Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/EGePjaZVncZai7i_ua5_8VDg2JQ.roa
File:                     EGePjaZVncZai7i_ua5_8VDg2JQ.roa (raw, json)
Hash identifier:          5+7DDp+9uFQ20I3aMRFZsCjd58vmZ9dbKFUaHGawQxc=
Subject key identifier:   10:67:8F:8D:A6:55:9D:C6:5A:8B:B8:BF:B9:AE:7F:F1:50:E0:D8:94
Certificate issuer:       /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial:       040B8828
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/EGePjaZVncZai7i_ua5_8VDg2JQ.roa
Signing time:             Thu 17 Mar 2022 13:01:28 +0000
ROA not before:           Thu 17 Mar 2022 13:01:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6762
IP address blocks:        45.140.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67864616 (0x40b8828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
        Validity
            Not Before: Mar 17 13:01:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10678f8da6559dc65a8bb8bfb9ae7ff150e0d894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:fc:8c:c6:6d:41:64:86:4b:19:61:90:81:
                    35:10:36:c6:8f:33:7d:78:4f:ef:2b:00:06:9e:e1:
                    b9:da:f6:81:f6:10:a7:fa:e4:09:d7:5a:28:92:ae:
                    1f:a5:7a:71:7b:69:46:28:4f:0b:1b:68:48:5c:5d:
                    1c:1e:ce:8c:1b:6a:47:25:5f:50:86:c2:6a:00:af:
                    8c:3f:7e:64:c2:fd:e4:a9:96:bd:e5:4b:bf:53:31:
                    2e:bb:c8:d6:97:de:5a:5a:79:4b:04:94:7e:af:ef:
                    eb:d4:0f:c2:18:eb:00:80:e1:5a:00:5a:cc:1e:2d:
                    13:71:41:c4:cd:a4:a3:94:b2:9d:64:5c:31:5e:56:
                    78:51:52:01:3f:63:54:61:a1:83:b6:69:77:2d:36:
                    f2:60:90:92:34:b3:74:44:d6:c3:fd:3d:e9:cf:cd:
                    31:50:3d:4c:df:f0:6a:80:67:05:49:cd:27:9e:22:
                    6f:41:d1:99:06:37:33:7a:53:2e:ea:00:05:68:5e:
                    c3:d1:53:01:99:d8:59:6c:d7:33:c7:b3:68:92:d3:
                    70:20:ef:4d:43:f9:75:e8:13:ab:14:34:40:d2:59:
                    63:ee:73:03:b5:6c:98:e2:53:d6:a4:6d:4c:48:32:
                    01:b2:2b:78:50:db:a4:65:f6:d0:ae:75:fc:83:9a:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:67:8F:8D:A6:55:9D:C6:5A:8B:B8:BF:B9:AE:7F:F1:50:E0:D8:94
            X509v3 Authority Key Identifier:
                keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/EGePjaZVncZai7i_ua5_8VDg2JQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:c0:0d:87:2f:15:b8:50:d0:0b:21:72:4f:44:e5:94:f8:d1:
         f7:be:9e:92:39:c1:c3:0e:41:56:5b:ee:09:05:95:9c:b5:15:
         3c:84:07:35:8b:c7:1e:22:df:d3:68:b5:e8:f3:1c:ec:c7:5c:
         42:59:6f:40:f2:45:96:88:e8:99:58:00:de:0a:dc:0e:ab:ea:
         e6:da:09:4b:d7:a8:5b:ec:05:a6:7e:16:b1:96:02:7a:3e:2c:
         9d:c2:89:54:a6:4f:80:4b:bf:ca:df:f6:7d:e1:75:54:44:ee:
         62:66:93:fb:f1:63:16:78:eb:49:d3:78:14:f5:99:c5:9f:04:
         65:dc:3b:ce:cf:ce:28:42:6a:2b:61:06:83:99:0e:cf:e2:27:
         74:73:5c:b9:83:4a:86:5b:ba:15:d8:0a:64:71:40:4e:b7:8a:
         c8:7f:a2:7a:03:9b:be:55:47:f9:6f:f8:d3:fc:1d:27:b4:ec:
         64:ef:62:03:c8:e6:ea:0b:4b:4b:1f:3f:8c:68:51:82:d3:05:
         8a:8b:0e:23:bf:7e:fa:3a:96:56:65:4c:5c:9b:6d:62:c2:4c:
         c1:fc:a3:94:46:7b:a3:2b:3b:83:9b:d4:3e:52:74:2d:f4:9d:
         6e:23:8e:2b:6b:4e:8c:b8:83:8d:8e:7c:fe:ac:3a:a9:e0:19:
         25:4a:08:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org