Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/dYeyM8Cu1Z_qvp8CGQgiBZW8_qU.roa
File:                     dYeyM8Cu1Z_qvp8CGQgiBZW8_qU.roa (raw, json)
Hash identifier:          G/PLWZ5x47yOTxLn/V2x7WQ/ewHjtUiXVyUmVx7n5Ng=
Subject key identifier:   75:87:B2:33:C0:AE:D5:9F:EA:BE:9F:02:19:08:22:05:95:BC:FE:A5
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       3A573335
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/dYeyM8Cu1Z_qvp8CGQgiBZW8_qU.roa
Signing time:             Sat 01 Jan 2022 14:56:31 +0000
ROA not before:           Sat 01 Jan 2022 14:56:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61176
IP address blocks:        5.160.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978793269 (0x3a573335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Jan  1 14:56:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7587b233c0aed59feabe9f021908220595bcfea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:00:c7:04:a4:29:cd:5d:a4:ad:59:8f:7d:
                    e5:82:06:b9:6d:5a:a2:a1:dd:76:5d:56:54:e0:89:
                    26:99:ee:c4:84:17:62:2e:41:f3:92:42:7e:74:8b:
                    54:7a:72:22:8f:db:de:79:3d:c7:28:ef:e4:32:c5:
                    ef:e6:47:53:5c:7c:cd:28:4a:16:53:ed:42:36:88:
                    16:c5:be:24:d4:5b:85:e4:c5:53:f9:29:1f:24:08:
                    af:31:5f:c2:bd:88:ae:aa:c9:ee:c8:81:6a:85:45:
                    63:3a:88:9d:98:0d:c6:7b:b1:19:ea:8a:82:2a:7c:
                    d1:2d:68:12:f8:a1:24:25:03:1a:84:df:a3:d0:1f:
                    73:cc:87:43:8b:5c:51:b7:24:85:7d:da:be:8c:2b:
                    9f:62:86:07:51:3b:79:e0:9d:e9:00:71:c6:61:c3:
                    cf:6a:ae:0a:23:c7:39:0e:14:78:9e:1e:a2:0b:60:
                    f4:a1:72:c3:72:24:0f:49:4c:7e:27:84:07:13:c2:
                    b8:eb:ac:93:ea:7b:f0:31:c2:cd:4e:a7:ac:23:d1:
                    11:36:da:58:8f:bd:04:bc:d8:8e:25:81:92:d3:12:
                    c9:89:f3:01:9d:e7:83:40:e4:1d:22:c0:4a:6d:86:
                    84:ef:11:2b:57:50:5f:9b:5b:02:77:fa:51:7e:a1:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:87:B2:33:C0:AE:D5:9F:EA:BE:9F:02:19:08:22:05:95:BC:FE:A5
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/dYeyM8Cu1Z_qvp8CGQgiBZW8_qU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.160.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:f7:ac:4a:64:81:15:22:5c:f2:6d:64:14:68:5b:a5:4e:50:
         cd:8c:e6:dc:e1:50:2a:ff:6b:0a:d0:57:b7:f2:e1:c9:2e:66:
         79:9f:45:69:e0:e1:35:41:d0:51:7f:a8:d5:3d:bb:65:29:11:
         29:d2:6d:c0:a9:31:a9:6e:94:ac:5f:56:8f:71:32:6e:f7:d7:
         8c:96:8b:8f:dd:ce:7f:03:45:04:2c:a0:c7:6f:7e:99:4c:f3:
         47:fd:e8:dc:dc:fa:2a:4e:65:d6:bb:9e:31:5e:88:ec:42:12:
         d0:5f:29:e7:a2:51:0e:74:2b:e1:f5:11:e1:3d:cd:bc:65:2e:
         10:91:4b:1f:aa:5f:b6:35:57:e5:4e:d1:eb:f8:ec:cd:ef:ba:
         72:3a:85:bd:95:f7:28:7f:26:8a:95:71:68:38:e0:26:12:3c:
         d1:fe:cf:37:84:d3:61:b9:6a:d8:e1:8f:3e:95:d3:8b:7b:80:
         9f:96:29:a5:e7:2b:7b:d1:41:8e:b1:68:13:7f:be:58:91:b0:
         af:56:65:0a:f9:65:da:ff:9f:51:5b:4c:c7:0d:c6:f4:a1:b1:
         92:df:f8:de:e0:86:f2:87:8a:5b:7e:22:2e:6c:b4:b1:c0:4f:
         f6:3a:c6:c5:65:fe:a6:fa:0b:94:f4:a3:4f:ae:0d:7c:3e:aa:
         86:25:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-ams.rpki-client.org