Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/L3PW7tF4g8A1q5Jrrut894-tFds.roa
File:                     L3PW7tF4g8A1q5Jrrut894-tFds.roa (raw, json)
Hash identifier:          4qPYmJQUgSDWh0zNci7pHT2BxjNRwdTp/GGcuAz21A8=
Subject key identifier:   2F:73:D6:EE:D1:78:83:C0:35:AB:92:6B:AE:EB:7C:F7:8F:AD:15:DB
Certificate issuer:       /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial:       074BE56B
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/L3PW7tF4g8A1q5Jrrut894-tFds.roa
Signing time:             Sat 01 Jan 2022 16:05:03 +0000
ROA not before:           Sat 01 Jan 2022 16:05:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204189
IP address blocks:        45.83.100.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122414443 (0x74be56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
        Validity
            Not Before: Jan  1 16:05:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f73d6eed17883c035ab926baeeb7cf78fad15db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:ff:c0:f8:e2:6d:60:d3:52:8e:ac:35:d8:
                    e6:ee:23:ae:12:94:cc:f5:41:81:bc:06:61:26:c8:
                    9a:b7:12:f7:b5:96:b1:45:84:3c:db:14:82:c8:8d:
                    c1:57:b4:37:fb:0f:07:33:2d:9a:96:69:5c:72:c2:
                    7e:90:af:03:6c:b5:cd:52:5f:7d:91:91:3e:15:7c:
                    c0:22:e0:4b:99:79:00:0e:ed:2f:c7:8f:22:56:13:
                    77:31:0a:95:e0:eb:c7:76:1c:7c:8f:8b:8a:d8:ef:
                    9a:04:19:30:7d:d7:89:67:76:27:67:50:dd:37:a3:
                    7b:dd:98:8b:f8:48:d0:b1:a3:f3:12:fc:81:2e:89:
                    22:8d:36:ec:f5:5a:be:e4:26:04:76:cb:52:b1:ea:
                    70:d9:c6:6c:9b:4d:19:c7:12:1f:6c:db:b3:6c:77:
                    bd:26:ed:fa:41:82:bc:91:88:f3:e0:81:08:6a:4a:
                    96:df:d3:59:3a:5c:ea:68:38:fc:74:18:71:f9:4f:
                    df:5d:91:4a:16:c3:8c:ca:3c:c8:21:2d:15:e3:a4:
                    27:65:4e:a1:fb:e0:90:c9:08:e3:de:86:64:59:14:
                    e7:b4:73:1c:16:e0:2b:09:c6:5d:79:98:a9:fb:31:
                    2b:5f:e1:e9:f9:5f:55:36:f9:47:9a:a6:5d:59:e8:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:73:D6:EE:D1:78:83:C0:35:AB:92:6B:AE:EB:7C:F7:8F:AD:15:DB
            X509v3 Authority Key Identifier:
                keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/L3PW7tF4g8A1q5Jrrut894-tFds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:f0:a3:7e:44:36:7f:d3:72:69:e4:6e:88:3c:b3:8f:f6:
         01:b8:ff:1c:8d:a0:76:d0:11:0b:b3:2b:97:b6:44:35:c4:2b:
         57:b0:d9:8c:16:de:1b:c0:d1:cb:fc:c2:de:27:39:1c:2a:25:
         9b:2d:59:93:4a:35:52:24:61:2b:7b:30:21:be:95:d8:93:95:
         6e:87:da:1f:3c:4c:78:26:2d:36:26:64:8c:b2:80:12:59:b2:
         d8:e2:c9:a8:83:94:3d:d5:64:ab:3f:0e:e3:4b:ac:6d:75:06:
         5a:82:d8:85:da:56:6e:ff:16:1b:e2:ec:d7:df:bc:d7:3e:32:
         05:9e:0a:0f:c7:c6:6a:93:2f:cd:f3:4c:6f:09:00:b3:db:66:
         44:df:4f:bb:96:dd:16:19:94:ab:49:6c:87:c1:bd:a3:80:f1:
         3b:8c:c5:5f:e7:46:b5:a5:76:95:b0:d0:fe:5e:1f:4a:17:ca:
         85:3c:66:fd:36:0f:ce:2b:83:2d:6a:87:76:fb:9d:56:88:04:
         67:1d:b7:21:94:49:0d:e5:f7:36:c6:33:9c:aa:ed:40:86:6f:
         bf:6b:9d:35:56:df:bc:4c:a6:ff:54:ba:53:5a:05:b9:14:f5:
         99:74:49:95:e9:8d:70:6d:3d:d1:da:3a:62:88:60:96:ad:8e:
         59:1e:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:17 2024 by rpki-client on console-fra.rpki-client.org