Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/dxdBtr4hO6G0rDuhv4ZHQ3BK1Ro.roa
File:                     dxdBtr4hO6G0rDuhv4ZHQ3BK1Ro.roa (raw, json)
Hash identifier:          OGBuEo78kPSGLE3hl512RAyMtW7va5qS98lPnJrgutU=
Subject key identifier:   77:17:41:B6:BE:21:3B:A1:B4:AC:3B:A1:BF:86:47:43:70:4A:D5:1A
Certificate issuer:       /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial:       056D96F0
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/dxdBtr4hO6G0rDuhv4ZHQ3BK1Ro.roa
Signing time:             Sat 01 Jan 2022 03:56:24 +0000
ROA not before:           Sat 01 Jan 2022 03:56:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208708
IP address blocks:        45.87.112.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91068144 (0x56d96f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Validity
            Not Before: Jan  1 03:56:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=771741b6be213ba1b4ac3ba1bf864743704ad51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:8a:49:90:52:f2:83:af:5f:1d:a7:9d:c2:
                    18:3d:fc:4c:1b:45:e3:96:56:b7:a3:35:b5:29:55:
                    ee:fd:c8:61:50:7d:a4:48:38:50:db:de:3f:0e:73:
                    e1:de:58:80:56:7d:45:5b:ff:21:2b:2c:a3:df:ca:
                    56:3f:d9:39:20:87:40:04:2e:fb:31:71:b4:17:dc:
                    8b:46:2c:a4:7a:05:99:72:ba:74:e5:12:3f:ef:57:
                    a6:72:f9:82:7f:05:88:44:8b:23:6c:3e:39:a6:7c:
                    53:c0:f1:81:be:20:a8:f5:c1:cf:4a:40:c9:f7:28:
                    3f:98:52:46:15:20:44:fe:cf:07:a1:c4:2d:c4:03:
                    a4:30:28:0c:4d:c4:9a:f5:15:fc:43:cd:6c:02:f4:
                    d5:85:55:e9:25:23:91:3d:4d:a4:5a:4c:fd:fe:e6:
                    98:ba:20:6c:b6:9f:e7:6a:8a:fe:95:0b:7e:6e:8e:
                    31:0a:1e:0f:0d:d7:29:98:a7:51:a4:10:f0:8a:db:
                    79:34:6a:0a:4f:ab:97:0f:46:83:b8:11:b5:e6:9e:
                    b9:27:74:5d:e6:19:61:ff:72:54:0b:81:e5:6e:83:
                    31:c4:af:76:58:cd:85:06:ce:63:24:73:30:91:18:
                    14:56:f8:67:f8:c4:95:5f:d2:7c:a6:10:fe:d2:94:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:17:41:B6:BE:21:3B:A1:B4:AC:3B:A1:BF:86:47:43:70:4A:D5:1A
            X509v3 Authority Key Identifier:
                keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/dxdBtr4hO6G0rDuhv4ZHQ3BK1Ro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:60:a6:5c:da:20:9c:67:e2:9e:67:c6:41:52:65:79:46:e8:
         fa:cb:0f:84:b7:fb:cb:00:1e:ae:3e:b9:f8:57:4f:a3:6e:60:
         74:c8:9a:8e:ac:20:13:e4:7a:d3:cb:e1:45:bd:b4:ca:30:e5:
         6d:b5:7f:a7:39:4d:50:46:a8:21:a3:32:f2:d6:3e:a8:fd:ef:
         15:df:ab:70:21:37:50:8b:b3:8d:7a:80:1b:c6:67:0e:44:64:
         d8:36:1d:c6:9a:56:12:2b:da:98:52:d4:46:be:ed:d6:27:53:
         46:7e:cd:65:1c:52:bc:c1:f8:07:f7:f2:74:5e:7c:e1:e1:b7:
         5a:72:a4:7d:a3:d0:69:45:36:32:67:10:40:31:fe:a0:63:ee:
         26:c6:e7:50:bc:4e:d7:54:50:17:d1:48:09:56:9c:36:57:24:
         da:bd:ab:ae:c7:b4:1f:21:ef:2e:40:00:e7:3d:f9:6a:4f:af:
         7e:c9:9d:8b:e2:ab:1a:15:2a:c1:5d:47:89:28:7c:a0:78:2b:
         e3:23:fc:9f:ee:cd:bb:20:7f:99:47:23:2f:51:9f:11:25:f6:
         05:3e:20:80:0d:e6:81:51:54:82:8c:ab:de:df:36:3f:33:49:
         f9:4d:f9:00:69:10:38:75:1c:95:f0:06:95:94:35:05:46:c4:
         b1:cb:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:21 2024 by rpki-client on console-fra.rpki-client.org