Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/E0ix7o1kKXfKHPEEoywCEFgu82Q.roa
File:                     E0ix7o1kKXfKHPEEoywCEFgu82Q.roa (raw, json)
Hash identifier:          01klHAfyw0qJTGRfK6LNf2ZgdPHSUNMDB9jdUbWui3A=
Subject key identifier:   13:48:B1:EE:8D:64:29:77:CA:1C:F1:04:A3:2C:02:10:58:2E:F3:64
Certificate issuer:       /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial:       01C58B02
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/E0ix7o1kKXfKHPEEoywCEFgu82Q.roa
Signing time:             Sat 01 Jan 2022 11:58:23 +0000
ROA not before:           Sat 01 Jan 2022 11:58:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205847
IP address blocks:        5.181.58.0/24 maxlen: 24
                          5.181.58.0/23 maxlen: 23
                          5.181.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29723394 (0x1c58b02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
        Validity
            Not Before: Jan  1 11:58:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1348b1ee8d642977ca1cf104a32c0210582ef364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:55:c0:39:9e:2e:36:c2:c2:2e:26:dd:ea:
                    9f:ee:c1:fd:ed:4b:25:01:3e:b1:18:11:fc:24:cf:
                    23:5f:1c:98:d2:de:ea:b2:00:ee:76:ad:a5:2f:12:
                    3b:50:ea:9c:f3:80:d9:c2:ab:0a:15:67:5b:9a:e6:
                    50:61:99:14:1b:d9:1c:1f:7e:49:2d:2d:9f:d2:c9:
                    3c:09:80:44:ec:48:87:94:0b:59:3b:5f:8d:1c:5c:
                    f1:ed:02:ce:51:91:ab:23:d6:6f:f4:3d:50:5f:75:
                    06:82:34:ae:07:35:61:a5:b3:8a:23:fc:c2:fd:78:
                    25:ea:9a:b6:13:d1:07:88:36:24:e1:c6:07:71:ca:
                    07:55:b0:11:80:6e:37:95:29:0d:c8:ac:51:02:72:
                    18:41:73:0b:9f:36:42:4a:eb:77:d2:c4:5a:2c:bf:
                    7d:2d:41:0d:f7:a4:42:e8:f9:c5:fd:ca:1d:b3:77:
                    4d:c6:df:38:a8:92:0c:1c:1a:e6:0d:28:04:94:61:
                    bc:68:2b:d7:ef:4e:0f:9b:5c:ee:c4:0b:8a:26:c1:
                    df:c0:a3:09:42:b2:4b:5a:ef:a0:ff:42:71:82:05:
                    88:d5:4d:70:1a:4c:b4:8b:dc:20:2c:38:53:a1:f9:
                    bb:84:32:96:61:92:d2:1f:d9:20:c3:d1:20:df:19:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:48:B1:EE:8D:64:29:77:CA:1C:F1:04:A3:2C:02:10:58:2E:F3:64
            X509v3 Authority Key Identifier:
                keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/E0ix7o1kKXfKHPEEoywCEFgu82Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:ea:fc:2b:92:63:37:e5:e9:c2:85:22:5e:ea:e3:f0:7e:
         ec:47:b8:d8:d2:6f:2a:63:e9:45:0a:b4:85:83:e4:f7:94:9a:
         2e:19:c8:71:42:51:b3:e4:24:fd:9e:d5:54:cd:37:99:08:76:
         93:47:33:a7:59:e9:95:f9:ad:e8:f6:3e:4d:55:21:ee:cd:2e:
         9d:e3:9d:33:e5:ab:d6:21:36:4c:e4:13:a0:8a:87:b0:60:da:
         7c:c8:b0:af:ae:4c:43:7a:9c:d1:a0:dd:06:52:a7:f5:e4:f0:
         0b:0d:1d:c2:d6:d1:f0:08:ad:2c:e0:d1:25:7f:12:37:23:9f:
         a6:f9:af:86:ad:d7:56:47:e4:75:72:0a:cc:73:f1:ff:e0:76:
         a3:a1:50:80:14:1e:cf:b4:e9:cf:fd:58:52:30:5b:27:68:52:
         1c:9b:a4:ed:2f:bb:24:78:07:45:f1:73:ce:c9:e8:7e:4c:02:
         28:c0:fa:60:72:78:4f:09:50:14:d7:68:41:cb:b1:a9:4d:16:
         03:64:a5:39:4c:1a:4d:1a:d5:e9:f4:41:43:0d:b6:05:3e:77:
         18:7c:7a:6c:ff:c4:87:d0:f1:72:12:c7:48:c1:fa:fc:b6:8b:
         a7:cb:bf:b4:66:ff:ba:e9:14:9e:6c:eb:ee:47:b9:d1:80:43:
         d5:bf:c2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:11 2024 by rpki-client on console-ams.rpki-client.org