a5:18:28:c4:29:b8:10:9e:12:
         ff:94:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-fra.rpki-client.org