Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/RLZ11jzbJKZbTuFsT0xqDpUr4AE.roa
File:                     RLZ11jzbJKZbTuFsT0xqDpUr4AE.roa (raw, json)
Hash identifier:          TBNuHUvFUwqCVLGS07x2Xgg4Ruo7dwaHxqB2sbdrncg=
Subject key identifier:   44:B6:75:D6:3C:DB:24:A6:5B:4E:E1:6C:4F:4C:6A:0E:95:2B:E0:01
Certificate issuer:       /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial:       01845BA707F49E75F27368615B062A0687BE
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/RLZ11jzbJKZbTuFsT0xqDpUr4AE.roa
Signing time:             Wed 09 Nov 2022 09:09:43 +0000
ROA not before:           Wed 09 Nov 2022 09:09:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17447
IP address blocks:        185.190.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5b:a7:07:f4:9e:75:f2:73:68:61:5b:06:2a:06:87:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
        Validity
            Not Before: Nov  9 09:09:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44b675d63cdb24a65b4ee16c4f4c6a0e952be001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:91:29:a6:5a:0e:10:53:68:10:8d:0f:fe:
                    7b:60:2e:31:d9:78:54:5d:3f:1b:d8:4a:aa:53:08:
                    3f:cd:87:ea:84:5e:84:06:c7:2f:65:ef:4d:72:c7:
                    43:22:06:4c:ab:37:e3:31:70:9e:26:65:bb:94:18:
                    ac:a9:70:65:db:58:ad:bc:8a:90:48:5b:15:d8:07:
                    2f:47:65:b0:8b:bb:9c:19:f9:95:ee:55:a2:aa:ff:
                    fc:17:04:cc:1b:83:6a:ee:a8:5e:15:63:32:7a:e0:
                    99:a4:50:18:36:8b:64:89:a9:03:0f:ab:83:14:a4:
                    13:e8:93:1d:56:15:4f:cc:2e:99:79:3c:e1:09:8a:
                    20:2a:2d:e2:85:e3:fd:4e:f6:52:3a:56:06:9b:75:
                    ed:d6:85:34:b5:2a:12:4d:73:78:31:9a:c3:4b:1b:
                    f1:a1:86:74:28:2d:d2:19:08:de:8a:02:02:78:a6:
                    b7:4a:a3:db:48:d4:40:b5:6c:81:5f:32:a8:f8:4d:
                    e6:4f:f9:86:1e:74:c3:10:c0:b9:e4:b5:48:fd:6f:
                    30:29:2f:ad:25:d1:4a:d7:8f:1d:63:db:70:7f:7e:
                    ff:98:f8:74:f4:c9:66:67:b7:33:cf:87:64:41:fc:
                    0c:74:6c:98:72:79:3a:2a:4c:54:7b:35:83:84:9d:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B6:75:D6:3C:DB:24:A6:5B:4E:E1:6C:4F:4C:6A:0E:95:2B:E0:01
            X509v3 Authority Key Identifier:
                keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/RLZ11jzbJKZbTuFsT0xqDpUr4AE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:39:bb:bc:dc:63:96:34:cb:21:47:50:01:12:b7:7d:eb:c6:
         12:00:fd:d7:4b:76:ac:18:1c:16:c8:5c:14:5b:c7:71:6c:81:
         c1:94:86:b5:9b:1b:f5:9e:2a:f3:e5:ed:e7:26:74:d5:b1:e9:
         c4:0b:00:9d:04:e4:a9:73:9d:95:e7:3f:9b:a8:6e:38:d1:99:
         2c:08:59:dd:cf:d4:6e:5a:60:25:b0:64:fd:ef:ef:2a:98:d0:
         a9:b8:c7:5d:84:4c:16:50:58:cf:5b:15:5b:8a:e6:bc:07:1b:
         0f:8e:41:93:74:82:c8:be:03:8d:14:0c:c6:33:56:2b:89:b2:
         14:8f:6b:c2:b3:33:13:37:3c:14:b8:39:7d:23:2d:0c:cd:8a:
         a8:a2:6e:75:01:f9:27:06:cc:5e:43:bf:28:ab:c1:6d:c9:19:
         5c:97:42:d9:cc:6b:f4:73:a5:09:4e:dd:ec:30:66:e1:83:51:
         28:8d:2d:75:7b:da:f4:fb:17:f7:d3:3d:1e:1d:1b:43:f4:d1:
         f7:83:ee:02:1e:b9:55:cc:45:fb:de:77:ba:ff:e0:b0:da:78:
         6a:93:77:97:cf:67:55:3b:77:2d:44:a2:bf:de:30:41:5f:fd:
         1b:97:2f:3c:4d:e5:66:48:e9:f9:4c:3e:26:5b:8b:f4:b2:3c:
         31:89:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:31 2024 by rpki-client on console-fra.rpki-client.org