Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/xJjSEdqoB9gbKGSfCRwwt5Hp5AU.roa
File:                     xJjSEdqoB9gbKGSfCRwwt5Hp5AU.roa (raw, json)
Hash identifier:          wtMZOPDIuo7v1hALy1iBz5JCn2KYeqzmV/pG0INGa7Y=
Subject key identifier:   C4:98:D2:11:DA:A8:07:D8:1B:28:64:9F:09:1C:30:B7:91:E9:E4:05
Certificate issuer:       /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial:       0183EACF83CF56F03DB310B68D555DB8C79E
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/xJjSEdqoB9gbKGSfCRwwt5Hp5AU.roa
Signing time:             Tue 18 Oct 2022 11:16:51 +0000
ROA not before:           Tue 18 Oct 2022 11:16:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206638
IP address blocks:        91.211.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ea:cf:83:cf:56:f0:3d:b3:10:b6:8d:55:5d:b8:c7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
        Validity
            Not Before: Oct 18 11:16:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c498d211daa807d81b28649f091c30b791e9e405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:87:25:e6:51:69:d2:db:2c:19:84:40:3e:
                    38:de:ca:b3:54:f8:2a:1e:67:4d:7f:7b:0e:f4:15:
                    fd:ee:92:34:2a:93:54:a6:24:3b:11:ae:dd:49:89:
                    22:05:63:54:5d:40:28:ae:f1:1c:57:2c:5d:45:33:
                    7f:09:20:dd:d8:85:91:9a:ad:89:07:36:34:dd:79:
                    e6:03:a0:ad:3f:50:c1:30:a3:78:e1:e8:a6:41:da:
                    71:c0:bb:e7:fb:31:0b:c5:c8:0a:e9:a4:cd:b2:74:
                    9f:ab:92:dd:e1:98:6d:e0:62:ac:5a:a2:8e:f6:89:
                    b1:37:51:2b:b5:82:16:1a:45:d9:3c:e2:62:b3:e4:
                    c9:cd:35:c9:cb:dd:c1:34:f0:e5:3f:36:44:3e:d5:
                    00:a7:7b:54:13:e9:f9:77:09:54:6e:ec:d1:20:4b:
                    98:9f:9e:99:75:d6:0e:76:df:51:2d:93:22:af:ed:
                    4c:02:5e:81:ed:c3:1b:9d:9e:63:3a:3b:ef:3a:8d:
                    28:fc:6b:60:e4:df:00:53:3a:19:4d:8b:57:da:ed:
                    41:e9:ba:39:a2:8e:7c:a1:03:2f:86:32:d9:ef:da:
                    0d:e5:7d:0c:22:fd:b6:a9:be:38:97:69:58:6f:d9:
                    b5:9d:d3:c1:e4:c8:bd:39:08:7e:1d:4f:ac:e8:3c:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:98:D2:11:DA:A8:07:D8:1B:28:64:9F:09:1C:30:B7:91:E9:E4:05
            X509v3 Authority Key Identifier:
                keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/xJjSEdqoB9gbKGSfCRwwt5Hp5AU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.211.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9a:5e:07:9b:d9:e8:74:32:43:1c:de:38:0a:76:c7:24:13:
         05:ae:eb:cd:49:dd:79:0c:3f:08:80:47:34:29:cb:73:66:9c:
         4b:e5:6e:f5:f2:e3:ff:bd:2f:86:23:cc:85:a4:76:e9:5f:18:
         2a:46:89:bf:85:22:84:1f:d5:14:50:ed:e4:3d:55:d3:40:36:
         ab:f4:53:22:b7:de:f4:ba:f5:d5:38:f3:c2:8b:c6:85:4f:01:
         32:c0:2b:97:4c:d6:2a:96:48:ed:24:36:95:68:2d:7f:f3:b9:
         86:54:d2:5b:d9:b8:66:2a:68:e0:8e:6c:fd:ac:c6:5e:75:7a:
         53:26:d1:48:6b:c0:aa:74:1f:a0:80:08:01:d3:21:ef:53:44:
         bf:be:86:c3:5d:5c:f5:50:8a:ab:f5:d8:57:e4:82:70:5a:b2:
         43:a3:f1:74:57:d1:20:6a:c9:41:61:81:81:5f:63:4d:b4:49:
         b9:0b:6e:94:11:cc:86:d2:aa:8d:6a:82:ec:f9:e3:e8:a5:43:
         fd:5b:40:27:48:2b:f0:eb:58:dd:85:46:9d:fb:bf:d6:b4:71:
         66:1d:d0:2b:36:28:97:f9:a2:54:e5:78:18:13:c4:9b:85:4f:
         c4:52:30:a4:4b:38:d3:3f:a4:5a:cc:b3:06:67:11:c9:a5:e0:
         7b:9a:d9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-fra.rpki-client.org