Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5lq_p35plVwmM1_AZtwBl-ypmQE.roa
File:                     5lq_p35plVwmM1_AZtwBl-ypmQE.roa (raw, json)
Hash identifier:          R6RvtwIrgZK7neTkm6xdWEcKVkapuiMVlLHeT4Mx6pY=
Subject key identifier:   E6:5A:BF:A7:7E:69:95:5C:26:33:5F:C0:66:DC:01:97:EC:A9:99:01
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       093EA165
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5lq_p35plVwmM1_AZtwBl-ypmQE.roa
Signing time:             Sat 01 Jan 2022 06:00:32 +0000
ROA not before:           Sat 01 Jan 2022 06:00:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46573
IP address blocks:        92.118.204.0/24 maxlen: 24
                          45.11.231.0/24 maxlen: 24
                          45.11.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155099493 (0x93ea165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 06:00:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e65abfa77e69955c26335fc066dc0197eca99901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:59:3f:ed:0d:10:50:02:23:3e:91:b8:1e:cf:
                    51:b6:43:0f:d0:06:b9:26:5f:e2:4d:0c:94:12:7b:
                    74:2d:84:75:20:39:cb:73:2d:0c:08:d9:b1:57:1d:
                    a2:9e:7a:d2:5f:68:1e:c2:6c:b0:a8:02:26:d3:56:
                    a7:26:c6:74:eb:91:00:3f:6e:d7:ca:84:93:6b:54:
                    0d:b9:46:65:ea:c1:62:86:3d:5b:e1:2e:75:5b:e7:
                    22:36:d2:bb:86:ae:45:2e:37:b8:16:3f:f8:07:10:
                    65:1f:d7:4c:e2:cc:3b:a8:5c:c4:98:0c:06:35:97:
                    47:d3:94:31:39:ff:b9:e5:88:8c:d5:7c:f2:07:6f:
                    e0:70:79:70:f0:9a:14:e7:06:ac:8c:d8:0c:9f:1c:
                    84:c2:08:6f:a0:0f:26:90:4a:7c:25:14:e0:d4:d7:
                    2a:e4:ed:52:50:9d:e9:31:64:99:f0:d0:60:6e:f8:
                    25:5c:12:48:58:48:90:8b:85:6c:6f:a9:d8:62:f6:
                    83:11:71:28:27:fe:ed:33:97:f6:e6:ec:45:f7:d7:
                    1e:04:71:08:c9:97:e1:fe:c1:13:8c:69:15:9a:98:
                    fe:fe:3f:e6:ce:55:8e:96:0e:44:91:7f:b4:b2:47:
                    23:22:13:a8:c8:15:c4:c1:c9:cc:94:87:dd:a5:0a:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5A:BF:A7:7E:69:95:5C:26:33:5F:C0:66:DC:01:97:EC:A9:99:01
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5lq_p35plVwmM1_AZtwBl-ypmQE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.230.0/23
                  92.118.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:a0:67:b5:52:da:fa:ce:96:cb:4d:bd:71:d7:da:51:67:
         f8:68:ef:c6:41:86:3d:13:73:78:1e:fa:69:e1:ea:0b:10:1d:
         c6:d9:8a:34:58:9e:8d:45:56:1d:ef:ca:6f:3f:70:ea:b8:be:
         cb:cf:a8:24:ef:7b:ae:b1:2b:ea:b1:ac:9c:a3:30:44:e3:d1:
         37:87:32:7b:d5:50:74:35:1a:9b:72:01:2c:24:5f:21:41:b5:
         53:b1:31:80:02:48:85:5a:be:83:dc:f1:08:c9:12:ea:f7:75:
         76:83:ca:0f:cf:f8:36:fc:07:e3:4f:33:b8:d1:eb:0c:79:9f:
         69:89:83:db:91:fe:fd:e4:2d:01:30:67:ab:37:15:c3:aa:34:
         6a:47:63:7f:be:e8:e8:04:64:35:0a:ca:ee:f3:4d:18:db:aa:
         4c:8d:7e:e5:da:99:e9:5c:ea:e7:f9:b2:40:e0:31:8d:d3:a0:
         86:0d:a0:21:7c:80:1f:ab:24:54:ac:85:84:2d:b6:82:29:5b:
         c0:8d:b8:d1:62:7e:0a:c0:bf:01:57:4f:82:f3:e9:36:6b:83:
         65:80:f0:02:06:27:85:24:4b:81:05:00:86:e6:d6:a7:da:c5:
         42:b5:9b:cd:1d:30:19:cf:c2:f7:26:c0:1a:31:4e:8a:a0:7b:
         d3:1c:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org