Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EurFPdI0e2gKbsGQz31P0oyEGD0.roa
File:                     EurFPdI0e2gKbsGQz31P0oyEGD0.roa (raw, json)
Hash identifier:          0/lzuV2sepXKt/YGrleW3N6i5YYw2LmBP3Jd0M0W7Hg=
Subject key identifier:   12:EA:C5:3D:D2:34:7B:68:0A:6E:C1:90:CF:7D:4F:D2:8C:84:18:3D
Certificate issuer:       /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial:       033A763F
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EurFPdI0e2gKbsGQz31P0oyEGD0.roa
Signing time:             Sat 01 Jan 2022 00:57:55 +0000
ROA not before:           Sat 01 Jan 2022 00:57:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42994
IP address blocks:        45.144.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54163007 (0x33a763f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
        Validity
            Not Before: Jan  1 00:57:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12eac53dd2347b680a6ec190cf7d4fd28c84183d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:5a:d8:a0:31:7f:e1:3f:9c:61:a1:4e:7c:
                    1d:38:5f:15:27:95:99:89:ab:c6:06:be:c8:74:74:
                    bb:d9:c2:fe:04:a0:f8:74:6a:d5:91:c8:c7:ac:c1:
                    c9:98:cc:4a:69:89:ce:8e:43:c1:99:5b:80:8e:e5:
                    3f:0d:e9:76:47:9f:b1:c8:b9:6c:82:5d:40:14:b1:
                    37:12:cd:e0:6e:f7:29:31:a6:e4:fd:cb:68:e0:ff:
                    a6:75:7f:d2:1f:a0:de:c0:1b:95:25:78:3f:d7:55:
                    89:fd:bd:fc:51:d6:d3:fb:6d:42:7e:91:c4:15:0c:
                    7e:8b:03:ce:0b:a2:3d:67:02:ed:2a:86:e9:61:8e:
                    12:91:2f:b3:e1:32:29:53:fb:5e:00:79:fb:fd:19:
                    1a:91:5a:f7:d4:2b:06:60:97:0d:06:af:31:cc:c7:
                    8a:ed:96:ba:c3:be:17:65:2f:47:3d:58:13:a2:f4:
                    ce:1f:97:56:dd:90:e0:68:d0:55:ae:ea:36:e7:0e:
                    3c:50:b4:ab:4c:dc:de:eb:51:32:96:e5:e2:00:0c:
                    59:e1:65:cd:a3:74:f0:e8:9c:25:6c:7b:2f:57:7d:
                    ba:33:84:a3:b7:3f:27:42:bf:7f:ee:3f:14:66:e0:
                    af:aa:99:25:70:c6:ae:d4:aa:5e:f4:cc:20:b6:d8:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EA:C5:3D:D2:34:7B:68:0A:6E:C1:90:CF:7D:4F:D2:8C:84:18:3D
            X509v3 Authority Key Identifier:
                keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EurFPdI0e2gKbsGQz31P0oyEGD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:14:47:e9:99:10:30:22:11:ca:1f:32:dc:36:9f:d8:6b:5c:
         3e:d9:ee:68:a4:18:6c:51:1d:e4:ac:48:e7:95:d7:27:5a:10:
         1f:0f:fe:33:43:c0:af:d4:f2:9f:13:f0:cd:a4:ef:d1:6f:dc:
         3a:10:3e:28:db:f9:a8:8b:42:60:61:3f:9d:70:eb:60:1b:55:
         d6:b3:fa:4b:55:87:08:be:f7:af:8b:44:42:8e:dd:93:57:f1:
         b6:ca:0d:ed:06:bb:2f:5f:43:d9:3f:24:f9:b7:53:bb:6e:e9:
         f7:f9:83:8d:51:12:94:85:76:07:4f:b7:2a:98:19:e4:44:0a:
         eb:86:fb:fc:c3:a2:f7:46:7c:f9:ed:e4:e7:9f:2b:ff:81:cf:
         24:7e:82:67:bd:36:7a:31:7f:8e:fe:c2:52:6d:1f:0f:90:03:
         0a:bd:93:08:f8:03:b6:1a:84:58:b4:3f:fe:45:d7:8b:67:12:
         d5:0b:2d:71:1c:a7:80:d3:57:14:e0:72:e3:85:53:a8:e4:7b:
         08:6d:3d:9f:98:06:82:83:7f:b3:ce:b2:67:8b:e4:56:a0:4a:
         8e:f4:38:e8:fe:c9:62:76:5f:61:74:f6:cd:3b:d5:96:52:b1:
         17:8d:8f:7f:09:94:2d:25:e9:6d:86:3d:60:a2:b3:b0:e9:a3:
         ba:64:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:31 2024 by rpki-client on console-ams.rpki-client.org