Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/uvNuS7-sLi6BpoXaiqyHNzRqjk4.roa
File:                     uvNuS7-sLi6BpoXaiqyHNzRqjk4.roa (raw, json)
Hash identifier:          ATzDkwy1bUKo4YKtRMaiIJ9fneIMdIZ1AIZUAQe4DBE=
Subject key identifier:   BA:F3:6E:4B:BF:AC:2E:2E:81:A6:85:DA:8A:AC:87:37:34:6A:8E:4E
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       01DF3EFE
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/uvNuS7-sLi6BpoXaiqyHNzRqjk4.roa
Signing time:             Sat 16 Apr 2022 08:20:29 +0000
ROA not before:           Sat 16 Apr 2022 08:20:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206119
IP address blocks:        45.94.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31407870 (0x1df3efe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Apr 16 08:20:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=baf36e4bbfac2e2e81a685da8aac8737346a8e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:78:79:3d:bb:56:18:79:50:9c:09:3b:5b:
                    9f:4f:31:99:8d:cd:10:5f:ce:59:df:a0:00:94:90:
                    d2:d8:e6:0d:36:98:d8:c1:e4:7f:03:4e:00:bf:73:
                    4f:10:d6:8f:1d:20:d7:ed:23:f8:30:77:0f:9d:fd:
                    1d:08:5f:40:39:f1:d5:7b:a2:38:68:e9:33:9e:a7:
                    b2:a7:1f:0b:5e:15:4a:0f:8f:b1:c0:4d:27:03:d0:
                    e5:39:1d:58:dd:b1:6a:a1:41:53:20:a5:e6:18:45:
                    4d:03:2b:b2:30:3e:03:33:ec:f4:2b:08:90:83:e3:
                    2d:b5:0d:9a:1f:d9:dc:77:d7:ea:4f:a3:23:d2:fd:
                    17:32:d8:3a:b2:65:8e:c4:b2:ac:09:30:3a:a5:31:
                    bc:90:cc:f5:2d:55:63:bf:9c:2c:ba:f7:1b:38:4c:
                    6e:d8:03:a4:a5:2f:7d:67:dc:16:82:c6:45:1d:53:
                    f9:7d:a1:c0:1e:d3:0b:55:d6:32:e5:c0:60:a9:ae:
                    b6:a2:1b:27:8a:d3:01:2e:19:80:45:8b:bb:5b:56:
                    4e:09:a2:95:fb:8c:85:5c:ae:c1:93:b5:2b:ce:d0:
                    a2:77:03:24:02:42:c5:82:12:71:db:b9:33:11:ab:
                    33:8c:a0:c0:d3:65:95:ff:d3:36:54:fc:9e:10:50:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F3:6E:4B:BF:AC:2E:2E:81:A6:85:DA:8A:AC:87:37:34:6A:8E:4E
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/uvNuS7-sLi6BpoXaiqyHNzRqjk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:c0:72:48:42:c7:23:43:1c:d4:8b:a5:db:71:05:5b:63:fe:
         e7:77:07:01:af:a2:51:78:77:61:78:26:ef:52:b9:51:7e:4b:
         56:f8:38:bb:00:c3:d4:00:10:80:36:3d:14:1b:a0:cb:a3:61:
         e2:a8:0e:e3:25:2c:aa:f0:23:48:51:d0:70:37:16:4f:61:11:
         38:c9:57:e4:06:82:25:28:b2:ed:6a:bb:43:fc:3c:4f:e8:35:
         ca:6f:84:57:77:61:b4:f3:e8:a7:07:26:d6:b3:16:27:63:21:
         db:62:45:fd:5d:65:35:50:45:58:db:d0:1c:48:01:c5:48:19:
         de:92:de:d5:ef:34:6b:0d:9c:c5:bd:ef:26:18:bc:b7:ec:57:
         22:2a:f8:dc:57:6c:2c:61:05:a4:9f:83:f7:42:2b:09:20:b7:
         a7:50:2a:e5:be:14:30:3c:f3:3f:87:c6:dd:db:40:75:94:e4:
         c8:19:c3:f8:8a:db:5f:07:ad:23:dd:c5:df:58:f9:20:99:b1:
         cc:85:be:dd:a4:ab:c9:35:52:c6:56:3a:58:d1:81:f1:16:76:
         cb:22:89:f3:ee:d6:84:dc:13:49:ea:23:38:69:b7:80:04:6d:
         05:2c:0f:93:b0:5b:ed:5d:e3:c4:cf:31:05:20:56:56:ab:1b:
         d2:97:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org