Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rgH6wXesHPHEVEz6ktNyQtQk5Q8.roa
File:                     rgH6wXesHPHEVEz6ktNyQtQk5Q8.roa (raw, json)
Hash identifier:          5I8dEVAyrpJPdeKsaGQrg5KC1qwwdweqxaiyX0z6Tc0=
Subject key identifier:   AE:01:FA:C1:77:AC:1C:F1:C4:54:4C:FA:92:D3:72:42:D4:24:E5:0F
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       03CA6A1A
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rgH6wXesHPHEVEz6ktNyQtQk5Q8.roa
Signing time:             Sat 01 Jan 2022 02:56:34 +0000
ROA not before:           Sat 01 Jan 2022 02:56:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50673
IP address blocks:        45.150.196.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63597082 (0x3ca6a1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Jan  1 02:56:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ae01fac177ac1cf1c4544cfa92d37242d424e50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:62:65:4c:99:df:63:5e:27:23:f8:36:ca:
                    2c:68:ab:68:41:89:5f:7b:51:de:09:d6:4b:94:62:
                    8a:02:b6:3a:e7:79:f1:da:cb:29:ac:16:87:f2:c9:
                    ab:83:b5:54:7d:19:fd:25:0c:66:9f:1c:bb:68:dd:
                    53:b6:02:82:21:59:f3:5f:91:e5:f0:13:f3:82:cf:
                    a7:52:17:01:0b:38:86:b9:b2:37:47:b9:30:7b:ec:
                    3f:74:db:a6:18:29:96:cb:bd:b7:a6:1d:c0:b3:5d:
                    05:df:02:4c:2d:71:90:f9:52:5d:ff:b2:e1:fe:b8:
                    dd:78:cd:8d:00:b7:fa:cc:15:92:33:c6:0d:79:bf:
                    9e:82:90:57:20:73:b5:20:bd:92:9b:88:7a:35:02:
                    86:fd:6e:04:68:b9:ed:9e:c0:18:89:02:b8:0a:0c:
                    3e:92:07:89:02:f6:8a:41:43:b0:07:ec:9c:fa:c7:
                    e5:6f:c5:e0:a6:94:3d:fd:70:84:1c:e7:e3:f3:35:
                    6e:5c:a6:9f:f3:fc:e9:33:0b:4f:1d:27:ad:f8:09:
                    ce:53:dd:48:d0:8e:b7:7c:a0:4f:6e:fc:dd:47:4f:
                    42:28:2e:db:dc:e5:af:de:f0:6a:12:a3:99:a6:de:
                    7f:2c:22:7c:63:33:4c:1b:be:13:5a:96:86:53:89:
                    e3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:01:FA:C1:77:AC:1C:F1:C4:54:4C:FA:92:D3:72:42:D4:24:E5:0F
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rgH6wXesHPHEVEz6ktNyQtQk5Q8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:75:89:e6:3f:6a:20:89:7c:93:da:6e:7d:54:0c:0e:e0:27:
         68:05:c4:f3:c0:b6:a4:7c:0a:c8:09:67:d3:d5:7f:1d:82:0f:
         3d:3d:8a:86:d5:ba:ed:7d:5c:cd:f4:b7:06:00:67:85:3d:38:
         2c:35:3b:16:f9:e1:08:51:f5:9b:6c:bb:00:82:4a:c3:88:08:
         a5:b1:93:74:87:16:35:eb:74:d6:bb:2e:eb:49:20:d9:13:59:
         7d:0e:0e:55:02:22:07:ef:e8:72:f4:47:0d:92:e4:da:b9:33:
         78:fd:9f:dc:0d:57:3e:ce:25:66:36:63:47:3c:ce:75:80:60:
         25:32:fb:55:99:77:f5:c3:ac:58:06:d9:15:35:bc:ed:46:f1:
         73:c4:b7:03:f5:78:b1:c2:c0:d7:89:83:ee:f4:b0:fe:ee:d3:
         28:55:ec:a0:e3:5b:99:d6:49:b0:84:d7:81:5e:d6:c2:ad:a0:
         18:8a:5b:6b:50:01:7f:c6:f3:cb:d0:e7:69:2b:a3:32:6e:37:
         07:eb:b2:0f:43:b6:59:3a:0d:6d:54:42:01:e1:cf:36:91:f1:
         97:45:96:33:a8:07:a6:eb:ce:e4:73:94:70:94:59:9b:f1:fd:
         f6:e0:3c:9e:06:b3:13:ff:1c:83:7b:b6:89:65:e7:03:95:c6:
         f3:9f:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:14 2024 by rpki-client on console-ams.rpki-client.org