Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/AEMPLIn4zyVYPIo5QGqmBxKE6rY.roa
File:                     AEMPLIn4zyVYPIo5QGqmBxKE6rY.roa (raw, json)
Hash identifier:          sGbZ4hNTgR++8X07IEli4MkZ8pHIudvLQzfLTrUk294=
Subject key identifier:   00:43:0F:2C:89:F8:CF:25:58:3C:8A:39:40:6A:A6:07:12:84:EA:B6
Certificate issuer:       /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial:       0A4581B4
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/AEMPLIn4zyVYPIo5QGqmBxKE6rY.roa
Signing time:             Thu 02 Jun 2022 07:18:22 +0000
ROA not before:           Thu 02 Jun 2022 07:18:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     395886
IP address blocks:        5.183.80.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172327348 (0xa4581b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
        Validity
            Not Before: Jun  2 07:18:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=00430f2c89f8cf25583c8a39406aa6071284eab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:7d:dc:35:f2:01:6b:09:06:44:32:c8:9f:
                    ce:cb:f5:cf:f3:c9:a4:06:cc:37:3d:2d:7d:7b:c9:
                    27:19:b1:a3:aa:c0:79:d6:3a:62:38:80:7a:a8:5b:
                    5d:2e:41:00:33:4b:4c:5c:16:98:ab:d4:72:5b:b1:
                    6e:3f:8b:0e:87:e0:ba:7d:2e:a3:23:71:d7:a2:35:
                    36:f0:db:14:97:b7:e1:00:99:91:9b:08:51:8f:a9:
                    6c:ad:79:15:5a:5f:fb:8e:58:66:99:eb:12:46:57:
                    54:5d:2a:7e:8c:78:96:2f:c1:fd:44:96:d1:72:bb:
                    b5:a8:26:d5:f6:6e:2f:99:0b:a3:3f:96:c3:35:a2:
                    e6:3f:cc:28:1d:e9:bc:32:eb:03:15:c2:9c:39:f8:
                    c2:39:6f:41:ff:65:49:8b:12:fe:ea:fa:91:dd:66:
                    40:a8:23:56:58:22:68:91:8e:a9:bd:41:9b:a3:ff:
                    95:8a:a7:8e:d7:cf:6d:50:2e:d6:35:97:11:ea:c8:
                    4e:14:1f:2c:87:11:3f:96:f7:2c:cd:80:ce:b9:dd:
                    73:60:83:0b:68:41:e7:67:e7:ab:9e:67:0b:62:12:
                    7b:12:23:b6:40:ca:6f:18:3b:42:4c:38:09:d5:91:
                    67:a8:f7:d9:4a:48:03:0a:89:57:3c:09:86:4e:ef:
                    f3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:43:0F:2C:89:F8:CF:25:58:3C:8A:39:40:6A:A6:07:12:84:EA:B6
            X509v3 Authority Key Identifier:
                keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/AEMPLIn4zyVYPIo5QGqmBxKE6rY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:5d:46:8a:f2:35:ec:ab:ad:10:66:0a:56:9c:0e:6f:17:
         d6:5f:b8:c7:35:8e:8e:fd:ed:d3:62:0a:bc:eb:e7:c0:6f:f3:
         3c:1c:31:27:c3:e2:3b:48:ad:8f:5b:68:42:26:1a:11:b7:e5:
         fb:d1:43:d1:84:85:af:62:67:bb:46:21:cb:2b:74:2b:13:16:
         10:e8:72:6c:9d:9c:39:37:b8:6c:42:78:87:5b:8e:2a:dd:43:
         ac:8f:dc:fa:e8:09:23:f5:99:02:66:0a:85:16:03:7b:ad:91:
         86:dc:58:d0:5c:18:6c:49:1d:bf:7e:c0:f4:f9:fa:41:66:5c:
         ff:f8:f8:a4:eb:0b:44:28:e3:61:b5:0a:27:95:34:69:94:72:
         58:29:d1:8f:c1:0b:69:ae:da:cf:91:8e:91:0b:bd:21:cc:66:
         c0:cd:e5:f5:ae:10:48:0d:09:0b:74:3d:e0:3a:16:c0:44:16:
         5c:b2:d3:91:78:0a:f8:ad:dc:8c:70:6f:c6:d6:e1:04:46:ea:
         f6:ee:37:df:a4:b4:45:42:f7:30:9f:ef:6e:3a:ef:fb:dd:25:
         dc:ac:db:6b:c3:10:fe:b3:7f:ae:75:1c:c0:0e:68:9c:48:9e:
         7d:a6:9d:04:59:e4:b8:84:d0:95:8b:d2:df:c0:0d:9d:61:92:
         7e:67:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:20 2024 by rpki-client on console-fra.rpki-client.org