Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8D-EpVBlxQ8CWYv7fAUHDilZwVM.roa
File:                     8D-EpVBlxQ8CWYv7fAUHDilZwVM.roa (raw, json)
Hash identifier:          ArWuncfwQm1QE0WxYyW9AEci/WdMc1WV0HHGk54qFCs=
Subject key identifier:   F0:3F:84:A5:50:65:C5:0F:02:59:8B:FB:7C:05:07:0E:29:59:C1:53
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0940115A
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8D-EpVBlxQ8CWYv7fAUHDilZwVM.roa
Signing time:             Sat 01 Jan 2022 06:00:33 +0000
ROA not before:           Sat 01 Jan 2022 06:00:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     53340
IP address blocks:        45.10.22.0/24 maxlen: 24
                          45.137.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155193690 (0x940115a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 06:00:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f03f84a55065c50f02598bfb7c05070e2959c153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:6c:09:62:ab:c5:21:bd:70:2b:b3:b1:81:
                    fc:f6:46:7b:c2:c6:7a:6a:11:ff:a5:a4:a4:24:70:
                    c9:b9:14:e8:6f:d0:dc:88:f9:be:fe:14:1d:57:3f:
                    ce:f7:36:cc:d5:d2:af:4b:88:e4:2a:8f:b5:af:cc:
                    75:e9:8c:7d:be:44:89:fb:00:54:b5:1f:5e:91:ec:
                    ab:e5:97:20:db:9d:4a:2f:84:f2:c5:25:ce:e7:f3:
                    86:62:37:56:04:aa:a5:2e:a3:34:2a:58:eb:98:c5:
                    7d:3e:6e:b5:72:7c:21:e7:4b:1e:3c:bc:8d:7e:58:
                    5a:24:bf:61:a9:2a:b5:56:9e:4e:49:94:01:a1:5f:
                    2b:ff:38:21:60:7a:3b:a5:9c:c9:9f:4e:1a:0e:92:
                    94:62:9f:42:9a:8f:9c:32:aa:62:c6:e7:2c:2b:fb:
                    83:19:fd:06:86:24:f8:a7:0e:57:7c:df:6e:72:69:
                    00:f8:7e:c7:4f:41:c3:8f:97:07:13:e2:8b:d0:49:
                    85:3d:6e:53:50:5d:9b:ce:6f:9d:89:dc:93:d6:38:
                    63:4e:21:39:21:a6:46:e0:96:bb:3b:a3:f5:99:7e:
                    c6:28:63:68:ca:4e:96:2c:60:18:50:01:8f:bc:07:
                    69:27:0a:e1:8b:d9:8f:59:5d:72:13:0a:ed:c8:f9:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3F:84:A5:50:65:C5:0F:02:59:8B:FB:7C:05:07:0E:29:59:C1:53
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8D-EpVBlxQ8CWYv7fAUHDilZwVM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.22.0/24
                  45.137.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:cd:c7:9b:8f:00:1b:71:19:bc:90:d8:0d:e3:89:61:55:1f:
         45:24:c1:43:60:ff:df:35:38:7d:7d:8c:35:b8:11:58:a8:1c:
         19:90:07:ee:3a:25:df:81:b5:da:bd:01:e7:c4:23:a0:c2:26:
         a4:77:25:ee:65:f6:58:12:72:77:f4:ca:36:19:8e:d5:1b:66:
         a4:17:23:78:31:d3:f8:e4:36:9b:84:23:6b:4a:06:ac:4d:ef:
         24:62:83:ab:19:f1:c9:00:cd:05:a7:8e:44:21:4f:49:32:02:
         1d:64:da:e0:f9:63:ef:5d:ae:3c:a4:8b:2d:f7:d5:d4:49:14:
         48:01:95:cd:ef:3a:d8:2e:31:69:33:34:86:b7:36:02:6f:04:
         f4:5d:f9:94:e2:96:67:b8:37:ba:8e:82:42:25:c3:e4:60:04:
         4f:c5:ef:6a:3e:65:69:b8:86:a3:c6:03:58:15:dd:7d:e5:75:
         b1:83:33:df:4c:2d:c2:fa:de:f2:1e:46:a1:95:99:66:e1:31:
         37:92:e0:f6:48:a0:25:a5:33:29:99:b9:a1:a4:81:05:7b:88:
         d7:9c:68:bc:88:98:16:fb:a2:d0:31:c2:8a:7d:3f:53:7e:1d:
         89:0c:12:7f:99:4a:2a:0d:1e:e9:16:55:f9:19:ff:1c:08:f2:
         c0:42:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:27 2024 by rpki-client on console-fra.rpki-client.org