Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eNIc7Gv8kT440ErQnLiGetrbbxY.roa
File:                     eNIc7Gv8kT440ErQnLiGetrbbxY.roa (raw, json)
Hash identifier:          nR5M63bRrUs+u90/402i8j5RwigmPty2sTRRhUQsOSk=
Subject key identifier:   78:D2:1C:EC:6B:FC:91:3E:38:D0:4A:D0:9C:B8:86:7A:DA:DB:6F:16
Certificate issuer:       /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial:       06859FB1
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eNIc7Gv8kT440ErQnLiGetrbbxY.roa
Signing time:             Wed 09 Mar 2022 14:10:56 +0000
ROA not before:           Wed 09 Mar 2022 14:10:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        45.151.97.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109420465 (0x6859fb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
        Validity
            Not Before: Mar  9 14:10:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78d21cec6bfc913e38d04ad09cb8867adadb6f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:a6:f7:53:46:ff:30:05:24:58:15:9a:7a:
                    f2:cf:63:43:fb:d9:c5:0b:9d:0d:ef:46:8d:a1:35:
                    79:74:e2:0a:d4:1a:4b:8a:98:b9:52:7f:54:ab:16:
                    26:3b:73:9d:03:52:9a:b0:cd:16:b8:06:88:e4:13:
                    59:29:41:dd:c8:14:1e:eb:99:69:2d:c2:e9:09:ec:
                    f1:03:6c:ad:c5:58:8d:27:e7:78:80:2a:b2:a3:b0:
                    f1:85:ce:2e:d1:90:7a:dc:0c:87:99:a9:7b:d2:f4:
                    88:ed:0d:91:29:1e:8e:7d:ab:5b:da:7f:65:11:89:
                    77:94:89:dc:b9:2e:38:10:95:b5:e3:0b:d5:54:88:
                    27:37:12:f2:5c:d7:55:87:61:d2:b7:ee:20:0f:54:
                    4c:c3:dc:2e:bb:a5:28:b1:a3:1b:e6:f5:88:c1:86:
                    db:d5:e7:d5:9f:64:13:57:6f:07:a7:a3:f2:05:0d:
                    2c:37:2b:5b:cf:09:88:38:a0:10:ff:9a:71:6e:0c:
                    b3:8d:63:8e:bd:8a:2f:61:31:1d:56:01:08:f4:33:
                    55:76:fe:1a:d6:77:4c:b6:89:9c:de:fb:1b:06:1c:
                    e9:fd:e6:e5:47:a1:93:d6:4f:28:c5:3b:09:6a:76:
                    6b:0a:0d:95:9b:10:be:c5:a2:d7:5a:9a:67:8f:c7:
                    0e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D2:1C:EC:6B:FC:91:3E:38:D0:4A:D0:9C:B8:86:7A:DA:DB:6F:16
            X509v3 Authority Key Identifier:
                keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eNIc7Gv8kT440ErQnLiGetrbbxY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:2a:3b:b8:87:a6:a6:59:82:74:84:9a:2e:00:1a:1e:9e:45:
         8b:ac:55:44:c5:2e:c3:2f:37:62:4a:10:58:bc:9a:40:e1:e1:
         49:ad:61:dc:66:79:73:d3:00:51:27:47:4a:2e:4b:74:7f:fc:
         6e:e6:25:c6:99:f0:24:7e:e3:9d:9c:e3:f4:11:b8:9f:0a:09:
         91:04:42:83:4f:36:fe:39:bf:35:aa:b6:82:ca:71:60:56:84:
         35:52:70:66:0c:24:d7:28:bb:59:e5:49:c9:d0:f2:22:65:f0:
         df:1c:ce:fb:74:ac:67:18:fa:f8:62:4e:0a:90:1e:d2:21:ae:
         3c:6a:38:a0:99:01:c4:cc:d5:e6:df:80:18:31:cc:bd:e6:16:
         e6:61:25:d5:f6:29:2b:e5:19:69:76:d1:17:47:90:0b:e6:28:
         d8:c6:38:8f:3b:ac:af:9e:b7:e1:c4:29:2b:26:34:7d:ce:03:
         f4:6d:d0:70:96:61:f1:0c:ad:c3:93:3d:f5:e9:5a:ff:ac:77:
         0e:7a:18:a6:d3:fb:5e:b7:2f:b3:91:20:68:43:b2:8d:d5:13:
         1b:ec:7b:d5:2e:a2:69:47:7a:82:9f:8b:c0:d6:e4:30:4c:ff:
         4f:7d:53:c7:01:3e:f9:48:64:02:a6:44:88:95:33:78:b0:7c:
         ad:37:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:01 2025 by rpki-client