Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/zC2MbyKuEZO6uYgg6kMLJfWl_K4.roa
File:                     zC2MbyKuEZO6uYgg6kMLJfWl_K4.roa (raw, json)
Hash identifier:          nBAdeHgGJ/0f3mIKwQxg3KzYparYyxvJUVgWdZSAcdk=
Subject key identifier:   CC:2D:8C:6F:22:AE:11:93:BA:B9:88:20:EA:43:0B:25:F5:A5:FC:AE
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       01DECE52
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/zC2MbyKuEZO6uYgg6kMLJfWl_K4.roa
Signing time:             Tue 08 Mar 2022 09:10:50 +0000
ROA not before:           Tue 08 Mar 2022 09:10:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18345
IP address blocks:        45.84.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31379026 (0x1dece52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Mar  8 09:10:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc2d8c6f22ae1193bab98820ea430b25f5a5fcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:84:94:24:2f:43:15:a2:4d:e7:71:2c:df:
                    31:c1:87:f4:ec:6a:4e:9c:61:6d:fc:49:e4:7e:d0:
                    f5:68:1d:f4:0b:32:c8:d1:12:2f:b1:11:b4:61:be:
                    7b:fc:52:df:f4:9c:95:7f:f8:4e:68:7e:f8:f5:0b:
                    e0:10:ba:07:37:60:0f:c7:0f:a3:59:43:b1:bf:9f:
                    2c:ee:9d:b1:3b:67:43:cd:a4:05:30:54:c3:80:0e:
                    79:fa:7c:3a:b2:63:3e:da:3e:46:20:e6:ea:aa:d8:
                    8e:e0:65:47:c1:4b:4b:81:96:5e:b1:15:8e:8c:44:
                    35:a6:1f:3e:c4:c1:a5:30:16:fe:6a:67:6b:e0:4d:
                    6c:55:9a:de:4d:40:8f:6c:51:96:65:8b:23:59:a3:
                    44:2f:26:19:f8:e1:5f:0e:6c:88:88:95:95:62:6d:
                    9b:58:55:88:9b:f6:52:2e:f6:04:41:7b:d9:52:dd:
                    fd:f3:f0:bd:2c:ba:e3:ee:80:92:f5:bb:e2:d2:af:
                    ee:23:61:67:99:5e:b4:cd:e2:d7:2f:6f:9f:55:05:
                    36:43:36:a6:cb:b2:43:3e:8a:4f:7d:74:27:bf:6c:
                    bd:9a:c7:bf:bb:e5:23:30:dc:9f:47:4d:06:a6:5f:
                    91:db:78:90:84:8e:b6:35:f0:d7:f7:17:e4:58:04:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2D:8C:6F:22:AE:11:93:BA:B9:88:20:EA:43:0B:25:F5:A5:FC:AE
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/zC2MbyKuEZO6uYgg6kMLJfWl_K4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:e7:1c:47:68:67:6e:a3:a3:25:eb:3c:1a:cf:60:38:b5:
         25:e7:c5:95:42:be:19:2a:4c:80:99:06:55:2f:d5:f4:0f:fa:
         57:d7:b7:75:f7:1d:3b:ab:98:61:3d:ed:c1:56:c5:1b:d9:36:
         ca:51:35:42:a7:d5:ff:3f:63:cd:70:ab:0d:57:c5:f8:03:3f:
         3d:cb:f5:6e:b3:59:1c:21:20:8f:46:de:7c:9a:b4:ad:c3:a8:
         db:d1:ae:f9:11:0d:21:58:94:f1:77:ca:4b:5c:02:df:a9:01:
         b5:d0:df:36:ac:79:04:97:82:cd:22:61:c0:04:85:08:03:38:
         f6:18:c4:b9:58:b7:10:17:92:42:d8:43:90:c8:63:d3:5f:f6:
         07:50:b7:02:16:1d:2b:23:40:7b:cc:65:10:b2:dc:10:7a:2d:
         9e:27:90:3e:85:b9:1d:5c:d3:70:d8:1f:63:5a:a8:0e:7d:28:
         be:ae:31:ec:64:76:07:84:4a:89:1f:52:5e:ef:a9:d5:98:45:
         87:27:e7:7a:75:20:09:0d:81:8a:12:7d:21:78:55:b6:92:ea:
         67:a3:4f:c0:a4:ae:dc:c7:7a:ee:97:dd:d6:60:a6:11:2e:80:
         87:ae:e7:17:cd:a8:9a:81:c8:11:eb:41:d3:8e:d6:3a:1e:a0:
         21:1f:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:37 2024 by rpki-client on console-ams.rpki-client.org