Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jyL15fae3hZAfKq-GSLCOXzcecw.roa
File:                     jyL15fae3hZAfKq-GSLCOXzcecw.roa (raw, json)
Hash identifier:          6zNFJ926n+XECF+dslBbcmV5CpO7qNS8lAszpoeoF6I=
Subject key identifier:   8F:22:F5:E5:F6:9E:DE:16:40:7C:AA:BE:19:22:C2:39:7C:DC:79:CC
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       1875DE28
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jyL15fae3hZAfKq-GSLCOXzcecw.roa
Signing time:             Thu 02 Jun 2022 09:41:20 +0000
ROA not before:           Thu 02 Jun 2022 09:41:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59903
IP address blocks:        141.101.248.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410377768 (0x1875de28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jun  2 09:41:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f22f5e5f69ede16407caabe1922c2397cdc79cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:6a:c2:45:f9:77:0c:74:f7:6a:aa:00:63:
                    ed:ea:9d:de:12:9e:25:0a:2f:cc:13:96:97:c5:3e:
                    f8:6a:19:a0:92:c9:5f:d7:0f:f5:8c:2d:a0:32:32:
                    7b:6a:4d:53:32:7c:12:26:70:92:31:5e:91:4a:6f:
                    ca:35:4f:54:27:b6:d3:1b:df:a7:37:f6:db:df:41:
                    2e:54:fd:99:22:21:b4:a2:14:b3:d0:c0:35:4f:12:
                    ed:f5:29:a0:ed:b1:7a:26:be:4b:4b:5d:e2:80:2d:
                    cc:8e:54:0b:9f:3f:4d:b4:cf:ff:67:2d:fc:4d:90:
                    54:75:a2:a5:56:45:64:56:a5:13:49:70:44:b3:25:
                    c3:a7:93:ad:45:3a:f6:44:36:a8:bb:67:8c:d2:5d:
                    2f:e2:e1:a9:51:a8:41:0a:f1:e0:c0:62:d9:49:9e:
                    a7:4b:fd:0a:ca:51:82:7b:16:a6:1e:eb:58:c8:af:
                    85:7a:c5:5b:d2:58:fa:cd:73:46:e4:25:30:a2:7e:
                    96:36:39:4e:e1:d9:ee:32:00:6b:7e:d1:37:aa:27:
                    79:68:72:66:86:57:fe:6a:16:c1:c8:74:77:ef:0d:
                    9b:04:2b:6d:c0:f4:0c:7f:d0:59:13:33:53:b0:6d:
                    04:96:79:61:5c:63:44:f1:4a:b8:38:35:a5:eb:fa:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:22:F5:E5:F6:9E:DE:16:40:7C:AA:BE:19:22:C2:39:7C:DC:79:CC
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jyL15fae3hZAfKq-GSLCOXzcecw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:a2:33:da:a2:50:c5:13:50:bf:2b:ae:8c:49:3f:ac:14:33:
         ef:cb:81:d9:b9:cc:2e:fa:da:60:a1:0d:a8:86:d8:43:dc:a0:
         78:f9:ee:9f:3a:4c:fd:ec:82:14:f0:1f:5e:bf:9b:b8:98:bc:
         7d:10:47:81:64:be:b2:e3:ef:5e:04:7c:b0:b8:24:29:38:9d:
         a8:af:31:12:ed:03:93:3e:a0:9f:31:d1:34:c6:9e:a3:79:4a:
         b3:0b:9c:25:ce:00:f2:3e:34:48:87:9f:cb:a8:70:ca:31:73:
         f6:d8:13:eb:b6:2e:b4:18:e0:0c:f6:7b:12:fd:87:51:9d:aa:
         36:c4:01:a9:1f:bf:c1:73:63:26:8f:71:49:34:a1:ed:de:5c:
         76:82:56:48:38:eb:6f:f5:e4:71:63:fe:8a:97:eb:ce:0f:0d:
         1d:33:81:6b:3a:e8:96:40:5c:dc:0b:e1:f7:e9:42:5c:93:a1:
         17:fd:70:43:af:29:66:18:17:8f:69:ce:09:8f:d5:95:55:6d:
         64:29:3e:46:e3:15:65:e7:3e:8a:7c:4b:c7:fb:8d:29:c4:22:
         7c:90:27:2b:09:e3:ba:4f:4e:53:c2:cc:82:e8:3a:6e:10:1e:
         b0:a4:d3:ad:b4:94:e9:ae:90:10:f2:bc:53:7b:73:23:99:bc:
         b9:e0:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org