Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/gD6DRJJRi3tqjIqU8SGIVRd7YCU.roa
File:                     gD6DRJJRi3tqjIqU8SGIVRd7YCU.roa (raw, json)
Hash identifier:          qNZFqRjbEj6xu6QOriG1Ah5iNYn1/L4v5Bl8xvGVDQw=
Subject key identifier:   80:3E:83:44:92:51:8B:7B:6A:8C:8A:94:F1:21:88:55:17:7B:60:25
Certificate issuer:       /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial:       05FB6390
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/gD6DRJJRi3tqjIqU8SGIVRd7YCU.roa
Signing time:             Sat 01 Jan 2022 14:55:16 +0000
ROA not before:           Sat 01 Jan 2022 14:55:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34549
IP address blocks:        45.158.226.0/24 maxlen: 24
                          45.158.225.0/24 maxlen: 24
                          45.158.224.0/24 maxlen: 24
                          45.158.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100361104 (0x5fb6390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
        Validity
            Not Before: Jan  1 14:55:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=803e834492518b7b6a8c8a94f1218855177b6025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:62:33:87:8f:a3:4b:b7:29:4b:c9:eb:4a:
                    0b:bf:ec:70:d2:b1:d8:65:8f:e5:94:3f:17:96:31:
                    b1:91:33:7d:b1:92:28:13:93:db:a2:0f:0f:a1:00:
                    9e:2e:ce:06:59:98:ac:9b:81:7d:cf:d2:62:8a:5c:
                    10:1d:70:b9:e3:eb:d1:6e:fc:16:a1:a7:5b:84:93:
                    b7:08:2c:05:8d:a7:72:7b:1e:99:15:0c:0c:6c:d2:
                    25:07:cf:05:82:79:7b:d9:36:de:e4:60:68:98:a6:
                    76:84:fc:3a:49:66:96:cf:0c:78:68:4c:0a:74:84:
                    c7:ad:98:3f:be:ba:46:37:43:1d:44:77:37:0f:31:
                    1d:fc:e1:07:2c:c4:f4:89:cf:fd:4f:01:1d:03:4d:
                    e0:7c:48:db:dd:f9:54:cf:91:1d:11:14:cd:00:02:
                    49:df:e6:f3:e1:f9:7a:13:66:16:ee:e1:e4:8f:ce:
                    a0:8d:b8:1b:e5:f1:b8:c1:d4:fb:99:ec:40:98:c1:
                    94:8d:39:34:6d:37:e1:a6:0d:84:a6:a0:30:a6:a6:
                    9a:6e:6e:df:8b:39:cc:46:3c:92:27:66:35:71:d4:
                    d3:46:26:f6:38:77:1a:7f:e4:50:a2:3d:c8:d2:ec:
                    ca:87:54:de:cb:ae:c6:99:91:53:29:7b:57:a7:e4:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3E:83:44:92:51:8B:7B:6A:8C:8A:94:F1:21:88:55:17:7B:60:25
            X509v3 Authority Key Identifier:
                keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/gD6DRJJRi3tqjIqU8SGIVRd7YCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:df:a9:24:2e:46:89:b6:85:8b:79:be:e5:c4:f6:e9:9f:b5:
         02:aa:d8:78:26:d1:97:d9:7f:26:93:d8:f8:6c:9e:a0:54:54:
         7c:3e:66:04:24:a0:d7:9c:e2:f8:59:8b:5c:7d:7c:e2:19:88:
         84:6d:8a:95:ac:ec:e6:56:f8:e3:a0:8a:22:3a:fa:23:08:89:
         7d:2c:e9:1d:ac:50:b5:23:5a:13:90:25:b5:0f:fa:2c:df:db:
         9e:cd:e1:2f:5c:4b:19:da:b1:b1:69:50:f2:00:f2:5b:4d:f5:
         f8:38:d6:65:9c:76:52:4d:ee:45:5f:2c:d5:55:dd:03:9a:1c:
         d3:af:02:47:db:b5:1a:24:89:f7:26:80:fb:de:f9:bd:00:35:
         6f:28:d4:19:0e:a0:3a:95:72:e3:98:51:a6:b0:f5:0e:29:cc:
         a4:09:0f:a9:e4:f5:85:5f:85:c3:9b:9a:41:1e:a6:44:e6:05:
         24:46:41:77:11:b0:d3:77:67:25:11:d9:00:71:f5:85:12:ce:
         fd:d6:71:58:9a:ba:18:34:d2:2b:d0:1e:22:32:9d:4d:60:f0:
         87:5c:e4:16:c5:21:84:8d:f9:94:92:f6:d1:d5:dd:c9:d0:9c:
         19:2e:c5:57:10:c4:e9:e7:3a:0d:7d:73:77:4f:3b:44:7e:97:
         0e:a4:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:27 2024 by rpki-client on console-ams.rpki-client.org