Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/MRrDdeb22TAZj_GAtEQSM7m489Y.roa
File:                     MRrDdeb22TAZj_GAtEQSM7m489Y.roa (raw, json)
Hash identifier:          uAdo+Fv17hEOEinstrMYI5VgBC5MGQ3VyFDIjDipJmE=
Subject key identifier:   31:1A:C3:75:E6:F6:D9:30:19:8F:F1:80:B4:44:12:33:B9:B8:F3:D6
Certificate issuer:       /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial:       1A886E00
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/MRrDdeb22TAZj_GAtEQSM7m489Y.roa
Signing time:             Mon 17 Jan 2022 07:24:37 +0000
ROA not before:           Mon 17 Jan 2022 07:24:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213298
IP address blocks:        5.187.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445148672 (0x1a886e00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
        Validity
            Not Before: Jan 17 07:24:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=311ac375e6f6d930198ff180b4441233b9b8f3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:14:a1:e6:21:9d:53:53:ab:74:fe:7f:df:
                    92:12:d1:7d:b8:46:4a:c2:a4:ab:40:52:cc:31:65:
                    85:18:2e:1a:35:f2:c4:32:73:c2:02:43:5c:58:4a:
                    b5:fe:27:83:d5:14:c7:ea:73:49:c0:04:fc:4d:03:
                    b7:5e:fd:fa:c2:6b:ec:38:83:78:b9:51:43:09:96:
                    b0:f3:5c:78:8c:87:4a:99:df:71:f0:5c:22:4d:78:
                    17:db:25:f6:3d:9f:dd:db:3c:75:46:6c:04:27:6c:
                    60:ef:f5:5e:da:25:8b:00:69:65:cb:12:1f:ac:e7:
                    6a:6c:02:20:ea:54:11:ba:88:ce:d0:7b:57:4f:da:
                    7e:90:a2:5a:95:64:56:1d:c9:12:d1:8e:b6:d9:32:
                    f7:d3:0f:48:58:60:43:89:9f:71:db:07:2b:96:35:
                    87:3d:2f:70:ac:9f:b7:46:63:ff:4b:b4:6e:a4:6a:
                    0b:cd:00:2a:d0:37:29:ea:65:14:f6:58:bb:56:1f:
                    9a:d5:15:dd:cc:03:d5:54:a5:be:55:62:a7:30:60:
                    5f:94:59:28:15:be:62:68:8a:ef:64:81:c4:4a:2d:
                    ed:8a:ab:b7:a6:39:fa:b6:9d:b3:0d:ab:27:44:a7:
                    cf:aa:c9:c9:a8:49:7e:f7:3c:f2:86:38:6e:b9:83:
                    e5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1A:C3:75:E6:F6:D9:30:19:8F:F1:80:B4:44:12:33:B9:B8:F3:D6
            X509v3 Authority Key Identifier:
                keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/MRrDdeb22TAZj_GAtEQSM7m489Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.187.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:3b:de:88:1f:b5:fd:bc:71:07:f6:b1:91:25:72:d8:14:
         53:c9:a5:59:60:f5:54:15:a1:fa:fd:fc:47:e9:a8:a3:64:e4:
         b3:6c:3a:ca:86:4c:cb:21:ca:f4:41:b3:42:f5:e6:46:cc:8a:
         ea:2e:9d:a7:02:29:d0:e5:93:c7:79:67:c0:68:5d:45:6d:40:
         93:3a:d4:90:ac:8a:91:3c:f2:74:5e:9c:ce:99:37:39:71:fa:
         5e:b2:98:cc:d8:ec:6b:3a:51:5b:80:4a:89:70:ad:d1:f0:67:
         a8:26:62:87:78:2e:b3:b9:4b:82:77:87:e1:e7:0f:7a:c5:21:
         56:f4:ad:a6:a8:9c:76:b6:db:49:ad:b9:4b:62:e8:0a:b1:57:
         2a:26:55:9d:d4:92:11:f7:91:67:01:1c:4b:b5:10:37:9e:74:
         90:96:78:50:76:b0:07:ba:93:ee:21:29:f8:97:f8:25:83:ad:
         37:81:db:21:63:a2:1d:89:d2:ce:5c:91:fc:ad:f7:12:99:ed:
         c6:01:7b:68:7b:52:60:0f:5f:12:b2:0c:9e:1d:d0:79:e0:a6:
         fd:1e:10:3e:b6:8c:69:4b:84:33:3d:dd:48:f1:0c:76:01:4f:
         c6:27:82:0b:c7:6d:8e:02:26:34:a1:df:93:b3:9a:d8:89:06:
         43:68:fc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:47 2024 by rpki-client on console-ams.rpki-client.org