Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/hZBIAVL6jUu1DtM0H83sZAjSkBI.roa
File:                     hZBIAVL6jUu1DtM0H83sZAjSkBI.roa (raw, json)
Hash identifier:          MJ27JcjwVBS+dFSHlQfPzXrSPaRDEQToCQ0LDUeFCLU=
Subject key identifier:   85:90:48:01:52:FA:8D:4B:B5:0E:D3:34:1F:CD:EC:64:08:D2:90:12
Certificate issuer:       /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial:       26BBDA
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/hZBIAVL6jUu1DtM0H83sZAjSkBI.roa
Signing time:             Sat 01 Jan 2022 00:50:55 +0000
ROA not before:           Sat 01 Jan 2022 00:50:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        176.116.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538458 (0x26bbda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
        Validity
            Not Before: Jan  1 00:50:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8590480152fa8d4bb50ed3341fcdec6408d29012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:67:09:0f:4a:c4:da:af:d9:8f:09:00:08:
                    d3:5a:d9:54:e4:e0:66:3e:56:5d:7a:6b:d4:ab:ef:
                    c1:46:72:b4:ed:e7:9b:70:b7:c9:5d:3e:a0:04:9a:
                    a5:98:83:38:3f:6a:8e:49:e8:16:15:54:a6:ca:7d:
                    1c:6f:23:1e:8a:00:c6:f6:17:19:e0:aa:d8:26:c7:
                    95:ec:c1:ad:0d:8f:e5:ca:10:e7:d0:09:6d:8b:55:
                    f6:fc:96:54:fa:ca:6d:d9:bd:02:64:81:f2:62:9d:
                    38:13:94:0b:fe:b0:5c:4d:51:05:30:07:8d:16:e8:
                    d6:7f:59:39:4c:82:3e:c2:2f:d9:29:33:90:c3:1b:
                    a4:e8:95:3c:bf:6f:10:02:90:fd:dc:17:bb:e2:9c:
                    3b:f0:f5:14:ea:56:ee:e6:fb:c0:8b:f5:6e:11:0a:
                    6b:73:06:da:ea:64:ba:a4:80:1a:71:aa:d2:1e:cc:
                    a0:25:59:4e:7e:75:dd:45:98:33:d5:38:fc:76:40:
                    f0:fc:17:c3:b8:01:e1:83:54:f6:02:e8:cc:81:f2:
                    51:62:d2:b3:56:bf:b7:a3:b3:a0:9d:2f:5d:09:01:
                    17:68:fb:3a:9f:ab:c5:70:1f:17:f4:e9:68:51:b1:
                    f0:00:70:0c:a6:c7:82:9c:5d:76:3f:ec:e9:cf:92:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:90:48:01:52:FA:8D:4B:B5:0E:D3:34:1F:CD:EC:64:08:D2:90:12
            X509v3 Authority Key Identifier:
                keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/hZBIAVL6jUu1DtM0H83sZAjSkBI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:40:05:d5:84:51:d6:47:d9:b2:67:c4:1d:ef:e1:da:8f:62:
         c2:67:33:4d:e1:c7:3b:f3:b3:7f:90:d7:0d:af:80:59:e7:30:
         1b:41:c6:31:e7:fc:41:41:c1:bd:3a:15:2d:9b:2e:00:e7:41:
         00:42:f6:d5:5c:51:7d:7a:5e:43:6a:7e:f8:87:a3:e3:ce:d2:
         26:ec:1d:35:2e:7e:b2:1c:65:7b:0d:a8:21:43:9d:7b:f7:8d:
         d1:ef:ef:fb:63:e7:f2:a6:9c:7d:bf:26:5c:3e:e7:ee:fb:99:
         3f:e1:04:85:b4:6e:a2:c5:e3:d4:19:0c:3c:c2:9b:41:cb:55:
         7f:c5:4e:5a:5e:14:c4:02:5d:7f:d4:28:18:e2:99:d8:e4:62:
         79:0f:23:ea:47:3d:40:38:f8:26:ea:22:fb:60:c3:2d:df:26:
         b0:18:ac:2d:58:db:c4:06:e5:43:ed:e4:d6:c9:bf:e1:7e:c0:
         62:d0:c9:5c:a6:76:3b:b6:f7:1d:cc:87:b7:07:1b:eb:86:b2:
         26:a5:a3:07:be:94:1d:d2:cd:22:b8:51:45:0d:4c:b3:c4:04:
         db:1f:dc:59:75:fb:c2:79:84:f5:f6:d3:39:66:d8:87:37:3c:
         3f:6e:54:6d:65:75:5f:db:4c:22:0c:4b:e1:99:82:87:f6:7a:
         dc:19:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:16 2024 by rpki-client on console-ams.rpki-client.org