Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GIGXuuN_n0gi5uc93hT_6GF0mi0.roa
File:                     GIGXuuN_n0gi5uc93hT_6GF0mi0.roa (raw, json)
Hash identifier:          dAS8clLVqJIqrOGjDBTdTgXAYiMfP0LWxNPNNzDWcmA=
Subject key identifier:   18:81:97:BA:E3:7F:9F:48:22:E6:E7:3D:DE:14:FF:E8:61:74:9A:2D
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       2AF78161
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GIGXuuN_n0gi5uc93hT_6GF0mi0.roa
Signing time:             Sat 01 Jan 2022 13:57:56 +0000
ROA not before:           Sat 01 Jan 2022 13:57:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197437
IP address blocks:        178.16.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720863585 (0x2af78161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 13:57:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=188197bae37f9f4822e6e73dde14ffe861749a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:6f:a2:77:29:8e:73:bb:96:f9:5a:92:55:
                    c6:a3:ed:52:3a:0f:8d:1c:13:af:76:31:e6:73:6b:
                    b7:be:39:ae:4a:b7:08:ef:f5:e8:32:ba:a5:34:00:
                    dd:34:b9:32:f0:ad:59:f9:44:07:0f:76:c7:4c:9e:
                    c6:48:3c:f3:87:30:88:61:fb:63:b9:19:0e:64:d0:
                    56:6a:43:4d:32:c8:ff:3e:a9:43:77:c2:a6:a4:e6:
                    d4:0e:4a:73:be:ad:56:fa:8b:a6:9d:45:05:86:73:
                    e7:eb:e5:e1:be:f9:e0:e7:f8:6c:fd:4b:86:4d:ef:
                    cc:ae:a8:49:1e:55:9c:73:0d:28:3e:a8:2d:a7:69:
                    13:3e:53:f4:5b:40:fd:96:b1:db:58:ff:3f:48:09:
                    56:f5:8a:06:8e:25:99:6b:13:a9:f4:2f:b2:fe:40:
                    ca:a2:1c:6e:b4:24:a7:e6:d8:20:b8:d0:55:60:f0:
                    a4:d1:d1:77:d1:56:bc:85:83:5a:70:23:ba:80:75:
                    68:57:78:5b:04:d2:35:e7:09:43:89:c2:7c:e6:00:
                    1f:ad:3e:46:7e:9e:37:60:40:40:7f:1f:f5:e7:0d:
                    47:f3:66:cd:22:bf:9a:6f:e9:c3:0f:ab:34:bb:e7:
                    dc:60:8c:91:7f:c7:50:d7:90:c3:70:35:fe:36:fb:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:81:97:BA:E3:7F:9F:48:22:E6:E7:3D:DE:14:FF:E8:61:74:9A:2D
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GIGXuuN_n0gi5uc93hT_6GF0mi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.16.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:41:21:3e:1a:3e:43:d1:a9:02:0e:15:26:45:32:0e:b6:c5:
         0d:c5:37:69:dc:f0:bc:3c:7f:cd:f6:4f:40:b0:08:fd:9c:cc:
         03:df:09:27:8b:f3:c6:62:a0:65:1b:60:8f:9c:ba:49:3f:9d:
         80:25:3a:0d:0e:47:e9:8c:7a:60:25:a6:c7:96:13:ab:23:f9:
         12:71:7d:19:7d:c4:8d:5d:4a:d5:51:46:6e:08:9b:df:5d:fb:
         0c:fd:32:cd:78:21:e7:a0:67:c4:5a:f2:35:a0:44:b6:fc:fc:
         e6:0e:bb:c5:63:36:eb:b0:c1:79:49:84:14:62:f8:76:1e:1b:
         17:6d:5c:7a:8e:82:90:9f:5a:1c:2e:22:2e:cf:70:11:15:25:
         09:98:89:00:31:4d:db:1f:a4:e8:bc:3d:e3:40:8a:8d:c6:88:
         75:8f:99:56:22:17:9c:c3:6c:63:36:d2:02:e8:93:1f:d3:83:
         93:5c:b4:c5:2e:47:50:74:6c:9a:23:80:3e:d1:61:9e:11:8b:
         39:5a:9f:9b:f2:f5:2f:77:9e:19:29:11:12:28:e3:6c:17:5d:
         e1:a6:04:26:48:cb:d0:66:94:72:28:9b:a9:fa:d4:98:e6:44:
         c4:47:b1:9c:6a:ad:1d:d4:70:ad:0c:20:73:33:22:92:ce:78:
         74:47:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org