Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Or0yeNInf6fgotirmBuIYulaahM.roa
File:                     Or0yeNInf6fgotirmBuIYulaahM.roa (raw, json)
Hash identifier:          iocXVSElXiedrj57YFcc0qMRkN5pHDt3PfVh5kBpAuQ=
Subject key identifier:   3A:BD:32:78:D2:27:7F:A7:E0:A2:D8:AB:98:1B:88:62:E9:5A:6A:13
Certificate issuer:       /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial:       029021
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Or0yeNInf6fgotirmBuIYulaahM.roa
Signing time:             Mon 03 Jan 2022 08:45:47 +0000
ROA not before:           Mon 03 Jan 2022 08:45:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31543
IP address blocks:        45.65.120.0/22 maxlen: 24
                          95.214.252.0/22 maxlen: 24
                          89.44.116.0/23 maxlen: 24
                          89.44.148.0/23 maxlen: 24
                          5.133.32.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167969 (0x29021)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
        Validity
            Not Before: Jan  3 08:45:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3abd3278d2277fa7e0a2d8ab981b8862e95a6a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:f8:11:a5:12:42:04:55:0a:00:b8:1c:45:
                    e3:74:d7:28:85:b3:ca:6d:12:99:f5:fa:1a:12:40:
                    0b:61:87:88:2f:1d:9f:95:54:e3:34:41:84:fb:a4:
                    ba:ca:27:61:59:a8:86:57:64:73:bf:99:e1:ca:29:
                    fc:52:b1:0c:0d:cb:e5:1c:e5:86:4b:db:38:80:36:
                    a0:a6:23:74:95:48:27:77:a1:c6:6f:eb:e2:0d:a1:
                    3b:4f:63:ae:2e:f7:bb:6e:d6:16:04:29:05:e1:9c:
                    45:43:d6:94:47:50:64:e7:c1:6c:9e:ec:86:79:0b:
                    24:d1:6e:00:61:42:27:69:b0:92:17:eb:15:fc:2b:
                    15:7d:85:6b:ee:7d:c5:41:6f:1c:83:66:44:a4:38:
                    59:d2:38:ed:ac:ae:1e:3e:2d:d4:06:36:fd:e2:f6:
                    91:75:c9:ee:4c:46:9d:8f:77:ab:09:6e:ab:90:89:
                    53:ba:30:d9:f9:9e:65:b4:a7:0f:24:d1:20:9e:16:
                    a6:21:8b:bd:ee:66:9c:a1:c9:89:98:5f:d4:98:df:
                    53:7f:bb:63:13:59:41:a3:8f:6d:ff:4a:13:9c:d8:
                    ef:56:c3:7c:7c:37:05:b6:40:64:6c:34:75:c8:90:
                    b3:46:ec:4a:d0:b8:02:fc:3c:c9:70:aa:48:5c:4b:
                    ee:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BD:32:78:D2:27:7F:A7:E0:A2:D8:AB:98:1B:88:62:E9:5A:6A:13
            X509v3 Authority Key Identifier:
                keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Or0yeNInf6fgotirmBuIYulaahM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.32.0/21
                  45.65.120.0/22
                  89.44.116.0/23
                  89.44.148.0/23
                  95.214.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:ce:83:78:56:21:db:ad:b6:85:fd:e9:d8:05:14:66:bc:dd:
         e3:cd:ca:a0:c3:91:20:a0:7c:74:19:f9:2b:50:02:a0:00:f3:
         68:71:a6:b2:b3:da:a5:77:36:8a:18:f9:a1:df:fd:f2:c9:a0:
         43:72:ac:37:57:4b:14:96:db:12:ca:d0:97:63:e3:5a:aa:3f:
         1e:b7:a2:cb:19:0d:2b:fc:06:5a:25:0a:d2:f1:0b:98:1c:26:
         aa:32:ee:d8:27:0b:83:be:33:e2:c1:9d:4f:ad:f9:db:fc:be:
         3d:c1:e2:d2:dc:b9:64:94:88:20:09:d6:9d:b5:93:b1:44:c1:
         78:8c:b3:8e:4e:7e:54:f6:c7:9d:f9:64:53:2e:be:7b:2a:e9:
         81:e0:05:62:69:be:8d:b2:6e:08:08:8e:43:e4:c8:2c:3d:62:
         8a:26:6b:77:db:96:a5:2f:da:f3:35:8c:0e:86:06:84:8c:61:
         35:ff:68:54:50:71:d8:84:94:04:81:4c:62:34:5c:03:66:94:
         e1:e5:6c:68:42:5f:5e:c4:3f:fe:a6:6a:00:ac:2a:59:70:03:
         50:5f:d9:3f:c6:bb:4b:c3:81:13:66:4f:fd:42:4e:cc:3d:75:
         2f:fd:6e:96:1e:88:8e:63:a4:44:65:df:eb:4e:58:65:1d:09:
         e5:fa:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:36 2024 by rpki-client on console-fra.rpki-client.org