Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/8Vwwho2toPMcdPK5V1hXhUWsI9I.roa
File:                     8Vwwho2toPMcdPK5V1hXhUWsI9I.roa (raw, json)
Hash identifier:          S9KrMMUpIJjauHeKZQIqeKzTOk6lU0qQc5UHVVMt944=
Subject key identifier:   F1:5C:30:86:8D:AD:A0:F3:1C:74:F2:B9:57:58:57:85:45:AC:23:D2
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       0939215E
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/8Vwwho2toPMcdPK5V1hXhUWsI9I.roa
Signing time:             Sat 01 Jan 2022 15:04:00 +0000
ROA not before:           Sat 01 Jan 2022 15:04:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47482
IP address blocks:        45.66.35.0/24 maxlen: 24
                          45.66.32.0/24 maxlen: 24
                          45.66.33.0/24 maxlen: 24
                          45.66.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154739038 (0x939215e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Jan  1 15:04:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f15c30868dada0f31c74f2b95758578545ac23d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:49:0e:98:73:e5:26:d5:ff:51:a2:46:2b:
                    77:9b:36:d3:e0:40:25:0d:31:68:3e:d6:93:8c:dc:
                    31:8e:25:2b:77:5d:21:1d:59:33:75:11:0e:6e:e0:
                    e6:25:a7:f4:16:15:1d:a2:43:8e:13:ee:22:3e:57:
                    ca:ba:da:e4:8b:c4:ef:be:a7:e2:7f:cc:c0:5b:fd:
                    92:64:08:b5:0d:ad:89:dc:03:3a:11:b4:f8:49:d4:
                    c2:30:73:fa:c5:0a:62:57:47:b3:c4:80:fc:b8:a6:
                    69:99:7b:8a:20:33:84:eb:36:91:71:0e:2c:c5:f0:
                    50:15:47:04:f5:8d:4c:0e:47:ba:5b:f7:d1:75:32:
                    1e:1e:8a:89:41:f2:08:2e:13:52:32:6a:ea:90:93:
                    b0:f4:07:09:c7:3d:f5:76:06:2e:11:58:98:d5:54:
                    1a:b0:cc:43:9d:30:01:74:28:43:c9:25:72:31:28:
                    09:92:fd:e6:1b:de:fc:25:6b:51:06:61:57:2a:f0:
                    5b:19:e2:0b:2c:fc:a4:1f:e0:33:47:ec:bf:6f:0d:
                    3f:9e:09:1e:cf:57:18:da:e8:77:6d:e7:c9:d2:c4:
                    fe:79:88:13:30:6f:35:fb:64:0e:c4:43:54:a4:5e:
                    b2:79:be:b4:de:32:fb:84:17:90:e8:ba:48:7a:61:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5C:30:86:8D:AD:A0:F3:1C:74:F2:B9:57:58:57:85:45:AC:23:D2
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/8Vwwho2toPMcdPK5V1hXhUWsI9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:1e:71:36:2c:87:04:f3:bc:b0:01:20:23:8a:97:1b:1a:47:
         39:32:64:c4:4f:6c:82:9a:ca:eb:af:28:24:ea:8e:2d:e5:65:
         02:54:37:40:80:27:a2:1b:52:f2:88:1f:a0:01:61:31:6e:ea:
         83:42:ee:ab:f1:de:14:fd:63:1b:02:3f:f4:4e:80:0f:d0:06:
         73:26:90:26:4c:d6:b7:3d:35:7c:ce:16:2e:2a:29:ed:8e:b3:
         dc:80:51:bd:71:bc:44:3a:17:ae:39:a1:fa:64:c2:c1:61:c5:
         3b:5b:20:0f:c0:b2:76:fd:af:f9:9e:ef:78:6a:dd:dc:ee:26:
         ca:29:94:b3:45:c6:80:aa:3e:23:23:7d:05:99:c8:59:a0:e3:
         6a:84:2c:36:5f:07:0e:a9:91:f7:4d:d6:2b:55:56:92:d8:4e:
         69:a0:b1:60:8d:60:f8:d2:64:cc:84:2a:58:da:c1:8e:78:7c:
         31:60:46:a7:d5:22:ba:b3:fa:f2:c0:7b:ef:81:a6:bf:62:9d:
         6b:b3:64:98:73:4b:34:0c:f2:b7:72:61:c0:92:c5:6d:31:fb:
         d9:6e:8d:b1:8b:f1:55:46:df:00:4c:a7:99:ae:80:98:33:fc:
         cc:0a:c7:08:b8:8e:0a:89:fe:2f:cf:b1:d3:88:a3:d0:04:a1:
         0c:0e:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:54 2024 by rpki-client on console-ams.rpki-client.org