Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/7UQxf4I2bonBJ7nLbHD_pQNYrsU.roa
File:                     7UQxf4I2bonBJ7nLbHD_pQNYrsU.roa (raw, json)
Hash identifier:          kG/0D9C+kAI63AnCjlLAt2kJi/j+gZagcnVMK15NUUk=
Subject key identifier:   ED:44:31:7F:82:36:6E:89:C1:27:B9:CB:6C:70:FF:A5:03:58:AE:C5
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       0A0752AD
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/7UQxf4I2bonBJ7nLbHD_pQNYrsU.roa
Signing time:             Sat 01 Jan 2022 05:03:26 +0000
ROA not before:           Sat 01 Jan 2022 05:03:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40676
IP address blocks:        141.98.47.0/24 maxlen: 24
                          45.133.158.0/24 maxlen: 24
                          45.133.159.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168252077 (0xa0752ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jan  1 05:03:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed44317f82366e89c127b9cb6c70ffa50358aec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:7e:41:f2:5b:78:3e:af:38:29:01:55:7b:
                    5e:b9:a4:09:6e:ab:49:d8:69:ab:70:97:09:a7:ed:
                    5b:39:35:1f:65:a4:60:13:07:96:f6:85:50:84:7b:
                    f1:a6:da:49:1b:e9:eb:fd:d7:56:ff:5d:72:e4:29:
                    eb:d5:67:9b:3c:38:0d:10:6d:c0:f7:3f:cb:81:4d:
                    da:e8:cf:11:2e:5c:32:65:2e:0a:ec:65:ec:0b:48:
                    69:e4:bc:e2:42:8b:e9:f2:d6:c7:6a:e0:f9:be:52:
                    f1:d2:ad:26:b9:de:41:70:08:49:a7:74:53:06:a0:
                    99:ac:db:c0:9f:3d:bd:58:d1:be:81:63:7f:f4:da:
                    3d:df:d9:49:76:ad:24:c1:1d:5c:23:56:63:7f:6c:
                    5a:3d:32:87:74:e2:ef:da:3a:f8:ad:c2:c2:11:d6:
                    1f:80:83:51:f2:86:bf:ac:3c:a0:f1:3a:2b:44:eb:
                    9b:5f:df:f0:da:bf:14:9b:2a:5f:e0:cb:b8:75:60:
                    a4:14:fc:fb:91:89:ef:2a:75:f5:10:87:7f:2a:a7:
                    bf:ae:3c:3a:03:66:63:6a:98:d4:3d:e2:84:93:fd:
                    21:31:2f:f7:61:27:97:e6:86:79:53:3f:f8:bf:6a:
                    35:0b:b6:72:3e:14:55:9a:3e:4d:61:d7:2e:72:62:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:44:31:7F:82:36:6E:89:C1:27:B9:CB:6C:70:FF:A5:03:58:AE:C5
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/7UQxf4I2bonBJ7nLbHD_pQNYrsU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.158.0/23
                  141.98.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:d0:e0:c6:65:8a:40:e8:14:4e:fa:44:fd:88:13:40:d4:
         54:15:11:26:b5:26:97:51:c1:42:d5:34:34:97:e7:9a:fb:ec:
         99:a1:13:a2:a0:e7:b6:e5:c9:33:5c:e7:eb:e1:32:f0:88:e2:
         a2:19:ad:0e:bd:67:c4:d2:c2:71:12:7a:a9:f9:55:c1:f3:cc:
         81:28:e0:24:b9:40:80:76:78:6b:7d:8b:59:f2:c4:ae:b2:86:
         1b:02:e1:57:f0:6b:d7:57:52:2e:d5:39:05:fb:c3:93:60:1e:
         64:39:75:fd:9d:fc:97:e4:93:05:8a:78:d0:71:62:bb:a3:ba:
         25:2a:67:4b:17:c2:43:dd:70:55:ed:03:b5:d5:72:f9:27:ad:
         09:20:f3:74:73:88:75:8f:92:f6:00:6e:a3:b7:67:f8:0f:46:
         da:6b:c1:16:5d:2f:55:10:3e:b2:9d:a2:1f:e1:84:1c:cd:d2:
         f3:0f:b5:50:dc:73:03:02:31:c9:08:5e:db:dc:40:20:de:01:
         9e:95:52:46:01:eb:67:05:25:5b:4d:a0:2c:ea:93:7c:97:32:
         bc:c7:08:d6:2d:93:6b:a1:a0:e5:2c:55:62:e2:f8:71:9d:c4:
         1b:b8:44:55:82:b0:4d:e1:ef:9d:3d:59:d0:cf:e6:cb:44:ce:
         7c:27:c8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:55 2023 by rpki-client on console-fra.rpki-client.org