Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/y5A3gBKeSZrzOwjh2ntxbU1UM8c.roa
File:                     y5A3gBKeSZrzOwjh2ntxbU1UM8c.roa (raw, json)
Hash identifier:          Rts1XvcMSDZhF+SS/gvJe5N00yMCeeRaM3jsrw4gDLk=
Subject key identifier:   CB:90:37:80:12:9E:49:9A:F3:3B:08:E1:DA:7B:71:6D:4D:54:33:C7
Certificate issuer:       /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial:       5749D2
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/y5A3gBKeSZrzOwjh2ntxbU1UM8c.roa
Signing time:             Thu 28 Apr 2022 05:29:58 +0000
ROA not before:           Thu 28 Apr 2022 05:29:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59527
IP address blocks:        176.123.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5720530 (0x5749d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
        Validity
            Not Before: Apr 28 05:29:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb903780129e499af33b08e1da7b716d4d5433c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:00:09:66:e7:40:09:38:ec:aa:f4:c5:a4:
                    9c:29:8f:a5:9b:5b:a9:75:99:7b:01:a7:b9:f5:f5:
                    ef:ec:27:26:24:c7:ba:ad:ec:67:08:58:da:d5:88:
                    a1:01:a7:72:e1:ca:7f:f5:48:85:91:c0:c6:0e:4c:
                    48:08:3f:e7:72:0f:01:ad:20:7f:83:0f:ed:24:44:
                    06:50:95:a2:3a:dc:0f:ab:9d:77:db:1d:32:01:a4:
                    57:95:fc:6c:5d:6e:c1:57:12:9b:10:70:d4:e5:a8:
                    1b:31:24:c4:c0:48:25:5d:89:44:23:71:9b:b6:0b:
                    0d:48:7d:40:83:e2:06:42:44:ad:c8:66:37:bd:4a:
                    ab:76:ba:f1:09:26:98:5e:34:67:4a:84:ac:17:c5:
                    bb:3e:ae:70:72:06:20:5e:62:84:fd:a2:a5:16:b3:
                    ad:7b:bd:ae:35:03:62:a6:02:79:eb:d9:27:04:7b:
                    de:b5:e2:d2:b1:35:89:fb:61:17:0a:81:2a:07:2e:
                    71:31:dc:c6:cf:e7:d3:82:1e:57:ac:ca:9f:d6:6d:
                    e8:94:20:0e:85:9b:f7:96:e2:21:64:28:3e:86:1c:
                    e0:2f:2e:ce:1c:c4:cc:69:c3:a7:0c:67:83:8b:74:
                    ca:17:ec:27:9f:bb:61:50:31:34:46:d7:ba:3f:df:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:90:37:80:12:9E:49:9A:F3:3B:08:E1:DA:7B:71:6D:4D:54:33:C7
            X509v3 Authority Key Identifier:
                keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/y5A3gBKeSZrzOwjh2ntxbU1UM8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.123.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:24:11:b8:b4:6f:d5:2c:54:ea:32:60:1e:66:8e:99:0d:fc:
         94:b8:d7:c4:f0:01:b4:9b:1d:b3:fa:c5:1d:b1:5c:dc:6b:16:
         2e:97:33:ac:8a:24:41:78:b9:04:76:29:2f:c6:26:41:37:8f:
         b5:5b:80:35:08:1b:40:25:bb:e5:8f:08:94:20:0c:d8:2b:52:
         ae:92:80:4a:76:4f:70:6e:49:37:fe:c6:94:fc:77:7a:86:cd:
         eb:6d:09:30:44:c0:a3:78:e4:36:30:5d:a4:7a:2b:6b:86:f9:
         ff:5b:47:49:41:f7:42:7c:e7:31:19:b9:47:75:8c:51:42:0c:
         cd:e9:a4:86:3c:7c:f1:1f:91:fb:28:1d:c4:03:99:a0:50:01:
         62:47:ed:0b:63:00:18:5f:0f:fb:d2:a4:d3:34:75:b9:cb:54:
         2f:22:a9:e8:5f:4c:5e:0d:58:c0:8a:95:87:ad:40:80:a2:d6:
         57:a6:6e:df:ac:51:14:80:31:aa:7f:f1:1a:30:ad:7e:57:5a:
         cd:81:a6:71:72:25:d7:c9:95:c7:9d:23:8d:2f:5b:da:f0:eb:
         db:52:f8:d5:9d:c5:06:fd:28:1b:61:16:f0:dc:6e:ce:f5:a7:
         86:c0:2a:77:be:43:3f:7a:88:38:4e:d7:74:2c:81:2d:76:9a:
         ca:9c:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:26 2024 by rpki-client on console-fra.rpki-client.org