Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/LSmQaBTmOu2ZY5uvqo2TTrr5s4I.roa
File:                     LSmQaBTmOu2ZY5uvqo2TTrr5s4I.roa (raw, json)
Hash identifier:          PthiajNxTIcK5yutSWmX8geo8+W6tq9B6Q48sLQryTU=
Subject key identifier:   2D:29:90:68:14:E6:3A:ED:99:63:9B:AF:AA:8D:93:4E:BA:F9:B3:82
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       093DB85C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/LSmQaBTmOu2ZY5uvqo2TTrr5s4I.roa
Signing time:             Tue 08 Feb 2022 12:20:25 +0000
ROA not before:           Tue 08 Feb 2022 12:20:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45650
IP address blocks:        45.139.188.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155039836 (0x93db85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Feb  8 12:20:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d29906814e63aed99639bafaa8d934ebaf9b382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:aa:7e:06:36:9b:d9:a4:b0:54:4c:e4:b1:
                    1f:2e:47:05:4e:85:99:c2:16:d0:2e:09:db:a6:a1:
                    cc:a5:ec:53:b3:1b:31:9f:49:bc:83:81:2d:07:b8:
                    3e:2c:3d:a5:f7:e5:3e:c2:64:ea:45:3b:37:1b:fc:
                    c4:5e:ac:e5:c1:49:fc:06:d4:e2:06:6c:72:28:7a:
                    63:c7:23:5d:3f:02:b8:db:35:a4:15:dd:13:14:e7:
                    cf:8d:d3:48:c8:eb:92:d8:1c:f3:33:a0:b4:02:39:
                    86:67:2d:8d:9c:e9:56:a4:85:91:9d:dc:65:db:fb:
                    e9:90:13:da:66:0e:6c:42:bb:22:c0:71:8f:de:6e:
                    1a:1f:66:6f:a6:6c:ed:7d:d4:05:4a:b8:87:1f:e1:
                    69:f8:41:95:d6:e6:00:12:43:f6:92:aa:cd:b3:a1:
                    43:72:59:39:81:4b:c2:8c:dc:51:c9:bd:f4:0e:8e:
                    c0:5f:11:1c:2c:70:47:7e:dc:c6:d4:01:05:e1:04:
                    38:f9:30:8f:3b:e2:88:2b:37:1c:7f:ef:39:24:27:
                    65:a1:85:8d:3b:81:6f:55:1f:46:91:c6:e0:49:94:
                    41:b3:c7:d3:cb:24:2e:8a:52:55:fd:56:a8:09:1c:
                    4f:0d:ce:0e:81:8d:8f:e1:5b:38:ce:30:66:1b:81:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:29:90:68:14:E6:3A:ED:99:63:9B:AF:AA:8D:93:4E:BA:F9:B3:82
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/LSmQaBTmOu2ZY5uvqo2TTrr5s4I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:9b:5b:47:4f:53:f5:db:79:7a:4b:73:6f:16:1a:06:f4:
         57:d1:0e:a1:b0:85:ef:a2:f7:60:46:72:9e:a0:ab:2a:44:f8:
         5d:16:8c:dc:2d:d1:5e:88:35:51:c1:e3:2b:d6:55:6d:10:fc:
         ee:2a:ed:54:d5:2f:e9:10:26:ca:e7:38:21:39:66:e3:e7:72:
         b4:02:7f:8a:60:e1:db:72:dc:2d:1e:30:03:74:9c:c6:75:52:
         61:de:9e:14:f4:9c:e1:0c:ee:73:4c:e3:8c:b9:a2:b4:d7:d6:
         34:80:a0:75:eb:a6:24:b8:90:11:bd:c3:73:3a:c9:ec:80:81:
         96:f5:71:68:18:26:92:07:4f:2b:c4:05:f5:d3:e8:4d:a6:ba:
         a0:01:4c:21:00:0b:c4:a3:f9:b5:13:a2:1f:cc:ca:db:2d:3e:
         d6:cb:17:21:67:51:ab:11:b0:06:02:7d:99:99:6a:98:13:b0:
         53:55:92:ba:cb:51:7e:23:c1:0f:16:46:c6:1f:52:be:db:46:
         94:92:05:05:7c:0c:08:13:ad:00:9a:83:c0:10:13:36:41:5a:
         69:b1:52:ad:d3:66:b9:c4:32:30:38:0c:70:2b:3d:60:46:6f:
         05:c8:6c:c4:bc:7d:b0:58:70:a4:7a:ab:1e:9d:5f:7d:54:8d:
         c1:f8:70:c1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECT24XDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
N2QwM2YyOTgxODBjYzEwOWYxOWQ0YjE5OTJjN2Q3MWM1NmM4ZGNjMB4XDTIyMDIw
ODEyMjAyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmQyOTkwNjgxNGU2
M2FlZDk5NjM5YmFmYWE4ZDkzNGViYWY5YjM4MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMUBqn4GNpvZpLBUTOSxHy5HBU6FmcIW0C4J26ahzKXsU7Mb
MZ9JvIOBLQe4Piw9pfflPsJk6kU7Nxv8xF6s5cFJ/AbU4gZscih6Y8cjXT8CuNs1
pBXdExTnz43TSMjrktgc8zOgtAI5hmctjZzpVqSFkZ3cZdv76ZAT2mYObEK7IsBx
j95uGh9mb6Zs7X3UBUq4hx/hafhBldbmABJD9pKqzbOhQ3JZOYFLwozcUcm99A6O
wF8RHCxwR37cxtQBBeEEOPkwjzviiCs3HH/vOSQnZaGFjTuBb1UfRpHG4EmUQbPH
08skLopSVf1WqAkcTw3ODoGNj+FbOM4wZhuBNPECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQtKZBoFOY67Zljm6+qjZNOuvmzgjAfBgNVHSMEGDAWgBQX0D8pgYDMEJ8Z
1LGZLH1xxWyNzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Y5QV9LWUdBekJDZkdkU3htU3g5Y2NWc2pjdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvODJlMjUzLTAxNzctNGEyMC1iZWZlLTkxOGFjNjQ2MjY3OS8x
L0xTbVFhQlRtT3UyWlk1dXZxbzJUVHJyNXM0SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAv
ODJlMjUzLTAxNzctNGEyMC1iZWZlLTkxOGFjNjQ2MjY3OS8xL0Y5QV9LWUdBekJD
ZkdkU3htU3g5Y2NWc2pjdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2LvDANBgkqhkiG9w0BAQsFAAOC
AQEAW0ObW0dPU/XbeXpLc28WGgb0V9EOobCF76L3YEZynqCrKkT4XRaM3C3RXog1
UcHjK9ZVbRD87irtVNUv6RAmyuc4ITlm4+dytAJ/imDh23LcLR4wA3ScxnVSYd6e
FPSc4Qzuc0zjjLmitNfWNICgdeumJLiQEb3DczrJ7ICBlvVxaBgmkgdPK8QF9dPo
Taa6oAFMIQALxKP5tROiH8zK2y0+1ssXIWdRqxGwBgJ9mZlqmBOwU1WSustRfiPB
DxZGxh9SvttGlJIFBXwMCBOtAJqDwBATNkFaabFSrdNmucQyMDgMcCs9YEZvBchs
xLx9sFhwpHqrHp1ffVSNwfhwwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org