Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/E-8EYYu7HQ4sADSPspueJ36kRFU.roa
File:                     E-8EYYu7HQ4sADSPspueJ36kRFU.roa (raw, json)
Hash identifier:          K1AuF6haile43AtKoBGBKCCxGeNQBru6oic/mFNswAs=
Subject key identifier:   13:EF:04:61:8B:BB:1D:0E:2C:00:34:8F:B2:9B:9E:27:7E:A4:44:55
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0184CB17FAB342CB12F0837EDCF8293E1CEC
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/E-8EYYu7HQ4sADSPspueJ36kRFU.roa
Signing time:             Thu 01 Dec 2022 00:30:57 +0000
ROA not before:           Thu 01 Dec 2022 00:30:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204372
IP address blocks:        45.13.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:cb:17:fa:b3:42:cb:12:f0:83:7e:dc:f8:29:3e:1c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Dec  1 00:30:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13ef04618bbb1d0e2c00348fb29b9e277ea44455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:28:1c:9f:c2:37:0e:21:7b:a3:21:fe:c0:61:
                    42:19:8a:54:a6:5b:16:74:6e:55:2c:b4:6a:9a:b2:
                    72:84:1b:f4:9f:14:e2:4b:b0:26:ac:40:e4:71:2b:
                    a3:b2:39:ec:d0:3a:c6:79:f2:8c:b0:f5:86:65:38:
                    e6:6f:49:d2:95:3a:fa:17:a5:f8:61:a6:ea:1d:23:
                    87:ff:d5:7a:09:f5:0b:38:79:57:d5:01:78:37:38:
                    7c:28:f2:13:53:ff:a7:e3:e4:5a:da:71:ba:b0:38:
                    e5:40:57:ea:74:22:fa:6b:1b:0a:63:a4:c7:fd:4b:
                    8a:d1:63:0e:c9:ed:15:a8:12:5d:0b:91:6f:bf:cd:
                    46:86:7e:f0:b1:41:e1:f9:56:b4:1b:70:e2:fd:3f:
                    6f:1b:bc:42:1a:89:28:6c:dc:95:52:d2:ed:25:6f:
                    2b:04:23:ef:65:5e:8d:47:1b:6b:9d:b7:df:ef:0b:
                    91:b7:8c:36:d8:b7:f1:c6:96:eb:f1:2b:3d:d0:4a:
                    4e:fb:7a:23:8b:f3:c3:40:98:b7:f4:09:ad:72:2b:
                    5e:0d:bf:6a:7b:b0:2f:35:ea:78:11:b6:0e:60:f5:
                    2a:27:a4:7b:a8:44:29:f1:5b:a9:3f:a7:19:49:b9:
                    5c:74:9c:cb:04:09:8a:71:1c:a1:87:b8:95:88:fa:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EF:04:61:8B:BB:1D:0E:2C:00:34:8F:B2:9B:9E:27:7E:A4:44:55
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/E-8EYYu7HQ4sADSPspueJ36kRFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:02:6b:45:7a:a3:4a:68:fb:c9:f5:ff:fd:00:13:14:12:ec:
         aa:b8:5f:bd:06:8e:f3:b3:d2:0f:c1:0e:b6:73:b2:d9:ad:48:
         b9:38:fd:46:c4:a1:ea:37:78:a6:e3:01:93:be:b6:45:94:03:
         f2:eb:95:dc:bd:64:03:82:14:d4:e0:5a:58:b3:51:45:52:4a:
         8c:26:fa:b2:e6:e5:d6:c8:e4:41:02:2c:f8:f3:7a:d2:0d:5b:
         ff:2c:3b:bd:c6:d1:cf:d8:af:30:16:cd:fd:82:c6:ac:15:29:
         a1:92:94:e5:91:f9:e3:91:78:ee:26:4e:33:5a:77:52:07:5c:
         f6:dc:09:ad:15:c9:c2:46:3b:99:74:da:c2:02:92:34:51:c4:
         3d:9b:ca:33:21:ae:ee:a7:ac:07:fb:c7:bb:f7:49:48:5f:a3:
         d4:fa:d2:fa:62:b2:49:50:34:ae:ea:97:17:70:da:93:d3:4c:
         82:86:7d:63:a7:ba:3e:22:19:91:b9:d3:c3:d5:f9:94:3d:07:
         a6:84:aa:67:27:14:97:49:55:cf:c7:10:2d:4b:50:97:49:15:
         f6:41:a5:fe:0b:90:0b:f1:fb:54:b2:6b:c1:78:15:3f:14:53:
         72:1f:00:39:91:dc:6a:3a:a2:5a:a4:13:60:4d:2e:ea:aa:52:
         09:52:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:37 2024 by rpki-client on console-ams.rpki-client.org