Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/e0L5-NaJ2dSmCgNt3mkPYkdXKHI.roa
File:                     e0L5-NaJ2dSmCgNt3mkPYkdXKHI.roa (raw, json)
Hash identifier:          8N/1JkWZ7/wgzJCXGAMeo+sV+6PiBYUaQ5H0m72hlKA=
Subject key identifier:   7B:42:F9:F8:D6:89:D9:D4:A6:0A:03:6D:DE:69:0F:62:47:57:28:72
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       0183172156FDF0EF13DB42294552BD6E3547
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/e0L5-NaJ2dSmCgNt3mkPYkdXKHI.roa
Signing time:             Wed 07 Sep 2022 08:46:44 +0000
ROA not before:           Wed 07 Sep 2022 08:46:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212887
IP address blocks:        213.192.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:17:21:56:fd:f0:ef:13:db:42:29:45:52:bd:6e:35:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Sep  7 08:46:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b42f9f8d689d9d4a60a036dde690f6247572872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c7:79:54:35:e9:db:98:dc:e4:42:c3:bf:00:
                    0e:3b:a5:15:cc:54:7e:d8:25:15:59:83:75:27:55:
                    d8:3e:c8:e7:a7:81:ab:a0:26:c8:2f:a8:05:75:3e:
                    ea:c4:aa:85:af:a0:24:20:63:0c:b1:4d:02:f7:b8:
                    b5:2d:13:45:9c:79:35:4c:68:07:ec:9d:15:e1:4a:
                    24:21:42:b0:54:c7:17:ce:29:ce:09:54:c1:15:f3:
                    4c:2d:20:56:02:d8:ad:ad:54:11:5b:6b:f9:16:b2:
                    f5:33:d8:f7:19:ee:b2:17:7b:a2:dc:54:9a:59:c2:
                    38:0d:fd:04:38:fa:6d:77:5f:ec:17:4f:7f:f8:8d:
                    ff:c4:2a:6a:3b:e6:da:3f:2b:bf:40:03:0e:b5:88:
                    0e:e5:78:c1:5b:ad:fc:41:1a:a7:1f:46:7e:c3:34:
                    bd:31:fc:8e:9b:ab:fd:55:25:e9:1f:70:25:a9:25:
                    4c:38:ef:55:aa:9a:39:cd:95:b9:c3:7f:89:d5:2f:
                    b5:13:05:ff:82:ad:ec:da:b3:03:05:f1:f6:ba:67:
                    c0:e7:3b:b0:eb:b2:09:68:6b:b7:18:0c:db:af:b4:
                    49:4b:2e:4c:7f:5d:6a:80:c0:4e:3d:d8:85:00:d8:
                    8d:5a:b2:80:c8:db:af:41:e9:71:98:6e:27:b7:86:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:42:F9:F8:D6:89:D9:D4:A6:0A:03:6D:DE:69:0F:62:47:57:28:72
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/e0L5-NaJ2dSmCgNt3mkPYkdXKHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.192.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:ad:74:d2:49:d5:66:52:24:55:ba:8e:6b:41:d3:eb:bc:
         b5:24:75:6e:34:87:89:6d:f0:c4:63:9e:9a:06:38:88:2a:a7:
         1e:12:f6:dc:4c:d7:8e:cc:ba:fa:35:43:07:bb:8d:fd:52:c0:
         bf:53:87:e0:2f:6f:44:41:24:c9:79:25:6b:40:29:d2:94:79:
         47:ac:bb:a5:83:eb:7e:03:c5:c6:e1:0a:49:76:85:65:3f:9f:
         c4:7e:9e:8e:b6:5b:49:b4:73:20:2d:c8:97:bd:29:12:4f:34:
         b9:b8:23:17:cf:9a:ea:1a:a6:86:80:92:98:da:6e:16:a6:35:
         c4:c1:24:cb:b4:ef:d5:69:4d:70:e1:84:e0:5d:e9:76:c5:72:
         3d:74:35:c8:57:e9:44:ad:73:c1:3e:25:33:1e:73:dc:41:ab:
         d5:10:9e:e7:af:23:ac:8c:75:61:f8:fe:fe:d7:ed:3a:46:47:
         e4:1f:c9:11:8f:85:52:6a:24:65:a7:51:7a:04:57:31:1b:73:
         a7:b4:65:0a:4b:25:57:13:5d:a0:32:9d:97:d2:ff:da:c2:1c:
         47:b1:5e:b8:9c:19:26:10:8d:5b:0d:60:f9:9c:ca:e4:5b:05:
         9b:49:7a:3a:52:28:53:f8:27:3e:ca:49:5d:0c:aa:18:a7:fb:
         1c:74:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:45 2023 by rpki-client on console-ams.rpki-client.org