Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nleDPCiaPrH0sF_Q9jGHGvFpD_k.roa
File:                     nleDPCiaPrH0sF_Q9jGHGvFpD_k.roa (raw, json)
Hash identifier:          tFbi16AuBA4azYaEQFq3wmDiLuMtykoAu+4E04jmnGw=
Subject key identifier:   9E:57:83:3C:28:9A:3E:B1:F4:B0:5F:D0:F6:31:87:1A:F1:69:0F:F9
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       275503F6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nleDPCiaPrH0sF_Q9jGHGvFpD_k.roa
Signing time:             Sat 01 Jan 2022 16:07:44 +0000
ROA not before:           Sat 01 Jan 2022 16:07:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3180
IP address blocks:        93.170.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659882998 (0x275503f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:07:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9e57833c289a3eb1f4b05fd0f631871af1690ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:7c:d9:8e:81:00:cc:a8:49:ef:a5:d6:b1:
                    44:af:d2:d2:58:9a:59:0c:4d:0b:af:e3:05:99:10:
                    d8:22:43:b0:71:fa:dd:cd:a2:6e:5b:1d:26:db:d7:
                    5d:c8:c6:a1:85:7f:e0:ee:d5:bc:13:db:ad:ae:e6:
                    b0:ac:7e:ee:cf:89:03:5e:89:76:a3:d4:3c:07:2c:
                    29:81:b3:bc:25:5e:f0:17:8d:c6:20:55:24:a8:96:
                    c8:d2:c1:e6:48:ad:59:10:18:62:33:94:4b:fc:b4:
                    1c:b1:dd:5c:64:88:ee:b0:68:fa:10:0a:6e:50:8d:
                    33:ad:b9:f7:ed:60:bc:cb:f5:4c:9c:f9:4b:47:14:
                    90:3c:10:1a:d2:5a:33:97:a9:b5:08:c1:7f:80:60:
                    b2:4e:b3:16:a5:ff:9e:2e:2b:d9:56:96:09:20:45:
                    56:8e:b8:ac:e6:55:1f:28:2e:55:08:d1:aa:7b:17:
                    a6:51:19:a6:87:bf:ab:a3:9b:ee:6b:50:76:1c:ec:
                    11:c7:b4:fb:ab:f9:c1:de:4b:cd:18:84:56:e3:55:
                    f5:ae:27:62:e9:6b:21:15:56:f2:1a:62:37:f3:3b:
                    a3:f4:f4:b2:67:e7:4f:d2:de:ec:87:be:41:ce:30:
                    f1:e5:8d:32:3d:92:e4:86:00:9a:ea:65:fb:9f:38:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:57:83:3C:28:9A:3E:B1:F4:B0:5F:D0:F6:31:87:1A:F1:69:0F:F9
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nleDPCiaPrH0sF_Q9jGHGvFpD_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:75:6d:04:43:cd:2a:51:21:12:dc:06:f6:be:24:ce:93:46:
         85:d6:c5:47:c0:01:9b:d8:26:ec:7f:b1:8d:ce:c9:ea:73:46:
         16:88:5c:43:a3:06:33:85:03:c4:77:18:ad:ab:88:c2:de:17:
         ea:18:43:e7:80:5a:8e:2d:63:2c:49:0f:11:a7:40:97:a0:3e:
         85:27:61:c9:1a:7e:7d:73:28:a4:c8:bd:4a:bf:68:58:6f:e1:
         5e:43:e1:80:61:55:b0:15:98:7b:48:aa:0d:2d:31:f6:ca:1f:
         7d:b8:81:e1:2c:10:18:9e:32:18:74:86:a7:04:9a:b0:6e:b0:
         cc:2d:7e:be:23:cd:41:0a:9b:8d:99:5e:1e:7f:68:b1:cf:4d:
         f4:fc:f6:b4:aa:2e:77:bd:b3:10:64:77:bf:a3:29:fd:37:4a:
         62:00:83:33:94:54:67:4b:a4:21:23:80:62:e6:0f:66:83:7f:
         9f:9d:06:47:8e:6c:de:26:f8:58:c6:aa:cf:eb:18:31:20:ea:
         69:cc:9e:99:46:e2:ac:63:99:7c:55:21:fb:b9:a0:75:26:ba:
         be:a5:50:7c:1f:0d:e5:62:63:95:a7:53:c8:08:19:80:bd:5f:
         4e:b2:d6:68:ba:b9:12:1d:1d:26:39:6a:90:d6:a6:df:fa:0c:
         d1:ef:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:24 2023 by rpki-client on console-ams.rpki-client.org