Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/6Ksn-MJQlEWUeJ0dIhVykzgoJMY.roa
File:                     6Ksn-MJQlEWUeJ0dIhVykzgoJMY.roa (raw, json)
Hash identifier:          zV2MsS+hU3gr7aoEVwOV4EQJMKRn8+WG9mbswTGryws=
Subject key identifier:   E8:AB:27:F8:C2:50:94:45:94:78:9D:1D:22:15:72:93:38:28:24:C6
Certificate issuer:       /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial:       018316E6BBCEC9FFD7D83758B80D58FA15E4
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/6Ksn-MJQlEWUeJ0dIhVykzgoJMY.roa
Signing time:             Wed 07 Sep 2022 07:42:43 +0000
ROA not before:           Wed 07 Sep 2022 07:42:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198867
IP address blocks:        5.45.191.0/24 maxlen: 24
                          5.45.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:16:e6:bb:ce:c9:ff:d7:d8:37:58:b8:0d:58:fa:15:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
        Validity
            Not Before: Sep  7 07:42:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8ab27f8c250944594789d1d22157293382824c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:1c:2f:37:95:ce:5f:33:cf:50:40:c0:41:
                    74:a2:24:14:69:c3:c4:ab:6a:ce:fa:08:20:ba:94:
                    c3:1f:85:e2:21:2f:85:54:e6:59:f4:57:73:61:75:
                    29:c7:50:eb:12:65:24:46:13:c6:0f:e3:3f:a8:fa:
                    be:ac:a3:57:40:cf:b7:66:80:f7:34:9e:71:3b:96:
                    cd:c3:33:43:ec:45:de:23:bf:70:20:cd:44:5e:1e:
                    c9:57:b4:7a:ec:7f:99:77:43:1d:9c:9b:2b:87:3d:
                    06:e0:77:82:46:9c:57:ba:7b:fd:c0:6d:a5:1d:36:
                    03:ee:ef:10:ea:2d:d0:de:f5:64:83:81:b8:e5:8d:
                    ee:ad:18:6c:a9:11:b8:e4:6a:06:64:c3:95:86:25:
                    ff:f8:99:fd:d1:d9:52:3b:81:6b:43:eb:af:b2:d0:
                    ed:f3:b1:cc:10:5b:de:44:ca:8d:0e:24:10:5e:15:
                    c3:d2:c3:6b:ff:6a:35:8a:a1:9a:27:4e:2c:ff:59:
                    2d:23:e4:ef:66:94:79:40:9a:f4:b2:c3:ac:9b:c6:
                    12:76:d2:0b:c6:94:49:28:43:c2:7d:64:89:b4:84:
                    06:e7:18:94:eb:d6:06:54:60:b7:b9:95:b5:d5:5f:
                    f4:4f:ea:b2:6f:73:5c:46:48:e7:08:5a:58:2a:20:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AB:27:F8:C2:50:94:45:94:78:9D:1D:22:15:72:93:38:28:24:C6
            X509v3 Authority Key Identifier:
                keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/6Ksn-MJQlEWUeJ0dIhVykzgoJMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:45:4c:4b:bd:6d:2b:fe:e5:d7:c9:58:a0:b3:26:67:8c:c2:
         46:e6:9e:72:44:db:69:53:02:5a:ae:77:11:09:92:a2:8a:b4:
         a1:bb:b2:29:05:3d:eb:e4:dd:a5:74:08:93:77:91:48:67:bd:
         57:90:31:fb:f7:ea:9a:8f:0e:b9:87:63:d4:2c:ed:66:e2:04:
         f6:3c:dc:8c:7b:45:99:dd:82:e7:97:d9:ab:42:70:96:70:5a:
         93:f2:52:0a:32:f4:b0:34:77:cd:c3:c4:72:48:ca:1f:4b:e2:
         9b:5a:f5:36:6e:fe:f9:b8:60:56:8c:68:de:27:30:e4:2f:7b:
         28:c6:a5:75:4b:a9:fd:3d:a4:b2:4f:17:61:1e:6e:7b:93:e3:
         35:6e:77:04:2d:40:15:49:42:40:5c:fb:c4:2e:60:3a:fa:4f:
         31:89:ca:39:a8:e9:80:58:85:28:c7:05:22:9b:67:cc:3e:68:
         b9:f4:2d:fa:ff:0b:b9:e9:03:d3:b5:09:03:f1:c8:a4:b2:1d:
         98:6d:de:ed:75:f8:be:02:0d:cf:69:2d:eb:da:bf:ea:0a:61:
         b2:2f:26:60:6f:16:ee:5f:76:d9:7f:88:46:e1:52:53:ab:a4:
         c9:ef:51:90:d9:c9:3d:b7:42:9b:3b:78:ac:1b:a9:ab:f9:5b:
         8b:64:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:00 2023 by rpki-client on console-fra.rpki-client.org