Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/tr-8JbsOlRo9Nl54JhFQFky5Ggk.roa
File:                     tr-8JbsOlRo9Nl54JhFQFky5Ggk.roa (raw, json)
Hash identifier:          fuPHphQPhq8aN0ccqGsTaCloQh1dRl3gWU12FTKKZLw=
Subject key identifier:   B6:BF:BC:25:BB:0E:95:1A:3D:36:5E:78:26:11:50:16:4C:B9:1A:09
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       14C7B51B
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/tr-8JbsOlRo9Nl54JhFQFky5Ggk.roa
Signing time:             Sat 01 Jan 2022 05:51:54 +0000
ROA not before:           Sat 01 Jan 2022 05:51:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48680
IP address blocks:        176.103.179.0/24 maxlen: 24
                          176.103.176.0/24 maxlen: 24
                          176.103.178.0/24 maxlen: 24
                          176.103.177.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348632347 (0x14c7b51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Jan  1 05:51:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b6bfbc25bb0e951a3d365e78261150164cb91a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:1f:ad:59:11:74:07:bc:61:2d:b2:94:6e:
                    46:5b:ec:54:4f:30:cb:f2:c9:83:85:90:29:83:87:
                    5e:6c:fc:5f:5a:73:72:0a:d9:97:39:de:5f:85:51:
                    e5:28:3e:d8:03:e5:da:4c:2a:08:31:ff:9a:a0:87:
                    78:ef:75:35:1a:82:7d:a3:91:a3:61:6f:1e:86:1f:
                    ee:95:41:02:c2:0a:68:25:fb:89:4f:98:2c:1e:47:
                    f7:4f:60:22:fb:00:d6:8b:00:58:fa:d1:e6:37:70:
                    29:df:64:1b:42:e4:08:e9:24:73:0f:6f:32:9d:08:
                    de:8a:a5:b8:bc:97:98:e2:7e:bf:06:05:30:0f:b0:
                    93:a1:ea:d3:7e:30:63:13:98:e2:24:13:b7:07:56:
                    8e:76:55:0c:a0:14:57:56:da:0c:a9:c5:30:c3:b4:
                    7a:ca:76:b1:12:7e:56:28:6f:9f:a0:d7:f0:b6:fc:
                    7a:c0:b3:78:5c:70:58:84:2a:35:c5:8a:50:60:a9:
                    10:39:b3:42:c6:43:16:0c:b2:23:76:9b:7a:f0:b2:
                    f2:29:63:31:25:f0:39:75:41:de:a1:59:da:70:a5:
                    74:7c:18:07:28:33:2a:09:b7:89:25:6e:f9:2a:b4:
                    48:96:83:a7:2e:41:49:7f:0c:dc:96:09:00:91:cd:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:BC:25:BB:0E:95:1A:3D:36:5E:78:26:11:50:16:4C:B9:1A:09
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/tr-8JbsOlRo9Nl54JhFQFky5Ggk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.103.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:fc:78:4f:10:e9:84:b3:6f:d5:0f:5d:bd:7c:a0:3a:2c:24:
         94:c8:3f:c3:85:e7:dc:79:6b:b2:b5:10:76:19:ec:21:f1:44:
         e9:eb:4e:ad:2b:5c:b4:7c:e8:57:42:6a:b2:09:49:b6:6c:1c:
         e7:e9:c9:ad:6e:92:df:45:ac:b0:db:30:71:f6:98:f2:05:cc:
         fe:52:ec:02:35:8e:6d:a8:dd:eb:14:40:d1:a7:ac:3f:ca:81:
         b9:26:87:71:07:c9:2e:2c:8e:31:16:bb:c7:bc:de:50:87:18:
         4e:e2:62:a3:5c:df:27:0e:f1:da:6a:8b:e8:5a:f7:a8:c7:47:
         d7:ca:3f:09:fa:dd:b5:d0:a8:81:cf:87:71:ae:aa:01:53:4a:
         32:d1:20:be:9f:ee:09:55:61:8e:30:af:d3:df:69:61:ce:20:
         6b:bc:95:fd:df:70:9a:9f:7f:da:ae:c5:71:90:6b:f3:28:33:
         48:b0:79:82:e0:0d:fa:5f:61:79:77:88:44:89:4d:18:65:89:
         e8:96:0b:54:09:a9:a0:f3:be:2a:a1:ab:06:fa:98:60:db:4f:
         af:cb:d8:7e:0d:a7:8e:3f:01:f4:c7:5f:79:6b:18:1f:52:15:
         f1:99:24:f3:a3:38:6e:25:21:bc:3d:48:b7:ca:5a:8b:ba:5a:
         6b:06:b6:9c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFMe1GzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
OGFkZDliNjcxZjdhMzZlYjIzNjdlMzRmZWU0YmNiMTNiOGY2NmNjMB4XDTIyMDEw
MTA1NTE1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZiZmJjMjViYjBl
OTUxYTNkMzY1ZTc4MjYxMTUwMTY0Y2I5MWEwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKB5H61ZEXQHvGEtspRuRlvsVE8wy/LJg4WQKYOHXmz8X1pz
cgrZlzneX4VR5Sg+2APl2kwqCDH/mqCHeO91NRqCfaORo2FvHoYf7pVBAsIKaCX7
iU+YLB5H909gIvsA1osAWPrR5jdwKd9kG0LkCOkkcw9vMp0I3oqluLyXmOJ+vwYF
MA+wk6Hq034wYxOY4iQTtwdWjnZVDKAUV1baDKnFMMO0esp2sRJ+Vihvn6DX8Lb8
esCzeFxwWIQqNcWKUGCpEDmzQsZDFgyyI3abevCy8iljMSXwOXVB3qFZ2nCldHwY
BygzKgm3iSVu+Sq0SJaDpy5BSX8M3JYJAJHNewsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS2v7wluw6VGj02XngmEVAWTLkaCTAfBgNVHSMEGDAWgBSIrdm2cfejbrI2
fjT+5LyxO49mzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lLM1p0bkgzbzI2eU5uNDBfdVM4c1R1UFpzdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvM2VkMDBhLTE1ZWUtNDY2NC1hN2YxLWExYjk2YjliNzBmOC8x
L3RyLThKYnNPbFJvOU5sNTRKaEZRRmt5NUdnay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
M2VkMDBhLTE1ZWUtNDY2NC1hN2YxLWExYjk2YjliNzBmOC8xL2lLM1p0bkgzbzI2
eU5uNDBfdVM4c1R1UFpzdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArBnsDANBgkqhkiG9w0BAQsFAAOC
AQEACfx4TxDphLNv1Q9dvXygOiwklMg/w4Xn3HlrsrUQdhnsIfFE6etOrStctHzo
V0JqsglJtmwc5+nJrW6S30WssNswcfaY8gXM/lLsAjWObajd6xRA0aesP8qBuSaH
cQfJLiyOMRa7x7zeUIcYTuJio1zfJw7x2mqL6Fr3qMdH18o/CfrdtdCogc+Hca6q
AVNKMtEgvp/uCVVhjjCv099pYc4ga7yV/d9wmp9/2q7FcZBr8ygzSLB5guAN+l9h
eXeIRIlNGGWJ6JYLVAmpoPO+KqGrBvqYYNtPr8vYfg2njj8B9MdfeWsYH1IV8Zkk
86M4biUhvD1It8pai7paawa2nA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:49 2024 by rpki-client on console-fra.rpki-client.org