Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/k6Zpz4v1A74RKppP9RNvxEFN7GI.roa
File:                     k6Zpz4v1A74RKppP9RNvxEFN7GI.roa (raw, json)
Hash identifier:          jwKttYJmZ5zacuhbvfx/ugzMruFixJaXH0dkJW5rFJs=
Subject key identifier:   93:A6:69:CF:8B:F5:03:BE:11:2A:9A:4F:F5:13:6F:C4:41:4D:EC:62
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       3A482AB1
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/k6Zpz4v1A74RKppP9RNvxEFN7GI.roa
Signing time:             Sat 01 Jan 2022 14:56:20 +0000
ROA not before:           Sat 01 Jan 2022 14:56:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48014
IP address blocks:        5.160.177.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977808049 (0x3a482ab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Jan  1 14:56:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93a669cf8bf503be112a9a4ff5136fc4414dec62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:a5:f5:6e:d3:cc:29:90:50:c8:10:e4:b7:
                    1a:5b:76:0f:c8:b3:01:17:bf:da:ca:c7:5d:c5:bd:
                    78:a7:10:c7:d3:96:4b:19:30:10:09:f5:66:84:98:
                    78:2a:5d:36:8c:45:11:0a:65:20:2e:13:d7:e5:c0:
                    57:eb:5b:16:01:50:23:53:18:34:1c:38:96:6d:fe:
                    ef:ee:bb:5e:5f:5a:6d:9b:69:e2:d0:f5:29:4a:49:
                    ec:a6:62:00:99:72:d2:8f:10:37:7d:27:39:c6:c9:
                    a8:08:b4:1b:f7:f1:e9:a4:5a:b5:a6:bb:45:ad:8f:
                    60:2a:be:08:de:ab:96:4a:40:42:a5:f1:3d:53:90:
                    8f:5a:72:25:a0:2d:7b:72:8a:c0:c5:5b:ef:8b:10:
                    00:81:10:df:5a:60:80:59:71:14:0c:1d:0e:1d:02:
                    ee:e4:2d:9b:2e:26:91:83:2d:6e:3b:2a:3b:db:7f:
                    78:db:73:22:0d:2a:d0:93:3c:93:fe:f5:a2:dc:ae:
                    ef:9d:c3:4e:49:3c:1d:10:d8:cc:74:94:32:8a:2a:
                    76:63:70:7a:16:cf:a7:82:4c:a8:51:77:b0:00:a0:
                    71:d1:3d:71:32:61:3f:9a:3e:5a:c1:84:01:68:62:
                    d0:6e:e2:ef:39:bb:38:26:ad:5f:33:ac:a1:ab:94:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A6:69:CF:8B:F5:03:BE:11:2A:9A:4F:F5:13:6F:C4:41:4D:EC:62
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/k6Zpz4v1A74RKppP9RNvxEFN7GI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.160.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a8:71:d5:91:9a:ad:54:c1:72:22:36:74:e1:17:34:a9:a8:
         e2:98:8f:45:3b:23:3b:cc:ec:0d:4b:c6:aa:81:2f:e4:e3:11:
         79:5b:60:4d:81:8e:fc:58:0a:a4:9c:e4:69:96:99:d5:db:04:
         8b:48:b2:2a:7e:ef:32:89:e1:e6:5b:92:2f:58:ad:c7:a5:cc:
         ad:b0:4d:29:8b:ec:8b:22:8a:e3:ab:f5:51:fb:c9:da:e5:4d:
         ca:7b:40:ce:6c:b0:a5:a3:45:fb:fd:86:86:cc:fe:b0:e2:11:
         bf:34:0c:08:9f:ae:6e:81:e2:1e:65:22:e4:ed:c3:68:53:cc:
         3b:b6:42:d9:81:26:b1:6d:e0:c6:10:00:70:01:df:1b:f4:60:
         1d:51:d0:1f:99:25:bf:72:d0:6c:be:ac:7a:a9:2e:0e:83:17:
         d3:70:fd:2f:a1:30:95:ae:c2:bf:01:f7:90:8e:f3:75:b2:69:
         c3:f4:ab:b1:ab:5e:40:0f:3f:86:f6:d8:ad:1f:ed:7a:45:d5:
         dc:c3:5a:30:1d:f5:7c:c7:c4:09:4b:ce:8c:52:ee:a7:da:29:
         71:71:93:9a:4d:27:81:ad:45:00:66:cc:78:94:a7:c5:24:4a:
         92:40:b4:1f:55:2e:ef:26:be:b5:63:1b:82:0c:08:13:7f:54:
         e3:df:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org