Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w25v97DyCpkWoYwS8s9634Ly4z8.roa
File:                     w25v97DyCpkWoYwS8s9634Ly4z8.roa (raw, json)
Hash identifier:          KQYUYy2GSqRBiNItxwF2wOxW+P6XpRPNndHx3z0HMA4=
Subject key identifier:   C3:6E:6F:F7:B0:F2:0A:99:16:A1:8C:12:F2:CF:7A:DF:82:F2:E3:3F
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0183A2CE36605DDA112ACD8A31E651ACF2E4
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w25v97DyCpkWoYwS8s9634Ly4z8.roa
Signing time:             Tue 04 Oct 2022 11:42:46 +0000
ROA not before:           Tue 04 Oct 2022 11:42:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46573
IP address blocks:        45.11.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a2:ce:36:60:5d:da:11:2a:cd:8a:31:e6:51:ac:f2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Oct  4 11:42:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c36e6ff7b0f20a9916a18c12f2cf7adf82f2e33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:b3:07:40:63:26:74:57:de:a5:0c:76:76:
                    e1:fd:04:c7:d0:79:af:1c:f7:92:e9:62:db:b2:a4:
                    23:fd:fd:8d:45:b0:eb:a4:e0:90:54:b0:d8:fc:33:
                    14:0b:7f:13:fe:31:9d:c0:66:95:58:3a:bf:af:0b:
                    6b:e2:be:44:fa:4b:db:7c:3c:39:c4:41:8e:df:c9:
                    72:17:13:0a:0a:c0:ea:e3:96:36:60:f7:48:99:f4:
                    1c:af:91:a0:61:4c:52:cd:72:93:41:b5:34:b3:bb:
                    79:6e:36:87:03:ea:76:a5:2b:3d:72:8d:d9:5f:10:
                    df:90:5a:bf:ff:b1:7a:c5:19:4d:75:56:1e:5a:dd:
                    5a:bb:f2:15:81:6b:60:0d:a2:7d:06:be:3c:a2:41:
                    a7:34:d4:89:7b:17:0b:28:e3:49:a4:32:f3:71:ce:
                    77:69:87:ee:da:31:bb:d8:6a:c9:30:bb:1d:ac:62:
                    4d:47:58:0a:95:ec:a5:dd:03:c0:ea:25:75:91:de:
                    ec:cc:6b:82:d7:2c:13:0f:f9:4d:9b:29:ac:50:73:
                    09:b3:77:a5:1a:2b:47:33:0f:18:54:5b:eb:ac:a6:
                    2e:53:96:29:b4:e3:c7:06:1a:bf:70:22:a1:4b:64:
                    ea:a0:8d:dc:bc:a7:86:0c:c8:dc:71:3c:ca:8f:c2:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6E:6F:F7:B0:F2:0A:99:16:A1:8C:12:F2:CF:7A:DF:82:F2:E3:3F
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w25v97DyCpkWoYwS8s9634Ly4z8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:9c:1f:38:97:87:86:53:63:47:f2:81:3b:8f:f9:44:34:7c:
         7e:c5:eb:c6:ab:c6:90:41:30:a2:48:f9:9f:10:65:62:2a:fe:
         7c:56:7d:40:02:81:cc:0b:2c:62:d1:63:c8:93:5d:f2:81:9c:
         94:9f:98:67:78:a9:10:ff:e2:b1:3a:0c:ad:e4:08:a0:2c:5d:
         7a:29:8c:c6:02:8f:99:46:d5:cb:b2:87:51:73:28:c7:ac:49:
         1a:70:11:49:e7:ac:38:3a:33:21:90:07:4c:a1:c1:bc:0e:1c:
         7c:a6:fa:b4:a4:67:40:ab:8e:97:1c:12:93:3f:95:59:bb:38:
         b8:94:dd:f3:75:90:a3:25:3f:cf:c6:bc:22:4e:b6:f3:8a:04:
         45:b9:74:6b:53:1a:74:01:ab:8f:49:f5:71:92:57:3b:2d:25:
         38:b8:b6:9d:8d:3e:5f:87:5f:e3:f6:ea:67:a5:f5:1c:6e:71:
         35:b9:be:49:35:05:43:f8:5b:2d:76:d6:ad:f2:af:aa:bf:d5:
         5a:18:e8:80:1e:48:25:e9:bc:35:79:2d:9e:61:a6:18:ba:d3:
         53:77:99:62:8b:5c:87:38:4f:e6:fb:cd:f8:85:11:54:95:e4:
         57:50:27:9b:24:ac:10:aa:8f:06:e0:cc:6d:f8:34:ef:2c:49:
         12:97:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org