Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/4HUlrad106kXoesClCBb2EJOPu8.roa
File:                     4HUlrad106kXoesClCBb2EJOPu8.roa (raw, json)
Hash identifier:          OTUE/jbAKKzFyVy4TBCGpMhPXkh+sbFObxoIMwE4GmA=
Subject key identifier:   E0:75:25:AD:A7:75:D3:A9:17:A1:EB:02:94:20:5B:D8:42:4E:3E:EF
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       0183239271CC52007A5BD33CB255E1F4B40F
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/4HUlrad106kXoesClCBb2EJOPu8.roa
Signing time:             Fri 09 Sep 2022 18:45:43 +0000
ROA not before:           Fri 09 Sep 2022 18:45:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        103.75.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:23:92:71:cc:52:00:7a:5b:d3:3c:b2:55:e1:f4:b4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Sep  9 18:45:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e07525ada775d3a917a1eb0294205bd8424e3eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:ab:46:0c:b8:c0:ba:f9:6c:2a:30:7e:ad:
                    55:b0:70:2d:c4:f3:7f:09:cc:49:dc:78:df:3f:37:
                    4d:6c:a8:55:c3:81:3a:d9:32:e5:2f:3f:59:ae:64:
                    fe:92:94:75:1d:e5:03:5b:0e:ab:77:61:34:9c:a8:
                    4f:63:9f:3b:10:2c:e7:77:c8:85:9b:64:d2:5e:56:
                    57:f9:60:49:43:ff:68:7b:dc:11:05:d1:b5:60:b9:
                    57:3a:35:ea:ad:6b:3a:a0:0a:6d:de:e1:e9:27:53:
                    d4:38:f3:32:8a:a7:64:d9:af:c7:e4:99:43:8c:cf:
                    c2:1e:19:01:39:cc:32:e4:17:f9:08:d7:73:fe:fa:
                    c5:b1:7b:e6:a1:fe:5c:17:f4:bf:76:f9:52:07:bd:
                    9c:06:aa:41:a8:cb:24:e8:30:22:06:20:d2:17:4e:
                    0d:ac:de:0a:db:41:1a:b2:27:57:2f:be:f2:ef:a2:
                    d3:cf:17:6f:74:1c:d2:f3:05:22:a8:b5:bd:bd:75:
                    34:e0:7b:d6:67:87:b6:ee:e1:4b:ea:47:71:1c:62:
                    94:5f:6d:a4:20:b8:5e:b6:77:d4:f7:c8:d2:23:15:
                    25:3b:73:ce:53:55:3e:44:4b:de:fa:82:0a:7d:67:
                    a7:05:12:43:ed:ea:f6:7c:d0:46:91:65:81:a3:73:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:75:25:AD:A7:75:D3:A9:17:A1:EB:02:94:20:5B:D8:42:4E:3E:EF
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/4HUlrad106kXoesClCBb2EJOPu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:40:5d:09:0a:a3:dc:98:27:8c:28:60:ac:b2:c9:a5:37:
         15:ed:65:61:78:03:3a:db:c4:81:57:a2:29:71:cc:75:9f:c2:
         cf:07:ea:ca:60:6d:7b:79:8c:ef:2a:60:be:10:a8:38:18:0c:
         01:d9:4f:12:f6:d4:c5:2e:e3:bb:f2:d4:fe:43:95:2c:da:0c:
         8f:c4:0e:30:25:6f:4d:b5:8c:04:05:29:bd:f9:54:bd:ff:20:
         65:4d:b2:9e:0e:65:37:da:d0:85:ed:14:e9:37:24:02:72:f1:
         a8:f3:27:41:ca:2f:1b:1d:96:1b:1a:f5:4a:0a:5c:b6:a8:59:
         59:aa:79:ae:eb:ac:85:1e:d5:bb:43:f6:33:a5:83:64:f8:a0:
         9a:35:18:80:e8:9d:32:12:93:f6:50:eb:51:71:7e:66:0a:96:
         00:1e:32:77:e6:96:54:13:90:59:be:48:2a:18:5b:e3:61:30:
         fc:3e:af:5b:a8:62:98:dc:69:d3:8a:f8:cc:e6:fb:cd:d8:03:
         48:ab:46:ad:91:63:4f:32:f4:ae:f0:31:3d:11:8c:c7:ec:49:
         d3:c2:da:a3:fe:0b:30:27:46:c1:19:52:93:c4:aa:3b:29:e7:
         83:65:b1:8a:aa:b8:a3:7b:a5:ab:21:be:a0:5b:ed:fd:2d:be:
         80:e3:83:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org