Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/DeblIU_YeV78MMW4uEFdsDLEnbk.roa
File:                     DeblIU_YeV78MMW4uEFdsDLEnbk.roa (raw, json)
Hash identifier:          2+jzjXd7p/sz8+Bg/GqRxEHubU7pA40tXUE8e6fmwBQ=
Subject key identifier:   0D:E6:E5:21:4F:D8:79:5E:FC:30:C5:B8:B8:41:5D:B0:32:C4:9D:B9
Certificate issuer:       /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial:       0184898A79001FD9624B235561554B5D7EE4
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/DeblIU_YeV78MMW4uEFdsDLEnbk.roa
Signing time:             Fri 18 Nov 2022 07:01:04 +0000
ROA not before:           Fri 18 Nov 2022 07:01:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57615
IP address blocks:        185.27.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:89:8a:79:00:1f:d9:62:4b:23:55:61:55:4b:5d:7e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
        Validity
            Not Before: Nov 18 07:01:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0de6e5214fd8795efc30c5b8b8415db032c49db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:c0:25:c7:9b:ad:c9:78:e4:a6:a9:e1:85:
                    ad:c7:1c:31:0e:18:d5:6c:12:d2:55:18:9d:a6:84:
                    53:4f:20:5f:ba:5a:7d:b7:3e:02:f0:bc:d4:64:6e:
                    9d:ee:78:a9:d6:14:34:9f:e8:3f:02:25:82:cc:27:
                    7b:b4:b8:a1:11:45:5a:6d:64:29:cf:a6:3b:fe:8f:
                    35:92:93:e7:9f:f9:aa:bb:3e:06:dd:71:16:49:5b:
                    75:9a:fa:c9:c6:3a:a1:5d:33:9b:14:a5:a5:d7:53:
                    18:bb:c6:3d:ec:d2:3a:c0:fb:a6:24:e4:25:b3:83:
                    38:3e:5f:ab:36:88:38:08:00:5e:20:62:39:f5:0c:
                    4c:24:20:62:95:07:9e:db:d1:b3:8e:ae:c7:ac:d4:
                    a2:85:c3:f1:ac:4a:d7:c7:81:ba:78:5e:7a:44:27:
                    7a:77:16:d2:83:64:7a:36:6b:33:dc:f3:d5:32:b2:
                    77:7e:d2:52:b3:cb:d0:78:73:82:a1:66:d7:6e:b1:
                    93:81:59:06:3f:e5:be:f5:5d:cd:d3:b5:b7:7b:ae:
                    e4:62:97:b1:5b:4e:4b:0f:25:ed:4d:f8:c4:eb:d8:
                    97:5c:48:93:8a:2b:0f:a5:59:2d:50:13:64:0e:9f:
                    6a:88:e1:c3:d9:f8:ff:08:01:65:c7:ef:b9:c6:a2:
                    69:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E6:E5:21:4F:D8:79:5E:FC:30:C5:B8:B8:41:5D:B0:32:C4:9D:B9
            X509v3 Authority Key Identifier:
                keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/DeblIU_YeV78MMW4uEFdsDLEnbk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.27.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:d1:61:58:68:52:34:cd:cd:c5:77:4c:04:c3:a3:be:f4:
         4e:83:0f:b3:73:d0:82:d2:46:0c:c4:f9:80:ac:f7:1f:96:95:
         08:61:21:9f:9b:77:1a:c7:84:3d:67:d3:20:f1:ae:0c:00:f0:
         3d:fa:28:0e:d5:88:96:23:08:e0:32:b1:84:ca:73:3a:e3:ca:
         92:36:15:28:a0:78:3a:cf:ad:1c:ad:6d:e3:2e:31:ce:76:d8:
         af:fb:7a:9c:24:a8:e7:6e:a9:96:e5:d0:48:30:01:65:fb:23:
         13:44:66:4f:bb:50:d5:ac:2b:a7:69:4e:54:bf:43:78:1b:ea:
         1b:ec:60:17:d3:30:24:74:a0:ef:47:15:cc:0d:a1:a1:5b:13:
         96:14:b7:25:b3:a1:24:d1:ab:a3:de:8e:3c:f8:30:c0:e7:4d:
         02:66:b4:2d:d8:db:62:7e:9b:5b:4d:81:a3:fe:de:6d:6a:02:
         47:b5:a5:6e:28:20:e0:af:80:65:57:0c:83:9e:4e:8b:e9:e1:
         e0:58:09:07:b7:f0:bf:5a:49:c4:a3:f5:4c:ad:f5:fc:22:73:
         ea:52:6e:76:b7:df:b6:fd:ff:28:21:9b:39:45:1f:7a:8a:19:
         c9:4e:b8:5d:d3:1f:d7:4c:09:17:66:bd:1d:8a:e1:df:7f:91:
         38:42:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:57 2023 by rpki-client on console-ams.rpki-client.org