Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/Z0AL-Vf0o9_bhwe2VSbGAIGZ6dY.roa
File:                     Z0AL-Vf0o9_bhwe2VSbGAIGZ6dY.roa (raw, json)
Hash identifier:          NdPMM0n7ctjEuLBQDI+J3qRtCpK97yS28+YmQKdSfLc=
Subject key identifier:   67:40:0B:F9:57:F4:A3:DF:DB:87:07:B6:55:26:C6:00:81:99:E9:D6
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       0183AD4AA3B12FBDCB0B82486D06ECB6C4A8
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/Z0AL-Vf0o9_bhwe2VSbGAIGZ6dY.roa
Signing time:             Thu 06 Oct 2022 12:34:53 +0000
ROA not before:           Thu 06 Oct 2022 12:34:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60798
IP address blocks:        5.181.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ad:4a:a3:b1:2f:bd:cb:0b:82:48:6d:06:ec:b6:c4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: Oct  6 12:34:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=67400bf957f4a3dfdb8707b65526c6008199e9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:d7:85:05:a3:bf:44:f5:24:cc:cc:7b:a0:
                    17:a2:0a:53:96:10:6b:66:6d:f4:15:a4:41:50:c9:
                    10:3f:f9:fa:4b:41:dc:01:8c:45:6f:12:3b:a7:65:
                    05:59:91:93:43:21:cb:fb:b7:d7:ec:95:30:2f:b4:
                    d2:f0:ac:b3:92:27:34:a7:b2:60:16:d8:dc:ae:24:
                    02:c2:3d:b6:3c:f1:6a:92:14:5b:38:db:bb:2a:54:
                    9e:be:c4:5a:8d:43:6d:da:29:98:45:de:5b:7e:ed:
                    2f:0f:b5:24:a7:b3:5b:7c:8f:69:fe:bf:b5:b0:3c:
                    55:df:3b:8e:8c:d2:69:34:4d:40:01:54:2d:94:7b:
                    a7:3a:5d:f8:97:be:d8:87:88:b1:a0:3f:e6:d4:5b:
                    c3:6a:e8:51:18:42:26:6c:92:82:25:2e:21:27:56:
                    5e:24:3c:ff:25:92:79:ab:b3:06:44:d0:63:31:61:
                    99:84:8f:ca:ef:68:83:a5:0c:2f:87:85:25:ae:96:
                    3e:e2:54:29:ae:42:4d:c0:02:0b:59:01:79:ec:ee:
                    21:c5:cb:c4:3e:03:6d:5e:ba:4a:c1:d8:c6:ee:e3:
                    19:81:5c:d5:9c:23:bc:4e:1c:6f:ca:b8:24:8c:dc:
                    ab:1e:1e:cf:58:82:ce:19:20:6e:b3:fb:08:41:06:
                    86:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:40:0B:F9:57:F4:A3:DF:DB:87:07:B6:55:26:C6:00:81:99:E9:D6
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/Z0AL-Vf0o9_bhwe2VSbGAIGZ6dY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:92:98:97:b2:3f:23:a2:54:16:a5:c6:b4:8d:23:77:f4:5c:
         43:0b:33:23:4b:7c:a7:c1:93:b9:ba:67:25:34:e1:5f:30:2b:
         8d:19:7c:9b:88:03:82:da:8d:13:35:98:d0:18:e7:34:26:2c:
         54:7e:2c:db:a9:7e:1e:b5:1b:47:0c:8d:26:2f:67:50:dd:96:
         aa:fa:86:dd:36:91:ab:12:1e:4c:47:14:b8:a5:d0:33:b5:74:
         08:9a:37:8b:29:9c:f2:bf:9c:16:c5:78:0c:98:06:6e:f9:08:
         11:89:2d:92:ec:39:f6:b9:6d:bc:e3:d8:86:25:ee:d3:c4:45:
         45:ca:c3:21:31:2d:4d:e9:ba:fb:c3:c9:c4:28:d2:29:d9:52:
         5e:3b:01:c1:8c:fb:6f:70:a6:a9:c8:e9:e5:10:67:26:35:b2:
         9e:80:9e:19:8a:07:8a:47:84:fe:9a:04:72:a3:ea:2b:15:d7:
         e6:83:ec:3c:c3:96:b6:28:09:80:14:14:b6:43:fa:7b:21:91:
         37:09:9e:4b:60:7f:64:7b:a6:7e:5b:c4:37:6d:9f:cc:79:cb:
         f7:06:89:65:39:89:1b:44:aa:dc:1c:cc:6c:e2:22:7e:cd:85:
         db:e2:f8:13:6f:bd:18:1d:d6:cf:0a:95:fc:82:37:0e:03:29:
         d4:73:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:39 2024 by rpki-client on console-ams.rpki-client.org