Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/K_0P7FvJLDGTimIujdzbXYewZQ8.roa
File:                     K_0P7FvJLDGTimIujdzbXYewZQ8.roa (raw, json)
Hash identifier:          0trDNYr3kI7U70SuN6vcAlOvcRwheCPUcV5WbMRdW8I=
Subject key identifier:   2B:FD:0F:EC:5B:C9:2C:31:93:8A:62:2E:8D:DC:DB:5D:87:B0:65:0F
Certificate issuer:       /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial:       088F1532
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/K_0P7FvJLDGTimIujdzbXYewZQ8.roa
Signing time:             Thu 05 May 2022 20:00:34 +0000
ROA not before:           Thu 05 May 2022 20:00:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42521
IP address blocks:        45.150.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143594802 (0x88f1532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
        Validity
            Not Before: May  5 20:00:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2bfd0fec5bc92c31938a622e8ddcdb5d87b0650f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:1a:ed:eb:bd:d9:39:79:e8:06:d9:94:a3:
                    2a:e0:4a:30:db:5e:59:40:f5:63:ad:8c:7d:9a:89:
                    a9:bd:dc:9f:e6:9f:b2:fd:96:fb:89:59:02:71:d9:
                    2e:c6:d1:20:95:75:52:4c:40:e8:34:7e:34:ed:87:
                    52:6e:e1:0e:00:3c:f3:7e:20:0e:7c:40:8e:f0:1e:
                    33:ac:0f:b8:66:c7:f3:d0:65:7e:09:73:5d:79:ac:
                    73:b0:4e:e6:5b:83:ef:05:b0:15:c5:3a:58:33:6b:
                    da:27:bd:8e:d0:6c:52:4f:9e:1a:00:f7:b3:dd:40:
                    e3:0c:bc:3d:bb:73:06:de:b4:a9:64:15:d5:29:d6:
                    fc:0a:be:c5:82:2e:76:77:3c:aa:7e:a5:b5:37:7e:
                    db:65:74:0b:6d:b2:8d:c7:88:cb:fb:f8:68:be:0b:
                    bd:50:0f:20:c9:ad:21:fb:26:53:e0:21:ab:b6:ca:
                    86:c1:91:02:6c:a1:67:ad:c1:51:7d:7e:fd:7f:8d:
                    32:c4:5e:24:02:0e:f4:66:3b:75:fa:7f:83:e3:5c:
                    47:1e:8b:7a:d3:dd:78:cd:81:a4:73:22:04:ae:94:
                    44:b4:d6:80:d8:c6:1d:0a:08:41:70:62:56:a9:79:
                    1b:c7:b8:b3:b4:4c:d1:fc:dd:88:1a:9d:1b:fa:45:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FD:0F:EC:5B:C9:2C:31:93:8A:62:2E:8D:DC:DB:5D:87:B0:65:0F
            X509v3 Authority Key Identifier:
                keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/K_0P7FvJLDGTimIujdzbXYewZQ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:72:9b:e5:d1:d8:91:e4:d7:d1:a8:1e:1d:52:6b:4c:13:59:
         e7:2b:8d:a6:f6:d5:12:e8:a3:cd:95:e9:8e:35:e4:30:2b:d6:
         00:1f:43:02:f7:16:2f:7a:c7:ea:75:09:d6:68:17:b9:47:d6:
         1b:76:57:e4:6b:73:f1:6b:8a:04:84:60:6e:2a:c8:5d:90:ae:
         46:a6:2a:91:01:8e:6c:04:8a:78:70:31:73:18:61:bd:cb:c9:
         43:df:b2:c3:50:4f:af:d3:b7:c0:8e:16:ec:a0:9a:0f:ef:fa:
         91:72:47:d0:40:1c:9e:3a:05:10:63:99:14:47:e0:8d:72:b3:
         b1:d1:a9:1c:63:a7:37:96:9c:dd:88:2a:51:02:87:76:f5:2b:
         08:51:15:29:c0:32:0f:e5:08:75:51:63:0b:66:34:34:ec:2c:
         58:b7:29:74:1e:9a:54:22:2a:d7:63:1f:b4:a2:04:49:92:bc:
         42:08:8a:fd:a4:a4:ca:83:0c:29:32:74:ec:02:5b:83:f5:b0:
         9e:a2:91:15:c2:3d:28:30:88:78:31:fb:d2:96:ea:0c:65:1d:
         8d:c3:cc:ba:12:f3:75:99:5d:6f:0d:d1:07:1b:23:86:8a:e3:
         56:d3:32:1c:50:56:30:c6:a1:01:4b:49:c8:24:90:84:83:80:
         e5:6a:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org