Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/BeMMCPYRaTI7hukPdVoCplMukWY.roa
File:                     BeMMCPYRaTI7hukPdVoCplMukWY.roa (raw, json)
Hash identifier:          c9ybLk5UgemJRlOnwpa3a6/N4qSVpTmjhMC6LkBwjho=
Subject key identifier:   05:E3:0C:08:F6:11:69:32:3B:86:E9:0F:75:5A:02:A6:53:2E:91:66
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       0A7CA1C6
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/BeMMCPYRaTI7hukPdVoCplMukWY.roa
Signing time:             Wed 16 Feb 2022 11:15:11 +0000
ROA not before:           Wed 16 Feb 2022 11:15:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15404
IP address blocks:        141.98.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175940038 (0xa7ca1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Feb 16 11:15:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05e30c08f61169323b86e90f755a02a6532e9166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:e2:fd:a4:8c:b7:14:49:25:6d:77:28:df:
                    4e:ed:9d:44:f5:b6:5b:b8:6f:3a:65:f3:ed:3c:d8:
                    a8:b4:2b:91:05:28:c2:d1:9d:b5:a7:a8:2b:4a:54:
                    cf:e2:e5:e3:de:9e:6c:5b:4c:60:de:25:99:df:45:
                    e5:01:5b:3e:db:27:f2:2e:ec:65:8e:aa:7d:75:15:
                    44:27:46:6c:ff:a2:52:8e:50:58:67:a3:9e:d8:74:
                    30:90:42:e4:ed:7f:81:73:bc:30:56:85:42:e6:fe:
                    a3:b3:0a:c6:97:24:b6:7a:1e:9a:b8:9b:6e:1c:36:
                    f5:00:66:91:0c:a8:b2:64:3a:db:28:a5:b1:27:9b:
                    89:21:04:3a:71:8a:30:04:6b:c9:3d:71:a6:2b:0d:
                    81:9b:da:61:bd:c4:31:28:bf:92:02:4d:8b:32:fc:
                    19:fd:4d:97:86:22:5f:78:25:e7:9f:77:c9:a1:8c:
                    65:a2:a3:d4:73:cc:23:1b:81:3e:68:58:7b:84:b6:
                    29:dc:e4:ea:c1:ad:e2:6f:16:ba:43:8e:d1:a3:48:
                    74:45:2e:52:cd:d3:2e:22:a2:80:d4:36:a3:42:a8:
                    c3:a5:83:e7:64:bf:1b:12:07:75:e0:22:a4:9f:2c:
                    ec:90:a7:3f:36:9a:ac:3a:63:0f:c5:53:02:97:78:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E3:0C:08:F6:11:69:32:3B:86:E9:0F:75:5A:02:A6:53:2E:91:66
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/BeMMCPYRaTI7hukPdVoCplMukWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:1a:76:78:0d:89:82:54:4f:e0:2b:84:c5:24:2a:49:c0:aa:
         ae:83:7d:b6:8d:ff:d6:e5:80:ea:cb:8f:ea:c9:89:e5:ed:42:
         48:bd:bf:2c:6d:e9:21:7e:44:f9:2b:63:56:df:ab:91:ec:2b:
         f2:cf:98:75:5f:a5:4f:90:c3:4d:e3:ac:b7:29:8a:8c:d8:90:
         6e:01:04:e2:c0:15:cd:2b:be:fc:0c:2a:92:00:83:13:b9:1f:
         2d:48:d5:f5:02:01:34:d5:45:c2:de:ef:33:04:7d:fd:7e:12:
         28:45:85:7c:1c:43:0d:51:e6:d5:2f:27:d6:e8:e2:11:96:b3:
         b1:65:b9:e1:dc:29:67:c6:6b:0c:1d:35:a5:ab:5e:37:2c:5a:
         13:03:3e:d2:db:e7:4c:46:17:c8:eb:55:5d:77:d0:6a:8d:57:
         cb:74:37:a1:10:8c:3f:e3:d4:1d:89:59:08:cb:87:82:b3:2d:
         c6:ac:58:69:6d:3b:48:0d:7f:f2:7f:62:58:bf:e8:52:4f:78:
         b6:cb:4f:b1:a8:dc:1c:b9:9a:f7:07:04:76:6e:52:4d:05:45:
         21:cf:5f:47:99:97:9d:cd:7f:c0:0b:f3:78:b6:db:94:2a:df:
         86:03:a0:c2:7b:16:8f:07:d8:63:73:9b:1e:23:ab:c9:3e:cd:
         d6:68:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org