Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uaA2duPZYd7L2jURePnAhiBaHt4.roa
File:                     uaA2duPZYd7L2jURePnAhiBaHt4.roa (raw, json)
Hash identifier:          9Wd/GcPJz7rZS1p9S2b34RLPaP0NS8ydcrq1meYyz9M=
Subject key identifier:   B9:A0:36:76:E3:D9:61:DE:CB:DA:35:11:78:F9:C0:86:20:5A:1E:DE
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0184AB19E362A7E4BD63922F9F88E56C1D79
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uaA2duPZYd7L2jURePnAhiBaHt4.roa
Signing time:             Thu 24 Nov 2022 19:25:11 +0000
ROA not before:           Thu 24 Nov 2022 19:25:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211936
IP address blocks:        163.5.225.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ab:19:e3:62:a7:e4:bd:63:92:2f:9f:88:e5:6c:1d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Nov 24 19:25:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9a03676e3d961decbda351178f9c086205a1ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:16:f9:40:87:c6:5b:32:a7:6c:8c:80:0f:
                    fd:af:18:52:91:e4:c4:df:d0:17:f9:95:9e:30:12:
                    d0:80:75:91:53:ba:c1:af:e5:17:31:1a:ef:0a:c9:
                    82:3a:74:ac:82:2e:80:4c:c9:e3:21:1a:38:15:87:
                    6f:2d:41:94:c1:32:69:91:65:d2:cc:5e:3b:16:15:
                    38:c0:5b:86:4e:f1:46:d8:fa:09:81:b0:2d:f1:b6:
                    9f:03:01:aa:39:cb:be:05:53:d9:4c:c5:d0:3a:42:
                    56:c3:27:0f:c1:27:6c:8f:62:b5:ff:05:7f:77:34:
                    b8:50:d7:31:dc:53:9d:a9:9d:ca:2b:77:99:7f:f3:
                    50:2b:72:72:4a:63:03:86:65:a7:ea:ea:c5:6f:d4:
                    78:6b:d3:76:35:5b:35:22:17:7b:f5:3a:76:e0:85:
                    c2:eb:74:55:3e:3b:1f:2c:ec:1c:92:8f:67:ab:bb:
                    8d:b3:0b:dd:6b:7e:29:90:45:9c:32:d9:e8:6a:9a:
                    5a:26:f8:a9:f3:92:0c:1e:83:d1:0a:d8:d7:a7:a6:
                    20:2f:2e:fc:df:16:45:1c:3d:9f:c9:0c:19:1d:d2:
                    18:b8:dd:f6:c6:ce:2b:c2:c4:1b:a9:ef:37:20:cb:
                    10:9b:eb:e7:12:8b:ca:f1:0e:18:ca:c5:8d:12:01:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A0:36:76:E3:D9:61:DE:CB:DA:35:11:78:F9:C0:86:20:5A:1E:DE
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uaA2duPZYd7L2jURePnAhiBaHt4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.159.0/24
                  163.5.225.0/24
                  163.5.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:88:54:86:22:a9:c7:d0:72:be:76:30:ae:4b:b4:c1:de:
         4a:45:05:9d:43:5a:37:6c:85:b3:43:13:47:35:ff:00:ea:b5:
         ec:f2:d6:32:b9:f9:db:7e:6d:d8:e8:b4:7e:1f:7f:ca:3b:4b:
         01:41:80:7d:18:27:fd:18:d0:df:2e:d6:fa:c2:c0:44:91:6d:
         58:eb:2f:b5:17:5b:8e:e8:8a:5b:05:fa:e3:8d:f4:83:7d:18:
         e5:1f:44:21:39:f0:25:a7:15:50:23:73:c4:24:10:41:8e:c9:
         06:2b:ba:5e:9e:8f:08:32:7b:f2:eb:ce:56:32:b2:8e:ca:e3:
         f3:0e:79:99:84:79:1a:19:9a:c4:73:f0:da:f3:ee:5a:74:55:
         9d:67:f9:90:c1:33:8b:69:43:d7:18:e1:11:4e:c2:b7:dc:10:
         b8:be:f4:55:46:52:a3:90:15:24:88:d6:d9:fc:68:cb:f3:e6:
         24:f9:e9:58:ae:e1:c9:c2:79:10:5d:0e:45:a3:86:ca:8b:f2:
         61:6a:20:92:88:fb:00:81:0f:2a:d7:f2:15:9e:bf:40:e9:9d:
         e1:3e:c0:7c:d7:f8:ea:99:d2:13:09:9a:e3:a4:9d:4d:ef:ec:
         9b:97:bf:15:fb:09:70:f5:7b:6d:0b:d9:95:eb:a9:10:0b:82:
         8d:9d:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:36 2024 by rpki-client on console-ams.rpki-client.org