Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/z4uJgtcCkrV8n2RQiMeAVeM_Irc.roa
File:                     z4uJgtcCkrV8n2RQiMeAVeM_Irc.roa (raw, json)
Hash identifier:          TfWM8nMU17Kym6pExgRMzAiro1KgPRLsfUoNYAyZ4S0=
Subject key identifier:   CF:8B:89:82:D7:02:92:B5:7C:9F:64:50:88:C7:80:55:E3:3F:22:B7
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       018319A405B743FC019AAF317F90DF807B69
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/z4uJgtcCkrV8n2RQiMeAVeM_Irc.roa
Signing time:             Wed 07 Sep 2022 20:28:43 +0000
ROA not before:           Wed 07 Sep 2022 20:28:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201814
IP address blocks:        45.142.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:19:a4:05:b7:43:fc:01:9a:af:31:7f:90:df:80:7b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Sep  7 20:28:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cf8b8982d70292b57c9f645088c78055e33f22b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:16:30:42:a7:78:cb:05:54:05:88:47:cf:7a:
                    b9:22:cc:fd:c1:2f:8d:14:62:75:b7:ae:de:03:29:
                    33:71:ce:b8:f9:c9:20:87:dd:5e:a4:80:6a:55:19:
                    00:80:34:37:72:a0:52:7a:3d:b6:e7:80:57:b6:4a:
                    7f:f4:3d:cb:6d:3b:65:e5:6e:d6:ff:cf:bc:b1:fc:
                    c9:32:76:4f:c4:b0:43:cb:df:61:d0:e7:12:fd:77:
                    cb:98:4f:f8:a9:96:c8:cb:74:2b:60:77:b1:c2:8e:
                    03:b2:82:9c:a4:70:29:00:10:5a:21:56:f5:4f:1e:
                    bc:a7:c6:2a:ec:fe:0a:f6:ac:89:39:59:49:2a:8d:
                    e0:5d:d8:e2:ff:8b:b7:f5:f2:32:0a:3c:7e:cc:7a:
                    38:60:a9:dd:6a:05:69:ae:56:39:58:4b:36:98:3b:
                    61:8c:3f:87:3f:2d:75:9b:e4:58:73:ba:fc:79:c0:
                    0d:d8:f8:da:83:74:6e:2b:d0:8f:f0:7c:0f:d4:9d:
                    5a:f9:c8:21:c6:bd:0c:33:1a:19:f4:39:59:98:36:
                    96:49:b8:80:94:fc:23:ae:16:a1:c3:fb:2b:e4:85:
                    e3:82:65:63:52:42:f5:aa:15:45:53:c5:69:15:cd:
                    f0:36:f9:8f:e3:8a:76:46:c1:73:87:7f:46:1b:4b:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8B:89:82:D7:02:92:B5:7C:9F:64:50:88:C7:80:55:E3:3F:22:B7
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/z4uJgtcCkrV8n2RQiMeAVeM_Irc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:af:74:40:38:0c:a0:1b:33:3a:f7:8b:98:5b:8d:01:00:e5:
         03:56:02:e8:be:01:7a:55:18:0e:ea:62:e8:73:5e:e9:4d:ed:
         8c:b3:de:dc:86:ba:a3:01:3e:d2:72:b9:de:b4:aa:c4:13:97:
         38:7e:af:94:7c:6b:93:7f:c0:1f:4a:2e:a3:4a:0a:51:64:be:
         7d:b3:9e:79:a9:f1:c9:e8:97:42:c7:25:d0:e3:7c:36:ce:62:
         fc:51:b3:f4:30:18:d5:e5:ee:53:5f:52:3f:37:37:7a:8f:a8:
         87:26:8d:2c:a6:68:e0:6d:5c:ce:61:51:f2:e7:62:0e:a5:0f:
         e4:d4:8d:06:13:ce:f3:03:b5:3f:3b:34:6e:83:40:98:87:bd:
         77:ab:c0:ed:7a:90:2d:f2:59:9d:70:51:af:e5:2b:77:6c:8b:
         d3:9d:93:34:1b:09:e6:2c:e9:cb:c2:35:07:3a:00:40:7c:ce:
         d2:9d:f7:f2:36:2b:57:df:a1:ec:6d:13:6d:19:84:d5:c6:87:
         b3:3b:35:ad:50:06:5d:ae:f2:74:9a:f7:82:5b:cf:b6:af:1c:
         cb:b7:8c:88:3f:88:63:a6:6a:86:a4:7a:4a:eb:ba:f8:ae:e2:
         db:42:27:4e:33:f6:e9:14:5f:01:ae:8b:02:6b:21:ce:6d:46:
         4f:35:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:14 2024 by rpki-client on console-ams.rpki-client.org