Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/DZWFxwSb35LZUbl1ExeNO0ffjmg.roa
File:                     DZWFxwSb35LZUbl1ExeNO0ffjmg.roa (raw, json)
Hash identifier:          jS512uPKtM4w/hqqxYN4Tb500p2LNRbynOLxl38Q0Wo=
Subject key identifier:   0D:95:85:C7:04:9B:DF:92:D9:51:B9:75:13:17:8D:3B:47:DF:8E:68
Certificate issuer:       /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial:       14156AD9
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/DZWFxwSb35LZUbl1ExeNO0ffjmg.roa
Signing time:             Thu 07 Apr 2022 07:23:03 +0000
ROA not before:           Thu 07 Apr 2022 07:23:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42651
IP address blocks:        45.88.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336947929 (0x14156ad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
        Validity
            Not Before: Apr  7 07:23:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d9585c7049bdf92d951b97513178d3b47df8e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:06:08:c3:c4:ac:cc:59:93:94:bc:35:4e:
                    7a:1b:f6:9b:76:06:78:d1:32:7e:ba:0d:57:e8:68:
                    93:69:38:7a:5b:51:60:7d:66:86:58:19:a4:17:6c:
                    13:2b:6e:36:db:81:c1:5e:ab:6e:56:bf:e0:8a:a8:
                    8e:b4:54:54:c8:ef:db:f8:5b:f7:35:4b:a0:96:4a:
                    70:7f:51:ea:09:3e:c6:98:22:f8:4c:e6:0e:af:44:
                    49:2a:da:a5:69:d3:55:1c:91:6b:9c:05:f1:8d:62:
                    6f:b3:a6:43:4d:10:8e:8c:80:7b:0b:98:3b:aa:75:
                    bc:88:35:26:b5:74:a2:79:a5:d8:e6:32:32:5c:20:
                    47:19:73:57:a7:82:5d:6d:31:28:9c:99:52:5c:77:
                    58:de:4a:86:f6:9c:52:59:4c:36:b7:55:e4:16:f3:
                    e6:c8:42:b9:c8:4f:7b:8e:bb:6e:28:ba:6c:99:26:
                    1a:35:25:63:a1:d1:38:be:19:4a:77:7d:bd:bb:24:
                    bc:4e:98:fb:7a:42:21:d8:75:96:70:cc:9e:2b:47:
                    db:38:1b:45:37:2a:53:4a:61:fd:67:7a:2e:be:36:
                    21:94:4d:83:38:31:6b:74:b4:f8:ed:f4:ef:e2:14:
                    1a:a2:c3:32:2c:91:55:3c:3e:b6:06:56:4b:3b:4d:
                    6a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:95:85:C7:04:9B:DF:92:D9:51:B9:75:13:17:8D:3B:47:DF:8E:68
            X509v3 Authority Key Identifier:
                keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/DZWFxwSb35LZUbl1ExeNO0ffjmg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:25:76:39:99:f5:f8:2c:56:71:30:47:4a:fa:6d:7d:c0:
         af:ee:57:48:2d:86:29:11:28:54:1c:71:54:12:ab:cd:13:21:
         ec:de:8f:34:03:b5:86:f5:34:5a:7d:74:e2:9a:0c:ff:e1:c8:
         3e:1a:1e:ea:d5:94:64:be:ff:f7:1c:1d:4e:06:93:71:7b:79:
         ca:a4:08:a8:83:91:9e:5d:e9:09:5d:40:44:99:25:8c:61:de:
         c7:9e:82:b9:b8:b3:03:51:09:84:32:7f:b4:a3:9f:26:41:00:
         72:c2:bd:85:7a:e7:d2:ae:13:44:e4:9e:69:62:6f:b2:78:ff:
         95:92:9c:d7:3c:ee:a6:45:5c:37:78:10:ec:24:7a:f8:97:a1:
         f3:29:76:8a:33:c0:05:69:cb:88:d2:b1:80:2d:9f:8d:27:56:
         11:62:1f:69:f7:a9:72:d8:a4:49:39:99:20:40:8c:ee:da:1c:
         20:e2:f3:bc:d6:bb:09:38:0a:fa:f6:08:3a:68:6d:72:af:19:
         09:ca:c3:40:d1:d7:93:b7:4a:bd:b0:83:62:f1:9f:eb:97:9a:
         b8:f8:94:14:6b:19:7e:57:be:69:ee:fc:a3:4d:b8:d4:32:70:
         d7:c7:92:cf:a8:2f:0c:02:35:ab:1d:97:66:fd:62:8e:de:ed:
         1a:74:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org