Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/visjRdhQJRFdd6Z8t8wHRb2jwSY.roa
File:                     visjRdhQJRFdd6Z8t8wHRb2jwSY.roa (raw, json)
Hash identifier:          tU8jm7y7H6eE37FAVhc7D0AIVem2xJSkLlgnkgXtDo8=
Subject key identifier:   BE:2B:23:45:D8:50:25:11:5D:77:A6:7C:B7:CC:07:45:BD:A3:C1:26
Certificate issuer:       /CN=55372b942c5207680054cfb11ad911a868f0619c
Certificate serial:       F58B
Authority key identifier: 55:37:2B:94:2C:52:07:68:00:54:CF:B1:1A:D9:11:A8:68:F0:61:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTcrlCxSB2gAVM-xGtkRqGjwYZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/visjRdhQJRFdd6Z8t8wHRb2jwSY.roa
Signing time:             Wed 02 Feb 2022 06:33:01 +0000
ROA not before:           Wed 02 Feb 2022 06:33:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43624
IP address blocks:        176.126.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62859 (0xf58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55372b942c5207680054cfb11ad911a868f0619c
        Validity
            Not Before: Feb  2 06:33:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be2b2345d85025115d77a67cb7cc0745bda3c126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:3c:f8:26:91:bf:a0:68:40:c4:42:4d:a0:
                    ec:3b:a5:90:73:14:7b:e3:32:92:92:2f:de:2d:38:
                    4c:8e:e9:05:19:a6:6f:8b:9d:6c:a9:20:35:c1:ba:
                    d6:83:09:1c:76:81:81:b7:e8:39:cc:bd:8d:9e:c8:
                    7c:7b:3b:5d:e9:1e:2a:73:fb:31:67:9e:b8:3b:24:
                    9d:8a:07:15:b6:71:2a:2a:40:2c:70:93:af:44:0f:
                    09:24:84:3a:3b:a1:a4:21:1f:6c:10:85:7b:fa:3e:
                    b1:9d:e3:40:20:4a:a1:f7:5f:8e:d8:97:1f:36:c0:
                    77:5b:81:93:83:3b:08:cb:07:94:04:1f:6c:31:7c:
                    08:a0:b7:bd:8d:85:bf:26:2d:51:1d:c3:7a:e9:1a:
                    fb:52:ec:99:53:1f:fe:40:01:10:91:5e:61:1a:08:
                    7a:dd:52:7f:9f:93:7b:10:ff:e3:89:c8:d6:cb:6d:
                    12:33:9b:4b:81:ff:5a:09:9a:78:aa:99:ed:c0:6a:
                    96:4d:cf:3b:db:51:5d:15:b4:33:04:34:ab:23:fc:
                    83:02:08:b3:1a:78:49:ee:cc:80:5c:c5:50:70:e1:
                    96:53:7b:cb:87:95:4b:76:bf:d6:ee:38:1e:74:02:
                    7b:0d:a9:21:4c:72:ba:9d:fc:98:28:90:83:26:e0:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2B:23:45:D8:50:25:11:5D:77:A6:7C:B7:CC:07:45:BD:A3:C1:26
            X509v3 Authority Key Identifier:
                keyid:55:37:2B:94:2C:52:07:68:00:54:CF:B1:1A:D9:11:A8:68:F0:61:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTcrlCxSB2gAVM-xGtkRqGjwYZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/visjRdhQJRFdd6Z8t8wHRb2jwSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/VTcrlCxSB2gAVM-xGtkRqGjwYZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:c2:79:24:f8:40:76:b2:83:1b:4c:cc:6d:a8:02:9b:e5:
         6f:d8:ed:6c:ab:4c:0b:fb:ab:c7:ed:e2:f7:8c:16:a8:ed:04:
         3c:08:f6:e5:86:86:0d:10:c7:bc:89:28:4f:3d:fd:ba:02:11:
         18:72:2f:52:fb:22:85:a7:d9:a5:3a:f7:67:3e:95:ce:a6:d0:
         25:9e:d4:7f:e5:e5:02:6e:ac:9a:fe:00:1f:9f:92:3a:48:83:
         23:c2:88:86:50:e1:b2:57:61:12:81:b0:77:f9:a7:1b:c4:4f:
         e3:52:e0:db:e4:43:51:1d:e0:b6:a4:c1:aa:98:f7:de:45:1f:
         46:be:a0:37:3a:44:ef:0e:32:4e:b4:d7:38:05:12:30:c4:46:
         bc:5b:c6:29:b4:11:c0:50:a7:af:13:cd:ea:82:84:2b:bc:8f:
         98:14:c1:5b:10:1c:20:be:e4:97:3e:bf:05:4e:b7:8e:67:bf:
         e8:b6:dd:25:33:98:d2:50:4f:ae:b5:59:c9:03:6d:9e:79:de:
         4d:15:e5:ef:bf:18:b1:27:47:ad:08:00:36:f6:95:37:b1:fe:
         33:72:64:70:4b:8b:01:89:9f:f0:32:46:64:51:89:40:c3:34:
         22:60:2f:c7:b1:3e:53:2e:2c:dd:6f:21:da:9f:43:75:1f:10:
         e9:28:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:28 2023 by rpki-client on console-ams.rpki-client.org