Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/augo_H_vOJUEbg2XaREPKRfaUBY.roa
File:                     augo_H_vOJUEbg2XaREPKRfaUBY.roa (raw, json)
Hash identifier:          M1EYXVSMEFPUs+fjtqZ/I2bDmTiaqN+yQyfKjtoklCs=
Subject key identifier:   6A:E8:28:FC:7F:EF:38:95:04:6E:0D:97:69:11:0F:29:17:DA:50:16
Certificate issuer:       /CN=06653b049325fc287373325d0da4d9631c951e78
Certificate serial:       08347C77
Authority key identifier: 06:65:3B:04:93:25:FC:28:73:73:32:5D:0D:A4:D9:63:1C:95:1E:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmU7BJMl_ChzczJdDaTZYxyVHng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/augo_H_vOJUEbg2XaREPKRfaUBY.roa
Signing time:             Sat 01 Jan 2022 14:01:35 +0000
ROA not before:           Sat 01 Jan 2022 14:01:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51487
IP address blocks:        5.252.92.0/22 maxlen: 22
                          5.252.92.0/24 maxlen: 24
                          5.252.95.0/24 maxlen: 24
                          5.252.94.0/24 maxlen: 24
                          5.252.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137657463 (0x8347c77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06653b049325fc287373325d0da4d9631c951e78
        Validity
            Not Before: Jan  1 14:01:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ae828fc7fef3895046e0d9769110f2917da5016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:57:3c:a4:bc:61:31:45:c8:a0:ca:eb:ce:
                    4e:57:e0:61:a6:fd:b8:79:ee:60:98:e4:a6:52:65:
                    c1:98:37:cf:96:69:b1:60:43:76:0f:8b:ca:47:5a:
                    71:09:6c:d9:1d:bb:10:32:bb:5e:78:33:ba:14:27:
                    60:32:26:df:d2:b1:df:73:00:5b:96:a8:31:9e:7a:
                    7d:a0:22:e2:12:3b:d7:f2:87:d0:29:e4:97:a8:aa:
                    62:1d:f1:7b:0c:77:1c:f2:80:a5:8f:8f:f3:fe:f0:
                    a0:b1:26:eb:ca:0d:30:02:74:13:b9:44:0a:fb:ec:
                    d4:bb:d8:00:b9:3d:61:45:32:4f:3f:46:3e:76:10:
                    2b:85:66:90:f1:07:a9:7a:a5:97:45:77:c3:f0:87:
                    8b:d4:7b:12:92:dd:b1:e2:ea:69:2c:9c:ea:b6:31:
                    79:e2:60:24:40:80:f6:b1:c3:32:97:1a:71:43:e7:
                    11:ea:3e:8a:81:31:86:30:9b:ff:18:d8:e5:d6:e2:
                    2b:47:0f:09:80:fa:7b:77:6d:e1:3b:2d:1d:ac:1d:
                    42:80:38:61:bb:02:b1:b4:bf:4e:ea:e1:5d:74:05:
                    21:49:20:a6:e2:6f:73:80:71:3c:ff:eb:97:1a:a2:
                    57:26:a2:fd:0e:0d:cf:98:29:2f:83:00:27:2c:79:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E8:28:FC:7F:EF:38:95:04:6E:0D:97:69:11:0F:29:17:DA:50:16
            X509v3 Authority Key Identifier:
                keyid:06:65:3B:04:93:25:FC:28:73:73:32:5D:0D:A4:D9:63:1C:95:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmU7BJMl_ChzczJdDaTZYxyVHng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/augo_H_vOJUEbg2XaREPKRfaUBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/BmU7BJMl_ChzczJdDaTZYxyVHng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:81:84:7b:1b:22:24:e1:53:0c:ef:24:ef:fc:73:7d:f5:bf:
         0b:11:c8:f0:63:61:a7:b9:f1:d2:84:97:53:23:f7:df:02:44:
         0c:20:a7:13:1c:19:0a:be:24:49:7a:6c:5a:bc:39:30:73:85:
         01:f6:8a:09:85:a8:74:0e:8b:7b:a2:87:be:81:1e:b5:ed:48:
         3d:05:2a:6f:e0:1e:ce:30:31:81:b7:2f:2f:1e:66:76:b8:f5:
         d6:50:38:22:94:38:9b:f5:43:35:92:58:ed:9d:c0:4f:cd:31:
         cb:14:08:07:29:f8:8c:d7:06:e0:24:34:e7:61:bc:a1:1a:64:
         cb:e7:54:1c:34:3c:30:31:36:14:4e:13:39:6d:93:81:c0:ec:
         a9:49:e0:4a:ab:3f:6f:1a:12:c7:b4:af:11:3c:09:af:f6:91:
         9e:7e:c4:b8:27:4c:79:94:6e:82:ab:79:ed:ea:82:70:54:6c:
         dd:52:92:51:a5:7a:20:eb:3a:63:3c:8e:33:3b:53:e5:77:a5:
         4a:3b:c4:b2:65:0b:ac:74:ec:b3:9f:a9:4b:2d:7b:1b:7a:97:
         e8:5c:23:25:f6:b7:58:80:4c:24:d0:19:3f:13:be:4b:95:00:
         91:51:c7:af:1a:f0:50:25:c7:cb:74:f1:59:6e:93:d9:2b:55:
         00:05:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:49 2023 by rpki-client on console-fra.rpki-client.org