Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DJvV6DOQMpTsoZzqt50uG_iuRGo.roa
File:                     DJvV6DOQMpTsoZzqt50uG_iuRGo.roa (raw, json)
Hash identifier:          gxD0It7OgV1xyJUUCQ0SVmN9iJ0dTAHtHj+8eg5jPWg=
Subject key identifier:   0C:9B:D5:E8:33:90:32:94:EC:A1:9C:EA:B7:9D:2E:1B:F8:AE:44:6A
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0184804917BD3F4BE0723BB80CFACDD7CC21
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DJvV6DOQMpTsoZzqt50uG_iuRGo.roa
Signing time:             Wed 16 Nov 2022 11:53:04 +0000
ROA not before:           Wed 16 Nov 2022 11:53:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43043
IP address blocks:        163.5.107.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:80:49:17:bd:3f:4b:e0:72:3b:b8:0c:fa:cd:d7:cc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Nov 16 11:53:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0c9bd5e833903294eca19ceab79d2e1bf8ae446a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:81:0f:c6:a2:b5:bd:da:c3:13:19:c2:bc:
                    c7:87:bd:38:2d:e0:ac:41:8d:00:68:77:d8:87:e2:
                    18:d3:08:b2:17:43:01:10:89:da:02:21:c1:5e:d9:
                    dc:3c:04:28:9e:c2:97:bc:b2:c8:24:0e:3f:4c:a3:
                    e7:1b:e8:4c:e4:c0:1b:02:0b:8c:ec:40:05:ef:6f:
                    72:29:47:ae:d2:43:af:6a:b6:00:0e:55:93:a2:bc:
                    12:b5:42:e4:51:13:23:1a:5b:f3:45:d7:57:85:e9:
                    cd:fd:3b:55:ae:cf:f7:68:87:8c:ba:88:78:e2:54:
                    5b:b2:85:27:2d:82:20:79:55:51:d6:d3:3e:4d:c0:
                    50:00:f1:f0:e7:c9:c5:0b:36:2c:4c:ed:fb:bd:c2:
                    e4:fb:ab:a1:5e:de:9a:78:63:ee:4f:f6:10:8f:61:
                    b9:7f:34:d2:7b:65:cb:a4:ab:8e:9e:3f:52:32:0b:
                    9d:bb:0f:2f:af:fd:f0:43:e3:35:99:58:cd:90:c8:
                    bf:ba:f6:28:88:6e:a5:93:d7:f0:ae:d6:eb:d3:06:
                    aa:bb:2e:21:8f:c4:70:58:41:6b:81:31:42:db:e2:
                    d9:8f:83:d9:8f:05:85:31:26:1b:67:03:3b:cc:ed:
                    2e:12:d5:63:a2:80:d8:e5:aa:23:39:71:e4:13:7f:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9B:D5:E8:33:90:32:94:EC:A1:9C:EA:B7:9D:2E:1B:F8:AE:44:6A
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DJvV6DOQMpTsoZzqt50uG_iuRGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.107.0/24
                  163.5.121.0/24
                  163.5.137.0/24
                  163.5.143.0/24
                  163.5.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:be:dd:a1:cc:f6:a4:a3:bb:0a:fe:98:f6:1d:5c:c9:96:
         2b:bb:17:f6:a8:1f:2d:35:53:a9:97:5f:a0:15:9c:2a:d8:3e:
         44:99:30:69:51:3e:2c:cd:4b:53:05:70:14:4f:1d:d3:69:a9:
         e3:25:44:aa:b7:a8:91:a9:7f:94:14:74:87:1e:8a:06:96:af:
         b2:96:84:e0:cb:41:15:ce:c8:53:0e:a5:ba:50:5c:ed:da:64:
         1e:b3:3f:7d:f8:f4:be:0d:5a:c2:d7:e7:5c:6d:cd:ea:a0:30:
         e4:72:74:6a:51:06:fc:ea:68:bf:ef:91:14:38:6e:72:7f:f3:
         18:49:af:64:ca:50:32:b2:91:41:25:3d:8e:a4:43:3e:6d:1a:
         cf:2f:6a:39:1c:34:7c:e5:aa:16:d0:85:14:11:8f:9b:be:61:
         c3:b4:bf:13:87:fd:9f:1e:fc:12:93:e6:e4:15:36:b0:21:13:
         e0:44:af:be:7b:c7:a4:d8:2b:2c:f3:90:9f:c1:2c:87:a5:04:
         b3:0c:3d:d8:23:2d:2f:83:fb:4a:2c:90:80:35:21:9e:9e:86:
         41:19:b4:22:a1:38:b4:8b:4c:e5:74:77:67:f5:c8:98:70:de:
         e1:e5:3b:ae:9e:f3:21:cd:13:50:f5:cf:d5:1d:27:36:22:af:
         26:c0:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:29 2024 by rpki-client on console-ams.rpki-client.org