Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/5gFjPxulV088hzkzuAILy3Be--Q.roa
File:                     5gFjPxulV088hzkzuAILy3Be--Q.roa (raw, json)
Hash identifier:          aGoxPxhpKe7ChxqcVlR2PbIimJ7CSD/XSSLkA4oXnVc=
Subject key identifier:   E6:01:63:3F:1B:A5:57:4F:3C:87:39:33:B8:02:0B:CB:70:5E:FB:E4
Certificate issuer:       /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial:       027B85
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/5gFjPxulV088hzkzuAILy3Be--Q.roa
Signing time:             Thu 21 Apr 2022 10:31:35 +0000
ROA not before:           Thu 21 Apr 2022 10:31:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209856
IP address blocks:        176.124.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162693 (0x27b85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
        Validity
            Not Before: Apr 21 10:31:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e601633f1ba5574f3c873933b8020bcb705efbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:ba:b1:5e:9f:1b:4a:2d:4a:c1:1a:cd:66:
                    61:24:0b:3c:8f:a1:85:bd:67:05:b9:b5:6a:0e:b6:
                    af:4a:39:ef:d8:79:d5:9d:12:8d:60:a2:17:32:2b:
                    9b:7d:cd:a5:3b:1e:a5:2a:5b:2e:1e:94:f5:26:19:
                    af:25:5f:c1:d3:af:18:fd:72:5b:69:68:dd:53:94:
                    5d:0c:92:53:b7:d8:b7:89:d5:7c:54:d4:21:fd:73:
                    e4:ed:9b:5d:a8:9d:ad:ec:a7:02:e6:0d:3a:d3:66:
                    b8:6e:de:3f:51:c1:ed:ab:f9:0c:43:84:b5:fc:5d:
                    67:69:69:c4:1b:4c:b4:90:ca:86:a3:0e:54:f5:5a:
                    a6:2c:e4:3c:b9:c0:2a:4f:9d:e1:f7:32:92:ee:79:
                    5c:6c:f3:eb:81:15:fa:e7:86:1e:bf:a0:5f:39:89:
                    58:93:a5:6c:bf:1e:22:50:a1:a3:d7:c3:18:71:c3:
                    43:f5:05:0c:16:f3:9e:7e:c9:6b:9b:37:08:55:9e:
                    70:3d:1f:b7:f5:3b:22:6b:e0:98:c9:30:36:ce:9e:
                    8a:3d:3b:6a:38:aa:45:97:74:25:0a:07:39:c4:a6:
                    18:d5:53:44:ba:16:42:79:f8:7c:d6:32:59:a8:4e:
                    88:98:d0:bb:9a:dd:6f:b1:91:8d:32:13:c9:1f:5b:
                    9a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:01:63:3F:1B:A5:57:4F:3C:87:39:33:B8:02:0B:CB:70:5E:FB:E4
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/5gFjPxulV088hzkzuAILy3Be--Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.124.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:2b:01:9e:2c:a8:c4:60:b9:cd:f7:ea:0e:96:5b:ee:05:
         3d:0f:eb:b1:7b:5c:b8:dc:ca:81:38:cf:b0:8f:95:ec:cf:33:
         d8:31:24:3f:85:a1:b4:8b:78:b6:fe:5e:8b:74:a9:3c:85:97:
         1e:88:05:c8:87:2a:56:ce:8c:81:e1:2c:e9:c0:b4:61:96:40:
         95:21:4d:7c:43:71:5e:eb:16:16:bb:b3:71:f9:7b:ae:42:69:
         6a:15:e6:ca:a3:f9:1a:00:a9:87:ba:ab:5c:b5:c6:fb:f1:09:
         04:f8:97:45:8a:2c:78:73:7d:17:6b:ab:a3:7a:32:66:f6:75:
         09:71:c8:f6:a9:5a:39:ab:37:07:90:46:87:55:45:58:e2:c5:
         df:28:bd:c1:65:b3:f9:01:3d:bc:c2:c4:4a:aa:79:92:c6:43:
         d1:8f:3e:53:60:3e:4e:70:ac:ed:bf:6d:5e:d4:13:7c:38:ea:
         d8:03:57:bb:7c:8a:1b:8f:0d:b7:74:6f:e9:8a:f2:68:4d:92:
         b2:f7:75:4f:19:b0:e7:d3:80:37:fb:58:8a:16:a0:fb:1b:70:
         a0:ed:c4:ca:a7:42:13:93:c4:c9:1a:6c:00:a9:3f:3a:08:56:
         b7:6d:33:22:46:83:65:35:1f:ab:4e:41:4c:33:19:d1:1c:fd:
         ee:d8:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:57 2024 by rpki-client on console-ams.rpki-client.org