Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7hXmAn091t_LeJDistSiRTwl_N8.roa
File:                     7hXmAn091t_LeJDistSiRTwl_N8.roa (raw, json)
Hash identifier:          7MkjudXRecSqBKVbOxx3iXns5iCXcSU4vJZYk2Mt3dc=
Subject key identifier:   EE:15:E6:02:7D:3D:D6:DF:CB:78:90:E2:B2:D4:A2:45:3C:25:FC:DF
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       08F2BB82
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7hXmAn091t_LeJDistSiRTwl_N8.roa
Signing time:             Sun 10 Apr 2022 17:50:28 +0000
ROA not before:           Sun 10 Apr 2022 17:50:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58224
IP address blocks:        178.253.16.0/24 maxlen: 24
                          178.253.22.0/23 maxlen: 24
                          178.253.26.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150125442 (0x8f2bb82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Apr 10 17:50:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee15e6027d3dd6dfcb7890e2b2d4a2453c25fcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:3f:a8:f3:1c:bd:4b:70:8f:ae:6f:cb:ba:
                    5c:22:2a:03:19:bd:2a:c0:b6:8d:77:f8:f8:90:c4:
                    e8:87:b0:98:3e:47:66:36:bd:f4:f3:f1:c2:58:7d:
                    5d:f5:81:1a:34:5c:d8:71:33:20:cc:86:87:6b:03:
                    34:d1:61:6f:fa:10:f0:e1:4b:7d:8f:6d:72:68:72:
                    0b:3e:31:68:90:61:54:57:7e:0c:fe:77:1e:70:e7:
                    36:f3:56:6c:94:02:86:b2:0c:7b:b2:da:6d:4c:62:
                    d4:f6:0d:b3:7e:ba:af:1a:1a:ca:a2:b6:46:c7:20:
                    22:9d:df:29:d9:d3:b9:8d:cd:74:32:2f:18:41:4e:
                    c8:54:c6:38:07:9c:5d:d3:6b:24:68:27:d0:83:b9:
                    2d:70:21:1d:76:4e:a3:bc:fc:ab:6a:cd:4f:71:dd:
                    4a:72:60:7c:04:56:96:2c:5d:22:a0:a0:80:47:5b:
                    d5:29:66:62:f4:89:ee:ad:55:89:67:34:33:58:79:
                    92:58:17:b5:76:c6:68:b2:87:eb:3b:7b:d1:fa:1a:
                    e3:a7:48:0e:2e:4c:1b:1b:57:bd:31:a6:e5:cd:b3:
                    0d:f3:0d:87:4f:5d:69:00:45:62:55:1e:d8:b6:79:
                    31:b2:dd:d6:df:94:2d:fd:49:2d:72:80:20:4c:54:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:15:E6:02:7D:3D:D6:DF:CB:78:90:E2:B2:D4:A2:45:3C:25:FC:DF
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7hXmAn091t_LeJDistSiRTwl_N8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.16.0/24
                  178.253.22.0/23
                  178.253.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:a6:fd:93:3c:48:22:0d:76:b2:72:13:89:52:9d:15:f2:
         d5:70:13:ae:5d:b7:1b:67:ce:d5:96:54:b3:2e:14:a7:b1:ec:
         64:00:b6:f3:98:90:06:7c:f3:57:37:b6:37:9d:c1:70:c2:60:
         f1:41:28:b1:c2:db:c8:52:eb:2c:5d:bd:96:f0:54:e4:42:67:
         f7:ec:7e:49:d0:8d:28:24:5f:08:1a:d7:c9:a8:aa:6a:8d:38:
         13:80:78:21:e1:fb:7b:7a:4a:21:bc:b5:64:d1:80:d7:45:cc:
         ae:ec:9d:64:38:f4:af:05:14:44:44:37:b6:34:13:14:cc:18:
         19:ea:60:52:68:01:45:77:4f:ef:27:ab:62:3c:10:e4:0a:46:
         d9:5a:53:bb:59:b1:e4:ae:d6:42:09:cd:81:d7:91:de:13:ad:
         ff:76:26:45:53:0e:a7:a8:f1:34:04:49:b6:95:92:09:74:b6:
         82:9f:b8:d4:1f:6a:bc:74:f0:e1:73:d9:b3:4f:3f:55:9e:f6:
         d7:3e:35:8c:cf:db:41:ef:14:b0:57:cb:a8:db:65:c7:8f:3a:
         72:bb:25:e1:0f:72:f1:e4:07:64:e4:a0:9b:f4:db:48:e5:21:
         8a:69:8e:4b:de:8e:54:93:1d:7e:7d:00:7b:09:c7:a8:ba:2f:
         ec:e1:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org