Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rYUVUwa9ENhMDtqUNlZtpkqu1Ho.roa
File:                     rYUVUwa9ENhMDtqUNlZtpkqu1Ho.roa (raw, json)
Hash identifier:          sWgpVKp1Xu0sHpFmHLBoplK08SJS7XmA/EYGiS82EuM=
Subject key identifier:   AD:85:15:53:06:BD:10:D8:4C:0E:DA:94:36:56:6D:A6:4A:AE:D4:7A
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0183FBA25B34846B90D83F2BD478409E3038
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rYUVUwa9ENhMDtqUNlZtpkqu1Ho.roa
Signing time:             Fri 21 Oct 2022 17:41:04 +0000
ROA not before:           Fri 21 Oct 2022 17:41:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     150303
IP address blocks:        163.5.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:fb:a2:5b:34:84:6b:90:d8:3f:2b:d4:78:40:9e:30:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Oct 21 17:41:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ad85155306bd10d84c0eda9436566da64aaed47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:8b:32:17:71:1d:dc:ca:30:26:09:ed:e4:
                    75:59:5d:f1:d4:02:cb:cd:4d:b3:fa:8c:87:53:ca:
                    c0:7a:07:23:8f:fc:04:1b:92:a3:d9:b3:05:dc:89:
                    d2:6f:d2:67:14:5a:43:62:46:eb:82:64:43:57:4b:
                    a9:a2:e5:0f:cb:49:af:c0:27:c8:18:dc:09:37:39:
                    ec:63:f5:55:0e:56:5c:79:4e:4d:a7:00:0c:94:02:
                    77:9e:44:82:28:f1:8f:cf:8a:6b:2b:cd:5c:43:e3:
                    22:25:d4:a3:dd:57:d3:20:06:19:30:16:dc:e0:2d:
                    d2:d6:07:03:0b:15:14:33:6c:68:d8:54:1d:c2:a3:
                    a4:28:ee:b4:55:8c:ed:a4:d7:d9:f3:e5:f1:cc:d8:
                    09:a3:e1:00:6a:c2:e9:34:75:de:33:01:87:87:e9:
                    88:ce:99:0a:5a:cd:53:f5:97:2b:41:9d:49:5e:ed:
                    c7:5d:7c:0e:81:0b:5b:88:5a:43:02:d6:c0:e5:98:
                    d4:e0:5b:56:14:f3:38:dc:f8:45:5f:22:b1:77:c9:
                    b7:aa:57:99:c4:f3:d5:6d:64:8d:9c:50:c7:a2:f4:
                    36:48:1c:32:a9:e2:13:db:71:d5:c2:ff:08:37:cb:
                    bd:d1:d8:3b:8d:7c:b5:4c:d4:06:ab:b4:f6:9b:8c:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:85:15:53:06:BD:10:D8:4C:0E:DA:94:36:56:6D:A6:4A:AE:D4:7A
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rYUVUwa9ENhMDtqUNlZtpkqu1Ho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:11:f1:da:7e:8a:28:cd:73:f6:a5:53:75:f9:5a:a9:57:
         fe:5b:9d:86:0c:6f:58:fb:f8:f7:a8:e1:d1:eb:6b:2e:9b:36:
         de:ec:5f:0b:94:a3:e8:d0:c0:12:1c:c7:b3:c0:7f:81:84:b3:
         7d:31:78:71:3c:37:20:a0:74:40:2a:67:7f:0b:04:e9:05:6a:
         47:ed:d0:d4:f6:8e:42:04:d5:ab:17:3c:ba:d4:63:7b:ce:3d:
         68:9f:5f:f3:ea:a2:1d:ef:0f:03:db:67:1e:55:e7:8f:67:2a:
         8c:ea:46:4e:91:2f:88:dc:30:41:3b:3d:03:53:02:0b:e6:0f:
         18:66:28:d2:b8:93:19:a8:d9:b2:7d:da:45:83:c7:dc:aa:57:
         5e:99:2c:ba:e9:1d:5e:30:e4:d8:cc:b2:6f:13:a9:9b:09:23:
         64:5f:e6:da:7a:c9:61:d7:38:d4:41:33:af:92:c1:88:38:30:
         98:f2:61:97:11:20:e3:4a:a2:15:d9:f6:18:7c:d7:d3:57:05:
         02:1a:8c:2b:e1:b7:0f:ca:5e:ae:f9:5d:cc:22:86:b2:4d:fd:
         d6:57:39:4d:47:d4:b6:93:e9:fb:ab:81:08:32:35:95:d4:7c:
         f3:56:40:b3:08:66:40:91:ce:0a:10:bb:ad:d6:55:2b:30:17:
         a0:61:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:08 2024 by rpki-client on console-fra.rpki-client.org