Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fuapt1_WE9lSB873jMsMCh2Evbo.roa
File:                     Fuapt1_WE9lSB873jMsMCh2Evbo.roa (raw, json)
Hash identifier:          jf22tatc1qwfPLoVufjNbrYlZuciCN6C/LhDqRmTEGQ=
Subject key identifier:   16:E6:A9:B7:5F:D6:13:D9:52:07:CE:F7:8C:CB:0C:0A:1D:84:BD:BA
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01829298C653D722403A510C098EDE2C98B5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fuapt1_WE9lSB873jMsMCh2Evbo.roa
Signing time:             Fri 12 Aug 2022 15:07:41 +0000
ROA not before:           Fri 12 Aug 2022 15:07:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        163.5.190.0/24 maxlen: 24
                          163.5.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:92:98:c6:53:d7:22:40:3a:51:0c:09:8e:de:2c:98:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Aug 12 15:07:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16e6a9b75fd613d95207cef78ccb0c0a1d84bdba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:12:35:9a:84:2a:59:01:73:7d:c0:32:cb:ab:
                    c7:bc:e2:e9:5a:d0:19:13:05:a4:02:59:30:63:cc:
                    6d:74:f0:a6:df:20:b4:99:fe:45:d9:0b:41:da:e1:
                    0a:bf:33:59:ee:97:88:4c:fd:09:0d:cd:59:d5:e5:
                    72:9e:ce:85:fe:2d:c9:a3:c5:67:ec:96:c2:89:cc:
                    8b:8d:01:32:53:a7:f1:c1:ab:9a:48:6b:0e:60:8f:
                    09:7b:a3:e9:4a:68:62:59:2a:82:3f:d4:bc:a4:d7:
                    0d:a9:a7:24:8e:84:6b:a8:eb:72:2b:0a:77:33:ef:
                    a9:90:3d:48:d4:a8:40:6a:31:9f:e4:db:62:8f:73:
                    94:13:3d:8a:a1:bc:08:05:2a:33:0b:73:d7:8c:c6:
                    ef:b9:87:da:6f:d8:31:9f:25:c9:3b:de:27:27:e3:
                    06:d9:33:bc:57:23:cc:52:a5:72:db:63:23:8e:31:
                    27:ee:e0:e2:43:86:2b:43:0b:c9:c4:2e:f1:7b:64:
                    99:84:51:9b:04:4c:eb:8e:1a:55:00:fb:4d:36:08:
                    57:a0:59:ad:e6:cc:0a:fb:c8:bb:2a:bc:cf:88:19:
                    fe:c0:6f:67:19:80:ac:52:68:01:07:04:86:89:fd:
                    de:87:43:82:4c:72:b7:3d:27:22:8f:cc:61:41:81:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E6:A9:B7:5F:D6:13:D9:52:07:CE:F7:8C:CB:0C:0A:1D:84:BD:BA
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fuapt1_WE9lSB873jMsMCh2Evbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.136.0/24
                  163.5.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d1:94:8a:b0:e0:63:5e:15:cc:96:7a:5d:0b:22:e0:46:06:
         68:11:bf:1f:ae:e5:5d:28:72:d3:3a:e9:f9:8d:aa:60:6b:40:
         7d:06:d0:8a:8f:07:f6:8e:20:2b:6f:c4:73:46:cc:32:6d:1d:
         8c:06:2e:d2:7f:ed:c9:85:d7:8f:51:4b:d7:96:88:40:df:fe:
         27:98:e8:bd:2e:f4:f4:a1:4b:23:19:25:c0:6a:1a:04:8e:4b:
         d5:10:b5:f5:11:4b:8d:4c:82:84:ac:82:e6:d5:15:c0:fe:14:
         7f:7e:bb:dc:ec:07:b2:81:49:d5:56:cb:72:96:e2:e8:70:34:
         e7:f0:95:06:ed:cf:6f:74:69:b6:31:b8:d8:c3:64:66:ab:fe:
         22:06:ba:dc:9b:37:54:51:58:bd:39:01:7d:cc:f6:92:59:5f:
         e7:1b:81:82:d6:e4:02:4e:00:27:6f:23:03:de:31:b6:2e:1a:
         20:2d:f1:d2:ab:ec:b6:63:9e:04:5e:a4:d7:55:5b:cc:8c:bc:
         14:e6:3b:a0:15:92:f8:3a:a2:b1:9a:3b:b2:70:3c:10:d4:a3:
         1d:71:91:81:35:65:2d:69:af:b7:d4:56:c0:cd:46:da:6c:5c:
         dd:a7:4a:e0:86:1a:d5:7d:53:81:d1:f4:62:cf:87:b9:94:42:
         92:59:80:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org