Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JB5YaYd7vF_iXcs3r-rz3c3TSoI.roa
File:                     JB5YaYd7vF_iXcs3r-rz3c3TSoI.roa (raw, json)
Hash identifier:          hAd4mqGLsoUFLUtgekZukhz5del2OnQ5yKBItKGRbHg=
Subject key identifier:   24:1E:58:69:87:7B:BC:5F:E2:5D:CB:37:AF:EA:F3:DD:CD:D3:4A:82
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01827C3E72966F6568301AA12E3DAF977C17
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JB5YaYd7vF_iXcs3r-rz3c3TSoI.roa
Signing time:             Mon 08 Aug 2022 06:57:23 +0000
ROA not before:           Mon 08 Aug 2022 06:57:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16262
IP address blocks:        176.57.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7c:3e:72:96:6f:65:68:30:1a:a1:2e:3d:af:97:7c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Aug  8 06:57:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=241e5869877bbc5fe25dcb37afeaf3ddcdd34a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:3a:8c:d4:3f:f3:40:69:f2:07:bb:0d:c7:
                    9b:e7:dd:a8:02:3e:c6:5e:79:f7:f7:c9:25:ed:3f:
                    42:bc:e4:3b:c0:1f:2b:68:10:f4:3e:29:5a:bf:3e:
                    76:5c:b8:d3:9b:08:e1:3d:b2:66:7b:92:01:29:aa:
                    c3:39:c7:98:e0:9b:a6:02:69:4c:94:59:60:55:14:
                    28:c8:e9:c2:3a:05:f4:eb:70:e0:73:76:92:92:a2:
                    56:f4:2b:b2:90:2c:ed:e4:bf:f4:1c:89:d1:dc:fe:
                    82:44:a1:92:95:bc:e8:08:85:8c:b2:98:dc:bf:cf:
                    3e:3a:ba:48:73:8b:eb:b2:bd:8c:2b:ca:35:f6:f5:
                    04:ec:eb:e7:1e:e3:51:95:27:bf:d1:c7:b9:ec:4e:
                    b2:3b:0d:56:cf:eb:a2:98:a2:e5:33:57:cc:1d:7e:
                    58:52:21:33:88:1f:bb:3c:09:7b:66:c5:9f:a0:24:
                    9e:4a:7f:4a:6f:22:2f:9b:b1:78:67:60:c0:7e:01:
                    ce:da:69:88:a1:7b:c6:80:72:c0:ea:29:6b:01:13:
                    4c:cf:4d:d6:15:20:b7:ff:fe:ec:f9:da:f6:3f:4a:
                    db:ce:2c:f8:c9:72:97:f7:98:70:24:a4:3f:f7:4c:
                    d5:4d:30:88:71:27:95:9c:f3:66:89:21:d1:a7:7e:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1E:58:69:87:7B:BC:5F:E2:5D:CB:37:AF:EA:F3:DD:CD:D3:4A:82
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JB5YaYd7vF_iXcs3r-rz3c3TSoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:e9:5b:cd:cf:ef:60:8b:23:d1:93:f5:ee:f7:98:c5:49:c1:
         20:72:08:ae:a3:5b:7c:a2:21:53:93:d7:5a:c8:b5:82:b3:29:
         a3:55:ac:4c:17:ff:70:71:4f:fc:dd:de:3b:f6:dc:74:06:0d:
         cb:2e:62:d7:4d:cc:e3:9b:35:5b:2e:8d:75:3d:62:39:18:2c:
         74:13:2c:4b:57:6d:54:16:f3:18:53:68:14:4b:1d:4a:ef:f1:
         90:fb:1c:c7:79:09:be:8e:91:b3:ad:b8:f6:a0:fa:c8:ce:d1:
         18:86:c8:a8:1e:5a:49:a7:75:d5:dc:23:64:51:db:1b:ff:2b:
         75:1e:53:42:82:7e:2a:80:f2:57:f6:d1:87:14:e4:98:16:f4:
         76:5c:1e:50:04:a7:aa:ab:e8:78:4f:c0:37:31:56:78:42:a3:
         e6:ba:8b:98:36:29:c4:05:f6:34:48:e9:37:8f:5d:1e:e4:1c:
         58:13:5e:35:a9:00:e6:68:2e:67:0c:80:9d:8c:62:1f:26:34:
         cd:b1:59:fb:24:41:21:76:92:63:af:2c:f6:f1:0a:b2:57:95:
         5d:95:39:49:e6:a4:ca:56:8e:83:f5:7c:16:fa:3a:7e:c6:9f:
         06:3b:58:fd:cb:d1:c7:98:ba:34:7a:4a:ce:b7:c1:83:5a:bb:
         96:28:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org