Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ioCRx716LuUfE6ijL-G33-ALEck.roa
File:                     ioCRx716LuUfE6ijL-G33-ALEck.roa (raw, json)
Hash identifier:          JPBGyqlUkcoOYAPGwRnoRrbDgp518qKw/ybq2bTQhJ8=
Subject key identifier:   8A:80:91:C7:BD:7A:2E:E5:1F:13:A8:A3:2F:E1:B7:DF:E0:0B:11:C9
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       178A6A5E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ioCRx716LuUfE6ijL-G33-ALEck.roa
Signing time:             Sat 05 Mar 2022 19:05:43 +0000
ROA not before:           Sat 05 Mar 2022 19:05:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        188.72.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394947166 (0x178a6a5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Mar  5 19:05:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a8091c7bd7a2ee51f13a8a32fe1b7dfe00b11c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:0b:4d:99:a6:22:b1:4a:a5:ac:ca:ba:c1:
                    5f:84:5a:66:d8:8e:c3:d7:b6:b7:2f:19:34:89:97:
                    a8:4e:6e:8c:84:f1:a1:fc:81:db:75:f6:9e:0e:be:
                    90:33:b6:f8:6b:d8:68:d5:27:68:5c:41:c6:2a:5e:
                    bc:a0:03:79:3a:12:bd:e4:1e:41:1d:a1:23:84:d8:
                    25:5d:7e:55:66:8e:09:e4:89:64:a4:e4:2a:3f:23:
                    8d:9f:48:06:eb:c7:be:b5:db:d4:56:fb:5c:3e:bb:
                    ee:a9:26:fe:3f:d1:c4:f3:ab:83:1b:56:42:42:78:
                    9c:dc:3b:7c:05:1e:a0:a0:4f:87:14:8f:27:cf:2c:
                    c3:a2:b8:67:df:d9:54:9e:9c:6e:d7:8c:06:66:6d:
                    25:83:4c:6e:66:49:15:e0:51:26:cf:2b:fe:20:8c:
                    06:7c:d1:06:be:63:72:4a:0c:eb:0c:44:57:f9:28:
                    57:35:ff:16:57:7c:d0:ed:df:92:95:2f:5e:a7:12:
                    db:f0:38:54:c8:ff:97:56:9a:9b:3a:37:88:41:8c:
                    a6:55:95:97:b4:da:94:3f:9d:81:76:f7:f8:3b:aa:
                    1d:09:a0:8f:df:ad:f3:17:50:ab:a1:f8:93:0b:1d:
                    26:d7:34:ad:06:84:36:08:c2:a2:ae:c8:3d:e9:d5:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:80:91:C7:BD:7A:2E:E5:1F:13:A8:A3:2F:E1:B7:DF:E0:0B:11:C9
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ioCRx716LuUfE6ijL-G33-ALEck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.72.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:89:4f:f3:f9:c1:24:79:c3:86:8f:17:c7:e6:41:0f:91:
         2d:22:a1:a8:42:ab:22:58:66:0e:48:25:19:d8:69:eb:06:68:
         5a:eb:f3:8b:de:00:c9:81:30:3a:1d:b0:ad:bf:33:bc:d1:85:
         44:48:7e:96:f0:a1:12:9b:6d:77:2d:95:f8:59:d3:74:84:0b:
         84:ff:2f:b7:b6:9c:16:c0:47:cc:79:96:80:24:c3:69:aa:43:
         83:69:7f:fa:60:13:cb:0d:cf:05:2a:96:39:09:09:76:a2:6a:
         74:67:e2:88:95:b5:a6:54:3a:69:8f:9f:9b:ce:d5:47:e6:15:
         e6:d2:78:b6:8f:40:f5:00:27:90:d8:f2:c4:ad:ea:42:31:ba:
         dd:03:e8:3b:e3:5a:2b:f1:5e:e6:63:c8:44:f7:5f:6b:7f:09:
         01:98:bb:20:62:3e:4e:00:8a:ce:e3:3e:30:ce:a3:40:97:d6:
         61:bf:df:f3:df:19:43:be:76:96:ab:5b:ad:b0:b3:ea:8e:61:
         70:77:cb:e3:1a:08:f2:35:3a:1f:f0:72:78:01:0a:52:9c:34:
         38:2a:fa:68:8e:e5:d3:5e:f1:ba:18:5c:17:8d:a7:fe:0c:ad:
         8b:98:d0:d6:75:1f:cf:59:db:b0:28:2b:3b:2c:b9:ee:8b:18:
         6d:4a:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org