Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/NjOCWU5xcgWGL3Mb_IVJDj6nsy4.roa
File:                     NjOCWU5xcgWGL3Mb_IVJDj6nsy4.roa (raw, json)
Hash identifier:          cD+OxSZap6B4bGQu6EsKJNnVrmz/nvVsAYCrbMa82zo=
Subject key identifier:   36:33:82:59:4E:71:72:05:86:2F:73:1B:FC:85:49:0E:3E:A7:B3:2E
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       30169A18
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/NjOCWU5xcgWGL3Mb_IVJDj6nsy4.roa
Signing time:             Sat 01 Jan 2022 00:53:46 +0000
ROA not before:           Sat 01 Jan 2022 00:53:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200659
IP address blocks:        185.30.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806787608 (0x30169a18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Jan  1 00:53:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=363382594e717205862f731bfc85490e3ea7b32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:ab:9c:3f:6c:58:3e:90:aa:14:d9:52:6b:
                    26:88:78:2b:c1:6a:39:06:fd:2e:e9:59:ee:b3:d1:
                    6d:e2:8e:c1:e0:5b:c6:f5:70:06:15:2f:75:ea:20:
                    b5:57:0f:42:df:b4:0a:41:cc:d9:56:14:f9:96:9d:
                    9f:cd:f5:b1:87:52:03:3e:56:f5:24:fb:8d:37:a6:
                    a6:51:72:3a:7e:e7:7a:6b:9f:66:83:fc:72:fb:49:
                    7b:65:df:14:e7:e2:7c:8f:7e:99:75:ce:10:87:da:
                    e7:d0:cf:23:e3:89:4c:b8:a4:2d:1d:a6:cc:96:26:
                    de:8d:04:f7:b2:42:14:d9:06:9f:95:16:61:bf:12:
                    e9:a9:51:de:25:f8:e7:2c:fc:66:b2:7d:62:3a:60:
                    08:d7:35:60:81:81:67:67:94:02:df:0a:1e:bf:76:
                    19:f6:35:6c:d3:2c:f0:8e:61:85:61:4a:86:5f:ba:
                    39:c6:f8:91:3e:54:30:62:cc:73:02:81:44:c3:3a:
                    be:ac:7c:a3:3d:26:e7:5c:38:b7:01:df:d0:bf:f2:
                    c9:6e:29:d1:89:1b:b2:42:94:46:6c:c8:26:51:44:
                    e3:9c:14:91:04:e7:69:90:26:80:a5:75:32:b5:19:
                    8a:0f:dc:73:05:81:cf:0c:70:d0:aa:54:34:b7:75:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:82:59:4E:71:72:05:86:2F:73:1B:FC:85:49:0E:3E:A7:B3:2E
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/NjOCWU5xcgWGL3Mb_IVJDj6nsy4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:86:69:30:89:9a:8b:20:09:8d:e7:28:19:dd:0f:e2:13:58:
         c2:60:ff:41:b7:fd:54:91:ca:33:5c:e4:97:6b:4a:1d:e6:e8:
         56:7c:20:bc:31:bf:01:da:bf:48:98:81:b8:a2:25:d9:a3:32:
         d8:27:6f:e8:fb:a1:e6:59:a5:37:9a:59:c4:ee:e2:da:d8:52:
         60:4d:5f:4c:f1:f3:35:32:06:cd:73:1b:af:43:9a:0e:59:87:
         31:e5:73:8b:dc:36:7d:13:1f:dd:6f:dc:6e:01:4e:49:6d:d4:
         98:68:bf:ae:27:1d:9e:a5:90:6d:d7:c2:d3:b2:5d:e2:92:7a:
         28:e5:b6:45:fb:22:26:0a:26:f7:bc:b8:1c:82:85:9c:6e:c8:
         39:4c:4f:1e:93:d7:c6:8d:70:06:8d:57:74:a2:ce:c0:b4:0c:
         bb:53:7c:fc:fe:e1:69:7a:93:a4:b7:f4:55:e8:60:73:43:bc:
         d8:8c:26:28:13:97:f4:2b:88:a9:f2:2c:94:6e:c5:16:1d:ac:
         82:68:4c:6b:a3:2f:56:6c:8c:0f:c4:5b:20:ac:08:13:48:3b:
         82:b6:09:90:79:94:24:6c:3b:56:38:03:59:92:43:73:16:ca:
         72:54:7c:5e:58:47:a6:a4:a3:7e:ef:0a:02:b9:9f:8a:5e:7e:
         72:9b:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-fra.rpki-client.org