Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jEfPgEO9SuKkWYADdglpSSQsti8.roa
File:                     jEfPgEO9SuKkWYADdglpSSQsti8.roa (raw, json)
Hash identifier:          PdGTBfKUy8V8mHvnZp70VzyF7r1YYRrhEGjikzBVAbM=
Subject key identifier:   8C:47:CF:80:43:BD:4A:E2:A4:59:80:03:76:09:69:49:24:2C:B6:2F
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       0183A3101D3F35B4EB7A436AD9C78B2EB178
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jEfPgEO9SuKkWYADdglpSSQsti8.roa
Signing time:             Tue 04 Oct 2022 12:54:45 +0000
ROA not before:           Tue 04 Oct 2022 12:54:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40676
IP address blocks:        45.84.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a3:10:1d:3f:35:b4:eb:7a:43:6a:d9:c7:8b:2e:b1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Oct  4 12:54:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c47cf8043bd4ae2a459800376096949242cb62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:5f:31:c7:20:84:6b:97:af:d1:19:f7:be:
                    96:4d:ef:a5:9d:a3:f7:63:f8:c4:c9:e7:0f:56:06:
                    7b:ef:97:90:b1:5d:67:6b:3e:e9:d9:65:a9:38:11:
                    a1:70:00:a9:b2:d9:27:ae:12:89:d4:be:b8:98:2b:
                    93:bc:bc:be:56:46:5a:50:21:52:e6:fd:ae:f4:e3:
                    ad:4d:37:b5:a8:83:1c:cf:1a:d4:71:b0:79:1c:4f:
                    5d:ca:f8:ae:60:cb:71:71:0a:a0:4b:94:ed:68:73:
                    7b:e4:74:f3:69:cb:60:67:0d:46:5b:37:0f:f6:d9:
                    a2:be:c4:76:15:03:8a:8f:4e:dc:22:c4:1f:db:b5:
                    fe:ea:1c:b1:34:67:e4:58:de:61:dc:9b:df:73:e4:
                    64:aa:6b:b6:6a:39:d0:05:a4:10:d1:e8:f5:f7:8e:
                    23:72:59:a7:a3:8a:f4:aa:86:82:79:92:d4:f7:4d:
                    0d:eb:76:a3:5f:d9:c3:69:e3:ce:ea:46:ef:89:65:
                    01:c9:0a:21:70:a2:1a:e3:3e:2e:fb:aa:87:ee:6b:
                    4c:75:22:99:05:e7:33:63:1c:d1:47:23:56:25:8a:
                    b6:2d:89:47:24:32:75:db:15:62:5c:38:9a:8f:c2:
                    c9:bf:ff:76:ca:dc:c7:fe:cd:2b:5a:be:66:c4:ac:
                    43:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:CF:80:43:BD:4A:E2:A4:59:80:03:76:09:69:49:24:2C:B6:2F
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jEfPgEO9SuKkWYADdglpSSQsti8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:9c:56:10:00:18:d8:cb:1a:64:de:ff:2e:3b:ce:fa:9d:11:
         d0:85:f0:7d:44:36:27:37:a8:c1:77:69:41:00:e7:9e:46:c9:
         7e:e9:03:6a:f2:c0:d3:56:24:6e:5c:0e:75:06:c7:21:78:1b:
         74:58:15:6c:93:0b:9f:a7:ea:22:cf:e2:31:8e:79:62:ff:64:
         29:ec:de:30:bc:e0:48:82:d2:06:f0:8a:e2:d9:46:2b:66:3f:
         52:b6:07:7f:ad:c5:55:40:27:4d:1f:77:ec:12:22:13:a8:b2:
         0e:35:b7:d7:55:b5:bb:5c:85:e9:b7:e1:70:dd:8e:79:dc:9f:
         6f:ba:17:18:41:f2:62:54:9e:39:2b:9f:3a:4a:22:16:25:a3:
         94:b9:45:62:ba:85:c7:69:ee:b0:d6:8f:ba:5c:c2:63:03:fc:
         76:95:25:b7:36:94:e8:14:90:31:9c:21:57:12:99:57:65:78:
         8f:95:92:ef:47:ac:b3:e2:85:97:66:c4:77:4f:e5:e8:1b:89:
         3a:78:e0:e0:9a:b7:ea:c8:be:ee:b8:1f:0c:57:7a:8d:bf:98:
         94:b2:73:63:0d:70:c5:a7:2e:88:91:e5:55:07:c2:60:e2:fa:
         ae:4f:d1:f5:31:c0:6c:15:21:b2:94:0d:58:2e:c0:8a:9e:d4:
         c4:19:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:23 2024 by rpki-client on console-ams.rpki-client.org