Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fMvtpNqZ6x8EWirmwZChnVH0VsE.roa
File:                     fMvtpNqZ6x8EWirmwZChnVH0VsE.roa (raw, json)
Hash identifier:          aOG3gf0rN4/MHfJjC4tc0sRw1pf/14LxBdVFMcgIPsM=
Subject key identifier:   7C:CB:ED:A4:DA:99:EB:1F:04:5A:2A:E6:C1:90:A1:9D:51:F4:56:C1
Certificate issuer:       /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial:       0B5C4325
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fMvtpNqZ6x8EWirmwZChnVH0VsE.roa
Signing time:             Wed 08 Jun 2022 09:52:02 +0000
ROA not before:           Wed 08 Jun 2022 09:52:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        45.11.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190595877 (0xb5c4325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
        Validity
            Not Before: Jun  8 09:52:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ccbeda4da99eb1f045a2ae6c190a19d51f456c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:6b:b0:db:60:b4:ec:73:3a:b8:84:7d:a0:
                    12:aa:22:c5:21:34:30:ab:27:b8:00:cc:a5:5a:83:
                    4f:c7:6e:b0:d1:59:1c:7b:82:e1:57:8f:9f:d5:64:
                    71:12:72:26:ad:a6:e4:a1:b0:b9:52:1b:b7:9b:55:
                    95:2c:26:be:fa:d3:c9:71:29:d0:57:1e:e5:7f:3c:
                    12:cd:8b:3b:18:5f:33:14:41:96:b9:53:b7:1d:b3:
                    44:6a:1a:ef:75:1e:a8:24:12:e5:c1:d7:3c:09:d2:
                    0c:e7:94:b0:ad:22:e4:be:cc:58:8b:ee:92:77:e3:
                    95:85:b5:5e:36:9b:8e:88:19:f1:9f:8f:28:cb:69:
                    66:ea:bd:7c:0c:a2:1b:bc:7f:1f:df:34:78:2a:4b:
                    1d:86:bc:29:55:6f:f7:ac:eb:9c:b3:5f:4f:70:7e:
                    89:14:df:59:b4:df:4b:66:2d:37:c2:20:c2:81:9f:
                    29:4a:2e:d2:cd:30:c0:11:3d:1f:fe:ea:d8:0b:24:
                    9e:40:34:11:50:c8:5c:9a:95:72:b4:c7:7e:e1:9e:
                    8a:5d:a2:fd:cd:60:ac:ca:f5:47:0a:99:8b:d2:b5:
                    32:ef:0d:17:15:49:2e:1f:d1:5d:fd:11:70:ff:30:
                    cf:10:bd:95:1d:38:12:c8:1c:01:49:81:b7:dd:8c:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CB:ED:A4:DA:99:EB:1F:04:5A:2A:E6:C1:90:A1:9D:51:F4:56:C1
            X509v3 Authority Key Identifier:
                keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fMvtpNqZ6x8EWirmwZChnVH0VsE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:3a:74:c3:04:5d:3f:9f:ae:bd:c9:14:2c:3f:a4:72:14:
         4e:8a:f9:d4:22:fd:50:5e:c5:8c:a9:d7:66:a7:ca:e8:14:76:
         01:3b:b2:06:c2:2e:fd:f2:a7:75:11:9b:34:69:59:dd:19:c0:
         ab:46:1a:3e:eb:cd:24:be:d0:5a:5f:fb:66:1a:31:7d:15:48:
         03:e2:ae:84:db:74:5e:69:e6:62:d1:4e:82:05:b2:13:2a:f6:
         ef:3e:fd:88:2a:f4:03:05:92:a7:ef:5b:9b:6e:a9:5e:0d:c1:
         7f:b7:54:31:82:a9:61:66:50:6b:bf:44:92:64:3b:86:db:ed:
         9d:42:cb:43:02:8e:a2:b4:bf:63:5d:7e:51:e7:8d:32:f5:0c:
         c3:c0:19:12:9f:cd:9c:a9:b1:e5:a4:b3:97:f7:b0:92:79:5c:
         b0:f2:51:a2:02:31:ca:fd:4d:b3:de:8b:5a:d5:2c:cb:1e:42:
         d3:88:d7:09:ec:dc:13:43:b9:1e:ca:1e:37:4b:c2:1e:87:c6:
         f6:9d:8e:3c:25:cf:64:ff:7d:af:31:09:9d:a6:08:60:97:96:
         03:f6:3a:b2:45:34:f3:93:63:b5:8e:03:cd:d7:e8:25:e1:99:
         43:68:46:ca:8b:d0:f7:96:32:10:29:e9:5b:fd:87:07:08:29:
         11:f2:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:12 2024 by rpki-client on console-fra.rpki-client.org