Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/eU92byI72per_SMDdVU7S5FH6g8.roa
File:                     eU92byI72per_SMDdVU7S5FH6g8.roa (raw, json)
Hash identifier:          mVVciByJA4gQ6dfib6fpfeMR+C4DTT6/5McGIWmE1V4=
Subject key identifier:   79:4F:76:6F:22:3B:DA:97:AB:FD:23:03:75:55:3B:4B:91:47:EA:0F
Certificate issuer:       /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial:       08327297
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/eU92byI72per_SMDdVU7S5FH6g8.roa
Signing time:             Sat 01 Jan 2022 00:52:18 +0000
ROA not before:           Sat 01 Jan 2022 00:52:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208844
IP address blocks:        45.82.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137523863 (0x8327297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
        Validity
            Not Before: Jan  1 00:52:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=794f766f223bda97abfd230375553b4b9147ea0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:72:2f:8b:24:7f:bd:91:5e:f4:7d:fe:10:
                    ce:22:da:3d:c3:34:07:e0:6f:fe:2c:99:b2:cb:2c:
                    68:8c:ec:31:04:31:58:04:af:a5:87:bc:ff:d0:04:
                    78:3f:c7:a4:6d:d1:05:8c:87:90:d2:d7:65:1a:1b:
                    f0:f0:5a:1d:92:14:fe:fd:dd:51:30:ba:b3:4d:06:
                    ae:ca:2e:39:8a:4a:d1:c8:60:fe:5a:2f:73:27:2f:
                    81:62:84:bd:26:57:ed:ea:58:57:9e:07:79:1a:9a:
                    8f:e0:c1:c2:21:14:2c:d9:78:6d:ca:c9:27:da:b4:
                    7e:53:8d:6a:1d:f3:72:89:53:b4:03:9d:75:45:d9:
                    dc:e3:1f:a5:55:ef:7d:00:b3:7a:65:40:ab:fb:ab:
                    44:51:3a:67:19:a6:59:d3:75:29:4e:13:5c:6e:8a:
                    44:62:d5:32:17:f0:65:ee:52:9a:37:72:1c:27:43:
                    1f:3c:5b:69:ba:47:cd:6a:87:ad:81:38:b2:1e:0d:
                    8a:3a:f0:54:28:74:bb:fa:7a:03:18:aa:03:bb:6f:
                    77:5f:41:de:4b:1a:48:36:e5:bf:c9:30:c3:0e:17:
                    f7:8c:58:9b:39:6d:db:48:08:23:0f:14:50:c6:b7:
                    1e:e1:f3:31:08:10:b1:bf:f5:63:95:77:ce:65:0e:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4F:76:6F:22:3B:DA:97:AB:FD:23:03:75:55:3B:4B:91:47:EA:0F
            X509v3 Authority Key Identifier:
                keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/eU92byI72per_SMDdVU7S5FH6g8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:09:39:72:d6:56:24:36:e9:9f:d6:91:7a:c9:be:4a:b4:87:
         e3:bb:b8:de:54:5b:28:a4:81:9e:90:ec:f0:b2:bc:99:b2:f0:
         12:ff:bc:ce:d8:77:55:36:f7:6b:bc:61:aa:54:74:38:8b:fa:
         6c:7f:ba:a0:8e:a2:7c:99:ec:b4:f9:5d:c4:8c:50:fa:c0:3b:
         32:9c:ac:51:8f:19:7c:06:d9:28:af:7d:6b:63:81:bb:16:10:
         a4:b2:f5:31:85:6f:5c:10:f1:e3:ec:b6:1a:e3:c5:7f:ee:0f:
         20:bf:a5:63:4e:53:58:5a:39:2e:c3:22:b9:44:bf:ec:cd:ef:
         45:ae:c9:a8:f4:50:6f:2f:00:79:77:37:ea:4f:79:57:ce:f8:
         f2:55:01:44:07:7a:b2:89:b2:8f:ea:4e:9c:49:ce:c0:9a:f2:
         2b:ca:8a:eb:7f:c8:07:31:4a:66:5f:a5:ad:c2:f4:bd:1c:32:
         59:86:10:b2:27:03:10:f0:33:8e:cc:2e:10:bd:ba:9e:94:15:
         9b:4a:08:5c:ff:aa:ce:6e:45:0e:dd:6e:52:ab:c7:6e:2a:2a:
         17:bb:2c:f2:dc:85:ab:aa:57:07:d8:59:c0:36:b9:88:46:fb:
         40:59:18:ef:c1:9d:8b:28:1b:38:f8:bd:ed:b3:19:f0:a5:27:
         9a:48:1f:ce
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECDJylzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjEzMjc2Y2JjYTY3OTNjMzM0NTdhOWJmMjJmYzEwYjM4MjMwMWY0MB4XDTIyMDEw
MTAwNTIxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzk0Zjc2NmYyMjNi
ZGE5N2FiZmQyMzAzNzU1NTNiNGI5MTQ3ZWEwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJCaci+LJH+9kV70ff4QziLaPcM0B+Bv/iyZssssaIzsMQQx
WASvpYe8/9AEeD/HpG3RBYyHkNLXZRob8PBaHZIU/v3dUTC6s00GrsouOYpK0chg
/lovcycvgWKEvSZX7epYV54HeRqaj+DBwiEULNl4bcrJJ9q0flONah3zcolTtAOd
dUXZ3OMfpVXvfQCzemVAq/urRFE6ZxmmWdN1KU4TXG6KRGLVMhfwZe5SmjdyHCdD
HzxbabpHzWqHrYE4sh4NijrwVCh0u/p6AxiqA7tvd19B3ksaSDblv8kwww4X94xY
mzlt20gIIw8UUMa3HuHzMQgQsb/1Y5V3zmUOjWMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR5T3ZvIjval6v9IwN1VTtLkUfqDzAfBgNVHSMEGDAWgBTGEydsvKZ5PDNF
epvyL8ELOCMB9DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hoTW5iTHltZVR3elJYcWI4aV9CQ3pnakFmUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2QvMjgxOGI2LTFjMTMtNDcyNC1iZTkyLThjZDQzOGI1ZjI2MC8x
L2VVOTJieUk3MnBlcl9TTURkVlU3UzVGSDZnOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Qv
MjgxOGI2LTFjMTMtNDcyNC1iZTkyLThjZDQzOGI1ZjI2MC8xL3hoTW5iTHltZVR3
elJYcWI4aV9CQ3pnakFmUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1SgDANBgkqhkiG9w0BAQsFAAOC
AQEAJwk5ctZWJDbpn9aResm+SrSH47u43lRbKKSBnpDs8LK8mbLwEv+8zth3VTb3
a7xhqlR0OIv6bH+6oI6ifJnstPldxIxQ+sA7MpysUY8ZfAbZKK99a2OBuxYQpLL1
MYVvXBDx4+y2GuPFf+4PIL+lY05TWFo5LsMiuUS/7M3vRa7JqPRQby8AeXc36k95
V8748lUBRAd6somyj+pOnEnOwJryK8qK63/IBzFKZl+lrcL0vRwyWYYQsicDEPAz
jswuEL26npQVm0oIXP+qzm5FDt1uUqvHbioqF7ss8tyFq6pXB9hZwDa5iEb7QFkY
78GdiygbOPi97bMZ8KUnmkgfzg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:23 2024 by rpki-client on console-fra.rpki-client.org