Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/Jk6qFoGOmWYf0zrLeMXOSUpWgKA.roa
File:                     Jk6qFoGOmWYf0zrLeMXOSUpWgKA.roa (raw, json)
Hash identifier:          XIONFLYJ5eDXjPJNXNtGmVdL+Y9KnMIqn+vYHBtVfPQ=
Subject key identifier:   26:4E:AA:16:81:8E:99:66:1F:D3:3A:CB:78:C5:CE:49:4A:56:80:A0
Certificate issuer:       /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial:       0D466D3D
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/Jk6qFoGOmWYf0zrLeMXOSUpWgKA.roa
Signing time:             Sat 01 Jan 2022 12:03:13 +0000
ROA not before:           Sat 01 Jan 2022 12:03:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57971
IP address blocks:        5.59.176.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222719293 (0xd466d3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
        Validity
            Not Before: Jan  1 12:03:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=264eaa16818e99661fd33acb78c5ce494a5680a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:f0:f7:1c:60:53:79:ea:49:d0:d4:6d:e5:
                    84:03:65:d7:9d:73:30:f3:cd:62:32:38:2e:5c:8d:
                    be:ef:be:52:48:d2:3f:e0:75:f4:00:ab:de:04:3a:
                    8b:ad:b3:8b:10:68:e9:a1:ee:71:9c:1d:04:fe:ab:
                    83:f5:b1:dc:4b:b7:6c:13:e4:6f:90:9b:e9:01:1b:
                    ed:d0:3f:a9:b1:78:42:13:a6:16:1f:2e:d3:e9:d6:
                    c6:33:3a:e8:ad:e9:43:5a:2c:88:f7:a3:a4:9f:5c:
                    0f:27:75:04:17:f1:24:80:24:52:ad:01:9d:fe:19:
                    e1:07:30:46:3c:29:9c:12:37:9d:08:ea:07:52:b6:
                    46:b2:d8:8a:56:08:16:39:6d:d8:99:ba:e6:f2:1d:
                    7e:a9:9c:f0:1e:88:3a:23:f6:83:67:5e:61:05:ec:
                    c6:fd:e4:de:f1:13:9f:db:c4:92:84:5a:52:55:60:
                    7b:23:0e:9a:53:1e:ac:bd:4c:49:b5:c2:a1:ad:a4:
                    d9:70:db:6b:17:05:4c:66:2d:07:37:5d:33:5f:74:
                    bb:58:3e:37:d9:a8:30:d5:95:6e:74:4f:e0:43:b1:
                    4a:2f:a5:ba:40:04:1d:cb:61:f3:56:ac:27:a6:54:
                    79:50:e4:60:97:3d:a6:ce:aa:e1:44:b0:b8:a3:c9:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4E:AA:16:81:8E:99:66:1F:D3:3A:CB:78:C5:CE:49:4A:56:80:A0
            X509v3 Authority Key Identifier:
                keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/Jk6qFoGOmWYf0zrLeMXOSUpWgKA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.59.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:15:05:ba:c0:0c:59:79:1a:36:80:cb:9a:db:09:4d:e7:9a:
         26:38:a8:ab:45:3f:f0:47:9f:ac:cc:f9:31:f3:26:4a:51:f6:
         c9:ed:8d:53:3b:ff:67:22:84:3a:f6:e2:b9:de:cf:bf:5c:18:
         ba:2e:b5:82:de:26:8f:ef:01:47:93:e6:1d:6e:9f:3e:a6:6e:
         fc:b8:2a:c3:db:59:1e:4a:d5:68:e7:20:47:26:2b:58:50:1d:
         c8:a9:a6:12:1f:8a:30:77:6a:e8:05:f7:3a:fd:ba:da:be:77:
         c2:44:00:c0:48:bf:5b:57:8a:ad:89:81:0d:aa:25:15:73:de:
         96:b2:89:c9:01:f6:67:4e:23:17:a1:0f:3e:55:b5:36:70:58:
         74:28:ac:6e:64:87:68:26:39:2e:8f:14:d8:3a:32:ea:bf:43:
         73:63:f1:72:1e:ff:59:a5:46:46:41:2f:da:d0:ea:ce:21:be:
         c7:e8:fd:65:fe:93:cf:03:62:cf:c5:9c:ad:8f:de:0e:5b:28:
         c4:d3:b1:5c:9a:6b:10:4e:05:ea:82:3c:09:8a:8c:1e:94:29:
         2c:cb:40:89:1c:55:66:88:31:ff:74:e5:f3:01:f2:5c:35:a3:
         ad:0d:a5:0f:a5:ee:bb:36:ea:99:36:9a:7d:57:13:98:fe:d0:
         c7:a0:db:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:52 2024 by rpki-client on console-ams.rpki-client.org