Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/ad8gc2XWgz3VOomdE1O4kxjXgOQ.roa
File:                     ad8gc2XWgz3VOomdE1O4kxjXgOQ.roa (raw, json)
Hash identifier:          WRa/vI2lsmT/5z6lWI2aobE2b1RV88r2ghikJTX8mbs=
Subject key identifier:   69:DF:20:73:65:D6:83:3D:D5:3A:89:9D:13:53:B8:93:18:D7:80:E4
Certificate issuer:       /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial:       0182EE8F6B6FCA1C46171A3F4F3C2A4C5A06
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/ad8gc2XWgz3VOomdE1O4kxjXgOQ.roa
Signing time:             Tue 30 Aug 2022 11:42:32 +0000
ROA not before:           Tue 30 Aug 2022 11:42:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     196772
IP address blocks:        91.212.199.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ee:8f:6b:6f:ca:1c:46:17:1a:3f:4f:3c:2a:4c:5a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
        Validity
            Not Before: Aug 30 11:42:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=69df207365d6833dd53a899d1353b89318d780e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:49:50:ec:de:ae:b0:84:bb:eb:f6:c8:a0:
                    3d:95:d9:a5:32:b5:6e:6e:a0:b5:6e:ee:0f:bb:01:
                    38:dc:f0:5a:79:4e:6a:e0:37:dd:d7:63:69:1e:82:
                    f4:fc:57:74:92:f3:f9:31:02:cc:4f:0f:83:1b:c0:
                    33:76:37:89:f3:ee:4f:b1:0c:52:3e:a2:7f:ad:d8:
                    fb:66:a4:8c:88:ed:a5:7c:70:0f:86:26:55:07:99:
                    92:8b:0e:2a:a4:c4:7b:2c:63:06:4f:47:ad:b4:27:
                    ac:b2:e3:70:c9:ad:ad:39:d7:4d:94:0d:bd:99:9c:
                    53:a2:b4:db:58:43:6b:92:75:f7:72:d4:d7:a4:47:
                    90:5f:68:77:ad:85:a4:b9:c0:23:28:c8:8a:b5:fa:
                    30:22:9d:0f:57:75:6d:35:1e:04:92:bf:4b:d2:00:
                    4c:8a:e8:1c:a3:1c:73:eb:46:bc:a7:b8:18:a1:4b:
                    59:e0:b3:7f:c6:5c:df:a6:c6:cf:a9:c0:2e:e0:51:
                    f5:f5:99:02:16:aa:9a:62:94:bc:52:32:f5:1a:ee:
                    eb:0a:9c:7f:8f:13:6c:73:4d:06:3d:aa:5d:62:92:
                    26:a2:19:b4:e3:4f:aa:09:89:ba:7d:14:61:32:0e:
                    f7:50:c1:91:0c:96:60:f5:39:79:53:21:84:f8:2a:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DF:20:73:65:D6:83:3D:D5:3A:89:9D:13:53:B8:93:18:D7:80:E4
            X509v3 Authority Key Identifier:
                keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/ad8gc2XWgz3VOomdE1O4kxjXgOQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:27:3e:5f:98:0e:15:e6:3e:b8:d5:0a:77:58:6c:e8:f1:
         68:30:3d:e4:a5:17:20:4b:ec:ab:5b:c6:dd:1e:ff:c1:c4:52:
         71:d7:df:cc:d9:c4:9f:e0:9c:76:7b:b1:fd:52:50:e5:3a:44:
         21:b3:8a:23:18:19:ec:d5:59:4d:99:7f:0d:fa:73:19:70:70:
         46:c5:1c:ae:97:06:ae:fe:29:3c:8c:eb:80:15:7d:3a:6c:d5:
         cd:90:b3:59:ba:ec:7b:fd:e0:15:dd:62:74:86:8b:3d:50:c6:
         95:c1:3d:2b:80:16:dd:85:37:8e:88:61:4a:c9:5f:3b:a1:6c:
         43:e2:aa:cd:3d:56:f4:54:03:f9:1c:00:b6:ff:9c:dc:5d:fc:
         91:f5:d9:bd:c3:0c:86:7a:2b:d8:c8:d2:ec:02:a3:89:e6:c2:
         fc:52:a4:78:dd:68:92:a2:ed:f9:ad:8e:32:c5:fe:59:1b:d2:
         8c:69:15:c8:d5:07:6e:3b:22:1d:95:fb:b5:86:b9:41:33:0c:
         cb:16:e7:4c:64:3f:9d:32:23:7b:c5:9e:e8:cd:1a:02:b5:88:
         5c:93:b2:6d:58:06:1a:ff:b3:f6:98:e0:e1:2a:11:0c:83:15:
         f1:f8:6c:76:3d:8f:67:ea:e7:dd:85:b0:1d:77:3b:e8:51:04:
         55:b1:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:58 2024 by rpki-client on console-ams.rpki-client.org