Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tKa_V7TUR82kLk0jQbuRvy6BgkU.roa
File:                     tKa_V7TUR82kLk0jQbuRvy6BgkU.roa (raw, json)
Hash identifier:          x3zUg40TAqHasoZ/jLV3fONWf2Yaw6+iFZ+xXrpsaN4=
Subject key identifier:   B4:A6:BF:57:B4:D4:47:CD:A4:2E:4D:23:41:BB:91:BF:2E:81:82:45
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01826D4E4AD37B918F3FEAA7EE58CD5A461B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tKa_V7TUR82kLk0jQbuRvy6BgkU.roa
Signing time:             Fri 05 Aug 2022 09:20:23 +0000
ROA not before:           Fri 05 Aug 2022 09:20:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7118
IP address blocks:        163.5.176.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.173.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.197.0/24 maxlen: 24
                          163.5.196.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6d:4e:4a:d3:7b:91:8f:3f:ea:a7:ee:58:cd:5a:46:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Aug  5 09:20:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b4a6bf57b4d447cda42e4d2341bb91bf2e818245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:19:8f:1f:3b:93:aa:db:64:d2:02:50:cd:
                    ad:63:da:d4:b5:72:8c:b7:b4:eb:54:ff:35:2d:b9:
                    ad:dc:39:11:64:a6:20:6b:92:73:c3:10:46:17:20:
                    bd:7a:6e:82:33:af:47:d7:e0:72:82:48:8b:f7:60:
                    0e:a0:b9:7a:6a:e8:d7:08:85:da:9b:e5:ec:75:ea:
                    8b:39:cb:9d:c9:52:cf:b9:6f:ba:5a:04:13:5a:18:
                    92:19:f8:98:6e:57:e9:cb:72:0f:26:84:7c:a7:dd:
                    d8:48:28:31:97:75:94:58:83:9c:5a:33:b8:4d:18:
                    3d:11:6e:74:9f:48:02:e6:53:a9:b0:24:66:7f:eb:
                    46:46:67:79:86:ef:6d:93:42:7c:49:51:19:2e:8c:
                    69:c6:db:95:8e:bf:9e:55:e7:cd:59:b0:5c:08:68:
                    5b:00:ce:09:c3:fa:d2:8f:99:70:f4:c2:08:4a:94:
                    a3:fa:70:01:f3:9b:ed:d6:02:47:77:bf:72:56:e0:
                    5f:82:17:6c:67:ab:b6:26:22:55:c9:da:cb:e8:fc:
                    2d:aa:c0:17:ba:ae:33:bd:6c:01:e1:81:8e:d0:e2:
                    cb:85:c1:9d:86:a6:8f:f9:5c:4d:98:08:0b:60:c8:
                    19:bc:89:96:fa:74:9b:a6:b2:00:06:ae:20:7b:a9:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A6:BF:57:B4:D4:47:CD:A4:2E:4D:23:41:BB:91:BF:2E:81:82:45
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tKa_V7TUR82kLk0jQbuRvy6BgkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.137.0/24
                  163.5.170.0-163.5.178.255
                  163.5.180.0/24
                  163.5.182.0-163.5.189.255
                  163.5.194.0-163.5.199.255

    Signature Algorithm: sha256WithRSAEncryption
         52:30:ef:56:94:0b:34:ef:56:56:34:a4:33:a7:a7:8c:28:97:
         28:66:9f:4b:6a:ec:23:b7:46:63:be:cb:29:a2:1b:f0:8c:c6:
         12:21:95:75:2e:38:a1:2b:5c:eb:0e:18:d9:c3:24:b3:0a:b9:
         88:5f:08:9d:2a:43:5e:27:56:39:30:f7:f5:31:e0:30:5d:3d:
         7c:c0:67:24:63:77:27:0d:bf:25:75:9a:9d:b1:87:e2:a9:33:
         7c:1c:d2:d4:8f:16:1d:7d:28:e5:26:b1:74:19:b6:19:52:ed:
         de:5b:56:0f:1f:fe:9f:01:9b:02:c9:1f:af:5d:1c:c2:7e:e0:
         28:d5:91:ad:28:26:fc:2c:75:60:be:e7:1e:fd:0f:fb:e0:99:
         24:21:88:53:f9:52:97:69:4e:58:e5:8d:ca:0d:01:0d:76:cf:
         0e:94:8a:07:16:a6:af:5e:e0:cc:d1:06:d0:07:10:e1:d2:48:
         77:91:97:5f:27:7b:36:e6:73:12:8b:b8:43:57:3f:f0:6b:c0:
         f8:db:a8:b5:25:fb:91:99:aa:22:5d:90:43:2c:c7:4f:6b:26:
         e6:59:02:1b:17:9f:b9:19:95:c1:0c:49:a7:2f:9e:81:bd:99:
         e4:6d:7f:8a:73:11:70:17:c1:9b:3c:c0:1b:7b:82:d6:d2:48:
         b8:2a:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:36 2024 by rpki-client on console-ams.rpki-client.org