Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZwZwzB3BbiTqqgQ3a_0Q4X8d5hU.roa
File:                     ZwZwzB3BbiTqqgQ3a_0Q4X8d5hU.roa (raw, json)
Hash identifier:          FGa6xqnNdIXx6ZDl+/MPVQLUtSLdy9B3okbL7zQkzMs=
Subject key identifier:   67:06:70:CC:1D:C1:6E:24:EA:AA:04:37:6B:FD:10:E1:7F:1D:E6:15
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0ABDF8E1
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZwZwzB3BbiTqqgQ3a_0Q4X8d5hU.roa
Signing time:             Wed 18 May 2022 09:25:18 +0000
ROA not before:           Wed 18 May 2022 09:25:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     395681
IP address blocks:        45.135.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180222177 (0xabdf8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: May 18 09:25:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=670670cc1dc16e24eaaa04376bfd10e17f1de615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:dc:93:a3:70:f0:59:7c:a8:7b:97:5a:3d:
                    3d:7a:4a:3d:14:22:74:42:b5:d8:dd:2e:27:cd:29:
                    59:5b:1b:3e:2e:5b:9b:02:07:0b:cf:07:4f:42:cd:
                    60:7f:5c:a1:68:bc:6d:5d:74:e4:46:75:17:23:19:
                    b4:90:8a:cb:ad:64:56:8d:cf:f6:59:3f:5f:76:4d:
                    a0:d3:29:04:7c:cc:38:19:13:5d:4a:70:ef:db:86:
                    92:20:3d:f9:ca:34:70:51:57:0d:c5:bb:59:bc:c1:
                    e0:3d:bd:a0:84:98:44:8b:47:1f:f6:31:1b:3e:93:
                    e6:ae:3e:89:f0:08:24:c6:5f:50:70:d9:99:8c:90:
                    4e:b1:83:3a:f5:d0:ce:40:c4:e7:6b:cc:97:bd:fc:
                    fe:83:a2:5d:85:66:d6:ba:eb:32:09:17:eb:98:df:
                    e5:39:f3:6c:c0:c2:ce:39:09:ff:74:f4:ab:13:bf:
                    ef:3d:e1:b9:a2:11:9e:d2:5a:dc:cf:ec:70:d3:2f:
                    1c:f8:cd:1c:52:2c:2b:45:d1:e8:e5:2c:10:84:46:
                    66:f4:bf:e9:ed:62:e4:58:7a:3d:6f:4a:af:0e:b9:
                    4a:70:c3:a1:9b:e0:fe:b5:ff:bd:ce:9c:af:0a:fc:
                    95:3b:37:c2:c3:ea:2e:e7:07:b3:0c:4c:a9:d0:ee:
                    4e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:06:70:CC:1D:C1:6E:24:EA:AA:04:37:6B:FD:10:E1:7F:1D:E6:15
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZwZwzB3BbiTqqgQ3a_0Q4X8d5hU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:bf:a4:fc:ee:fd:bb:6a:52:92:03:13:1f:67:b3:2d:0c:3c:
         f2:44:11:7e:9f:d7:e4:1b:e4:0f:9d:bb:cf:11:ea:e8:8b:05:
         cf:ce:7f:75:76:25:79:c8:3d:48:e3:e2:4a:80:eb:79:f8:f0:
         c4:13:f1:9f:fb:68:1b:bd:51:19:b7:ca:ec:e2:75:b0:b9:61:
         da:ca:b6:3e:8b:34:f3:33:83:03:da:d3:3e:e3:97:91:5e:91:
         46:45:1c:d5:7c:ac:27:7d:cf:98:f8:e9:4c:c6:c5:09:72:8d:
         bc:5e:18:23:04:ce:96:30:f7:df:5f:a9:27:70:a3:6a:0d:42:
         19:73:bd:23:de:00:5b:15:a2:b7:3b:2a:60:18:76:1e:20:f0:
         80:47:29:4d:d2:12:9e:b0:b6:db:a3:68:c0:56:0c:9b:ea:b7:
         ea:20:71:2e:d1:9d:63:bb:c5:94:26:f5:79:5c:e0:28:17:87:
         c2:06:12:2e:ba:75:71:65:f9:f8:45:f6:f3:b2:f6:52:65:91:
         28:df:c6:6c:ad:fc:e4:b1:99:f1:b2:26:6f:b3:2c:5a:e2:c2:
         6e:b1:48:55:2e:2c:11:46:35:3b:2b:fb:1d:fe:d3:dc:cd:67:
         65:1d:d8:32:0a:6c:68:76:5d:e9:ba:2b:12:fa:d8:a2:b9:f6:
         63:b6:0e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org