Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MYcBJltO0wo84sb15L5ImB8MaGQ.roa
File:                     MYcBJltO0wo84sb15L5ImB8MaGQ.roa (raw, json)
Hash identifier:          k69FTmLx7fpLujGfM/gAm/Sel8kXuUlfYwH26h/tdgw=
Subject key identifier:   31:87:01:26:5B:4E:D3:0A:3C:E2:C6:F5:E4:BE:48:98:1F:0C:68:64
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       0874803C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MYcBJltO0wo84sb15L5ImB8MaGQ.roa
Signing time:             Sat 07 May 2022 10:25:16 +0000
ROA not before:           Sat 07 May 2022 10:25:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        185.200.63.0/24 maxlen: 24
                          45.132.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141852732 (0x874803c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: May  7 10:25:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=318701265b4ed30a3ce2c6f5e4be48981f0c6864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:8a:38:de:5f:1a:56:da:9c:4f:d9:b8:be:
                    34:01:7c:2c:c1:4e:1b:09:cc:e8:be:89:af:f8:7c:
                    22:8e:61:a0:72:a7:3f:9e:4b:cd:37:0c:26:7d:56:
                    9b:2a:81:85:2a:ad:66:c1:29:f6:3e:07:d2:00:94:
                    f2:a9:c8:2d:1f:7d:ab:a4:6b:2e:78:f1:e5:35:ad:
                    2e:58:ac:80:f9:98:ba:eb:f2:59:92:ea:05:e6:2d:
                    2f:43:10:c7:96:71:13:b2:34:2a:0b:f7:52:c6:cf:
                    86:57:f7:d9:4e:ee:4f:92:71:44:a7:eb:ad:aa:70:
                    a2:09:cf:db:05:87:e2:b1:99:44:d1:ff:1b:15:47:
                    22:34:50:7e:c6:d1:a5:26:e8:97:10:f8:bc:3e:c8:
                    36:1c:bb:7b:0a:60:e9:c7:25:ba:17:7c:33:5f:32:
                    38:21:9a:47:fc:a9:08:d9:d3:5b:cd:30:2a:9b:23:
                    91:61:3c:5c:f0:9e:e4:06:8d:fd:ad:43:43:0c:25:
                    68:c5:2a:5f:3c:a4:2d:bc:fe:e3:ef:36:c9:99:43:
                    17:a3:59:28:f1:11:b7:83:5e:8c:bd:1a:72:db:25:
                    d2:1d:cd:e4:1f:0d:3d:43:b3:a9:cf:ad:98:7c:81:
                    6b:13:c5:91:10:23:8e:ba:ba:8a:e6:cc:01:dc:c6:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:87:01:26:5B:4E:D3:0A:3C:E2:C6:F5:E4:BE:48:98:1F:0C:68:64
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MYcBJltO0wo84sb15L5ImB8MaGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.181.0/24
                  185.200.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:3f:bf:c4:cf:37:42:0d:66:65:0d:5c:56:a6:fa:fb:03:52:
         25:2d:11:bf:35:bb:42:c4:3a:aa:01:bc:c6:bf:a5:d0:37:7d:
         67:0c:e2:ca:83:04:a4:84:c5:90:8e:9b:a2:80:fc:e4:07:a1:
         72:8d:75:54:6e:a8:d2:e3:2d:b2:83:50:e0:0b:f6:03:23:b8:
         c0:a9:52:b2:2e:1c:53:82:84:a9:28:70:7a:ae:90:10:b2:d4:
         2f:c0:5f:ea:f9:3c:1d:91:48:82:74:a8:73:ce:bd:b0:6d:8f:
         1f:7d:23:5d:90:45:fa:12:d7:3e:7d:4b:1c:dd:f9:11:48:0f:
         53:83:da:ea:6c:74:21:e9:82:f1:a4:95:11:80:d3:a6:90:63:
         9d:49:bb:9f:e4:0a:64:ae:df:52:af:74:d4:bd:16:3b:e4:df:
         33:ac:ba:ba:2d:d5:c2:8e:3d:96:17:95:69:57:0d:cc:d0:74:
         59:06:e6:ae:f5:79:0c:d5:3a:13:81:c4:6c:d1:48:c9:fe:62:
         c8:47:9d:03:57:46:dd:57:93:ef:d1:5d:50:e5:af:1e:86:f8:
         e1:ed:3b:8e:0b:af:93:c1:f8:e5:a2:2c:28:ac:d6:20:0b:61:
         d6:27:7a:df:69:98:3b:c8:6b:ca:ab:45:f4:e7:6f:f2:d2:a1:
         ef:19:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org