Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/yDamaBwJL4rnG8Iy1ZSylnR_toc.roa
File:                     yDamaBwJL4rnG8Iy1ZSylnR_toc.roa (raw, json)
Hash identifier:          jSRjzHaOkPIVbRfmtbrbAPXQ1m+/eHFiSSF/aBuK8VQ=
Subject key identifier:   C8:36:A6:68:1C:09:2F:8A:E7:1B:C2:32:D5:94:B2:96:74:7F:B6:87
Certificate issuer:       /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial:       03146CB1
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/yDamaBwJL4rnG8Iy1ZSylnR_toc.roa
Signing time:             Sat 01 Jan 2022 13:59:17 +0000
ROA not before:           Sat 01 Jan 2022 13:59:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21859
IP address blocks:        45.132.236.0/24 maxlen: 24
                          45.132.237.0/24 maxlen: 24
                          45.131.176.0/24 maxlen: 24
                          45.131.177.0/24 maxlen: 24
                          45.128.144.0/24 maxlen: 24
                          45.128.145.0/24 maxlen: 24
                          45.137.8.0/24 maxlen: 24
                          45.137.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51670193 (0x3146cb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
        Validity
            Not Before: Jan  1 13:59:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c836a6681c092f8ae71bc232d594b296747fb687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:e5:01:66:10:43:9c:f6:38:18:57:95:1f:
                    77:1f:70:3d:17:df:12:a8:bd:6f:9f:13:29:56:c4:
                    69:ea:23:cf:27:00:2d:16:a5:8b:17:f8:d1:8b:60:
                    85:60:d6:a5:bb:b5:0e:28:c7:c8:cf:52:9e:25:1c:
                    65:cb:26:f8:e6:1d:e8:50:cd:62:71:bd:fc:e4:8d:
                    76:36:ec:68:a4:fd:b6:d6:21:71:af:97:f0:d9:f6:
                    ae:ab:91:99:3a:8f:21:bf:b7:e7:95:73:a4:a9:a8:
                    16:e0:87:b3:93:c0:92:36:6b:7e:0b:26:df:1b:05:
                    64:4f:b2:78:94:96:72:4b:04:2e:dd:7a:8b:d7:c5:
                    e0:45:9d:a0:69:d7:59:cf:b8:28:35:12:e9:5a:1e:
                    74:a2:c5:01:51:23:aa:a9:5c:13:5a:64:a3:27:db:
                    42:31:8e:c9:11:38:0f:20:68:10:43:4f:79:54:7c:
                    a1:da:49:c0:79:0c:a7:2e:50:a8:03:95:c6:83:a9:
                    af:cf:6b:07:7b:ce:50:c4:2b:2f:b5:86:84:54:05:
                    43:64:56:e4:b8:dc:6b:cf:1b:43:6a:d6:30:6f:4e:
                    e4:83:d2:75:94:74:70:85:7b:ac:26:ab:44:78:75:
                    7d:7e:54:8d:28:96:a3:bb:50:47:30:44:0b:14:e6:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:36:A6:68:1C:09:2F:8A:E7:1B:C2:32:D5:94:B2:96:74:7F:B6:87
            X509v3 Authority Key Identifier:
                keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/yDamaBwJL4rnG8Iy1ZSylnR_toc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.144.0/23
                  45.131.176.0/23
                  45.132.236.0/23
                  45.137.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:f1:be:44:86:88:19:37:71:a8:aa:c6:6e:29:83:24:6b:
         b5:56:cf:2d:81:64:62:74:57:c9:8a:bf:ff:36:d6:6a:d5:66:
         c7:e2:ce:24:8c:8c:a1:3d:98:29:4e:ef:53:fc:47:02:8f:d7:
         3f:c9:c6:d3:fe:f0:75:5e:b2:e0:8b:92:a1:ae:df:58:5c:fd:
         17:b0:92:90:c9:58:5c:94:1e:28:09:31:7c:29:b3:b3:34:41:
         ec:0d:c6:13:24:0c:9e:ac:37:cd:c7:cd:f3:ec:c9:4d:b7:32:
         30:5d:59:cb:88:d2:ff:15:92:e2:4e:6d:10:9b:b1:c9:9a:ab:
         09:4e:52:36:34:ea:be:9b:9c:99:d6:97:b1:b7:2b:f0:53:f4:
         7a:fa:4b:e6:52:e7:01:ac:8a:0e:8c:d6:14:ff:ca:62:34:18:
         73:2d:b2:bf:ea:17:88:f2:7b:54:88:0a:c4:9c:63:1e:45:a4:
         3c:b3:42:29:58:af:e1:05:54:11:ef:09:5c:af:10:2b:5a:63:
         d7:e1:5c:ef:4b:ed:1d:16:4e:3c:55:7c:26:59:8e:b3:ec:4c:
         86:64:1f:f5:cd:c6:03:c3:d5:c2:e7:cc:76:87:40:b1:65:39:
         9c:fb:89:08:68:13:be:82:76:38:66:17:07:44:59:7b:d1:eb:
         d4:1a:43:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org