Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/UaeQ9ClQA6ffaAGl7aZ1_WTuEX8.roa
File:                     UaeQ9ClQA6ffaAGl7aZ1_WTuEX8.roa (raw, json)
Hash identifier:          zWSY1jyfxUJTt5wC6iaGJvEtIIkiU3Bk0hTjcol5ZAs=
Subject key identifier:   51:A7:90:F4:29:50:03:A7:DF:68:01:A5:ED:A6:75:FD:64:EE:11:7F
Certificate issuer:       /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial:       0183B7540A00A927C347FCE10C4DA458C382
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/UaeQ9ClQA6ffaAGl7aZ1_WTuEX8.roa
Signing time:             Sat 08 Oct 2022 11:21:21 +0000
ROA not before:           Sat 08 Oct 2022 11:21:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48359
IP address blocks:        45.94.214.0/24 maxlen: 24
                          89.46.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b7:54:0a:00:a9:27:c3:47:fc:e1:0c:4d:a4:58:c3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
        Validity
            Not Before: Oct  8 11:21:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51a790f4295003a7df6801a5eda675fd64ee117f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:10:f7:ff:90:41:4d:6e:40:de:8c:30:af:37:
                    73:ff:7e:ce:9d:06:69:cb:31:61:09:03:ca:b6:ba:
                    7b:38:55:93:08:1d:d8:5d:9d:fb:55:a2:5e:88:ae:
                    47:fe:f9:72:a8:93:fe:1d:99:47:12:78:4b:b3:7d:
                    c3:29:7c:86:7c:6c:9e:23:97:28:db:04:21:59:85:
                    34:0d:f8:29:fc:35:11:0d:be:b9:44:52:65:52:b9:
                    40:be:ae:70:6f:fc:83:58:f2:4d:2c:96:39:8e:59:
                    77:7e:58:a6:11:30:cf:05:bd:c8:17:6a:e1:d1:7f:
                    b6:d7:70:7c:4a:50:f2:ea:93:57:29:45:2a:d7:a4:
                    e5:f0:eb:61:20:89:e5:bd:20:9e:da:c0:3c:fe:0e:
                    02:03:49:87:d5:c0:66:0b:d3:8b:ae:d8:0c:11:12:
                    88:0f:88:1b:8c:f8:f2:4f:3f:74:2c:13:72:f3:5d:
                    2a:15:74:73:fb:de:fd:84:9c:13:83:7a:d5:98:25:
                    f9:21:76:d7:12:ad:26:54:95:1f:91:93:60:49:77:
                    7d:4e:a8:7c:35:c1:d0:c3:b9:20:39:ee:30:7d:4c:
                    8c:b6:a5:ff:df:49:06:e9:eb:63:14:51:44:fc:da:
                    f6:d8:39:06:e5:83:27:a4:09:23:79:42:b3:20:11:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A7:90:F4:29:50:03:A7:DF:68:01:A5:ED:A6:75:FD:64:EE:11:7F
            X509v3 Authority Key Identifier:
                keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/UaeQ9ClQA6ffaAGl7aZ1_WTuEX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.214.0/24
                  89.46.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:3d:2f:1b:8a:96:75:7d:e5:a4:99:eb:97:78:45:ae:25:
         93:f6:8b:4a:f9:1a:4b:f1:ce:bd:b8:5c:e6:81:2f:40:69:ec:
         53:6e:52:63:f5:5e:74:ee:b4:1e:a5:53:3d:e4:6b:6a:e2:3a:
         f8:11:dc:a6:f1:bb:38:37:c6:7a:82:7c:54:07:28:28:57:5f:
         be:66:0e:91:a4:2b:66:f5:a4:04:32:ce:fe:48:2e:28:5d:a0:
         c4:0e:76:72:c3:18:f6:35:82:fd:51:5e:43:78:5c:b8:4d:06:
         ac:42:73:da:43:46:99:32:f1:ac:74:bf:cf:4e:a2:47:d8:a4:
         fc:d8:a6:c4:e7:db:2f:a4:81:fa:95:cd:1d:37:e9:84:35:df:
         02:f5:83:01:c5:b7:67:2a:f0:a5:30:2b:74:b8:d1:f1:2d:71:
         6a:05:4c:32:94:5e:c6:b3:3f:d4:3e:f6:2d:95:a2:11:8d:5d:
         08:32:ef:38:58:e7:65:2e:9f:58:ca:93:a7:e2:d1:4c:61:14:
         78:da:f1:96:54:37:49:ac:5b:aa:3a:7b:60:cd:38:b1:cf:8f:
         5c:b1:49:9d:24:2e:44:76:73:40:4c:d1:4e:77:6c:a4:f4:25:
         b6:d8:20:5c:21:82:f8:cc:b2:41:aa:56:27:48:e1:ba:be:36:
         8f:f4:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:51 2024 by rpki-client on console-fra.rpki-client.org