Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6HV5_XRHATa4Wcs6nEfvunX5a4Y.roa
File:                     6HV5_XRHATa4Wcs6nEfvunX5a4Y.roa (raw, json)
Hash identifier:          bfXx1m6KPaQzqB9KaTVHo7fq6Bzn/+JJk+DBHAcpFn4=
Subject key identifier:   E8:75:79:FD:74:47:01:36:B8:59:CB:3A:9C:47:EF:BA:75:F9:6B:86
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01823E1C11BE9D53FACB87382282BADA76D6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6HV5_XRHATa4Wcs6nEfvunX5a4Y.roa
Signing time:             Wed 27 Jul 2022 05:23:23 +0000
ROA not before:           Wed 27 Jul 2022 05:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51765
IP address blocks:        163.5.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:3e:1c:11:be:9d:53:fa:cb:87:38:22:82:ba:da:76:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jul 27 05:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e87579fd74470136b859cb3a9c47efba75f96b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:c6:6b:af:42:c2:48:90:99:a3:6b:75:02:
                    3d:65:4d:e5:f6:cd:3d:c8:ac:15:bb:68:9f:c4:e0:
                    aa:28:a3:d9:a3:42:28:f8:51:35:24:a8:5b:c1:31:
                    7f:72:2b:be:4c:d2:2d:4c:45:36:ab:bc:31:6b:b8:
                    b7:52:30:75:69:19:49:44:10:3d:fd:5c:cc:e4:db:
                    06:e2:03:27:fb:18:30:75:e4:c1:48:78:35:f9:be:
                    8a:4c:4d:65:7d:87:df:f4:dd:64:c2:ba:5e:92:35:
                    73:1d:81:59:82:20:b5:ff:62:32:9a:3a:1d:3c:7c:
                    74:cb:4e:97:61:3f:b0:44:41:73:29:f5:2b:c9:89:
                    37:09:c3:20:4e:9b:b3:1a:6d:7a:1f:7b:eb:cd:20:
                    b8:34:b8:66:b7:47:34:b4:20:35:46:b8:2c:05:4f:
                    eb:08:ae:33:73:48:11:4d:f7:74:29:4a:a9:50:2b:
                    56:2e:36:35:0e:af:79:e3:75:84:e6:07:6c:fd:ec:
                    81:e0:d0:d7:0f:47:98:b6:ae:06:fb:99:bb:b8:c4:
                    37:09:9b:93:9c:f8:ad:90:d4:64:bd:28:99:59:f1:
                    b1:cf:fc:b0:c6:78:24:66:38:9a:d7:20:ce:a6:a5:
                    75:35:d2:c5:97:27:c1:41:4f:13:d3:1b:ed:3f:f0:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:75:79:FD:74:47:01:36:B8:59:CB:3A:9C:47:EF:BA:75:F9:6B:86
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6HV5_XRHATa4Wcs6nEfvunX5a4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:66:ec:cd:07:03:12:a3:e1:b0:7c:39:3b:42:ee:0a:48:
         f5:e9:76:e9:24:3b:c7:ea:65:80:10:04:db:fb:b5:7c:f6:99:
         8a:e3:ed:62:62:00:c6:82:f1:8c:a4:1f:c2:e8:8b:a9:1c:cd:
         4b:d5:5e:53:58:88:00:41:31:3a:a3:65:39:5a:fd:cc:82:95:
         67:e4:87:aa:d4:fd:37:89:7e:1f:a8:99:24:01:08:48:72:03:
         d0:86:a4:13:d4:8c:c6:26:48:19:15:1c:bf:45:f6:41:59:ce:
         b5:1b:6b:55:a1:35:d3:ed:b2:c0:bd:8b:05:de:58:f8:5a:23:
         26:bc:63:45:d9:12:c9:84:d4:35:2e:9b:a8:85:c8:df:e4:ee:
         b2:91:4a:39:a4:23:38:4c:01:d7:01:73:ab:de:83:5e:17:f7:
         3e:f3:ca:46:df:47:9e:fa:c3:35:f9:58:46:64:91:c6:09:e7:
         ae:0c:7b:9c:60:f1:0c:ff:06:90:95:71:3d:2c:15:08:f6:c5:
         d0:67:cb:e1:ed:f0:71:ac:8b:49:d8:1e:86:43:b5:b5:5d:9c:
         65:e9:3e:14:b6:a7:be:01:71:c5:c3:52:3b:89:bf:99:4a:7b:
         66:36:cc:93:c0:69:20:51:f9:c7:5c:c5:a0:27:66:ce:18:56:
         24:1a:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org