Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Ob6UjD2DauUQzVRsdtsy0Mm1XYs.roa
File:                     Ob6UjD2DauUQzVRsdtsy0Mm1XYs.roa (raw, json)
Hash identifier:          Bhqrs1gknlOqvPZz/bslRB8QaW95Wuw7IOoJD9ATZL8=
Subject key identifier:   39:BE:94:8C:3D:83:6A:E5:10:CD:54:6C:76:DB:32:D0:C9:B5:5D:8B
Certificate issuer:       /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial:       03BCD5
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Ob6UjD2DauUQzVRsdtsy0Mm1XYs.roa
Signing time:             Thu 23 Jun 2022 09:35:24 +0000
ROA not before:           Thu 23 Jun 2022 09:35:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51684
IP address blocks:        5.181.196.0/24 maxlen: 24
                          185.16.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244949 (0x3bcd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
        Validity
            Not Before: Jun 23 09:35:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=39be948c3d836ae510cd546c76db32d0c9b55d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9e:d7:1a:e9:88:2e:9f:df:7d:fc:d2:26:b5:
                    22:40:64:98:dc:7b:26:d3:cc:7c:1d:96:89:09:be:
                    37:c5:ba:35:af:14:9f:b6:da:fd:05:be:1f:64:51:
                    87:cf:e6:62:c9:c6:d0:c2:58:6c:56:1a:fc:05:c1:
                    84:b2:76:fc:26:b8:17:5e:5f:32:34:14:da:cb:52:
                    8b:38:ab:2d:3e:64:3c:ba:03:9d:d6:82:5a:df:c4:
                    a9:bc:19:f8:4b:cf:35:14:e5:a8:ee:96:0e:7f:92:
                    b7:1e:b9:64:e0:25:81:05:63:b8:51:d5:30:31:40:
                    04:fe:59:0b:71:44:c1:33:d8:0b:dc:e7:fd:e8:dd:
                    f0:a9:9f:5b:4d:3a:01:4f:8c:57:a8:14:a7:cf:94:
                    bd:53:d9:90:12:a0:f1:c2:fb:d6:47:01:18:cb:19:
                    8c:24:42:83:69:b7:b3:d1:ec:bc:d4:78:36:8a:28:
                    90:9e:a3:06:60:51:45:34:50:46:9f:49:4a:67:a3:
                    2c:10:24:69:c1:55:4f:54:d2:13:dc:6f:19:e2:10:
                    93:a4:96:4e:b8:1c:c2:70:85:eb:a9:e1:e0:fd:45:
                    cf:c2:e6:92:cc:7c:07:ad:62:55:84:b4:79:90:af:
                    e0:05:cd:50:4e:43:38:2c:90:c5:bf:42:f6:3d:fe:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:94:8C:3D:83:6A:E5:10:CD:54:6C:76:DB:32:D0:C9:B5:5D:8B
            X509v3 Authority Key Identifier:
                keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Ob6UjD2DauUQzVRsdtsy0Mm1XYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.196.0/24
                  185.16.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:55:f2:ef:16:1b:11:c4:b2:4b:8f:d6:17:b5:8a:3d:2d:
         34:90:26:be:15:0e:5b:7c:02:51:f3:74:3f:95:94:79:64:3e:
         30:35:2a:70:7c:95:4c:86:10:1b:d5:24:a5:98:17:61:df:22:
         7f:5f:0d:6a:49:c2:97:89:a8:19:10:a3:b9:dc:dc:91:bd:f2:
         2d:ea:36:f5:3b:e9:03:1f:8a:47:71:c3:c3:ab:d0:e9:6a:ce:
         f3:12:23:63:76:b7:ec:a8:8e:2c:3d:b8:c4:d0:ce:b1:c8:b5:
         a4:c2:33:7f:8f:01:2b:72:a2:f4:76:18:27:3f:bc:e5:3e:d4:
         84:ba:eb:b0:a4:6a:5c:16:fe:0b:95:01:31:7c:2a:26:52:f9:
         86:88:eb:9f:57:50:61:58:66:af:df:28:f1:b0:cf:59:f3:72:
         3e:6f:86:54:eb:7f:e8:46:4a:91:30:6f:d8:0f:94:cf:73:22:
         2c:91:c2:93:4a:77:4b:72:45:03:9c:21:9d:5a:e6:6e:bb:99:
         c1:d0:66:e4:ef:08:b3:a1:b5:f1:38:da:5e:d0:f7:20:c1:38:
         b1:c1:18:78:b1:4a:5b:43:10:db:70:c1:4b:c9:40:dc:c2:80:
         91:b3:b8:6f:d7:b3:89:78:b5:a5:5a:89:b3:e0:a9:11:a7:df:
         f1:ea:02:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:54 2023 by rpki-client on console-ams.rpki-client.org