Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/JV4rBRaWOCY6EX4G-HBXDndnxHg.roa
File:                     JV4rBRaWOCY6EX4G-HBXDndnxHg.roa (raw, json)
Hash identifier:          JFzY3XkosZMXCK65F5xGN/m6GGQDPHAjBfwbNlLQqVo=
Subject key identifier:   25:5E:2B:05:16:96:38:26:3A:11:7E:06:F8:70:57:0E:77:67:C4:78
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       3ADFC6DD
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/JV4rBRaWOCY6EX4G-HBXDndnxHg.roa
Signing time:             Mon 14 Feb 2022 16:14:56 +0000
ROA not before:           Mon 14 Feb 2022 16:14:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49847
IP address blocks:        5.160.160.0/23 maxlen: 24
                          5.160.164.0/23 maxlen: 24
                          46.209.54.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987743965 (0x3adfc6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Feb 14 16:14:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=255e2b05169638263a117e06f870570e7767c478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:ab:5d:c7:ec:81:54:e3:77:7f:32:e9:65:
                    cf:d4:c1:25:ff:8a:42:be:9a:59:c2:1c:12:70:f9:
                    e6:3b:e5:33:bf:68:ce:b8:14:37:2d:01:2c:19:ea:
                    b4:0d:55:14:2c:cd:e3:16:3e:d5:aa:aa:65:ae:44:
                    32:d1:80:3b:c5:80:31:d8:e3:ff:f8:ec:f7:34:b5:
                    d2:d1:03:13:cb:51:c9:31:64:9c:49:3c:83:e0:f3:
                    31:98:59:2f:ac:5e:c6:af:e3:09:ea:c3:f3:ca:b2:
                    92:79:b3:a7:9f:22:6c:63:56:3b:13:59:78:00:7a:
                    21:34:7a:17:9f:cb:45:9a:d1:e9:4b:1a:45:6f:32:
                    66:2d:ca:26:1a:e3:1c:fe:de:8f:1c:7b:c1:f3:86:
                    37:35:95:e1:c0:72:64:95:fe:7a:db:1a:34:13:8e:
                    a8:29:1b:7d:5c:fc:37:25:d2:09:4d:23:f3:4e:de:
                    ce:b5:bf:44:73:fb:e6:ea:4a:60:59:bd:00:e8:13:
                    9d:ee:67:7c:81:f2:d6:7b:80:4b:db:a3:aa:6e:cc:
                    bd:35:ca:58:de:e1:ee:c3:9c:62:7d:04:5b:19:c1:
                    0b:bc:a9:48:6f:f8:7f:51:68:80:08:73:d8:bc:06:
                    4d:de:a4:fa:bf:83:96:ec:0c:65:d2:3a:50:a3:0b:
                    91:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5E:2B:05:16:96:38:26:3A:11:7E:06:F8:70:57:0E:77:67:C4:78
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/JV4rBRaWOCY6EX4G-HBXDndnxHg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.160.160.0/23
                  5.160.164.0/23
                  46.209.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:b2:e9:d0:50:2e:1a:0a:68:76:c1:55:10:d2:d5:22:f1:
         75:d2:96:0d:f6:ba:89:5c:98:2e:95:55:b5:b9:9a:c4:e3:ac:
         8b:bd:c2:85:c6:5b:8f:91:f8:15:b2:95:0b:5a:68:31:8c:9d:
         73:5a:d3:3c:b2:db:b5:bd:28:93:24:6e:fb:73:bb:c2:ee:72:
         7a:22:2c:67:64:66:3c:5a:6e:86:16:c3:ab:e8:75:75:dd:ed:
         e3:8a:0d:30:56:14:72:68:af:85:02:98:e3:c6:b9:60:34:05:
         e6:8c:ee:f5:6e:10:bb:76:92:8a:27:ea:dd:dc:5b:94:9c:76:
         01:56:cf:8a:74:fd:c5:7a:f5:00:10:4e:be:38:f6:88:ef:62:
         d8:98:02:25:94:a2:06:81:7b:04:a2:c7:95:1d:e1:d3:9b:63:
         4a:1b:0c:7d:44:be:31:6d:00:85:59:dd:06:3b:e8:db:f8:c3:
         20:3f:be:df:f4:16:2a:e4:28:98:ee:35:f2:ab:62:b1:e3:8f:
         c5:60:82:ee:fe:56:10:3c:49:96:a1:68:6c:10:82:6a:46:8c:
         43:e6:9b:d9:ce:4a:a6:a9:f0:ae:a2:1b:b7:85:ba:48:a7:24:
         2c:7b:86:4f:de:9c:0e:38:9a:a0:40:d9:b2:48:46:d3:20:b3:
         81:83:db:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org