Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/W_O2w8ufnM0oX7cl9vVzIOcJcMI.roa
File:                     W_O2w8ufnM0oX7cl9vVzIOcJcMI.roa (raw, json)
Hash identifier:          /qpQSS0ZJr1sFXrptbtwjgSvznAHe/0VbVfLDlxnyWU=
Subject key identifier:   5B:F3:B6:C3:CB:9F:9C:CD:28:5F:B7:25:F6:F5:73:20:E7:09:70:C2
Certificate issuer:       /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial:       2758518C
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/W_O2w8ufnM0oX7cl9vVzIOcJcMI.roa
Signing time:             Sat 01 Jan 2022 14:02:22 +0000
ROA not before:           Sat 01 Jan 2022 14:02:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16292
IP address blocks:        5.63.15.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660099468 (0x2758518c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
        Validity
            Not Before: Jan  1 14:02:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bf3b6c3cb9f9ccd285fb725f6f57320e70970c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:e9:77:81:fe:3f:a3:01:6e:e7:6c:06:04:
                    30:c7:73:25:bd:39:b5:b3:af:1f:d8:1f:5e:8f:8a:
                    13:6c:1b:30:ff:f1:2c:3c:fd:c5:5c:eb:07:8f:6f:
                    d3:da:ae:f4:0f:b9:87:22:06:7e:0e:0b:35:6c:c1:
                    a6:2b:3a:4e:f3:da:a6:42:54:f0:35:8d:a7:c2:37:
                    17:a1:37:3a:28:de:05:68:14:f3:a9:45:76:e6:4b:
                    e0:10:91:bd:73:6e:2b:f4:86:09:1b:1d:f8:af:55:
                    98:e2:15:66:a6:4f:1d:aa:b0:b5:86:fe:41:85:a1:
                    26:87:7b:67:7b:ca:b6:41:b9:65:15:b4:d2:5c:ac:
                    8c:b7:bd:32:df:06:86:8c:9a:9e:25:e6:13:9e:1b:
                    6d:82:51:8a:02:99:77:20:87:e7:9f:89:ae:04:87:
                    97:1d:c3:9d:e9:4a:ef:84:87:11:41:d4:97:21:aa:
                    31:27:fb:87:d6:c9:06:72:a4:9f:df:d6:f5:ab:c2:
                    b2:28:3a:d6:bf:56:80:e1:a8:2d:09:e4:fb:ae:3b:
                    29:db:62:b9:8e:8d:c3:48:1a:9b:2b:92:6e:6b:51:
                    38:d5:a5:99:74:62:55:6b:ed:82:64:74:ca:bc:1b:
                    4c:96:62:81:e8:d8:c4:94:8e:bd:23:68:cb:cf:f3:
                    a0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F3:B6:C3:CB:9F:9C:CD:28:5F:B7:25:F6:F5:73:20:E7:09:70:C2
            X509v3 Authority Key Identifier:
                keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/W_O2w8ufnM0oX7cl9vVzIOcJcMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.63.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a6:ce:54:7b:f1:e0:72:c2:3f:be:96:e7:d2:0a:f9:2f:15:
         5d:65:d2:f6:3b:bc:bb:33:c7:ea:c9:d3:59:5c:b2:f5:7f:2c:
         83:68:24:68:09:d3:de:80:38:f5:e5:b5:82:a1:d5:a1:22:a1:
         c6:10:e6:f6:37:41:0f:cc:67:6d:96:52:33:c0:01:f5:55:fd:
         b4:e0:7d:e9:2c:47:0e:36:11:39:86:07:5b:96:f3:8b:ff:e7:
         2d:d3:4a:d4:18:10:a9:8e:1d:ca:b8:5d:de:94:4f:71:b2:0a:
         17:6c:c4:5b:61:8e:a3:c1:63:27:b3:6b:ea:83:b7:8a:6c:81:
         ca:cd:39:40:02:5a:99:1d:9b:d0:04:20:4d:0e:56:01:92:07:
         96:8b:e5:72:73:a1:dc:ae:2d:8c:b9:40:fd:40:05:0e:ca:b0:
         07:cb:f1:d4:3e:5b:49:49:b2:5f:da:a1:b6:45:93:7a:cc:c3:
         0a:c7:29:2a:f5:23:64:11:6e:51:0a:a1:f3:ac:12:3b:e4:16:
         cf:3b:0f:00:92:18:d5:71:0f:cf:32:27:34:a8:b9:ec:5d:5f:
         6f:5d:44:28:5b:fa:fb:0d:ae:43:12:44:14:03:03:d2:e7:3e:
         54:76:02:5e:6d:57:9a:4e:15:e3:02:f5:3c:d8:4b:0c:03:08:
         5a:1a:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:30 2025 by rpki-client