Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/eJcqL8IjO_aGTaFGP5HXfXluCbI.roa
File:                     eJcqL8IjO_aGTaFGP5HXfXluCbI.roa (raw, json)
Hash identifier:          han7L/Ctcc6NJmUi3cUEa/aXLJX/X7QxDPxSao17S4I=
Subject key identifier:   78:97:2A:2F:C2:23:3B:F6:86:4D:A1:46:3F:91:D7:7D:79:6E:09:B2
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       080C2A65
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/eJcqL8IjO_aGTaFGP5HXfXluCbI.roa
Signing time:             Sat 01 Jan 2022 04:01:52 +0000
ROA not before:           Sat 01 Jan 2022 04:01:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202837
IP address blocks:        45.92.15.0/24 maxlen: 24
                          45.92.14.0/24 maxlen: 24
                          45.92.13.0/24 maxlen: 24
                          45.92.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135015013 (0x80c2a65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Jan  1 04:01:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78972a2fc2233bf6864da1463f91d77d796e09b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:be:c1:0f:84:67:c1:b4:60:a5:be:e6:8d:
                    d0:35:b2:a3:74:23:d8:4d:dd:69:90:7e:ea:44:e1:
                    d8:27:5d:45:a0:06:88:a5:5c:29:88:1e:ab:97:fe:
                    bd:db:96:d3:3d:49:80:16:66:6f:6d:f2:8d:f0:3a:
                    8e:b3:07:4a:f7:0a:ba:b2:28:b7:7a:ef:fe:0e:f2:
                    e2:10:29:a2:80:a0:6a:06:c6:8c:55:e6:f1:b0:c2:
                    71:e0:e0:69:14:30:1e:9d:2f:45:db:c3:8f:ab:e5:
                    2f:08:27:c3:8b:4f:1b:1e:e0:4b:87:ec:80:bf:b8:
                    4e:ba:86:70:e0:80:4d:a5:d3:ae:13:87:ff:d0:ca:
                    40:d8:95:c5:97:10:08:a9:71:d7:e8:d2:45:15:26:
                    55:ae:1f:6f:50:a5:0d:26:9c:e1:33:b7:da:91:99:
                    00:48:ec:99:e1:84:56:ec:f7:c6:93:30:a5:5f:c7:
                    4c:a2:5b:e2:08:a9:2b:d9:6d:c2:97:c2:90:ca:6a:
                    93:75:f8:79:24:53:80:c6:f1:3a:24:7d:3d:54:33:
                    30:a9:5b:4b:06:73:c7:ab:f8:d2:07:b1:dd:c4:4f:
                    80:7e:e3:95:01:1c:77:de:9a:d2:8e:79:54:fb:e1:
                    83:84:0c:ee:f9:a2:15:1f:90:55:6c:b3:88:af:cf:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:97:2A:2F:C2:23:3B:F6:86:4D:A1:46:3F:91:D7:7D:79:6E:09:B2
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/eJcqL8IjO_aGTaFGP5HXfXluCbI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:d7:32:15:fe:a4:d7:99:b5:27:37:98:b4:2e:71:37:03:fb:
         d2:ff:cd:c7:22:20:ae:9c:e9:87:ac:09:fd:c2:bf:82:9c:b9:
         d8:0b:46:e4:8b:e3:24:b4:fe:df:e7:2b:ae:0b:a1:a4:fd:be:
         e3:c7:69:8f:ee:f6:84:c1:0a:43:00:90:49:ff:b3:34:18:eb:
         26:16:a3:61:16:3c:8c:10:30:3a:1a:e1:13:ad:bf:f1:dc:01:
         87:cb:f4:25:1c:ad:df:df:ec:4c:e2:65:4b:f6:bd:9e:18:d1:
         72:2c:3e:8d:c2:a6:38:6a:b5:2d:14:05:0e:f2:f1:24:02:cf:
         13:41:b0:3f:14:ad:ad:1e:48:b5:03:b3:e2:0f:58:08:c9:33:
         31:ce:c2:b9:7b:f4:16:ae:8e:7d:6c:50:23:da:ad:62:4b:67:
         3b:c6:36:a5:7c:89:67:38:b1:8c:27:3b:22:45:ae:46:31:08:
         fc:f7:da:65:b9:76:88:02:30:e6:6e:5b:8a:5b:01:0f:9e:6c:
         ad:ef:08:1e:fc:06:9f:19:87:7c:40:35:57:c1:91:6a:07:ce:
         3d:ab:56:10:01:9f:0f:d3:d9:2c:55:98:f5:79:83:8d:e3:fe:
         83:01:18:c4:d2:49:bc:f5:f0:40:d6:59:36:7e:7a:65:13:8b:
         af:ac:1e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:58 2024 by rpki-client on console-ams.rpki-client.org