Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/SB8pe3D9JGhvVBFWfPGnTfxfCUU.roa
File:                     SB8pe3D9JGhvVBFWfPGnTfxfCUU.roa (raw, json)
Hash identifier:          huwR5FK49u6bLoc7UoGegK1Iy92c+wQ9Acc5TD9Lv3c=
Subject key identifier:   48:1F:29:7B:70:FD:24:68:6F:54:11:56:7C:F1:A7:4D:FC:5F:09:45
Certificate issuer:       /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial:       27248E
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/SB8pe3D9JGhvVBFWfPGnTfxfCUU.roa
Signing time:             Sat 01 Jan 2022 00:50:55 +0000
ROA not before:           Sat 01 Jan 2022 00:50:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        176.116.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565262 (0x27248e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
        Validity
            Not Before: Jan  1 00:50:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=481f297b70fd24686f5411567cf1a74dfc5f0945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:50:65:1e:d9:79:95:d0:7d:1e:2d:17:88:
                    50:c8:f1:f5:17:5b:5a:88:8d:a4:de:5d:da:39:2d:
                    15:6b:65:5b:c9:c7:96:a6:33:79:57:b5:a0:cb:6f:
                    05:b5:c9:1a:ba:d9:9e:f6:c4:1b:6e:50:07:2a:34:
                    cc:1c:03:71:c5:6c:50:a2:4c:34:59:3d:0c:af:dd:
                    92:60:f2:1c:7c:08:0e:cb:0c:a8:31:ca:58:f5:38:
                    98:5d:e7:e3:70:a9:04:36:cc:37:ca:9c:6f:84:0b:
                    bd:59:e6:2d:e6:5d:eb:ef:fd:1e:69:bb:f1:38:b6:
                    0a:2d:20:e1:aa:d5:ad:f1:09:b4:12:ce:28:96:b0:
                    61:56:27:25:88:39:00:74:93:e1:d0:56:1a:32:b4:
                    5d:47:5f:97:f2:79:17:b4:62:33:6e:9c:51:0c:4d:
                    9b:51:78:68:dc:d0:6e:17:83:a8:a5:93:6c:e6:23:
                    8a:e3:c9:65:64:dd:0e:5a:f0:6c:32:98:ae:ca:d1:
                    6d:b7:b0:31:27:21:a0:ef:57:ad:cc:5a:7d:27:b3:
                    16:cf:e0:8c:a5:23:98:3c:94:8a:9d:3f:00:71:81:
                    df:10:84:b4:3e:22:c3:ae:80:ec:cc:0e:2c:08:76:
                    ce:1e:41:a5:0c:dc:7f:a3:4d:ce:7f:cc:07:0e:d7:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1F:29:7B:70:FD:24:68:6F:54:11:56:7C:F1:A7:4D:FC:5F:09:45
            X509v3 Authority Key Identifier:
                keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/SB8pe3D9JGhvVBFWfPGnTfxfCUU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:75:ce:f2:77:c5:cd:52:7c:bb:17:e5:a8:10:dd:f0:6e:75:
         01:6f:89:82:64:3a:0d:e3:28:ae:ce:8d:e0:72:ae:27:29:c8:
         23:ef:9c:08:2d:da:3e:b8:e9:0b:cc:7b:ee:32:07:02:71:e5:
         aa:0b:52:a4:b5:b4:e2:17:50:e5:f7:60:44:19:ac:71:c2:b6:
         23:61:c9:bd:24:c5:0f:ca:4d:41:c7:2b:69:45:d4:ee:21:49:
         dd:82:0c:b7:a6:ac:d2:c5:ea:7b:d7:e3:18:87:db:97:4a:ea:
         87:5a:a6:aa:c5:75:ad:4b:56:a3:7b:a4:0c:cb:8d:7f:7c:24:
         28:b5:b2:4f:13:6c:19:93:eb:f0:e6:94:73:98:a5:f5:9c:5f:
         b6:9d:cc:2a:19:9e:8d:c5:cf:52:39:b5:7a:cb:44:ec:62:74:
         86:c5:91:b5:77:1e:9a:20:d3:df:a4:1c:fa:57:06:a5:c5:3c:
         15:7a:c8:4c:af:07:91:9f:c1:cf:f7:00:98:b5:b9:0f:4d:49:
         44:17:72:02:23:16:19:17:25:53:c9:e6:e4:dc:e9:2d:a8:08:
         1a:79:01:d6:e9:53:f3:3f:6a:00:60:f9:d7:86:21:42:2e:b6:
         aa:47:54:3b:b2:03:20:d0:4c:31:da:f4:4a:4b:d9:37:e7:54:
         0d:dd:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:16 2024 by rpki-client on console-ams.rpki-client.org