Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/5cgNVEeQdmaSBIY79ua969DK5QQ.roa
File:                     5cgNVEeQdmaSBIY79ua969DK5QQ.roa (raw, json)
Hash identifier:          aYfr23q0gnfY0mn8bGIh306Z+cRwDemcYM7DoLh7XLs=
Subject key identifier:   E5:C8:0D:54:47:90:76:66:92:04:86:3B:F6:E6:BD:EB:D0:CA:E5:04
Certificate issuer:       /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial:       0182A1F1325E91064ED2C5ED9A4FA16C4528
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/5cgNVEeQdmaSBIY79ua969DK5QQ.roa
Signing time:             Mon 15 Aug 2022 14:38:34 +0000
ROA not before:           Mon 15 Aug 2022 14:38:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209103
IP address blocks:        185.159.157.0/24 maxlen: 24
                          185.159.159.0/24 maxlen: 24
                          2a07:b941:e10::/44 maxlen: 44
                          2a07:b941:e20::/44 maxlen: 44
                          2a07:b941:f10::/44 maxlen: 44
                          2a07:b941:f00::/44 maxlen: 44
                          2a07:b941:e40::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a1:f1:32:5e:91:06:4e:d2:c5:ed:9a:4f:a1:6c:45:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
        Validity
            Not Before: Aug 15 14:38:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e5c80d54479076669204863bf6e6bdebd0cae504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7f:84:a7:2c:de:7c:f1:bf:45:ac:6c:5e:d9:
                    47:13:c1:16:e0:20:f1:5e:66:39:d1:1b:14:8c:fc:
                    bd:21:18:0b:75:44:de:e4:95:7b:16:3f:8c:bd:1a:
                    2e:3c:36:84:6e:f5:e6:7b:71:aa:5c:39:e1:94:e3:
                    82:ab:cd:b3:11:06:2c:a7:e9:25:92:c5:16:80:b3:
                    e1:14:59:c2:c3:ff:9e:6a:67:8e:43:27:67:a1:79:
                    b3:25:9d:51:62:cf:90:68:ff:d5:81:db:94:58:5e:
                    23:d3:65:d2:a9:26:08:f1:8b:2d:02:10:b1:6c:ad:
                    9c:1e:55:f4:8f:78:f0:22:98:75:15:77:11:4f:04:
                    d6:a1:fb:53:6b:e9:fe:44:2d:26:c9:6b:a6:5c:56:
                    67:f1:af:bf:b5:ed:f6:2a:58:34:a6:71:c6:21:91:
                    90:bc:d5:25:1c:bf:2f:1c:41:7a:c7:48:14:81:ce:
                    67:da:55:2e:52:26:7d:0e:2b:f0:23:02:fa:ed:c4:
                    1e:26:14:21:1c:39:e1:bf:69:5b:ff:88:d6:07:a1:
                    2e:cc:e0:3c:22:5a:10:c3:4a:0d:cd:96:e9:2b:0a:
                    db:57:25:08:78:b3:4d:d1:d8:41:dc:93:fe:92:6f:
                    ba:2b:c7:cf:a2:52:86:fb:1b:ed:05:85:5f:dd:bb:
                    e4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C8:0D:54:47:90:76:66:92:04:86:3B:F6:E6:BD:EB:D0:CA:E5:04
            X509v3 Authority Key Identifier:
                keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/5cgNVEeQdmaSBIY79ua969DK5QQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.159.157.0/24
                  185.159.159.0/24
                IPv6:
                  2a07:b941:e10::-2a07:b941:e2f:ffff:ffff:ffff:ffff:ffff
                  2a07:b941:e40::/44
                  2a07:b941:f00::/43

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:89:71:06:29:01:02:1a:61:d1:32:b3:25:32:76:e3:05:
         44:32:ce:98:b1:6a:17:4f:6e:c4:9c:e6:ce:89:c0:71:e4:3c:
         dc:af:8e:77:2b:80:1d:b2:69:31:88:67:ca:98:8a:75:1c:f3:
         6d:c3:29:5f:d5:30:89:d3:23:f5:a1:1e:46:8f:6e:00:ec:10:
         27:b3:86:73:f9:24:87:c3:e8:a2:6d:91:91:a7:8e:cf:92:2c:
         7b:ad:d3:44:69:b5:55:37:cc:4e:50:d9:22:c2:9f:65:90:f3:
         e5:4a:f9:33:54:81:e5:3c:a2:16:c3:b9:e2:f1:cc:51:db:50:
         8d:cf:68:bf:1c:66:ab:d9:f8:b5:ac:b3:41:1c:27:69:d5:ce:
         93:ab:e5:5b:5a:ec:df:87:8f:ef:f5:0b:76:52:5d:86:f3:65:
         3e:ce:83:b9:17:4a:fd:0e:aa:ac:12:9b:f8:15:e9:a6:6c:90:
         02:61:c3:e8:b2:d5:31:63:7e:6a:4d:b7:2d:9c:a9:16:29:d6:
         96:db:76:fa:f1:94:3a:b5:9b:f7:50:33:b4:25:79:3a:46:13:
         98:7e:0c:31:af:f0:ab:55:ba:d8:8c:a3:51:c5:c8:c7:14:52:
         1e:4a:b9:b6:c3:b1:8c:4f:6e:27:93:6e:4c:ff:24:4a:10:18:
         1a:6d:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:12 2024 by rpki-client on console-fra.rpki-client.org