Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/U1lpwsrQ63gHL6Ft1jwClH58Jak.roa
File:                     U1lpwsrQ63gHL6Ft1jwClH58Jak.roa (raw, json)
Hash identifier:          0EkG9XfPu4yDwCI7IcP2EyijvLvStFsXMYLG0TRHZVU=
Subject key identifier:   53:59:69:C2:CA:D0:EB:78:07:2F:A1:6D:D6:3C:02:94:7E:7C:25:A9
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       018418F5B8511119D334E1D8D6C2ABE74A4A
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/U1lpwsrQ63gHL6Ft1jwClH58Jak.roa
Signing time:             Thu 27 Oct 2022 10:21:07 +0000
ROA not before:           Thu 27 Oct 2022 10:21:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212193
IP address blocks:        45.94.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:18:f5:b8:51:11:19:d3:34:e1:d8:d6:c2:ab:e7:4a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Oct 27 10:21:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=535969c2cad0eb78072fa16dd63c02947e7c25a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:92:4d:98:af:c2:06:14:02:c7:2e:f6:fd:
                    3b:a7:1d:26:f6:3b:2c:76:b1:21:df:dd:77:9b:fb:
                    37:17:60:5a:69:9c:8b:c0:65:64:d0:eb:98:a3:07:
                    8a:70:12:b1:e1:a5:4a:fa:21:d8:a5:42:74:93:b4:
                    23:d1:ad:25:94:56:ab:53:6c:c0:0a:a4:f9:46:b0:
                    5b:aa:6b:98:21:06:25:75:0e:14:27:88:fd:c2:35:
                    61:29:38:af:7b:2c:0d:82:c2:98:07:8d:a3:a4:92:
                    2b:a5:f3:7c:30:9a:77:fa:78:51:41:5a:09:b4:3d:
                    55:cc:8d:97:ef:60:01:a5:d4:67:2d:2b:04:c1:ec:
                    25:74:ba:d3:61:c5:c1:37:63:40:e0:15:0f:35:7e:
                    c8:e3:d5:ea:db:1e:2a:cf:d6:a5:a7:93:cd:1a:fc:
                    23:e3:36:bf:18:6d:d3:7b:02:74:3b:84:19:e6:7b:
                    9e:f6:6d:07:e9:e3:f2:53:c0:82:6a:b6:f1:a9:ed:
                    40:d6:63:27:94:49:19:4c:5c:ce:53:6c:26:80:ef:
                    88:14:16:38:91:19:a9:f8:da:fa:a1:09:8f:3d:9f:
                    c0:01:ee:e4:21:b5:d5:e1:26:92:7c:f2:e0:ec:3d:
                    27:96:8d:6f:78:ff:a9:85:67:00:ad:a0:71:58:51:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:59:69:C2:CA:D0:EB:78:07:2F:A1:6D:D6:3C:02:94:7E:7C:25:A9
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/U1lpwsrQ63gHL6Ft1jwClH58Jak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:cf:e3:10:ff:0e:2b:ec:ad:93:c0:f9:7a:e2:b8:2c:76:ce:
         f9:18:b1:42:ca:52:9b:82:d8:a3:70:31:0b:1e:f6:66:0e:b9:
         d3:7d:38:d3:84:70:d0:6f:2b:52:83:d3:e9:60:9f:13:40:b7:
         bd:68:20:35:63:30:8c:73:b6:5e:f4:e9:4a:f8:c4:23:f0:82:
         c8:f2:f8:3b:8d:05:a4:1f:0c:ff:cd:01:12:90:df:5b:1d:0d:
         53:a9:06:81:48:ff:47:ff:7b:4c:3d:08:fd:00:67:88:48:9c:
         57:4c:c7:71:23:2f:ac:d5:a4:23:3f:fc:47:f5:ee:a5:a1:0d:
         e9:62:37:4a:dc:9f:95:8d:5c:7e:8c:e3:ad:35:ee:22:e4:64:
         9d:54:72:a3:4f:ad:7f:a0:33:61:eb:2a:b7:d6:4c:86:21:d8:
         2a:87:4c:04:10:23:6f:04:b7:88:ca:6b:ff:0b:36:13:50:bf:
         85:b9:6c:ea:6a:47:22:4e:2d:31:d3:1e:9d:c2:cb:68:d0:36:
         03:96:28:8d:58:d6:c1:90:97:27:e8:25:3b:7d:93:7a:54:8f:
         4a:97:c7:b4:f4:35:c7:04:8a:9a:7c:e6:11:8f:9f:98:3e:4d:
         1b:c3:b3:72:d9:2d:08:ea:8c:32:ae:bc:f9:70:73:59:bc:d6:
         38:91:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:36 2024 by rpki-client on console-ams.rpki-client.org