Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/EjAKMAbhkrMb5yaTjP6VZ9u7oJ0.roa
File:                     EjAKMAbhkrMb5yaTjP6VZ9u7oJ0.roa (raw, json)
Hash identifier:          bizGQCSAglN2V/wGtSemCJ/xAQyPDKy1jNHe7SBEEBs=
Subject key identifier:   12:30:0A:30:06:E1:92:B3:1B:E7:26:93:8C:FE:95:67:DB:BB:A0:9D
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       0794672C
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/EjAKMAbhkrMb5yaTjP6VZ9u7oJ0.roa
Signing time:             Sat 01 Jan 2022 02:52:49 +0000
ROA not before:           Sat 01 Jan 2022 02:52:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23470
IP address blocks:        45.95.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127166252 (0x794672c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Jan  1 02:52:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12300a3006e192b31be726938cfe9567dbbba09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:7f:0f:56:e3:27:4f:ca:0c:3d:c0:7f:10:
                    f2:6c:0f:8d:d7:39:a1:f5:44:c3:20:05:00:7c:35:
                    e3:1a:d5:d2:66:81:e9:74:90:af:bc:09:b7:b9:c7:
                    47:ab:d3:78:c3:9d:02:18:c9:2c:f4:9d:42:d4:f1:
                    17:a3:ec:c3:21:9e:38:fd:5d:6d:5a:8c:85:30:27:
                    6b:50:17:3b:0d:31:80:d2:30:6f:92:9f:35:ac:82:
                    6a:b0:4e:f3:3d:e4:71:ff:b6:f8:14:91:c8:bc:c4:
                    f5:94:5c:0d:0b:30:2e:f5:08:1b:cf:83:5f:02:0f:
                    ec:30:dc:f0:04:4b:9d:26:d2:34:79:4e:f3:07:06:
                    a4:49:f7:43:a7:fb:49:00:28:bf:26:a1:01:94:d3:
                    e7:17:b0:77:5e:c7:c4:b7:0f:57:d6:54:98:b6:0f:
                    92:71:32:e8:a8:56:eb:ba:4e:43:b9:73:d4:94:4e:
                    e7:a4:e4:c1:a2:58:e2:55:9f:c6:c1:5b:52:a0:76:
                    c2:be:b1:7d:7c:04:66:da:5b:15:a8:6a:98:3f:6f:
                    be:f4:22:23:a4:43:ce:e0:0c:ed:04:ba:d3:b4:be:
                    29:98:7a:8e:2f:bd:4a:fe:2a:2c:48:88:5d:62:53:
                    b8:25:7c:54:c4:a2:2b:4e:f6:f9:62:20:11:27:2f:
                    34:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:30:0A:30:06:E1:92:B3:1B:E7:26:93:8C:FE:95:67:DB:BB:A0:9D
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/EjAKMAbhkrMb5yaTjP6VZ9u7oJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:13:df:95:ed:d1:a0:e0:88:43:40:db:83:de:99:88:a3:
         43:4c:7c:e1:4d:7d:5c:23:d6:d1:07:63:29:81:46:94:87:89:
         c2:5d:21:74:48:27:bc:39:cd:46:19:e5:d5:50:02:f8:e0:77:
         a5:1f:ee:28:09:02:0c:17:0f:2d:1d:e2:19:14:45:0a:f5:b6:
         dc:8a:32:a6:47:26:32:47:38:9c:2e:23:43:82:b8:0b:ad:c1:
         a4:42:17:a9:f1:64:22:ee:b0:3d:fa:3e:63:60:f7:75:53:8a:
         ac:ac:c5:13:42:18:f5:78:97:55:90:7f:aa:64:8e:15:20:c5:
         01:7d:30:78:6f:6c:bc:21:15:08:be:bf:de:09:70:f1:0c:c7:
         c9:bf:50:75:24:1e:5c:ed:be:40:bd:58:87:8f:dd:9f:36:83:
         cd:3c:52:cc:15:ab:93:a2:ba:d4:49:fb:11:21:ed:ed:5e:de:
         2d:f1:1b:83:ac:5a:b6:8f:2f:b0:6e:ae:5f:bd:e6:ba:99:a0:
         8c:d3:ab:12:d2:35:b8:21:ed:80:11:e8:a5:5c:2a:bf:4b:31:
         a1:56:26:6d:50:ac:9c:22:f0:f4:e1:a9:7d:11:99:ca:a5:ec:
         cd:5a:cb:9b:66:b0:84:ea:f5:7a:69:f2:ac:3e:42:f9:e2:0a:
         d1:24:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:26 2024 by rpki-client on console-ams.rpki-client.org