Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/n5WP87FVWgsq2Ka01bKnAtzzMxc.roa
File:                     n5WP87FVWgsq2Ka01bKnAtzzMxc.roa (raw, json)
Hash identifier:          WkdhzDOj1v07nr0toGPEVVff8Y3BkTDurGxWhq7EM8I=
Subject key identifier:   9F:95:8F:F3:B1:55:5A:0B:2A:D8:A6:B4:D5:B2:A7:02:DC:F3:33:17
Certificate issuer:       /CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
Certificate serial:       07862D03
Authority key identifier: 0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/n5WP87FVWgsq2Ka01bKnAtzzMxc.roa
Signing time:             Thu 07 Apr 2022 08:51:08 +0000
ROA not before:           Thu 07 Apr 2022 08:51:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        185.88.184.0/24 maxlen: 24
                          185.88.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126233859 (0x7862d03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
        Validity
            Not Before: Apr  7 08:51:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9f958ff3b1555a0b2ad8a6b4d5b2a702dcf33317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:d3:e4:f3:ca:59:ed:1d:c5:37:aa:a2:c2:
                    98:7e:eb:43:8a:67:a1:4f:e7:f6:1e:87:74:da:a6:
                    09:ab:3d:d3:d7:3a:a6:37:ba:ef:39:f4:ec:6c:3b:
                    ac:00:e2:6f:c9:7d:11:cf:8b:e1:48:7c:27:c8:2e:
                    33:3b:61:23:6f:b4:06:c0:db:f0:3c:7d:83:1b:a4:
                    a6:5f:e1:22:a9:bd:fe:e1:6a:68:8d:a9:88:41:e5:
                    27:69:af:48:18:61:bb:01:01:15:c3:ef:ee:33:06:
                    f1:df:7c:ac:08:3c:71:46:2a:59:71:b5:78:4a:b6:
                    48:2d:56:f5:12:79:13:10:1b:18:23:93:11:1f:c4:
                    7f:ae:16:90:1a:ac:a1:d4:93:32:ef:a7:b4:ba:cf:
                    02:ef:ea:d1:23:cf:22:3d:58:10:0d:bc:84:1b:a3:
                    35:2d:d9:7c:c5:df:08:19:46:66:db:5f:e6:d0:69:
                    52:42:65:9e:e1:8f:bc:00:fd:fd:07:70:b5:be:69:
                    ac:b8:80:c0:98:ba:c2:7e:fc:f7:b7:53:71:7b:28:
                    a6:7d:f6:ae:1f:f3:15:e6:d5:ca:be:a1:49:67:bc:
                    c4:4b:e5:58:af:86:11:56:87:5a:e0:4b:92:08:c8:
                    ab:d7:ff:2f:47:ec:c6:72:63:75:c1:9a:d6:b1:2b:
                    86:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:95:8F:F3:B1:55:5A:0B:2A:D8:A6:B4:D5:B2:A7:02:DC:F3:33:17
            X509v3 Authority Key Identifier:
                keyid:0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/n5WP87FVWgsq2Ka01bKnAtzzMxc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/CxdYc63rg8jxai4OPLslHliDOoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.88.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:83:9e:b1:da:c9:ba:c4:50:56:af:fc:0f:72:3e:47:2f:
         27:0f:07:14:ee:86:a9:a0:4e:d0:15:9e:5b:51:41:af:99:7b:
         3b:f6:15:3e:c3:f9:17:a7:7a:8d:c0:3e:b9:ff:cb:5b:11:d6:
         5c:76:8f:0c:5e:3e:db:1e:29:e1:74:b1:38:63:a4:f5:8a:21:
         ce:73:1d:a0:46:32:48:e1:87:de:11:76:3d:cd:42:68:ff:75:
         b9:52:94:57:e7:37:74:16:f8:60:d4:f3:cb:ab:a3:db:2c:9a:
         4f:62:a9:d9:8d:89:cb:eb:fb:f9:6c:35:38:7a:67:43:9c:5f:
         b0:11:a3:9c:13:85:a4:7a:8f:49:63:62:ef:42:0a:d5:79:b1:
         3a:73:99:6b:c5:1d:f7:e4:19:27:38:85:f2:0d:0e:fe:d6:06:
         e3:c2:bd:c2:c8:94:dd:1c:d3:4d:49:91:2c:16:c5:98:86:3e:
         1d:36:02:57:28:02:f5:d7:7f:02:49:58:52:f3:1e:61:51:bb:
         62:8a:20:a9:62:7e:ca:7f:6f:10:5b:15:78:96:17:b4:d1:f9:
         b5:1d:d3:7b:02:31:9c:45:3d:18:0a:ac:e8:c7:1f:b3:ce:73:
         5a:63:92:c4:2e:ae:6a:61:51:69:a9:ee:ec:13:93:f3:4a:20:
         f8:36:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:53 2023 by rpki-client on console-ams.rpki-client.org