Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/owByGr1APGxdODaSxn0T6XrBdkg.roa
File:                     owByGr1APGxdODaSxn0T6XrBdkg.roa (raw, json)
Hash identifier:          FgVrpouTozkRqgnd6I3Y1/Ff/fYBziQB4eEc4PUHXcU=
Subject key identifier:   A3:00:72:1A:BD:40:3C:6C:5D:38:36:92:C6:7D:13:E9:7A:C1:76:48
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0B2C7BB4
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/owByGr1APGxdODaSxn0T6XrBdkg.roa
Signing time:             Mon 04 Jul 2022 08:31:25 +0000
ROA not before:           Mon 04 Jul 2022 08:31:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48658
IP address blocks:        45.131.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187464628 (0xb2c7bb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jul  4 08:31:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a300721abd403c6c5d383692c67d13e97ac17648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:11:38:75:29:8d:72:1c:b4:43:71:86:49:
                    54:61:69:0d:9c:16:fc:1b:6c:7b:b2:ad:1e:78:98:
                    f9:5b:16:71:da:19:d6:3b:f8:b5:c2:b2:9c:58:6f:
                    a7:19:63:70:b1:6e:13:9b:cb:3f:af:8c:66:63:f7:
                    45:c3:96:a7:9e:9e:85:25:b7:67:b4:b0:d5:f4:8a:
                    12:8d:e5:b7:29:08:89:90:f5:61:6f:f7:36:00:47:
                    9f:8f:71:34:d0:c6:24:f0:26:b8:aa:f8:2f:a8:07:
                    f5:bd:ab:b7:8e:ef:9f:3c:5d:0c:4d:b4:61:00:8b:
                    58:c7:ee:7f:77:48:b6:6d:e3:cb:5f:d8:24:96:09:
                    9b:f5:3c:40:ba:1a:94:b4:3d:61:f9:2f:d3:46:1b:
                    f8:cd:ab:1d:01:cc:fe:30:a9:45:87:1e:73:4b:b5:
                    63:e9:61:13:59:68:41:e4:51:c7:d5:8e:d9:be:0a:
                    0f:f8:c6:aa:4c:6a:b4:40:ff:be:5f:32:1c:3d:7d:
                    16:de:eb:9e:7d:bd:d8:71:1f:12:12:c2:9b:8b:b0:
                    47:75:dd:1a:e0:a0:2b:aa:f2:17:d9:d4:b6:a0:d8:
                    8f:c1:24:99:79:d3:8c:b7:cf:79:fe:b0:04:8b:1a:
                    72:a6:d0:7e:e5:56:43:e6:6d:24:32:b3:01:00:95:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:00:72:1A:BD:40:3C:6C:5D:38:36:92:C6:7D:13:E9:7A:C1:76:48
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/owByGr1APGxdODaSxn0T6XrBdkg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:a1:9e:5d:a3:7e:07:3d:ea:f5:fc:21:f3:e9:00:16:ce:
         80:11:7b:9f:ba:d6:5f:50:01:83:c1:bf:ef:21:39:62:ea:66:
         02:ae:ab:1d:92:77:86:34:62:4d:fa:37:a0:d9:c4:22:bd:7e:
         79:90:41:c7:d4:d7:dd:25:ca:80:f7:9d:5c:15:e0:b3:97:97:
         4a:7f:14:84:3b:fb:8f:7f:14:34:cf:9e:58:96:ec:79:c4:b2:
         a1:32:be:92:74:f9:b3:4e:9b:d8:71:01:2d:bf:9c:03:b4:05:
         13:00:90:cb:a7:64:c6:86:88:1a:14:b3:64:07:5d:30:0b:a0:
         8b:fd:34:c0:43:3f:7d:f9:c7:e1:b3:e2:ba:9d:70:d8:fd:3c:
         ec:45:82:de:f8:8b:03:d7:1b:c6:0c:71:68:63:fc:26:69:dd:
         d9:e6:12:dd:12:7b:45:b3:b7:1b:cc:56:a7:c6:58:a1:aa:f7:
         d0:00:fa:47:66:19:61:82:bd:41:87:59:50:52:36:d5:da:1d:
         44:6d:73:86:67:78:58:f3:86:6e:af:bb:cf:3a:c8:48:41:45:
         05:c7:3d:7e:8e:99:87:db:03:80:f3:f9:bb:a4:02:a3:10:c3:
         a4:14:09:8f:16:a6:42:00:b9:fb:79:94:b9:41:88:e4:34:89:
         9b:9b:aa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org