Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/bB4urioDR0vKC2l0dykx0XMQbDg.roa
File:                     bB4urioDR0vKC2l0dykx0XMQbDg.roa (raw, json)
Hash identifier:          FWeGbZkv2PUTl5cibU5xlI7m5v4FCFr6M/fF7GW6FnQ=
Subject key identifier:   6C:1E:2E:AE:2A:03:47:4B:CA:0B:69:74:77:29:31:D1:73:10:6C:38
Certificate issuer:       /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial:       0183188DB5100E46DFDDE25BD9A9D65C763E
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/bB4urioDR0vKC2l0dykx0XMQbDg.roa
Signing time:             Wed 07 Sep 2022 15:24:43 +0000
ROA not before:           Wed 07 Sep 2022 15:24:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207898
IP address blocks:        45.11.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:18:8d:b5:10:0e:46:df:dd:e2:5b:d9:a9:d6:5c:76:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
        Validity
            Not Before: Sep  7 15:24:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6c1e2eae2a03474bca0b6974772931d173106c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:55:6a:3d:af:49:7a:6e:3e:58:a9:df:bd:
                    14:51:9c:6b:24:49:90:f9:42:f7:5b:54:c9:99:73:
                    1e:3c:b8:c7:26:85:c7:84:e0:22:1b:39:41:d5:30:
                    f0:84:db:cb:7c:19:82:76:db:68:f5:e0:68:b1:8f:
                    d5:c3:b4:20:dc:c3:68:b8:b9:77:0b:fe:c4:81:88:
                    bc:c2:98:e2:e6:d2:f5:4b:40:28:c3:49:0e:b8:25:
                    a7:9c:06:6f:2d:8b:d1:ea:59:6a:83:56:3d:8a:d3:
                    c5:c0:d7:82:39:df:9a:29:79:05:65:d0:0c:18:ee:
                    c2:97:ca:9e:10:b4:b6:ab:5b:8d:c8:a2:ed:6c:37:
                    b6:88:73:d3:50:c6:2f:f1:7a:41:e0:64:50:1e:46:
                    04:94:e2:3b:a5:68:fc:43:50:44:95:f9:d3:9b:21:
                    3f:4f:0b:27:bd:2f:26:81:35:f7:f5:59:b7:32:8a:
                    1d:d7:a7:00:db:c7:47:d6:3b:b4:9d:27:61:01:64:
                    b8:e7:e7:9a:1d:e6:3f:36:a3:5b:73:1d:fa:76:27:
                    28:c6:e7:41:f0:1b:0b:8a:81:43:89:e2:5b:db:b9:
                    eb:83:dd:8a:7e:de:63:33:4c:64:90:ff:25:fd:68:
                    e3:47:d2:41:9f:9c:fd:f8:93:29:22:e6:bd:13:fe:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1E:2E:AE:2A:03:47:4B:CA:0B:69:74:77:29:31:D1:73:10:6C:38
            X509v3 Authority Key Identifier:
                keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/bB4urioDR0vKC2l0dykx0XMQbDg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:69:23:ae:b4:69:d2:96:6a:5a:20:40:fd:66:a2:94:db:c2:
         91:40:f2:d7:1e:83:3d:90:41:a1:cd:a9:d0:dc:69:4d:60:2b:
         7f:69:5a:89:a6:76:e7:7f:86:72:91:8f:4a:ab:4d:92:d9:5b:
         1e:60:0c:68:aa:e6:eb:78:55:fc:a3:bb:a8:4d:83:d4:70:99:
         a5:0d:cb:bd:9b:7f:b8:0f:81:04:b7:d6:38:8b:e1:d8:38:51:
         72:c9:77:10:55:62:7c:c0:2a:de:e0:6c:18:ba:d8:e0:c9:08:
         36:8f:57:4b:d3:df:3e:ff:bf:96:58:37:26:fa:f5:fa:20:c2:
         f0:d0:fe:dd:5a:4c:42:43:2a:16:da:2a:49:4f:20:4f:84:32:
         9e:bf:d3:43:b6:5c:92:0f:04:13:0e:77:06:c1:1e:b8:c5:c2:
         7d:f2:af:81:b0:e3:5a:8c:26:0f:98:19:47:3d:a7:5c:35:0c:
         e3:fe:fb:d9:45:09:4e:4a:84:7e:9c:02:f5:b4:63:90:7d:7f:
         e0:9e:f4:9d:dc:b3:9c:12:a1:f5:cc:77:28:01:d3:fd:22:a9:
         9d:44:28:ed:f6:b7:06:36:5b:9b:aa:1e:f7:96:49:de:e7:a8:
         15:9b:11:3e:a0:a6:d5:4c:b0:4a:8d:15:cd:a3:a5:4e:5f:cf:
         9f:a0:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:52 2024 by rpki-client on console-ams.rpki-client.org