Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32332d3234203d3e203432333636.roa
File:                     352e3130342e37382e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier:          FLGOo3aZaJicxUX4mK4Q2Y/nqmcSfKTOVVcqHxt4BA8=
Subject key identifier:   F5:A2:8E:7C:D3:B5:4B:73:06:95:47:25:61:87:88:45:B4:A1:2A:04
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       06F4ACB87664220A708D6EB0362F42D25F270E3B
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32332d3234203d3e203432333636.roa
Signing time:             Mon 17 Apr 2023 11:22:27 +0000
ROA not before:           Mon 17 Apr 2023 11:17:27 +0000
ROA not after:            Mon 15 Apr 2024 11:22:27 +0000
asID:                     42366
IP address blocks:        5.104.78.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f4:ac:b8:76:64:22:0a:70:8d:6e:b0:36:2f:42:d2:5f:27:0e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Apr 17 11:17:27 2023 GMT
            Not After : Apr 15 11:22:27 2024 GMT
        Subject: CN=F5A28E7CD3B54B730695472561878845B4A12A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:e0:12:d4:2c:7a:a0:bf:dc:48:0a:39:ea:
                    fb:2f:0a:e1:98:39:0e:a9:f4:f2:31:ed:b5:60:ea:
                    2e:1a:3f:e5:1a:42:e7:08:37:4e:d3:46:01:bc:e4:
                    18:03:cd:2c:e9:63:2e:85:3d:1c:ac:98:05:78:3e:
                    25:21:e2:bf:87:6a:19:97:84:b9:e4:52:8d:12:f0:
                    c9:f8:8b:b4:4a:1f:a0:ca:67:b0:67:4d:70:a9:65:
                    27:c6:74:17:21:0d:2d:e3:4f:bb:5d:10:74:70:c2:
                    b0:2c:56:2e:a8:60:87:9b:8e:33:67:a3:e2:22:95:
                    90:33:63:7f:a0:46:85:b6:fe:65:d3:84:83:fa:70:
                    ea:f5:e8:bc:bf:a6:05:e2:3a:d7:bf:d5:d1:99:65:
                    ca:eb:93:7d:c7:64:6f:3a:32:51:f9:59:e7:9d:9e:
                    82:12:f2:d3:3e:7b:35:d7:06:ee:49:c2:d9:f9:e5:
                    ff:6c:a7:cf:53:21:c7:dc:d0:1f:fd:7d:91:92:09:
                    b6:fc:51:a5:cc:e8:d0:f0:bc:37:46:1e:59:10:19:
                    66:8f:14:66:1d:d0:50:98:b3:5c:e7:ee:ec:a6:3f:
                    4d:b9:5b:f2:45:76:85:d2:a5:6a:b7:e4:9f:dd:b2:
                    36:20:17:8d:ad:44:f8:c7:6b:c2:2e:b0:2b:3c:05:
                    36:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A2:8E:7C:D3:B5:4B:73:06:95:47:25:61:87:88:45:B4:A1:2A:04
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32332d3234203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.104.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:0a:ce:97:3d:c4:e6:92:ad:9b:b8:7b:2e:0e:78:a7:40:37:
         b9:f0:8c:95:ea:bd:73:be:68:11:6a:d7:9e:78:ef:f0:e2:ee:
         75:5f:40:14:f7:95:80:1c:7a:3a:c3:67:96:b3:49:82:ea:2f:
         c1:67:ff:74:26:67:c2:9a:06:4c:8a:3a:e9:79:c8:59:4a:7d:
         0d:f3:fb:a8:4a:94:6e:a1:56:68:1b:2a:12:0a:f1:1c:9c:c6:
         72:b4:88:5f:7c:3e:43:33:8f:4f:4a:01:25:23:aa:3a:aa:af:
         18:64:c6:78:d1:2b:ff:37:ce:12:10:07:df:53:99:ba:76:95:
         b3:db:d3:27:84:3f:16:95:f1:ec:35:1c:bd:6c:9e:03:15:42:
         0a:74:aa:06:ad:42:77:80:d8:55:a3:aa:1c:79:68:b6:63:fb:
         76:be:e0:19:ab:d4:0f:96:dc:8a:e3:6b:21:93:79:f4:2a:bd:
         06:3c:01:3f:23:4d:95:0e:fd:d6:93:12:45:75:bd:dd:dd:0a:
         16:48:02:3e:18:3f:db:ee:ab:b3:ae:26:57:ea:0a:4b:44:e1:
         37:cd:6e:4e:2b:fb:ed:0d:e2:8a:f2:93:f1:b5:fc:b5:0e:21:
         59:4d:4d:1a:61:fa:66:3a:74:f2:9d:5c:45:79:68:0f:ea:e8:
         5b:f3:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org