Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/e2aB10jxNoKSzfwJF4XVFXX45NA.roa
File:                     e2aB10jxNoKSzfwJF4XVFXX45NA.roa (raw, json)
Hash identifier:          YZWvNs9T9CjA25lGzY8MMuTC1QW/s7ifFs/CFI7KAzQ=
Subject key identifier:   7B:66:81:D7:48:F1:36:82:92:CD:FC:09:17:85:D5:15:75:F8:E4:D0
Certificate issuer:       /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial:       0181FBC96A1E2E27253E082D971ECD959A60
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/e2aB10jxNoKSzfwJF4XVFXX45NA.roa
Signing time:             Thu 14 Jul 2022 08:18:09 +0000
ROA not before:           Thu 14 Jul 2022 08:18:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140947
IP address blocks:        185.81.126.0/24 maxlen: 24
                          45.80.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fb:c9:6a:1e:2e:27:25:3e:08:2d:97:1e:cd:95:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
        Validity
            Not Before: Jul 14 08:18:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b6681d748f1368292cdfc091785d51575f8e4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:06:ba:97:01:28:36:41:34:85:4c:01:a9:
                    fb:8a:2d:4e:b3:08:e0:85:46:94:da:c0:b3:28:04:
                    c0:c9:63:0e:85:a1:dd:8b:e9:7d:55:a6:65:08:99:
                    08:f8:62:8e:27:93:62:18:aa:ba:0d:3c:65:fe:3c:
                    a7:09:bc:11:62:e4:47:1a:d7:6e:45:1d:a3:82:92:
                    6d:fa:3a:d3:ea:73:64:5a:1b:bf:0b:a6:e3:8f:24:
                    7e:db:97:64:11:d4:65:89:34:2a:b5:e0:11:38:6c:
                    d6:37:c0:ba:cc:c7:0d:7b:99:b5:99:9f:41:12:99:
                    80:cb:05:28:ea:07:e6:ed:6e:42:8c:ed:79:d3:5a:
                    53:74:aa:0b:f1:a0:6b:eb:21:bf:b9:16:c5:35:5f:
                    84:b0:08:c0:71:c0:1d:9c:46:3f:ec:ca:11:09:5c:
                    8f:24:79:1b:58:ea:e5:96:ba:ac:e7:ad:fe:60:25:
                    ee:e2:7f:68:58:40:1b:50:5e:1b:ef:07:ca:bc:20:
                    87:10:28:84:94:1e:0c:0f:ee:f6:b6:be:e1:3e:64:
                    0b:9f:8f:e2:78:72:cf:39:9a:99:1a:12:e2:8e:73:
                    a1:7f:31:58:4a:36:83:b6:b2:db:28:42:a0:31:89:
                    43:63:e5:86:e4:c3:69:28:e8:9f:39:86:1b:7c:e4:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:66:81:D7:48:F1:36:82:92:CD:FC:09:17:85:D5:15:75:F8:E4:D0
            X509v3 Authority Key Identifier:
                keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/e2aB10jxNoKSzfwJF4XVFXX45NA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.31.0/24
                  185.81.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:ec:17:57:83:56:45:26:47:a8:84:00:4a:9e:ba:9a:0f:7e:
         18:02:0a:8c:b2:df:fa:cd:a3:d8:c4:f8:f9:fe:24:10:bb:42:
         cb:d0:de:f1:95:d9:48:00:91:fd:53:db:0b:28:b6:3b:d7:ef:
         e6:93:f5:b7:59:08:ea:c1:f6:9d:1d:93:db:c7:6f:e1:e7:d9:
         f2:48:08:78:97:27:b2:7e:2e:fb:ef:4e:cf:56:f8:c8:29:4a:
         0b:05:98:5b:9a:9c:04:ae:58:15:cf:b0:e0:ac:c6:bc:d0:40:
         66:17:64:4f:56:d7:b5:1b:d3:43:e5:f0:a4:da:d4:4c:38:32:
         f9:5c:77:0f:b8:ce:42:b8:7e:2f:0b:e5:d4:f2:34:52:28:d4:
         07:4b:f6:f3:2d:47:c2:b9:cd:bc:e4:77:16:6d:ae:f6:b3:8c:
         92:68:1b:8d:a3:20:85:75:98:66:d0:92:07:36:f6:38:7e:7f:
         88:08:8c:b4:6c:55:43:62:76:9a:cd:c9:27:3b:30:1d:ac:9d:
         e1:64:87:fb:41:bb:66:62:7f:3b:1d:a3:2c:dc:bd:47:82:da:
         e1:1a:9b:6a:ba:4d:89:5e:eb:7b:31:a1:b2:8c:40:94:9e:e8:
         3d:ca:e5:a6:8c:56:a2:21:77:d0:f9:0e:73:81:46:1d:96:9b:
         9e:b2:04:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org