Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MlRv-pUrFPvTc_tXccVfNbaytZE.roa
File:                     MlRv-pUrFPvTc_tXccVfNbaytZE.roa (raw, json)
Hash identifier:          a04fmKBaUFFJDXhJwtq6UkfvSTybyE2bY+Ppcy3HseY=
Subject key identifier:   32:54:6F:FA:95:2B:14:FB:D3:73:FB:57:71:C5:5F:35:B6:B2:B5:91
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01854E28E93B01DA127516DAD2CBF199023B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MlRv-pUrFPvTc_tXccVfNbaytZE.roa
Signing time:             Mon 26 Dec 2022 11:19:41 +0000
ROA not before:           Mon 26 Dec 2022 11:19:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30823
IP address blocks:        163.5.90.0/24 maxlen: 24
                          163.5.236.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:4e:28:e9:3b:01:da:12:75:16:da:d2:cb:f1:99:02:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Dec 26 11:19:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32546ffa952b14fbd373fb5771c55f35b6b2b591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:28:8f:41:e0:fc:98:20:50:74:96:dd:ce:
                    43:0d:de:f5:eb:96:33:9d:69:89:9e:03:5c:3c:7e:
                    dd:95:53:4d:e5:94:70:b8:0c:4d:f6:00:d0:8c:a7:
                    af:b8:70:91:da:8a:29:f3:3f:5f:25:e1:91:74:61:
                    99:4d:f7:a2:52:de:d7:f0:ae:07:b2:2a:24:6f:b1:
                    7c:ab:b1:7c:03:91:81:9f:85:cb:7f:11:8a:41:43:
                    b2:55:38:29:cd:f6:08:2e:02:a8:58:02:53:3e:66:
                    57:df:32:f3:60:1c:3e:4e:7e:ca:ae:e0:f9:9f:f9:
                    92:82:db:76:14:22:fa:2f:89:23:ab:0f:1a:d6:8e:
                    30:4f:c7:7d:e1:4f:85:8b:e2:6c:7b:78:12:55:db:
                    93:01:a7:84:40:76:45:55:24:41:7e:9d:57:4d:d7:
                    28:0d:b4:ae:ac:b1:aa:5d:44:38:74:e0:4d:fb:a4:
                    7b:66:6a:95:83:18:66:98:a2:21:e9:21:6e:0f:d2:
                    e0:38:46:b2:e9:a5:11:79:65:8a:90:a4:35:a3:ba:
                    53:ac:96:0d:59:c0:2e:a7:f9:67:ab:a5:63:38:d6:
                    7c:eb:a9:59:b0:b2:ba:ee:c3:28:87:b6:ec:4e:66:
                    27:a5:2b:62:9c:28:8a:c7:fd:d8:4a:29:2f:59:b5:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:54:6F:FA:95:2B:14:FB:D3:73:FB:57:71:C5:5F:35:B6:B2:B5:91
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MlRv-pUrFPvTc_tXccVfNbaytZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.90.0/24
                  163.5.140.0/24
                  163.5.236.0/24
                  163.5.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:b9:b9:b8:6d:ec:32:c5:0b:cc:5c:ab:47:b5:93:68:d5:
         c1:53:34:8d:d8:f7:35:32:f1:57:76:7b:4a:3a:74:99:9d:c4:
         66:df:5f:40:5d:fd:be:17:dd:43:10:7e:eb:f2:4b:ed:64:41:
         4e:58:d0:3d:85:61:86:7e:6d:f3:07:51:cb:45:81:80:d5:bc:
         67:2e:2e:d1:64:c2:64:5a:b6:e9:d3:2d:12:79:4f:2c:b2:0f:
         55:68:38:83:9d:4e:53:52:c1:96:f2:37:b0:29:86:97:b6:53:
         b7:4c:84:82:7b:e3:c1:95:ef:e6:7b:cb:05:e1:4b:9e:d0:28:
         1a:d3:80:85:5c:d4:22:44:21:da:c1:3d:14:f4:b2:b6:e7:5e:
         93:22:1b:7e:d8:aa:d0:e8:24:74:c1:b6:c3:1a:77:b3:c3:ec:
         83:fc:ea:4c:e3:8b:6a:9a:66:b3:09:22:1b:92:f3:1e:3a:af:
         1a:e3:9d:fd:c8:17:cd:52:94:a4:6c:13:32:73:26:9a:b8:cf:
         13:22:d7:6e:09:e1:7c:ad:3f:61:dc:92:7b:02:7a:aa:9f:2e:
         2b:89:a8:dc:7a:cd:ec:68:68:a9:dd:09:3e:63:03:db:12:dd:
         9c:7a:e9:9c:3e:19:98:15:a1:80:21:39:5d:36:6a:9c:c1:75:
         63:93:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:05 2024 by rpki-client on console-fra.rpki-client.org