Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EYuDJHv4QfDUR1HmdEPe9R0mgRA.roa
File:                     EYuDJHv4QfDUR1HmdEPe9R0mgRA.roa (raw, json)
Hash identifier:          2UwNAhoY5O8wpqb5privmxT95DZB8vliHSSCF+q5yUU=
Subject key identifier:   11:8B:83:24:7B:F8:41:F0:D4:47:51:E6:74:43:DE:F5:1D:26:81:10
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0AB1F559
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EYuDJHv4QfDUR1HmdEPe9R0mgRA.roa
Signing time:             Sat 14 May 2022 10:23:35 +0000
ROA not before:           Sat 14 May 2022 10:23:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34549
IP address blocks:        45.90.96.0/22 maxlen: 22
                          45.13.236.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179434841 (0xab1f559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: May 14 10:23:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=118b83247bf841f0d44751e67443def51d268110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:87:8c:64:60:1e:a8:5d:0a:f1:ed:02:96:
                    43:4c:3f:dc:91:07:1e:bc:d8:22:c1:70:37:34:cf:
                    1e:e6:66:c8:41:c3:f9:4e:dc:bc:d2:d1:06:1d:dd:
                    90:07:86:33:f4:1f:d1:30:ac:66:88:4f:01:e1:81:
                    57:00:8d:34:4d:6c:25:e6:51:a3:b2:9d:9e:73:ba:
                    dd:f7:2b:b2:85:c4:3a:98:54:31:27:15:3e:26:2c:
                    4a:a3:da:dc:e9:f8:d7:df:d6:5e:e6:e4:43:d8:aa:
                    1b:59:cd:24:73:d1:3a:a1:b4:cf:1c:00:d3:5d:eb:
                    0c:08:31:11:86:02:a5:ee:f7:08:59:0c:0f:df:c6:
                    fd:8d:e3:88:38:46:5c:16:31:84:10:82:ea:9a:c9:
                    37:fd:31:ca:c9:2e:30:a2:db:e5:ad:4c:6a:6a:f0:
                    7b:c7:fc:46:23:bd:90:b1:15:61:c5:16:e1:14:2c:
                    bc:a2:26:a2:1f:28:21:6a:9d:14:62:a7:32:e0:88:
                    89:df:48:45:14:97:52:63:e9:cb:83:90:7f:17:1e:
                    1d:d0:c7:a6:ec:3e:4c:f8:9b:1d:27:e5:2d:0f:61:
                    8c:4e:af:53:6c:e0:0a:7d:1c:ca:aa:67:df:c2:ff:
                    cd:a9:99:85:03:06:03:13:31:56:60:c8:cd:98:74:
                    a8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8B:83:24:7B:F8:41:F0:D4:47:51:E6:74:43:DE:F5:1D:26:81:10
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EYuDJHv4QfDUR1HmdEPe9R0mgRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.236.0/22
                  45.90.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:76:4a:0d:87:79:b4:9a:d5:ea:ed:22:31:42:26:44:5a:
         cc:48:a8:36:19:de:ed:f5:15:f5:52:85:5d:57:9f:f9:b1:22:
         40:d5:78:c1:7b:29:bd:83:42:1e:38:aa:cf:a1:b2:37:a6:2d:
         dd:1e:01:59:74:ce:9c:78:93:4e:d2:20:09:71:dc:19:84:e7:
         78:78:ef:6f:a3:f1:c9:8e:0a:47:5e:f1:c4:0c:43:b8:b5:aa:
         34:00:cb:cd:7a:88:95:bc:85:bd:3c:9b:3a:2c:ff:9b:42:64:
         40:f3:0d:45:f8:36:2c:af:cc:a5:fc:58:86:d6:df:43:54:c0:
         e4:28:7b:e8:05:f6:e9:56:4e:ea:d1:f2:2e:15:fd:c1:f6:b2:
         87:14:78:f4:7a:44:e3:81:96:26:08:22:52:b3:9e:fc:11:fd:
         19:9b:1b:71:56:1e:a8:cc:ad:1d:11:53:f3:20:c4:10:28:2a:
         49:d9:58:13:0c:b4:67:91:4d:23:5a:36:b9:f5:ab:f0:55:e6:
         c5:fc:6f:77:0e:55:14:da:d8:b3:6e:07:1a:1f:75:ad:97:52:
         7d:2e:9a:9a:70:c3:31:cf:a4:77:16:05:dd:d3:9f:b7:49:8f:
         20:a6:18:0a:dd:9b:06:e2:f0:f7:0b:3c:6e:9a:3d:08:5a:9e:
         69:18:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org