Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/5ztMarj5Iw0q456tRHd6tuHG-Mc.roa
File:                     5ztMarj5Iw0q456tRHd6tuHG-Mc.roa (raw, json)
Hash identifier:          K3j5UzIhbUzSahXnnNKQSL5X0rvcr71Ip3t5TWUUWyk=
Subject key identifier:   E7:3B:4C:6A:B8:F9:23:0D:2A:E3:9E:AD:44:77:7A:B6:E1:C6:F8:C7
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38BAD91B
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/5ztMarj5Iw0q456tRHd6tuHG-Mc.roa
Signing time:             Tue 17 May 2022 05:30:27 +0000
ROA not before:           Tue 17 May 2022 05:30:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199898
IP address blocks:        217.79.38.0/24 maxlen: 24
                          92.247.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951769371 (0x38bad91b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:30:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e73b4c6ab8f9230d2ae39ead44777ab6e1c6f8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1e:e0:05:ae:93:3e:e5:09:54:af:05:cd:98:
                    9d:9f:e0:61:39:77:7f:1d:ca:7d:66:2c:fa:3d:2d:
                    98:4e:a5:61:d8:d9:fc:5c:42:bb:f0:e0:b9:63:18:
                    fb:00:ae:1a:4a:f9:e3:d8:4b:ca:a1:1b:58:24:b2:
                    57:fd:bc:5d:8d:d6:80:22:25:f1:43:95:30:4f:1c:
                    5d:5f:7c:61:1b:ae:f2:f3:1a:70:8f:b0:09:f6:59:
                    77:13:7a:fd:42:14:d9:65:09:6c:18:e2:e0:00:15:
                    25:91:45:91:51:ae:e5:a1:ea:35:51:8b:fc:b1:78:
                    b1:bd:3d:65:e4:8a:86:c8:c6:fe:99:dd:c4:c2:32:
                    fa:eb:22:44:f6:70:a1:e6:33:cf:48:00:19:d3:17:
                    b7:d9:ca:31:dd:68:55:4c:e0:7f:eb:07:ab:88:d6:
                    bb:7a:77:04:d7:5b:39:81:10:9f:e3:aa:12:5d:de:
                    5e:9b:4d:27:12:5e:2e:af:b0:b0:06:fd:ce:d5:d0:
                    e2:47:19:d5:48:e9:87:e6:97:d0:5c:eb:44:44:2b:
                    6d:21:7b:ff:c0:bc:7d:51:e5:17:a7:f9:e1:d8:a9:
                    6b:e9:96:bc:ab:14:85:7e:c5:33:00:8b:02:38:6f:
                    c5:c3:4e:15:be:aa:62:04:46:46:a8:41:ee:6a:e9:
                    21:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3B:4C:6A:B8:F9:23:0D:2A:E3:9E:AD:44:77:7A:B6:E1:C6:F8:C7
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/5ztMarj5Iw0q456tRHd6tuHG-Mc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.247.164.0/22
                  217.79.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:9c:46:12:48:ee:17:74:08:83:36:de:1d:f4:a3:d1:96:2e:
         30:07:de:d0:86:1e:94:da:52:c5:f4:c6:ea:52:3e:05:73:5f:
         ab:df:57:6d:89:a7:7f:7b:8f:db:e8:e7:f9:29:46:97:1b:63:
         c8:d4:33:69:22:14:3d:a1:b1:d9:f9:f7:8c:74:7a:3f:49:9c:
         c5:35:dd:b8:52:b4:0f:b6:91:cc:08:a4:6d:cc:a8:45:71:e5:
         37:d2:14:4a:b0:81:35:70:29:87:7c:3a:6e:3a:6b:ad:83:30:
         14:64:df:e8:aa:f6:97:0b:fd:cd:75:0a:5c:e8:b0:33:3d:dc:
         8c:90:a8:ea:ef:9c:4c:a2:b1:60:6e:a6:64:54:40:da:a0:d1:
         a3:cc:14:c2:22:ab:25:fb:40:ef:01:b4:c8:eb:18:25:22:68:
         fc:0c:d2:2b:2c:06:ae:0e:9a:35:66:c5:13:8c:ea:e7:60:78:
         38:1f:65:30:aa:da:e0:99:33:71:cb:04:0c:42:da:c9:f2:c7:
         71:0b:40:6b:1d:91:d9:5b:a7:e9:ad:91:4d:21:e1:1b:d0:ef:
         eb:ca:66:d2:d7:ac:ec:d6:d7:b4:7c:cd:2e:35:10:c6:06:8b:
         82:4e:b9:9c:c0:31:b1:7e:3f:a5:a1:06:63:aa:8f:e6:7b:9d:
         15:cb:93:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-ams.rpki-client.org