Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/gT__UTOdu3B0NP2cJIWyCbLVZkQ.roa
File:                     gT__UTOdu3B0NP2cJIWyCbLVZkQ.roa (raw, json)
Hash identifier:          uMxdKj9tAqCf3hX1rIrXY2Qilrsc/2G/FiRUbWXZMVM=
Subject key identifier:   81:3F:FF:51:33:9D:BB:70:74:34:FD:9C:24:85:B2:09:B2:D5:66:44
Certificate issuer:       /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial:       03B7216E
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/gT__UTOdu3B0NP2cJIWyCbLVZkQ.roa
Signing time:             Sat 01 Jan 2022 06:02:21 +0000
ROA not before:           Sat 01 Jan 2022 06:02:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203735
IP address blocks:        45.143.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62333294 (0x3b7216e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
        Validity
            Not Before: Jan  1 06:02:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=813fff51339dbb707434fd9c2485b209b2d56644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:1a:58:19:5d:35:5a:e8:81:fb:1f:48:0a:
                    db:c7:3a:62:4a:b8:89:99:b6:2a:7a:ee:f8:c1:6e:
                    d0:78:0d:c9:3b:3b:f4:cf:45:b4:3d:53:c4:56:dc:
                    fa:db:61:bc:d7:bc:e9:59:16:2c:bb:af:e1:7c:53:
                    2f:91:c2:a3:bc:fc:20:ba:5a:d2:56:15:e4:6d:7a:
                    88:fa:f0:80:30:f2:d1:7b:7c:e5:b4:b1:88:5c:cf:
                    22:58:a2:5a:1c:c8:a7:22:b7:b7:70:f8:36:fa:be:
                    20:f7:78:aa:6e:af:d5:8f:a2:48:a8:ab:a8:b6:f2:
                    c6:fd:cd:14:65:75:05:cc:ac:b9:3c:7b:2b:0c:cf:
                    c0:75:f9:a8:a4:08:de:4c:cf:44:71:ee:d8:c8:fc:
                    c3:16:48:d1:b8:0d:49:4c:67:39:2e:8e:21:1e:52:
                    60:89:85:bd:87:db:9f:4d:0d:b5:d3:7c:c2:90:1f:
                    96:bc:2d:c8:d4:77:d3:63:37:0b:bd:3a:54:f9:cb:
                    cc:93:fa:34:bd:2e:90:ee:81:59:42:c4:a9:dc:fc:
                    57:f6:eb:52:13:c7:6b:70:4b:5a:33:61:8c:39:e7:
                    99:45:ab:7e:25:75:b1:37:e2:63:4c:fa:d3:db:03:
                    6b:66:45:95:42:93:ac:18:45:6c:fa:4a:a5:41:c7:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3F:FF:51:33:9D:BB:70:74:34:FD:9C:24:85:B2:09:B2:D5:66:44
            X509v3 Authority Key Identifier:
                keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/gT__UTOdu3B0NP2cJIWyCbLVZkQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:48:e2:ee:81:b3:56:56:91:91:d8:4a:b8:f4:41:db:25:01:
         bd:65:62:1d:a2:8c:ac:25:c4:7c:9a:d0:cb:96:b3:4f:ca:0b:
         18:c9:b2:2c:58:8f:90:a2:14:17:e4:06:14:d5:9d:37:53:9c:
         ef:fe:36:ae:2b:7e:eb:da:cd:c5:f1:47:9e:32:c2:92:54:d0:
         b3:fe:85:36:47:a4:72:10:d6:ca:60:93:b3:12:b2:cf:50:3b:
         72:f3:7b:21:f2:19:d9:24:c2:5a:aa:f2:ee:0e:66:b6:a2:3d:
         07:14:a6:b2:d8:9c:71:7d:d2:0f:2b:0a:63:3f:fc:50:56:a3:
         51:27:95:da:84:59:44:79:ab:b0:70:99:d4:0f:5a:a8:12:3f:
         55:e0:ae:e9:79:3b:9f:c1:d1:f2:c8:35:48:4a:c5:ca:ba:51:
         90:a7:46:f3:cd:f3:04:f0:21:5b:9a:1e:d4:21:3d:8d:4e:03:
         ed:57:e1:34:9b:65:74:24:b9:5b:80:5c:07:04:91:6d:e6:aa:
         b3:cb:ad:df:a2:a3:d2:e3:27:93:c1:57:a5:7d:87:69:92:a5:
         e0:1a:89:26:aa:39:84:e7:cf:d4:66:dc:98:70:d3:3d:8b:0f:
         2f:a8:cc:ca:4c:d0:74:ca:d8:a3:c4:52:27:99:6a:19:5c:40:
         1b:67:58:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:02 2024 by rpki-client on console-fra.rpki-client.org