Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/eyl51PYeVH6XnexjUijksAQbPOs.roa
File:                     eyl51PYeVH6XnexjUijksAQbPOs.roa (raw, json)
Hash identifier:          +csRyeU/yW2pyoK229fK/PpfPtzg8cDUj9YSGL4+DUk=
Subject key identifier:   7B:29:79:D4:F6:1E:54:7E:97:9D:EC:63:52:28:E4:B0:04:1B:3C:EB
Certificate issuer:       /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial:       04F31833
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/eyl51PYeVH6XnexjUijksAQbPOs.roa
Signing time:             Sat 01 Jan 2022 02:55:57 +0000
ROA not before:           Sat 01 Jan 2022 02:55:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208770
IP address blocks:        45.136.44.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83040307 (0x4f31833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
        Validity
            Not Before: Jan  1 02:55:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b2979d4f61e547e979dec635228e4b0041b3ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1c:7d:a6:d1:0f:08:a1:ec:c6:19:5f:53:b9:
                    a5:d2:c9:59:9f:12:79:e9:7c:1f:15:ac:92:b7:40:
                    38:71:45:de:f4:db:1d:08:d2:12:9d:bb:c3:43:c5:
                    bf:04:ea:1b:95:a6:80:ed:ab:14:04:5b:49:ee:56:
                    b4:42:94:e1:55:f0:3d:a8:ef:79:5d:ec:37:c9:71:
                    17:4e:0e:85:77:77:a0:2c:f9:02:0a:27:b0:45:e0:
                    54:a6:56:34:8f:5e:57:85:48:7d:6c:bc:68:e8:86:
                    d3:8e:59:f1:1c:7f:bf:e3:9d:39:79:05:38:f6:69:
                    48:d1:f1:11:c9:19:74:3c:c4:f1:0a:18:14:b6:68:
                    48:03:36:e9:11:0d:71:38:da:01:43:d2:5c:4a:b3:
                    2d:24:9e:c8:c7:92:d1:80:15:a2:01:18:91:e6:da:
                    79:b2:7b:7b:a1:8b:49:f9:e1:d0:ec:ce:a7:be:53:
                    4b:79:54:ef:aa:6e:8c:c9:e7:31:3d:1b:fa:ff:03:
                    7e:09:b4:ff:2e:5e:0c:a0:50:5e:e6:34:08:a0:5d:
                    03:34:07:0c:97:97:bf:59:f4:ca:19:04:9d:8e:78:
                    30:70:a1:3f:ae:be:a2:f9:b4:fd:2a:a4:a7:9c:08:
                    d5:43:91:97:8a:d3:a7:92:dd:35:11:0f:fb:3e:55:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:29:79:D4:F6:1E:54:7E:97:9D:EC:63:52:28:E4:B0:04:1B:3C:EB
            X509v3 Authority Key Identifier:
                keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/eyl51PYeVH6XnexjUijksAQbPOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:df:e6:87:ac:b8:25:76:e3:0f:d9:75:8c:c5:0e:f0:ae:
         03:3d:8f:2d:5b:ce:24:18:ee:e1:44:12:a6:c5:2d:be:71:c0:
         ac:c6:b1:da:3d:f4:4c:ac:c1:3b:0c:a8:a0:47:f9:2d:74:cd:
         42:3d:38:63:2c:c0:4b:5d:ca:36:66:25:58:bd:18:82:f6:84:
         cc:95:6e:4f:bb:c5:33:2a:71:d9:3a:b6:75:f5:7b:fe:17:b7:
         0f:b2:ad:f0:47:30:1c:d5:0e:17:71:b8:e9:a6:1a:34:20:30:
         0b:3b:4a:1a:20:b2:5c:a3:e1:2e:82:5d:b6:27:b5:f1:a8:4e:
         97:0f:76:cd:bd:62:e6:22:8f:63:99:e1:d8:a6:95:24:f6:81:
         8f:12:23:13:77:d7:de:80:9f:9e:1f:0d:13:fa:91:1b:fc:28:
         d5:37:c4:50:af:aa:1b:92:33:8c:cb:49:ca:33:f4:99:f7:b3:
         44:ab:c4:69:58:a0:4a:bc:c3:48:11:f4:92:91:aa:13:21:12:
         28:b8:c7:6e:6a:12:25:53:ee:fc:83:13:cc:28:b4:5e:08:6b:
         08:08:d1:81:19:70:57:cc:12:e0:3c:b2:2f:13:7a:2d:87:ca:
         72:b6:ec:63:90:54:75:e1:32:bd:08:ec:6d:21:68:20:ce:79:
         1b:92:38:7e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBPMYMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MjJhMjJiY2NkM2RlODI2NWFmZDU1Zjk4MzBmZmMwMWM4M2FmNzI2MB4XDTIyMDEw
MTAyNTU1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2IyOTc5ZDRmNjFl
NTQ3ZTk3OWRlYzYzNTIyOGU0YjAwNDFiM2NlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIccfabRDwih7MYZX1O5pdLJWZ8Seel8HxWskrdAOHFF3vTb
HQjSEp27w0PFvwTqG5WmgO2rFARbSe5WtEKU4VXwPajveV3sN8lxF04OhXd3oCz5
AgonsEXgVKZWNI9eV4VIfWy8aOiG045Z8Rx/v+OdOXkFOPZpSNHxEckZdDzE8QoY
FLZoSAM26RENcTjaAUPSXEqzLSSeyMeS0YAVogEYkebaebJ7e6GLSfnh0OzOp75T
S3lU76pujMnnMT0b+v8Dfgm0/y5eDKBQXuY0CKBdAzQHDJeXv1n0yhkEnY54MHCh
P66+ovm0/Sqkp5wI1UORl4rTp5LdNREP+z5VUycCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR7KXnU9h5Ufped7GNSKOSwBBs86zAfBgNVHSMEGDAWgBRSKiK8zT3oJlr9
VfmDD/wByDr3JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Vpb2l2TTA5NkNaYV9WWDVnd184QWNnNjl5WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvMWU0NzYwLWM1NDYtNGJlYy1hNjM1LWZmMzcyM2U3OGJkMy8x
L2V5bDUxUFllVkg2WG5leGpVaWprc0FRYlBPcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
MWU0NzYwLWM1NDYtNGJlYy1hNjM1LWZmMzcyM2U3OGJkMy8xL1Vpb2l2TTA5NkNa
YV9WWDVnd184QWNnNjl5WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2ILDANBgkqhkiG9w0BAQsFAAOC
AQEAJizf5oesuCV24w/ZdYzFDvCuAz2PLVvOJBju4UQSpsUtvnHArMax2j30TKzB
OwyooEf5LXTNQj04YyzAS13KNmYlWL0YgvaEzJVuT7vFMypx2Tq2dfV7/he3D7Kt
8EcwHNUOF3G46aYaNCAwCztKGiCyXKPhLoJdtie18ahOlw92zb1i5iKPY5nh2KaV
JPaBjxIjE3fX3oCfnh8NE/qRG/wo1TfEUK+qG5IzjMtJyjP0mfezRKvEaVigSrzD
SBH0kpGqEyESKLjHbmoSJVPu/IMTzCi0XghrCAjRgRlwV8wS4DyyLxN6LYfKcrbs
Y5BUdeEyvQjsbSFoIM55G5I4fg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:21 2024 by rpki-client on console-fra.rpki-client.org