Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/7f-t97NNFBHaFLZojlYg8kWwnv4.roa
File:                     7f-t97NNFBHaFLZojlYg8kWwnv4.roa (raw, json)
Hash identifier:          v3g+gZUnj5ctsC5qP1dlKCq4XV+D+XwVH05QziOKtgk=
Subject key identifier:   ED:FF:AD:F7:B3:4D:14:11:DA:14:B6:68:8E:56:20:F2:45:B0:9E:FE
Certificate issuer:       /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial:       063D9755
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/7f-t97NNFBHaFLZojlYg8kWwnv4.roa
Signing time:             Sat 01 Jan 2022 07:53:52 +0000
ROA not before:           Sat 01 Jan 2022 07:53:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49800
IP address blocks:        45.131.125.0/24 maxlen: 24
                          45.131.126.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104699733 (0x63d9755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
        Validity
            Not Before: Jan  1 07:53:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edffadf7b34d1411da14b6688e5620f245b09efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:43:85:4d:8d:6c:fe:86:52:a7:f1:6d:61:71:
                    2b:17:a9:01:0c:a2:3c:fc:b3:e9:90:38:bd:f2:e9:
                    7c:62:7e:4b:6a:33:a9:07:0e:09:77:09:a6:61:55:
                    05:7c:ca:1a:c9:59:84:bd:f3:df:b1:27:59:4c:86:
                    be:e4:3d:52:2f:e7:7a:7d:f3:3f:cd:a1:ac:1a:10:
                    65:18:f0:10:9f:3f:81:9b:87:89:ca:ac:0f:ee:21:
                    84:66:96:2b:a7:7d:da:24:23:db:3b:55:1b:ad:ef:
                    c9:64:f5:71:9e:94:bf:4f:36:f1:b7:80:38:df:ea:
                    8c:c3:80:d1:1b:22:8f:8b:e2:b6:b7:59:da:f5:08:
                    44:48:94:4f:96:07:d3:ef:25:b5:7e:0e:53:f4:09:
                    df:18:df:ce:c5:5c:75:6c:22:c4:3d:5b:78:67:24:
                    64:90:90:67:56:ed:14:59:92:3a:34:e2:49:43:62:
                    fc:cf:0d:db:b4:01:ae:fc:df:36:85:3b:26:28:8c:
                    9b:0e:69:fc:72:aa:8b:65:bb:6b:85:7e:c2:2d:cf:
                    c1:e4:19:6a:89:59:d4:6f:b9:bc:02:e9:40:90:c8:
                    18:f5:08:6b:12:35:51:8e:ce:6a:e9:2d:56:e5:79:
                    7e:7a:1c:6c:a1:4d:81:40:44:d0:db:93:5b:ea:0c:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FF:AD:F7:B3:4D:14:11:DA:14:B6:68:8E:56:20:F2:45:B0:9E:FE
            X509v3 Authority Key Identifier:
                keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/7f-t97NNFBHaFLZojlYg8kWwnv4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.125.0-45.131.127.255

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:9c:3d:51:72:39:15:04:ab:eb:be:4e:c7:c6:dd:21:25:
         eb:88:bb:07:34:8e:0e:b4:d8:b0:48:b8:46:ee:eb:a8:f9:a3:
         cc:3b:62:3a:49:d0:72:cf:03:a2:f3:34:06:96:83:19:a7:75:
         0c:26:ca:5f:01:c2:00:d2:9e:2a:80:4e:1d:8c:ce:23:4f:c2:
         54:4b:1d:cd:e7:6e:d2:34:b2:f4:1f:7e:19:33:44:f3:65:1b:
         b6:55:f7:c5:5a:27:a4:65:52:b5:b4:68:65:ff:69:37:e0:37:
         54:dc:9c:ac:00:d7:58:e5:f6:8a:28:73:03:cb:48:86:13:f5:
         a6:63:cd:ed:15:bc:65:1a:09:8e:53:03:0d:01:3d:24:5a:0e:
         7f:df:3a:3b:5f:f4:ee:35:d2:f4:e5:2c:29:73:36:d2:4a:b0:
         25:62:e7:7a:8f:b3:fb:7f:8f:38:26:a1:4b:4c:d3:a6:a8:33:
         25:89:13:0c:4d:bf:6d:9e:ff:28:e0:9c:ad:74:4d:79:72:c4:
         b6:1c:37:bd:60:55:3a:d8:8b:d2:a3:77:9c:82:85:7d:7b:02:
         d5:8a:4a:2b:34:f7:41:bb:fa:05:b4:87:3b:a3:2e:83:b7:48:
         27:4d:46:34:2f:e4:00:c4:0a:36:c4:8f:a2:bf:b9:0c:1f:84:
         ac:01:1a:bb
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBj2XVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Y2Y2MDhmZmFkZjYwMDA4MWVlOTIyMjk4ZTRiMmFlOTZhZmY0OGU4MB4XDTIyMDEw
MTA3NTM1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRmZmFkZjdiMzRk
MTQxMWRhMTRiNjY4OGU1NjIwZjI0NWIwOWVmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIhDhU2NbP6GUqfxbWFxKxepAQyiPPyz6ZA4vfLpfGJ+S2oz
qQcOCXcJpmFVBXzKGslZhL3z37EnWUyGvuQ9Ui/nen3zP82hrBoQZRjwEJ8/gZuH
icqsD+4hhGaWK6d92iQj2ztVG63vyWT1cZ6Uv0828beAON/qjMOA0Rsij4vitrdZ
2vUIREiUT5YH0+8ltX4OU/QJ3xjfzsVcdWwixD1beGckZJCQZ1btFFmSOjTiSUNi
/M8N27QBrvzfNoU7JiiMmw5p/HKqi2W7a4V+wi3PweQZaolZ1G+5vALpQJDIGPUI
axI1UY7OauktVuV5fnocbKFNgUBE0NuTW+oM1FsCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTt/633s00UEdoUtmiOViDyRbCe/jAfBgNVHSMEGDAWgBSc9gj/rfYACB7p
IimOSyrpav9I6DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25QWUlfNjMyQUFnZTZTSXBqa3NxNldyX1NPZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvZDQ1ZjExLTY3YzItNDdhNS05OTZjLTg5MWViNTQ4Yjg5MS8x
LzdmLXQ5N05ORkJIYUZMWm9qbFlnOGtXd252NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
ZDQ1ZjExLTY3YzItNDdhNS05OTZjLTg5MWViNTQ4Yjg5MS8xL25QWUlfNjMyQUFn
ZTZTSXBqa3NxNldyX1NPZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQALYN9AwQHLYMAMA0GCSqGSIb3
DQEBCwUAA4IBAQBjSpw9UXI5FQSr675Ox8bdISXriLsHNI4OtNiwSLhG7uuo+aPM
O2I6SdByzwOi8zQGloMZp3UMJspfAcIA0p4qgE4djM4jT8JUSx3N527SNLL0H34Z
M0TzZRu2VffFWiekZVK1tGhl/2k34DdU3JysANdY5faKKHMDy0iGE/WmY83tFbxl
GgmOUwMNAT0kWg5/3zo7X/TuNdL05SwpczbSSrAlYud6j7P7f484JqFLTNOmqDMl
iRMMTb9tnv8o4JytdE15csS2HDe9YFU62IvSo3ecgoV9ewLVikorNPdBu/oFtIc7
oy6Dt0gnTUY0L+QAxAo2xI+iv7kMH4SsARq7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:05 2024 by rpki-client on console-fra.rpki-client.org