Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/g8RpFHlyPN3p2eUAC-AZfDAfkHY.roa
File:                     g8RpFHlyPN3p2eUAC-AZfDAfkHY.roa (raw, json)
Hash identifier:          HQLpHatf6vXwDOaoU8cOGr8z+2Fn2P8VGKK9s84S8mc=
Subject key identifier:   83:C4:69:14:79:72:3C:DD:E9:D9:E5:00:0B:E0:19:7C:30:1F:90:76
Certificate issuer:       /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial:       018499E387C91042B2CDBDA5E06F714820F5
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/g8RpFHlyPN3p2eUAC-AZfDAfkHY.roa
Signing time:             Mon 21 Nov 2022 11:12:16 +0000
ROA not before:           Mon 21 Nov 2022 11:12:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212517
IP address blocks:        45.154.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:99:e3:87:c9:10:42:b2:cd:bd:a5:e0:6f:71:48:20:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
        Validity
            Not Before: Nov 21 11:12:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83c4691479723cdde9d9e5000be0197c301f9076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:53:ce:70:e7:eb:da:ec:be:4a:86:55:b4:
                    9b:4a:54:db:e9:c2:92:fd:7d:84:5e:34:bd:38:a8:
                    21:7f:1c:d0:9d:b8:e1:d9:12:23:15:4d:45:3a:66:
                    73:f7:b7:38:1b:0e:bd:64:73:5b:34:a7:18:0b:53:
                    6b:43:be:c4:ec:34:01:39:37:56:15:35:dc:20:91:
                    5a:f8:dc:fd:f5:70:f0:ea:5f:c6:29:56:9a:1e:72:
                    6c:d4:02:58:ad:2d:c7:b1:3b:70:41:06:f6:8e:4e:
                    27:cd:0d:e0:e5:84:e9:d2:61:db:dd:d7:ca:80:f7:
                    69:6d:f5:4d:87:b9:17:d4:26:86:0e:22:a9:64:00:
                    11:d9:73:83:54:74:d1:f8:07:bf:e7:3d:e8:57:d5:
                    55:cb:63:81:08:3a:6c:06:89:c8:ea:6a:2b:7c:f4:
                    af:00:7e:47:ea:21:5f:b9:ed:41:82:01:f6:6d:08:
                    d7:91:a1:c0:8d:d8:48:ab:1a:9f:58:dc:6c:3e:83:
                    7c:f0:f8:73:f2:cb:32:be:3a:0e:6a:36:ac:65:51:
                    df:6a:61:7d:70:af:ae:cf:51:68:14:70:03:c0:c2:
                    92:f6:28:39:ca:4b:58:c6:55:d6:09:c7:02:19:75:
                    ea:62:16:27:85:f2:06:2a:65:52:c3:35:75:2e:43:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C4:69:14:79:72:3C:DD:E9:D9:E5:00:0B:E0:19:7C:30:1F:90:76
            X509v3 Authority Key Identifier:
                keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/g8RpFHlyPN3p2eUAC-AZfDAfkHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:47:4a:6a:6a:fc:12:f6:10:74:df:e4:aa:ee:53:55:7c:e9:
         39:0b:e7:38:d0:a5:90:3a:e4:d5:04:3c:c3:a4:a5:fa:b0:43:
         29:83:1d:e4:a3:2e:76:93:38:55:c5:24:52:e1:4e:61:78:98:
         47:c5:73:43:58:57:93:c2:49:f9:31:3a:82:c0:82:c1:ef:e3:
         f2:7f:e2:79:b2:6e:ef:b5:f5:7e:29:d5:9f:bc:05:f6:6a:b6:
         e5:4f:86:4b:0a:02:90:3d:97:29:58:b6:8b:b3:95:1d:c6:fd:
         4d:a8:e2:9d:a1:39:75:6e:25:79:9a:eb:f4:6e:0f:49:5c:a3:
         63:09:17:1d:e2:6b:14:96:e3:22:23:3e:fc:db:de:b1:c8:6f:
         ab:c8:76:5f:ab:71:28:6d:60:4c:97:67:97:dc:97:9e:e2:d2:
         9b:12:d3:56:65:d2:8d:f7:52:a6:a2:54:f8:83:af:99:97:05:
         aa:de:b5:b3:2a:85:58:77:b2:ba:82:6c:4d:a7:2a:1c:7b:8e:
         11:b2:2f:14:99:38:33:22:cb:03:b5:bd:26:df:11:d1:29:a8:
         db:20:1f:73:a3:69:1b:b3:ad:3c:cc:8f:7d:72:29:17:e6:48:
         3a:4a:5b:72:c9:56:02:d0:25:83:cd:c1:6a:06:40:10:8d:29:
         89:32:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:17 2024 by rpki-client on console-ams.rpki-client.org