Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EH2ByeacekphMh4bAr5Ujyj2un8.roa
File:                     EH2ByeacekphMh4bAr5Ujyj2un8.roa (raw, json)
Hash identifier:          rcI1m4Sc28MmYJZjlmeEvruCzR8BahZ0fs1dlJYfrP8=
Subject key identifier:   10:7D:81:C9:E6:9C:7A:4A:61:32:1E:1B:02:BE:54:8F:28:F6:BA:7F
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       093A7335
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EH2ByeacekphMh4bAr5Ujyj2un8.roa
Signing time:             Sat 01 Jan 2022 06:00:29 +0000
ROA not before:           Sat 01 Jan 2022 06:00:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35711
IP address blocks:        45.11.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154825525 (0x93a7335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 06:00:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=107d81c9e69c7a4a61321e1b02be548f28f6ba7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:05:f5:ba:49:fa:60:4a:f6:e8:a6:43:86:
                    f9:e9:fc:58:29:fe:94:b2:1e:2e:40:cb:da:44:6a:
                    10:d2:7d:85:af:08:ee:22:63:dc:af:ed:a3:27:ff:
                    d2:b7:12:d8:43:b1:15:63:23:25:51:f2:1e:aa:39:
                    fc:4c:5f:39:df:62:68:1a:2b:26:cb:38:3a:7f:22:
                    19:7e:bc:96:f1:12:5c:3f:71:a1:f9:42:c1:57:ab:
                    a1:ea:bb:5f:8a:d7:bf:12:7d:da:b9:96:61:02:09:
                    e3:cb:68:29:cb:6a:6c:e8:1c:d3:a1:e5:10:b5:86:
                    1d:75:00:6a:91:21:55:dc:47:b7:41:be:29:08:a3:
                    9b:3e:f1:e8:34:8e:49:df:04:cb:68:42:3e:80:ab:
                    63:d3:2f:70:be:80:10:58:0a:23:60:3b:71:9b:e1:
                    c6:bc:44:c8:af:3d:03:ff:49:91:8d:91:0b:44:09:
                    82:b3:ca:39:b0:17:10:45:65:1c:94:54:e1:29:03:
                    8c:be:2d:61:e7:5e:ba:3c:23:69:78:7b:80:b9:cc:
                    2e:ec:f9:5f:a5:b7:6b:0b:eb:17:73:25:af:9d:70:
                    99:38:f2:b2:f7:56:22:3d:3f:53:cf:c5:dd:1d:6f:
                    2d:89:d8:fd:c7:6b:f1:99:64:02:d9:3e:25:74:f7:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7D:81:C9:E6:9C:7A:4A:61:32:1E:1B:02:BE:54:8F:28:F6:BA:7F
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EH2ByeacekphMh4bAr5Ujyj2un8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:7a:2c:1e:bf:e1:2c:06:f3:7b:2f:5e:2b:3c:90:6a:21:b6:
         4f:dc:c6:33:d2:6c:ce:e2:04:64:96:80:06:fc:12:37:38:a2:
         7b:1a:84:55:3a:4a:79:62:78:48:98:0e:d7:e5:06:00:ab:f1:
         3d:ce:da:36:7e:54:98:ed:2e:83:17:13:dd:bb:b8:fc:0d:55:
         e2:3b:ed:81:01:55:63:fd:1d:ef:36:80:53:0b:43:0b:6d:21:
         89:18:7a:40:f1:c5:24:19:4d:b3:44:1a:3d:36:08:e6:de:1f:
         a9:97:05:bb:4e:90:f3:80:e6:86:9f:99:e0:42:11:80:6d:4a:
         11:bc:2a:3d:1f:a8:89:f1:68:f1:01:6d:20:45:62:b5:f9:96:
         93:94:3b:7a:39:d7:f4:27:f8:39:0c:ac:0d:6c:bd:fa:de:25:
         45:0f:ee:df:24:67:52:71:79:64:c2:b5:be:00:af:d4:be:a0:
         b6:cd:21:2e:9d:c3:92:4e:bc:42:10:37:9b:ae:44:7d:cd:36:
         4c:cd:a2:45:99:99:43:c7:d3:f0:cf:ee:b3:89:cb:51:2b:b0:
         79:20:1b:b1:87:be:59:a1:81:4e:87:26:f7:f3:89:ea:a1:ff:
         1e:87:e1:92:fc:56:37:f6:18:3c:d5:2f:c9:e9:a3:89:94:9f:
         b4:e0:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org