Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/LBJsYHge2WoXDuF4vWF-sT2Nqgc.roa
File:                     LBJsYHge2WoXDuF4vWF-sT2Nqgc.roa (raw, json)
Hash identifier:          QufgRQZx+nMZQhNWlzZOf4LysL52gLg7cYi7KfeVlls=
Subject key identifier:   2C:12:6C:60:78:1E:D9:6A:17:0E:E1:78:BD:61:7E:B1:3D:8D:AA:07
Certificate issuer:       /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial:       0181F74C6D61C4602DF69BCC0AED79BC85E6
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/LBJsYHge2WoXDuF4vWF-sT2Nqgc.roa
Signing time:             Wed 13 Jul 2022 11:23:09 +0000
ROA not before:           Wed 13 Jul 2022 11:23:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15542
IP address blocks:        91.230.33.0/24 maxlen: 24
                          91.230.34.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f7:4c:6d:61:c4:60:2d:f6:9b:cc:0a:ed:79:bc:85:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
        Validity
            Not Before: Jul 13 11:23:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c126c60781ed96a170ee178bd617eb13d8daa07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:53:bd:13:90:57:e3:aa:7b:17:39:e8:2b:
                    32:cf:33:3d:a2:02:b1:1d:33:12:77:2e:c3:e1:2a:
                    07:ab:8c:34:b2:f9:88:21:4b:81:bb:8e:f9:f7:a3:
                    ba:5a:3e:d9:e5:7d:e5:11:5d:6c:25:13:71:97:ce:
                    b9:de:38:40:46:f7:ce:85:d1:f2:c8:f1:b2:b8:1c:
                    a9:0c:a6:b0:e3:15:f5:3c:a4:8c:7f:30:78:df:ad:
                    6c:eb:5e:5f:39:f8:0c:65:bf:b4:1e:de:02:3b:34:
                    2a:a5:c0:4d:43:09:23:10:36:35:7f:f6:17:87:1d:
                    42:29:12:fe:d2:7d:b8:d7:c3:fc:66:eb:d4:1f:e1:
                    6e:af:fa:8f:87:c3:c8:03:bb:91:aa:b2:30:6f:2b:
                    9d:32:7d:69:1e:c4:3f:e0:24:da:84:2b:79:50:64:
                    6b:9c:fd:dc:da:ce:6a:39:4d:21:7b:f3:73:c3:cc:
                    ca:f8:16:52:e5:b5:1a:7b:bd:ac:79:61:a5:b7:be:
                    79:37:6c:05:fe:ca:64:e0:6b:6d:f9:2b:77:c9:40:
                    a7:30:7f:4e:a1:28:87:29:d6:41:13:ef:76:c3:33:
                    10:fc:4c:f8:e9:1b:65:c0:b2:4c:9b:eb:28:a6:7e:
                    e3:03:6d:71:f4:75:41:8e:5b:b1:14:01:46:17:7d:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:12:6C:60:78:1E:D9:6A:17:0E:E1:78:BD:61:7E:B1:3D:8D:AA:07
            X509v3 Authority Key Identifier:
                keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/LBJsYHge2WoXDuF4vWF-sT2Nqgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.33.0-91.230.35.255

    Signature Algorithm: sha256WithRSAEncryption
         9b:56:27:98:51:f2:58:9a:6f:ae:e5:43:1a:22:b8:c9:e9:65:
         7b:ed:41:5f:69:a2:1b:00:70:13:79:39:e9:e2:c4:da:a6:0b:
         25:55:28:97:1d:6b:a4:71:a9:4a:3a:7b:fa:75:ba:15:51:fc:
         5e:52:9a:82:71:63:ba:e6:bb:3d:9f:1b:1c:16:39:86:c3:dc:
         2d:6c:ed:20:17:03:32:7a:a5:16:a3:5a:ce:9b:a6:c7:c6:9a:
         c0:54:ff:0b:38:f5:59:63:d2:ac:39:8d:5a:d1:27:74:c5:b0:
         28:32:85:95:dd:5c:b6:2d:a1:c6:02:6b:e5:6e:eb:fd:71:ed:
         1b:18:3b:47:09:1d:d3:4a:80:52:55:a0:e3:27:c3:22:54:67:
         5f:67:7e:95:c8:d9:c6:64:20:3c:02:36:5e:db:a8:85:e7:52:
         df:bd:30:2c:7b:4f:56:97:3f:08:33:25:89:30:f7:14:c7:71:
         01:39:2f:ec:e6:b6:fb:b5:68:24:d2:d2:8f:96:66:e2:b2:bb:
         d5:f3:a3:d1:cc:53:a8:60:be:79:e6:e0:16:88:78:a0:f7:d6:
         d2:54:b4:63:c2:5d:31:65:cd:27:fa:48:ce:3f:37:a6:fc:5f:
         a2:d2:0c:f5:d6:c0:63:94:de:64:ad:94:9b:81:4e:b4:24:d2:
         8d:e5:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:57 2024 by rpki-client on console-ams.rpki-client.org