Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_b1OIrNePp5JUdzh6SySlqEkIIU.roa
File:                     _b1OIrNePp5JUdzh6SySlqEkIIU.roa (raw, json)
Hash identifier:          +9dXxJC94Cdo6Bt1eXHtrbLqnCkIOXyzXqLuf+oI6Gw=
Subject key identifier:   FD:BD:4E:22:B3:5E:3E:9E:49:51:DC:E1:E9:2C:92:96:A1:24:20:85
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0183E6E7C9244C65644F3C774CD549F8E524
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_b1OIrNePp5JUdzh6SySlqEkIIU.roa
Signing time:             Mon 17 Oct 2022 17:04:53 +0000
ROA not before:           Mon 17 Oct 2022 17:04:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142111
IP address blocks:        176.105.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e6:e7:c9:24:4c:65:64:4f:3c:77:4c:d5:49:f8:e5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Oct 17 17:04:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fdbd4e22b35e3e9e4951dce1e92c9296a1242085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:12:93:47:cc:93:55:bc:6f:9c:1a:61:19:cc:
                    c0:88:e8:c5:f8:79:3c:e7:87:7f:86:fb:72:ce:cb:
                    c9:db:d6:b9:fe:84:91:c2:7f:69:30:a4:44:31:8f:
                    32:2e:7d:d0:e0:d9:cf:d7:54:20:5b:ea:f6:00:06:
                    93:f6:46:ce:8e:a5:a3:cc:17:c2:fd:9b:1b:71:7c:
                    45:f0:37:5d:e5:91:b2:1f:30:fc:bc:88:af:4f:ce:
                    1a:f6:a2:0f:e8:02:20:64:a4:db:53:a0:be:42:de:
                    c5:34:85:35:81:5c:34:b3:7b:8c:58:ba:59:39:ee:
                    65:e8:45:e0:77:cc:c1:c5:dc:b8:db:4f:69:4e:5d:
                    74:cb:46:ff:d5:92:a9:0c:b7:19:4a:ca:da:aa:82:
                    39:ae:47:32:77:99:3f:aa:17:3b:ef:68:8f:72:c0:
                    7f:3c:2c:b9:a7:e8:92:5d:4a:e6:fd:21:ae:59:bd:
                    96:7d:e2:37:17:40:5c:56:f0:44:ba:a9:d2:89:e5:
                    43:86:e9:7b:40:44:f4:4e:7b:78:68:1e:9d:0e:39:
                    11:1b:7d:e4:45:cb:eb:03:25:6f:41:5a:f2:34:20:
                    ec:9f:95:a2:15:0d:53:f9:7e:36:ad:c1:65:cf:35:
                    bb:56:bd:f5:6b:17:1e:94:31:05:61:58:7e:c0:5e:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BD:4E:22:B3:5E:3E:9E:49:51:DC:E1:E9:2C:92:96:A1:24:20:85
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_b1OIrNePp5JUdzh6SySlqEkIIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:c5:35:d2:07:fe:b0:d9:0e:16:88:12:00:10:88:ca:81:
         be:01:36:04:9e:e6:5b:5b:50:3a:7a:32:ad:bc:e3:3b:fb:ea:
         35:de:51:6d:0b:cf:7b:a7:3c:d1:21:aa:71:c4:e8:66:e7:ad:
         f3:64:ea:68:f7:64:68:2f:36:ed:b3:8b:ea:29:2c:12:16:1d:
         b7:16:05:b6:d7:7d:80:5f:55:29:a8:9f:a9:b8:cd:4b:9f:00:
         3a:c4:82:09:20:fe:1c:71:05:a0:74:43:de:fb:ef:61:cf:39:
         83:04:d5:fa:12:b5:f7:77:75:2f:14:57:e5:ed:38:0b:bd:5b:
         f3:f3:2f:31:70:e1:5a:77:53:4b:2a:72:25:72:dd:82:2d:e0:
         4c:fb:b9:ab:48:e6:fe:77:1e:4a:5d:da:32:31:44:57:31:21:
         c0:71:37:a5:e9:6c:cb:0a:b6:8a:4f:9c:a4:6a:e7:68:bc:32:
         54:9d:bb:8b:24:ed:92:c2:eb:59:fe:91:b5:c5:4c:0a:59:ac:
         45:49:13:4f:e5:bb:ec:b2:58:a6:95:2b:1b:47:40:d9:a7:72:
         d4:1e:60:3a:81:35:0e:86:11:54:35:db:21:79:ca:ba:b7:ab:
         81:bd:39:57:44:4b:71:44:29:e1:6c:4c:14:6a:7a:7a:96:d9:
         53:43:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org