Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eMETX-mHqp6Ml7HncM6nApYaA2I.roa
File:                     eMETX-mHqp6Ml7HncM6nApYaA2I.roa (raw, json)
Hash identifier:          Vtk7QAvX2fy8Fjx3PSVxsmFzzJvzh2T6DwlW0Zz4L40=
Subject key identifier:   78:C1:13:5F:E9:87:AA:9E:8C:97:B1:E7:70:CE:A7:02:96:1A:03:62
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       01851FEBF2986194668C0CC025A650A28917
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eMETX-mHqp6Ml7HncM6nApYaA2I.roa
Signing time:             Sat 17 Dec 2022 11:50:34 +0000
ROA not before:           Sat 17 Dec 2022 11:50:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6939
IP address blocks:        5.180.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:1f:eb:f2:98:61:94:66:8c:0c:c0:25:a6:50:a2:89:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Dec 17 11:50:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78c1135fe987aa9e8c97b1e770cea702961a0362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:f4:75:ef:19:63:33:84:22:43:da:2c:74:
                    0d:9a:de:e3:d0:30:2d:b1:f0:76:c4:6c:ab:72:c4:
                    dd:3e:ff:63:26:a7:85:af:61:9a:ec:b8:a8:0d:3a:
                    5c:62:09:20:a2:3e:87:79:7c:f7:12:19:81:84:45:
                    70:4a:c0:f1:c5:37:fc:d7:90:23:5a:51:9b:81:9b:
                    51:8d:1d:cf:db:91:ff:3d:3d:da:85:63:94:43:00:
                    a6:9e:0c:1d:ac:be:c7:a4:25:f2:fc:5f:84:00:c4:
                    cc:25:fd:18:e2:c0:b6:76:13:d3:30:da:15:5c:e1:
                    23:2d:9b:48:5d:c7:19:c6:45:da:d5:f0:b0:15:5f:
                    6a:7d:2a:ed:e7:f4:6c:5b:80:5e:83:41:ef:42:73:
                    b2:02:41:4b:3b:10:b5:15:2d:17:b3:00:29:f8:e4:
                    1e:27:66:74:80:84:b4:ce:8c:97:00:0c:c9:14:ad:
                    14:3b:fc:cb:8f:a3:cc:c5:90:2d:18:7c:f1:c5:99:
                    e9:59:8c:d9:06:11:f0:70:51:90:00:ad:6e:c1:53:
                    7a:40:18:2d:f3:86:17:58:cc:68:5d:24:de:89:62:
                    aa:76:bc:d9:43:09:6b:50:01:89:ba:79:3b:4e:59:
                    68:79:8b:0d:2b:79:c2:dc:f8:44:e1:42:ac:35:eb:
                    a1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:13:5F:E9:87:AA:9E:8C:97:B1:E7:70:CE:A7:02:96:1A:03:62
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eMETX-mHqp6Ml7HncM6nApYaA2I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:07:2e:46:e3:4e:38:cc:f2:d8:fc:1b:a9:48:d8:03:b9:d2:
         50:6f:69:1d:27:f8:da:bb:b0:2b:7d:53:91:18:c4:bd:1c:a1:
         39:61:7a:c5:3b:67:41:28:04:2a:af:8e:be:f7:d8:96:fc:da:
         68:df:3c:b8:3a:95:90:de:f9:6a:5f:cb:5e:33:46:07:9b:e5:
         1e:50:f6:9c:49:a6:00:39:e8:9f:1c:bb:4f:7d:d3:0f:5e:d8:
         e7:93:3c:22:f0:d9:ba:04:65:dc:0f:58:ee:37:0e:43:7f:59:
         b4:9f:db:2f:e8:81:42:3d:50:5c:58:d6:75:95:f1:d6:c5:66:
         ff:6e:4d:e0:ce:10:5e:84:83:51:ee:25:bb:74:b2:76:6e:0a:
         e0:bf:27:4c:fb:3b:85:cc:db:45:33:c0:d8:6c:05:a5:fc:1e:
         b9:95:43:c4:63:90:62:45:a4:2e:2a:cc:ef:8e:e5:c6:70:34:
         12:54:f4:b7:83:a1:e7:89:cc:76:9c:f2:1e:79:2f:12:eb:97:
         c7:29:58:ee:47:3e:79:5d:bc:28:51:d6:b1:bb:56:56:47:f7:
         b4:1d:08:30:0d:ff:6c:94:c4:cb:5c:4d:24:e0:33:18:c0:dc:
         a9:af:9d:df:d9:05:fc:ff:a7:7c:6b:ae:6b:51:9d:ce:6d:ab:
         7b:43:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org