Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/NiN5vRoW_tONIVtEp94GfUllQ6U.roa
File:                     NiN5vRoW_tONIVtEp94GfUllQ6U.roa (raw, json)
Hash identifier:          vGPXdJ+Hp+0OF4uSSDueikI7cyEGCXEs3pjZizfy8fY=
Subject key identifier:   36:23:79:BD:1A:16:FE:D3:8D:21:5B:44:A7:DE:06:7D:49:65:43:A5
Certificate issuer:       /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial:       010C67
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/NiN5vRoW_tONIVtEp94GfUllQ6U.roa
Signing time:             Tue 10 May 2022 13:17:55 +0000
ROA not before:           Tue 10 May 2022 13:17:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206975
IP address blocks:        45.155.82.0/24 maxlen: 24
                          45.155.81.0/24 maxlen: 24
                          45.155.80.0/22 maxlen: 22
                          45.155.80.0/24 maxlen: 24
                          45.155.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68711 (0x10c67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
        Validity
            Not Before: May 10 13:17:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=362379bd1a16fed38d215b44a7de067d496543a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:25:2c:77:16:ec:8b:65:da:fc:4b:3a:0a:
                    77:6d:1c:f0:d3:19:83:1c:cc:95:75:21:4a:75:d4:
                    c6:dc:7b:8c:58:40:ae:ad:79:c3:bd:b0:57:a1:62:
                    75:aa:ba:bc:20:c8:67:86:00:b5:b8:0c:bd:dc:ec:
                    c9:96:4b:db:5c:31:f6:6a:b6:3c:04:1f:12:72:89:
                    94:95:df:25:99:c9:72:85:45:fc:e1:80:a0:a3:53:
                    33:53:e0:f3:ee:b6:56:ce:4d:ec:bb:59:e2:2e:92:
                    6f:69:ba:cd:6a:40:08:43:f4:dc:08:2e:94:01:52:
                    fe:6b:46:39:51:44:24:a4:91:8d:64:b1:ff:21:e7:
                    02:ba:f8:8d:9d:67:29:f8:2e:e8:d0:85:0c:a4:24:
                    25:48:20:ca:14:0d:c9:a9:5a:b5:f7:00:02:b4:81:
                    e7:d1:bf:1a:4a:ef:8b:86:1c:c6:cc:64:c4:a3:e4:
                    23:2e:eb:03:42:85:3a:32:3f:e3:77:17:6a:4a:e4:
                    85:2c:c7:e2:af:17:6f:d6:3f:7b:59:cf:56:96:95:
                    d8:ce:0b:53:34:1f:f7:bb:e5:1a:75:cd:51:e3:04:
                    7f:12:18:f1:ac:da:8c:d6:33:3d:92:63:d0:c8:16:
                    6d:7d:46:3c:a0:fe:b2:b5:56:f0:46:50:34:d1:f5:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:23:79:BD:1A:16:FE:D3:8D:21:5B:44:A7:DE:06:7D:49:65:43:A5
            X509v3 Authority Key Identifier:
                keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/NiN5vRoW_tONIVtEp94GfUllQ6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:79:b4:d3:9e:10:04:f5:97:f1:29:d0:9f:ca:bb:5b:30:8d:
         ec:1e:f4:af:d6:9e:be:05:91:25:f9:ac:de:6e:30:60:26:49:
         75:ce:a7:af:96:98:da:85:67:5e:a6:89:2e:70:96:1f:26:e6:
         d3:9c:83:e4:27:67:9b:e1:44:52:34:4a:3a:55:41:95:62:fe:
         d1:26:5e:3f:f8:c4:9b:a1:ae:8a:c1:38:bc:b1:2a:7e:63:ac:
         31:69:8e:44:18:ca:92:73:e8:5c:56:1c:dd:3f:90:c5:14:b5:
         5d:8d:58:bb:20:42:b5:ad:e6:f9:fd:ec:6e:a1:01:9d:79:b8:
         5a:75:8e:fd:ed:1b:7f:ea:eb:db:98:a2:2e:b0:04:07:17:f4:
         18:bf:10:cb:e0:78:20:c3:f6:83:b1:c3:7a:16:52:82:8e:df:
         fe:00:b3:60:10:87:1d:2d:5a:c4:6a:7f:75:2b:9e:f7:b2:ba:
         9d:9a:ee:63:cc:cb:83:28:d8:d3:ed:e6:c8:4e:12:fc:51:61:
         d1:d8:f3:7a:0d:c9:30:af:15:b0:6d:05:ab:93:1d:ab:f7:e7:
         d1:1b:bd:10:b4:79:67:d9:07:c8:3c:7a:9a:3c:22:7e:61:b9:
         c7:9d:38:6a:df:ec:cf:5b:33:c8:a9:f4:53:2b:18:80:4c:a1:
         96:7a:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:21 2024 by rpki-client on console-ams.rpki-client.org