Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E-ctevSmj6xwq5-3OZqCKIyUmSM.roa
File:                     E-ctevSmj6xwq5-3OZqCKIyUmSM.roa (raw, json)
Hash identifier:          40uWrOSIlAww3O3t0ulBmDeuNp1FFoedRRZuXKbEsvU=
Subject key identifier:   13:E7:2D:7A:F4:A6:8F:AC:70:AB:9F:B7:39:9A:82:28:8C:94:99:23
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0182CA81BA6E0ADE8692127367F269470B54
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E-ctevSmj6xwq5-3OZqCKIyUmSM.roa
Signing time:             Tue 23 Aug 2022 11:41:15 +0000
ROA not before:           Tue 23 Aug 2022 11:41:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        163.5.194.0/24 maxlen: 24
                          163.5.197.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.196.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.231.0/24 maxlen: 24
                          163.5.234.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ca:81:ba:6e:0a:de:86:92:12:73:67:f2:69:47:0b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Aug 23 11:41:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13e72d7af4a68fac70ab9fb7399a82288c949923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:70:db:c7:b4:ac:46:8d:a8:8c:42:95:d0:
                    e7:f0:ce:0f:ba:8c:3e:41:b7:78:40:37:4e:6d:ae:
                    60:68:60:a1:a7:31:ed:65:94:51:f2:cf:4c:9d:5d:
                    8e:07:d8:e6:04:9b:e5:42:6b:e0:18:e0:35:ce:65:
                    18:ab:19:0b:c3:78:45:f3:a2:27:af:2b:48:03:81:
                    78:b8:88:af:0e:53:36:db:3e:dc:f4:00:ae:83:3e:
                    1b:18:1b:2f:a7:e9:37:9b:a3:5a:ae:a7:72:23:de:
                    9a:ab:8d:a7:fd:6e:a9:74:5e:3d:de:e7:21:b5:5a:
                    21:dc:0c:da:64:58:48:09:b3:d0:98:81:ad:30:6f:
                    e3:c6:6b:f3:d7:76:b8:4d:2c:af:3e:03:4e:c4:88:
                    7f:ee:37:25:4d:13:d7:40:fc:3a:a4:44:1d:ea:d0:
                    e0:24:b4:b0:c4:6c:c6:8b:f8:e5:48:7e:1e:7b:99:
                    5a:e2:2b:cb:26:97:c5:2a:a7:9d:39:0e:90:e2:82:
                    6f:20:d9:a6:9c:52:16:e2:7b:76:33:81:80:ed:d3:
                    dd:94:27:bb:f2:5a:52:d5:21:17:2f:30:34:38:8e:
                    d3:f6:c1:9c:f7:3f:a6:77:04:35:a0:6b:5b:6d:c6:
                    8a:8d:15:45:cd:9c:4b:28:d9:9b:24:7f:b1:1d:ec:
                    4e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:2D:7A:F4:A6:8F:AC:70:AB:9F:B7:39:9A:82:28:8C:94:99:23
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E-ctevSmj6xwq5-3OZqCKIyUmSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.164.0/24
                  163.5.194.0-163.5.199.255
                  163.5.231.0/24
                  163.5.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:42:95:c2:bb:52:76:8f:42:dd:23:9c:98:4d:b8:03:c8:
         02:4e:cf:89:82:24:91:41:3d:ee:a2:de:73:32:2e:ae:86:33:
         4d:bc:8e:23:d1:c0:1a:77:a4:29:1c:17:f5:20:58:38:d9:7f:
         08:5e:b3:5f:32:44:f0:a8:5b:c2:a9:5a:e6:5d:47:2d:9e:e1:
         63:b3:d8:64:ce:d4:f5:44:23:64:f7:bf:35:b2:8c:7a:57:4a:
         df:74:07:2b:63:50:5f:f5:e9:b4:48:b6:74:10:56:bc:8b:f2:
         14:e9:c4:f9:25:38:d7:8c:4b:90:c3:35:f9:32:b2:d7:88:9b:
         c9:da:db:a5:04:26:9b:b4:32:e0:df:0e:95:3f:75:76:44:f1:
         ed:6f:21:1e:c8:3d:d9:2d:e8:bb:52:b8:da:de:a3:61:e0:bf:
         0e:87:66:c7:6b:e6:11:d8:84:4d:95:8e:3f:bc:3e:1c:5d:ea:
         0b:c7:27:22:dc:57:c9:ac:18:cf:e5:6d:dc:79:34:b3:58:8d:
         e3:44:27:85:ec:38:58:85:e9:5f:0e:7c:f0:d4:65:26:52:5d:
         97:06:01:fd:ba:4c:cf:57:4f:ba:af:df:32:f0:fb:b3:33:a6:
         8d:6b:1c:ec:a9:69:a3:dc:3a:88:42:c3:02:84:b4:b5:7e:65:
         f1:fe:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org