Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6xIyWBI2NQ2pKMpLDtZ6wqd5XFE.roa
File:                     6xIyWBI2NQ2pKMpLDtZ6wqd5XFE.roa (raw, json)
Hash identifier:          vXolO8UaDqvEG68KmK/e+YhoaCcUbf0C8Q5PnjjAxUQ=
Subject key identifier:   EB:12:32:58:12:36:35:0D:A9:28:CA:4B:0E:D6:7A:C2:A7:79:5C:51
Certificate issuer:       /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial:       0183EB3E4C9C4BDBEE00FD0D93BAE4196674
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6xIyWBI2NQ2pKMpLDtZ6wqd5XFE.roa
Signing time:             Tue 18 Oct 2022 13:17:51 +0000
ROA not before:           Tue 18 Oct 2022 13:17:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24631
IP address blocks:        185.162.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:eb:3e:4c:9c:4b:db:ee:00:fd:0d:93:ba:e4:19:66:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
        Validity
            Not Before: Oct 18 13:17:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb1232581236350da928ca4b0ed67ac2a7795c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:76:13:39:a9:3e:94:58:1a:3c:75:f7:77:
                    d0:4e:58:31:73:41:33:5f:ae:9d:70:f1:3f:ea:84:
                    7f:e3:30:7b:09:98:fa:06:07:b2:c3:3b:6d:11:93:
                    24:f2:e4:11:28:89:b0:dd:60:e8:29:32:11:e1:a5:
                    a3:b1:b7:e2:28:63:a0:64:55:b1:f1:ab:ce:06:29:
                    d5:1c:38:35:0b:c7:e5:5c:ec:ee:9e:52:3c:b3:2e:
                    8a:1c:ed:d0:27:e6:f4:fe:3b:ba:01:b3:14:90:1c:
                    f8:ef:0b:07:25:bf:2d:3b:17:68:d7:84:40:95:8c:
                    1a:1c:71:a8:ba:c8:d9:b7:32:68:4a:58:e2:f5:ea:
                    d2:a9:3b:66:05:e5:03:cb:d1:e5:33:19:e7:6b:96:
                    b4:38:e7:0b:e7:f7:c5:57:f6:7e:96:12:4b:d0:d2:
                    55:45:3a:2a:7e:4c:c4:26:47:de:56:5f:30:10:2c:
                    bf:eb:00:f2:e0:3e:4e:f8:0c:52:f0:5a:05:19:0d:
                    8e:12:d6:1b:57:f5:55:3b:fc:3e:c8:94:f8:47:b5:
                    3d:54:f2:59:e4:8a:5a:fa:89:6c:5e:9f:1e:1c:88:
                    f9:40:8e:20:93:53:6b:8a:a7:04:34:85:72:85:cf:
                    11:64:0d:e4:23:80:14:6f:2e:6c:48:8d:9e:b4:f2:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:12:32:58:12:36:35:0D:A9:28:CA:4B:0E:D6:7A:C2:A7:79:5C:51
            X509v3 Authority Key Identifier:
                keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6xIyWBI2NQ2pKMpLDtZ6wqd5XFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:72:19:d8:0e:d9:a7:d7:a4:62:25:5f:ab:0d:8c:0b:90:
         11:03:12:84:9d:1e:fe:52:6c:81:e4:b7:ad:42:0b:9b:38:68:
         1d:33:2e:40:44:d6:be:82:3d:59:fe:78:24:cd:3c:60:e5:01:
         71:f7:2c:91:57:2c:aa:1d:ed:e5:0e:27:27:e5:cc:96:8c:57:
         29:dc:9f:1b:37:ee:0a:bb:67:77:0a:a1:0b:64:3e:6c:77:c2:
         6f:b5:52:f0:70:50:24:11:3f:07:ec:70:97:f8:8b:90:55:de:
         89:12:55:63:54:81:ca:98:cb:80:e3:15:86:8d:12:9b:ea:15:
         53:2b:a7:3b:fb:2a:5d:85:7a:02:34:8b:02:26:5a:8d:de:cb:
         2a:ca:ab:95:df:ef:62:07:e8:02:7b:17:86:c3:94:03:ef:6b:
         f0:f2:16:67:5c:ca:12:28:05:ce:5b:f1:36:c3:a0:bc:0c:45:
         9e:d4:5d:1d:9b:30:40:f2:71:33:90:58:1f:c0:fa:89:68:8a:
         75:d4:1f:78:bf:e6:9f:42:d6:48:98:77:62:86:86:65:0a:5d:
         07:44:a8:bd:65:55:06:a2:8c:e3:04:7f:1f:76:3d:6d:7a:cc:
         42:41:c5:ac:0a:2e:aa:0a:40:f0:36:27:02:aa:0b:8e:7e:54:
         e8:4c:71:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-ams.rpki-client.org