Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/LGNGTxJPBP0isb8-RmUc_lmxH0g.roa
File:                     LGNGTxJPBP0isb8-RmUc_lmxH0g.roa (raw, json)
Hash identifier:          qZr/k2JR7jmDH+zcQzetqub9r0QbWq82AadX+qps+dg=
Subject key identifier:   2C:63:46:4F:12:4F:04:FD:22:B1:BF:3E:46:65:1C:FE:59:B1:1F:48
Certificate issuer:       /CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Certificate serial:       0183D14B014FF458E3715D91817B7E1C5F21
Authority key identifier: 76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/LGNGTxJPBP0isb8-RmUc_lmxH0g.roa
Signing time:             Thu 13 Oct 2022 12:21:37 +0000
ROA not before:           Thu 13 Oct 2022 12:21:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56769
IP address blocks:        31.24.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d1:4b:01:4f:f4:58:e3:71:5d:91:81:7b:7e:1c:5f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
        Validity
            Not Before: Oct 13 12:21:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c63464f124f04fd22b1bf3e46651cfe59b11f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:b4:50:2f:2e:05:b4:99:f8:6c:15:f2:1e:
                    64:c8:b5:29:3a:75:b0:6f:75:8a:15:06:6a:c7:1f:
                    66:a9:7e:af:63:b0:ed:50:76:df:21:75:5a:85:51:
                    b8:d0:f5:5f:fa:dd:a0:1e:86:ea:79:cc:e0:90:41:
                    10:07:87:99:44:86:74:66:05:83:b2:b6:1f:8f:3b:
                    00:70:96:eb:f1:db:30:56:cf:d3:23:73:12:c9:2d:
                    df:51:ea:1f:ee:83:a0:b0:63:23:f6:7a:b1:ab:1e:
                    98:b7:fe:d2:54:19:ce:ab:40:75:84:77:a3:2d:de:
                    0b:01:b2:55:97:d0:d0:1f:05:9c:6c:af:b6:65:b9:
                    40:d4:34:04:46:f1:cd:3c:93:a9:7e:ae:3d:7d:6f:
                    a4:9f:20:bb:69:b8:81:9f:e4:31:90:8d:62:94:98:
                    41:43:e4:63:d1:e5:eb:2c:4e:40:9a:09:f0:47:cb:
                    28:e2:48:34:78:9c:bf:c7:ef:e1:a2:f3:38:f8:ac:
                    8e:71:54:5a:b9:d6:db:7b:72:b5:20:57:85:cd:ce:
                    ac:d6:f0:f5:cb:51:32:8f:b7:20:94:c6:6f:67:38:
                    8d:67:3f:4e:b3:e7:11:31:03:6d:2a:ec:28:94:fb:
                    ad:ab:1b:52:80:a3:6f:e3:d6:dd:4c:ac:de:ee:0a:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:63:46:4F:12:4F:04:FD:22:B1:BF:3E:46:65:1C:FE:59:B1:1F:48
            X509v3 Authority Key Identifier:
                keyid:76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/LGNGTxJPBP0isb8-RmUc_lmxH0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:e9:95:1e:51:50:f4:e3:c0:88:4b:60:55:ec:a5:22:33:c3:
         c8:60:3d:0c:68:28:3c:7a:27:07:e1:2a:8a:30:a2:81:6c:c6:
         d7:60:4b:44:e8:01:b0:2a:4f:32:a0:90:21:65:4c:56:18:68:
         1b:9c:c8:9c:3e:be:b5:f6:d8:ba:5b:b1:7d:1b:8d:21:f6:2b:
         a4:28:b6:a8:f6:7d:27:d0:06:a6:32:d1:cd:4f:4f:46:b7:d4:
         21:1a:e7:63:12:73:c0:2b:6f:01:0a:ba:66:4e:d0:5c:5a:d4:
         6d:78:97:11:f7:54:44:45:47:ed:7e:be:a3:86:f3:8d:f6:02:
         a0:01:62:28:01:f6:bf:26:aa:03:5c:d2:8f:6a:30:1d:1c:ef:
         d8:28:c4:c1:6a:62:d8:66:e6:32:49:c0:54:d2:d4:38:96:c0:
         c2:8c:cf:4d:83:e3:7b:2a:1f:13:ca:e6:fd:1a:f6:ea:f6:c3:
         c0:53:59:37:01:ff:47:31:b2:e0:f2:ce:31:e8:ac:0d:ae:83:
         7d:fa:29:60:68:fb:d8:22:8a:d5:d6:99:fd:5e:b0:46:e9:ee:
         05:1f:28:82:61:4c:43:10:18:12:00:18:50:c1:8e:7b:18:ed:
         19:34:2e:d5:26:03:53:61:b6:59:3e:fb:8d:b8:ad:cd:e8:2c:
         ac:3e:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:23 2024 by rpki-client on console-ams.rpki-client.org