Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Jk7_YZVLtFQeVm4yGwoC6ZOjVmQ.roa
File:                     Jk7_YZVLtFQeVm4yGwoC6ZOjVmQ.roa (raw, json)
Hash identifier:          sLwZ0eealTnvwtNMdPVfg/oxGmoDo4dhDHdzazWrwkc=
Subject key identifier:   26:4E:FF:61:95:4B:B4:54:1E:56:6E:32:1B:0A:02:E9:93:A3:56:64
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       3A46A6B6
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Jk7_YZVLtFQeVm4yGwoC6ZOjVmQ.roa
Signing time:             Sat 01 Jan 2022 14:56:19 +0000
ROA not before:           Sat 01 Jan 2022 14:56:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44889
IP address blocks:        5.160.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977708726 (0x3a46a6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Jan  1 14:56:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=264eff61954bb4541e566e321b0a02e993a35664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:25:13:b6:5a:6e:cb:1f:da:60:b9:9e:b6:
                    37:bf:0c:55:9c:08:1d:bc:e5:98:0a:9d:ff:bf:5a:
                    db:38:7d:ed:95:d7:12:b5:8a:00:69:0f:d9:d9:a3:
                    f9:9e:a5:a9:66:ad:e7:4b:b7:cb:91:00:b2:c9:26:
                    79:60:f0:06:eb:b5:ff:4f:82:46:9d:0d:3f:0d:06:
                    cc:27:6d:b4:ae:b7:59:77:ef:2b:04:ff:43:77:fa:
                    4e:a1:9c:ea:14:c7:a4:53:3e:4d:78:5a:f0:cc:93:
                    e8:b9:42:95:ac:e1:d5:9b:5d:15:f0:60:c0:e1:ef:
                    e9:c5:8b:dd:1d:a7:c3:76:d9:15:63:cd:04:21:ef:
                    36:a1:49:1e:35:c0:d9:63:cc:93:7d:b3:09:7c:3b:
                    4c:c4:db:31:a1:6c:69:d6:d9:b1:e4:82:38:a6:89:
                    2e:6b:76:4a:ce:d1:48:6e:66:19:81:90:b7:f1:3d:
                    70:be:3a:b6:fb:ac:2d:b8:28:69:8b:f9:8e:dd:37:
                    c8:09:73:c4:6a:a0:7f:75:ff:e0:1b:68:43:82:fc:
                    fc:f5:3b:fd:93:bc:96:03:29:cd:3b:9c:2d:f9:84:
                    8e:5d:6d:f8:fa:07:31:64:20:c0:98:c3:cf:12:1d:
                    99:04:06:cf:ad:0a:fa:0c:3e:a1:f7:82:4b:17:1e:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4E:FF:61:95:4B:B4:54:1E:56:6E:32:1B:0A:02:E9:93:A3:56:64
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Jk7_YZVLtFQeVm4yGwoC6ZOjVmQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.160.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b5:0f:85:12:59:47:30:fa:57:ed:f5:c9:44:f5:73:98:71:
         b5:86:ec:d3:03:44:a3:62:a1:d7:6e:c5:4f:20:f0:22:07:e7:
         c7:af:1a:f9:43:78:89:68:e7:55:2e:fc:fc:f8:ce:2b:54:ad:
         70:74:fe:2f:23:55:04:bb:21:1e:47:7d:3b:69:97:21:3e:de:
         01:3d:73:2f:d3:b5:04:d8:f8:ff:77:01:4c:53:d6:a4:ab:b0:
         e0:0d:c3:2e:1e:18:7a:10:40:44:42:51:ca:a1:88:d0:59:9a:
         c8:60:fb:d8:85:cf:b3:9d:01:56:37:f0:e7:28:6d:b9:61:aa:
         61:ad:f5:ad:af:46:79:c8:f9:94:f7:79:8f:6e:75:58:5b:8e:
         d6:d7:bd:57:b5:84:70:eb:f6:3c:fa:a4:b3:e4:07:c9:f4:8a:
         ab:f9:6b:44:30:64:dd:57:48:cf:7d:95:1b:d2:e4:d3:8c:17:
         61:14:cd:21:ff:d5:42:91:36:5b:03:0c:f3:db:9a:0e:a3:31:
         6e:cd:b7:66:73:28:53:a6:96:6f:b3:cf:64:8f:b1:2b:dc:49:
         06:d7:85:01:81:da:49:66:08:32:19:05:07:0a:3f:16:cb:cc:
         ad:33:f2:09:d0:ad:e6:15:65:87:f8:5b:ce:34:df:35:99:35:
         1c:46:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org