Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/u_grPOsou6Hwo5DFiAWppMqbWPM.roa
File:                     u_grPOsou6Hwo5DFiAWppMqbWPM.roa (raw, json)
Hash identifier:          lR/dfD25Cwc2uUAxklQJZjZUWYdc5bj41VdRUj/jRqY=
Subject key identifier:   BB:F8:2B:3C:EB:28:BB:A1:F0:A3:90:C5:88:05:A9:A4:CA:9B:58:F3
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       01826317899194BC8F1239E391C8B38219D2
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/u_grPOsou6Hwo5DFiAWppMqbWPM.roa
Signing time:             Wed 03 Aug 2022 09:44:23 +0000
ROA not before:           Wed 03 Aug 2022 09:44:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134963
IP address blocks:        45.93.18.0/24 maxlen: 24
                          45.93.18.0/23 maxlen: 23
                          45.93.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:63:17:89:91:94:bc:8f:12:39:e3:91:c8:b3:82:19:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Aug  3 09:44:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bbf82b3ceb28bba1f0a390c58805a9a4ca9b58f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:1a:95:f7:8a:8b:b4:a8:d6:86:25:1f:71:
                    ca:1b:55:c4:60:9e:01:12:2e:c0:2d:8e:7c:8f:54:
                    ac:03:b1:59:1e:b5:b2:93:2a:25:19:50:d1:e1:ce:
                    ab:e3:64:47:35:3d:2e:ae:99:7a:bf:77:c6:c3:b7:
                    b6:06:76:33:f2:68:f5:ab:2f:6d:c1:f4:5f:1c:47:
                    33:24:0c:64:e6:dc:dc:c1:cd:04:dd:dc:53:29:9f:
                    8d:c8:41:47:9f:f7:ea:36:c8:a4:06:e5:b2:94:59:
                    2e:36:51:71:d7:b9:59:31:68:a3:16:be:2f:b6:55:
                    e9:4c:45:d0:00:ef:28:31:00:76:82:19:96:32:ac:
                    34:78:ab:0d:1f:ff:62:5f:2d:52:cb:db:d4:24:d3:
                    c0:99:0b:7c:20:62:8e:0a:bb:10:d6:0d:ec:80:4b:
                    72:a0:b6:8d:cc:d3:a5:70:0f:2b:6d:a1:a1:c8:86:
                    08:ad:b4:d3:b3:ee:cb:58:9f:a7:01:1a:c3:1b:dc:
                    79:c5:60:7b:4d:c5:8e:84:e9:9f:59:1c:a4:e1:73:
                    c7:f9:80:43:ca:4d:41:53:cc:9a:98:c3:d1:77:2e:
                    2e:41:fa:7b:55:06:20:dd:11:c0:86:d8:3b:d7:39:
                    5f:e8:03:da:8f:46:3a:8a:95:4d:98:00:2e:b8:52:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F8:2B:3C:EB:28:BB:A1:F0:A3:90:C5:88:05:A9:A4:CA:9B:58:F3
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/u_grPOsou6Hwo5DFiAWppMqbWPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:70:92:31:6a:03:0d:5c:27:f1:14:d3:25:62:fa:e7:cd:36:
         f8:a3:1a:cd:ef:b5:17:a9:5b:da:d6:80:f7:65:f7:d7:78:2d:
         54:11:18:05:3d:e0:dd:a0:1b:15:e9:9e:b0:d9:e6:27:a7:bd:
         5f:89:41:04:c1:0a:38:0b:f5:e4:29:25:cb:b8:46:23:29:98:
         ee:38:be:25:12:42:a0:6a:0b:7e:fb:d1:bf:e9:e0:7c:43:91:
         85:cd:45:13:3a:dc:a8:b1:bc:64:33:dc:0c:87:5a:70:37:bd:
         36:49:a8:2b:80:dd:83:18:bf:b4:66:7c:77:76:ce:d3:f5:9b:
         c4:62:2d:c6:23:de:71:f4:c8:2a:3f:be:96:56:5d:4a:ed:df:
         19:5b:db:64:1c:11:30:3c:81:0f:f8:40:6c:2d:9d:a9:b7:9d:
         6c:e5:76:0e:db:cd:95:16:e3:7c:ac:1e:ec:91:d9:dc:62:08:
         73:3e:18:c1:bb:26:2c:18:eb:d4:10:d3:c1:c3:71:b0:a2:c7:
         d5:32:d0:12:6f:a9:8c:46:6a:4b:a2:af:56:ed:a1:da:12:6e:
         f3:57:8f:a3:d9:f0:7e:cf:88:cd:33:39:55:7c:96:37:ac:26:
         92:51:c8:f3:90:7f:ea:da:3b:84:7f:6d:7b:d7:e0:c9:02:c5:
         ad:80:39:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org