Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/__uL8289zhfG4u4hUJZaTfntxqA.roa
File:                     __uL8289zhfG4u4hUJZaTfntxqA.roa (raw, json)
Hash identifier:          hkGLY8mXCxXW/ipMo1p+WHMzkIWKJpl8HEYwhg2aNWE=
Subject key identifier:   FF:FB:8B:F3:6F:3D:CE:17:C6:E2:EE:21:50:96:5A:4D:F9:ED:C6:A0
Certificate issuer:       /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial:       99880F
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/__uL8289zhfG4u4hUJZaTfntxqA.roa
Signing time:             Sat 01 Jan 2022 03:51:15 +0000
ROA not before:           Sat 01 Jan 2022 03:51:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208007
IP address blocks:        45.155.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10061839 (0x99880f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
        Validity
            Not Before: Jan  1 03:51:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fffb8bf36f3dce17c6e2ee2150965a4df9edc6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:78:b1:e4:b3:fd:93:b0:ce:ad:ff:92:d4:
                    0f:6c:59:ff:62:bf:3d:78:73:66:ee:d7:12:d0:11:
                    67:e7:f6:8c:44:99:a4:62:a4:0b:e1:16:4b:d4:81:
                    87:68:e8:5d:a4:bd:d6:fd:1f:1b:7c:15:86:94:89:
                    67:ce:ca:96:9b:b7:b5:36:f2:16:e5:fc:1e:c1:5a:
                    ef:34:da:a1:76:0a:77:8a:b3:03:d8:fa:4d:e4:b2:
                    7a:e7:47:15:37:c9:e3:fc:b2:37:cc:fb:6d:15:c2:
                    7e:be:43:3d:ca:5c:63:05:09:f5:bd:7f:db:03:67:
                    de:86:e3:b4:5a:8a:f1:bf:d2:41:5b:9d:55:85:0c:
                    a2:5f:7c:69:52:8d:12:9c:58:93:15:07:95:df:7a:
                    b6:bf:ce:aa:1f:1c:cf:a9:d0:89:1d:f7:61:86:c3:
                    f7:3d:2c:3d:e1:4f:0f:c9:d1:48:7f:29:30:d6:f2:
                    b5:2a:eb:1e:d5:6f:57:df:d4:1b:c3:9b:ea:0d:89:
                    16:d4:47:90:b1:15:80:0e:57:d4:dc:18:7f:1d:f2:
                    02:b1:5a:0b:bb:21:f7:1c:7a:46:d1:63:2d:ce:16:
                    92:69:fa:86:84:52:f4:f4:bf:27:07:f6:b5:8d:2d:
                    89:32:8c:11:c8:d1:7c:45:cf:7b:d0:4e:ca:62:a8:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FB:8B:F3:6F:3D:CE:17:C6:E2:EE:21:50:96:5A:4D:F9:ED:C6:A0
            X509v3 Authority Key Identifier:
                keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/__uL8289zhfG4u4hUJZaTfntxqA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ab:c0:f7:43:eb:48:97:47:2d:84:60:f8:fa:49:64:ec:ae:
         79:3e:5c:3d:35:12:22:22:9f:61:42:6c:b2:38:ba:d1:8e:89:
         d9:66:76:ff:4e:c9:13:a0:24:e9:60:4e:93:23:5c:68:74:74:
         8b:d3:74:6f:ef:59:c2:f5:46:f1:7c:08:e3:da:d7:a5:f1:24:
         0e:28:ca:41:e8:94:81:55:1c:73:f5:0e:2c:30:85:df:cc:8a:
         bd:2c:3f:40:2f:3f:a7:7a:be:31:7c:09:61:be:0f:b4:b5:51:
         62:34:b2:bb:cc:8c:00:70:0a:52:49:98:2c:43:b6:ab:50:5d:
         b9:40:29:d2:24:aa:83:43:f8:93:46:27:10:a7:f8:a7:78:2d:
         7f:19:3e:0c:af:80:24:c7:3f:14:cd:d8:27:a8:fa:11:ab:2a:
         19:41:f1:bb:f2:a8:ca:01:2b:40:9b:c2:a5:28:da:60:e4:98:
         ce:22:d6:12:84:8f:88:8e:44:b9:bb:c2:79:72:b6:39:e9:49:
         7e:2c:fb:91:22:83:06:e2:1a:02:c6:ea:4c:64:9c:2c:6b:aa:
         79:bd:54:79:6e:46:a5:46:e0:2e:eb:3c:fb:40:7c:3d:f7:c8:
         41:99:03:86:47:c6:3d:25:db:84:3b:3a:31:f3:c1:23:13:66:
         9f:c1:1f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:41 2023 by rpki-client on console-fra.rpki-client.org