Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/R7NxMSciHYth8Of0m5GdLAeAukI.roa
File:                     R7NxMSciHYth8Of0m5GdLAeAukI.roa (raw, json)
Hash identifier:          Odgvc1alBAlkuk8aOmMAnKWgBob6RW3b8qNjtigJA+o=
Subject key identifier:   47:B3:71:31:27:22:1D:8B:61:F0:E7:F4:9B:91:9D:2C:07:80:BA:42
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       018248EE755975DC79788B894B2371EF52CC
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/R7NxMSciHYth8Of0m5GdLAeAukI.roa
Signing time:             Fri 29 Jul 2022 07:49:23 +0000
ROA not before:           Fri 29 Jul 2022 07:49:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51765
IP address blocks:        45.83.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:48:ee:75:59:75:dc:79:78:8b:89:4b:23:71:ef:52:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Jul 29 07:49:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47b3713127221d8b61f0e7f49b919d2c0780ba42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:cc:07:e8:c9:cf:c7:09:fa:38:0d:7a:f3:
                    72:49:db:7c:7d:62:24:b2:1a:f5:8c:a2:5e:ce:3b:
                    55:aa:92:70:ec:6f:70:fc:24:e0:7c:65:35:ec:29:
                    e1:ab:78:95:9c:16:b3:81:be:7d:b3:35:16:4a:c5:
                    c0:1a:a2:bb:82:2c:c6:77:2e:0d:bb:b4:46:07:1f:
                    ad:04:83:70:a3:2f:df:13:e5:9c:89:a3:93:0c:8f:
                    1d:cd:15:30:b8:0b:0b:52:95:fc:19:ca:e9:fc:42:
                    0b:cf:02:d5:5e:e1:ff:b9:49:fc:7a:4e:24:6c:96:
                    51:be:0a:63:91:10:93:bc:85:2e:86:be:6b:34:f9:
                    59:ad:ca:50:bd:39:f7:17:f2:89:27:fa:0b:15:e9:
                    bc:d0:f0:a2:9c:53:03:8b:b2:12:d4:06:87:84:a0:
                    b2:c1:22:00:5b:12:48:19:0b:90:79:4e:0c:43:d0:
                    47:16:74:3f:74:8d:55:68:11:b8:c4:6a:33:31:54:
                    ac:4e:c5:47:8e:f5:b7:9e:7e:58:d5:ce:97:e1:40:
                    80:ff:ef:de:7e:0a:04:33:90:4c:28:2b:79:a6:ed:
                    81:2d:3c:b4:8b:9f:a1:09:d1:3b:78:1e:2f:dd:09:
                    fd:22:a0:86:b9:37:89:24:8e:0d:98:56:66:c9:e4:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B3:71:31:27:22:1D:8B:61:F0:E7:F4:9B:91:9D:2C:07:80:BA:42
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/R7NxMSciHYth8Of0m5GdLAeAukI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:81:e8:46:55:d8:b5:08:e0:29:9a:94:b0:5e:8b:b5:cd:ff:
         b1:4a:c2:97:a7:30:f2:94:1f:5f:f6:4e:16:d3:88:e1:86:e7:
         74:8f:4e:e6:74:8d:cd:35:47:69:97:3a:8f:db:3d:ec:39:83:
         91:66:2d:01:34:44:1a:4e:8e:92:69:56:62:5d:7c:24:d3:5a:
         7c:26:27:75:9d:56:b4:49:3a:11:c7:c2:29:96:7c:e1:b6:06:
         3d:ea:37:52:60:23:d8:34:c6:1f:12:4a:40:7b:7f:14:10:05:
         e9:cb:16:37:b6:b1:b1:ec:1e:1b:94:54:58:f1:95:01:28:88:
         98:dd:4b:17:8e:eb:e6:50:f8:f9:88:29:10:af:d5:aa:41:f8:
         1e:3d:e8:ec:44:15:75:30:0c:fc:39:25:8f:be:a8:ac:ad:15:
         b9:20:2f:49:f0:26:b9:a5:41:eb:8c:fb:69:a1:ae:25:0f:60:
         42:58:ba:46:82:7b:0b:79:65:7b:76:fb:96:ab:84:ee:a5:18:
         e0:9b:42:1c:db:c7:6c:ac:9a:e1:c8:f7:46:17:83:d9:da:f7:
         23:6e:4a:b7:67:e1:dd:b5:31:2e:18:c8:75:55:ae:b8:c8:fe:
         2f:da:52:be:38:eb:1b:fe:36:3a:3d:67:17:21:b7:e2:24:69:
         16:0a:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:13 2024 by rpki-client on console-fra.rpki-client.org