Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/FwVSaNcr96tiS7cKJx5eBTRAGXw.roa
File:                     FwVSaNcr96tiS7cKJx5eBTRAGXw.roa (raw, json)
Hash identifier:          m64VdjWcGUHH+psEgCfmK+StMZjH7rP0b/tJiCIcGEA=
Subject key identifier:   17:05:52:68:D7:2B:F7:AB:62:4B:B7:0A:27:1E:5E:05:34:40:19:7C
Certificate issuer:       /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial:       093DB7CB
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/FwVSaNcr96tiS7cKJx5eBTRAGXw.roa
Signing time:             Sat 01 Jan 2022 04:58:19 +0000
ROA not before:           Sat 01 Jan 2022 04:58:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35482
IP address blocks:        45.66.181.0/24 maxlen: 24
                          45.66.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155039691 (0x93db7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
        Validity
            Not Before: Jan  1 04:58:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17055268d72bf7ab624bb70a271e5e053440197c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:85:91:b9:8e:c0:65:78:bb:bf:8e:fe:fa:
                    18:01:94:1b:a4:d3:28:93:15:f1:9f:2a:3e:4c:43:
                    7c:d7:1c:23:39:a9:79:84:d9:5c:2b:fd:a1:05:0a:
                    1a:c2:22:4b:23:11:80:6a:77:04:45:52:85:b2:bb:
                    39:7a:17:7b:98:bb:b7:ee:dc:38:07:80:04:a4:30:
                    35:0a:9e:1c:04:89:12:1c:6c:a0:e0:13:64:d3:48:
                    7f:e1:18:e7:e4:fa:11:35:eb:3d:e0:f2:0b:83:4a:
                    a2:f4:92:ae:dd:c8:b5:7d:ce:c9:90:b8:52:c1:1a:
                    6a:2b:8d:50:31:f8:44:fb:a4:92:ab:27:05:0f:b6:
                    96:5c:fb:18:54:ad:9e:91:0a:26:6c:47:b0:92:53:
                    a5:76:59:64:e5:c2:91:d9:4c:1c:75:47:13:e7:d0:
                    1f:83:c3:79:b1:48:ca:6f:70:62:d4:e9:e2:70:4c:
                    ac:fd:6f:d1:da:d8:74:f4:12:02:dc:b4:32:2e:38:
                    2f:ac:9c:ed:93:51:0c:f6:84:d8:ab:ad:ad:47:ab:
                    d5:5c:2e:b8:ac:dc:37:fc:fa:7c:11:37:45:52:04:
                    3e:80:82:21:01:a5:f5:fe:3f:a5:de:39:d4:9e:62:
                    83:c0:98:04:ed:1e:8f:b9:20:82:f5:37:a7:97:bb:
                    d5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:05:52:68:D7:2B:F7:AB:62:4B:B7:0A:27:1E:5E:05:34:40:19:7C
            X509v3 Authority Key Identifier:
                keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/FwVSaNcr96tiS7cKJx5eBTRAGXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:9c:c2:d1:6d:c2:a4:e4:5f:e3:30:20:9f:68:b4:eb:a1:2b:
         56:37:f7:e5:5b:cb:16:61:23:20:43:67:6c:76:2e:0b:90:ed:
         a2:ef:56:f5:66:91:5d:a2:1f:05:b4:41:bf:65:bb:e7:98:0f:
         b4:9e:7d:89:a2:95:41:9d:cb:6a:40:3e:ae:3d:3a:b9:b8:d9:
         9f:42:8a:95:a9:f8:7f:1e:a9:2d:d0:c2:1e:c9:f4:ab:36:36:
         a8:61:07:be:6d:97:b2:f4:f1:f2:3d:70:2a:40:36:98:0a:46:
         0d:7f:c6:d4:e2:50:2b:aa:39:3f:72:89:f4:49:a6:aa:54:88:
         50:67:8f:37:f2:4f:de:d2:ad:c0:d4:0f:07:c8:bb:6e:31:8d:
         34:ae:0f:21:65:0a:c9:00:8e:4c:44:9c:ad:d1:23:82:c8:9f:
         3a:ba:39:f8:57:0b:80:f4:23:ae:30:2a:3e:f7:98:0a:ad:44:
         4d:ad:b7:27:7d:fd:96:74:43:21:1f:01:e0:05:01:75:76:d2:
         ac:3d:bb:ce:26:e7:cf:f3:ed:f7:79:c0:41:57:cc:6c:36:86:
         0e:ff:ac:4e:f5:fa:6c:c2:40:df:88:e8:12:e6:3d:ca:a6:34:
         48:58:61:49:cb:97:2a:43:71:d2:8b:60:5e:e5:6c:bc:fe:c3:
         26:09:c2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:07 2024 by rpki-client on console-ams.rpki-client.org