Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jAETooigLNBNe87OuFF-266n-ms.roa
File:                     jAETooigLNBNe87OuFF-266n-ms.roa (raw, json)
Hash identifier:          XFXBBlhBNYDpWRkBfxzZycJ4lB4kwo437+o21qtf1SI=
Subject key identifier:   8C:01:13:A2:88:A0:2C:D0:4D:7B:CE:CE:B8:51:7E:DB:AE:A7:FA:6B
Certificate issuer:       /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial:       018438AD45211819177C60932B5CA6AE0D8E
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jAETooigLNBNe87OuFF-266n-ms.roa
Signing time:             Wed 02 Nov 2022 14:09:50 +0000
ROA not before:           Wed 02 Nov 2022 14:09:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57142
IP address blocks:        176.126.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:38:ad:45:21:18:19:17:7c:60:93:2b:5c:a6:ae:0d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
        Validity
            Not Before: Nov  2 14:09:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c0113a288a02cd04d7bceceb8517edbaea7fa6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:cc:4b:bf:0c:b9:f4:7f:f6:c4:15:75:1e:
                    be:5e:cf:0e:f0:16:af:32:a0:e2:bb:77:60:56:6b:
                    ee:4e:ab:b7:d1:10:91:24:5a:a8:16:97:19:5a:ca:
                    a1:37:4f:e4:29:47:b4:d9:6b:ed:b1:12:77:16:62:
                    f4:ca:bd:29:cb:4e:b8:63:20:3d:7d:a4:6d:65:c3:
                    59:b2:2c:92:5b:83:24:9f:86:8f:c4:fc:d1:49:55:
                    e3:85:44:73:11:59:0c:ad:fd:59:c0:18:51:12:68:
                    28:60:af:ad:3e:63:60:15:d6:fa:4d:c5:09:04:91:
                    fe:6a:a6:1b:a1:9b:68:9b:c6:8c:fd:0c:29:e5:82:
                    95:7f:8f:8f:68:23:80:11:f7:68:97:77:ba:f0:41:
                    49:65:4b:7c:87:27:23:94:d3:83:2f:94:3b:8f:08:
                    d6:9d:68:92:6f:18:bd:34:7e:d3:15:aa:ac:9c:ba:
                    04:a1:5d:1b:36:8e:48:8b:4e:66:18:ee:2a:1d:b0:
                    b4:09:99:31:cc:b6:9e:65:2c:da:8b:a4:9e:6d:f7:
                    ac:be:c6:57:f5:d6:bd:3d:5a:72:10:6a:d4:01:28:
                    c2:2f:c2:e2:f1:55:15:db:1a:e2:37:4e:3d:52:2b:
                    14:0d:d2:af:e8:ca:72:5f:6c:aa:6d:2a:44:c8:c9:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:01:13:A2:88:A0:2C:D0:4D:7B:CE:CE:B8:51:7E:DB:AE:A7:FA:6B
            X509v3 Authority Key Identifier:
                keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jAETooigLNBNe87OuFF-266n-ms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:2f:0c:6c:4b:12:52:ea:d0:08:5c:45:84:c7:4a:c8:19:
         d9:7d:e6:29:a4:7c:2f:68:81:ed:dc:7c:05:78:52:9a:7c:42:
         46:3c:02:ee:af:c9:1b:a2:84:fa:ea:47:e4:af:9a:57:a7:17:
         1c:88:f5:7a:d3:54:ec:f7:14:2c:d4:7d:d8:9c:59:37:6d:b4:
         a1:51:97:94:2c:aa:1b:61:79:65:31:0c:70:26:ed:4d:a4:4c:
         24:48:da:5e:32:98:72:07:22:a0:99:61:8b:84:a0:92:94:84:
         b3:4e:40:9c:66:15:33:b1:93:c7:5a:87:24:a8:33:94:e3:2d:
         64:7a:f1:5e:b3:9e:76:70:31:c4:e0:db:cb:2c:74:62:11:a1:
         27:ac:c2:8b:5e:19:83:53:a1:09:fe:f4:21:c8:bc:5a:78:e1:
         c5:d0:94:91:93:ad:c0:15:5b:0e:fc:ab:f3:66:af:69:92:eb:
         d4:0e:55:3b:89:bc:b0:f1:a7:64:99:42:e4:0f:b3:32:65:fc:
         fe:ac:98:e5:2b:53:af:85:33:3e:98:98:6d:04:07:72:75:69:
         8a:7a:9e:d5:33:6a:7e:bb:a8:21:50:f0:70:56:bc:85:eb:9d:
         91:4b:7c:9d:71:c1:2c:d2:98:c6:5e:83:e0:31:f8:e7:63:0c:
         28:d8:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org