Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/wPUxYdg6ZA0c73z8du-x3MNwpgI.roa
File:                     wPUxYdg6ZA0c73z8du-x3MNwpgI.roa (raw, json)
Hash identifier:          mPBX4xgtFroWLUHaGQFSTISkTziBAyw+WfKROVhXkRo=
Subject key identifier:   C0:F5:31:61:D8:3A:64:0D:1C:EF:7C:FC:76:EF:B1:DC:C3:70:A6:02
Certificate issuer:       /CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Certificate serial:       BC73
Authority key identifier: C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/wPUxYdg6ZA0c73z8du-x3MNwpgI.roa
Signing time:             Sat 02 Apr 2022 19:31:29 +0000
ROA not before:           Sat 02 Apr 2022 19:31:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43581
IP address blocks:        45.155.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48243 (0xbc73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
        Validity
            Not Before: Apr  2 19:31:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0f53161d83a640d1cef7cfc76efb1dcc370a602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:e1:9f:f0:9d:cd:6d:75:75:78:9f:1e:2a:
                    72:19:e4:91:f4:c3:e0:e5:aa:65:da:c8:60:3e:6d:
                    30:30:af:ac:37:ed:57:fd:82:70:4d:49:1c:2a:1d:
                    4d:9f:a4:70:97:0f:20:21:76:ae:d3:52:1b:02:c5:
                    60:d9:b0:40:de:55:2e:60:ed:26:15:3d:a6:d6:04:
                    52:c6:f0:30:1f:e7:01:d8:29:99:c1:9b:eb:23:37:
                    a1:f7:c7:76:64:fa:21:42:14:bc:db:17:ee:fc:f5:
                    2d:09:b8:50:b9:ac:77:bf:35:65:b4:c3:2e:56:ba:
                    17:2a:a1:97:a0:4d:b1:6e:32:b4:b6:35:f8:a8:01:
                    81:6c:a7:cd:22:f8:75:d5:3d:03:89:2e:23:c1:42:
                    8f:b6:44:69:7b:8a:d8:29:d0:2d:0e:3f:4b:32:44:
                    60:0d:ed:62:e2:39:58:eb:54:93:d1:34:1c:07:ca:
                    90:26:f5:5f:f9:78:ea:c4:71:c4:d5:a0:a6:54:c9:
                    eb:3e:72:70:2b:18:16:11:3e:1a:c1:7b:46:64:5a:
                    b3:7a:6d:b3:9c:eb:d3:83:b1:20:75:84:b7:9a:59:
                    7a:a6:56:66:e2:64:7e:35:5a:16:8d:9f:a3:87:4f:
                    f4:ff:b3:50:c1:ba:e7:90:dd:a8:7c:67:8d:ec:d5:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F5:31:61:D8:3A:64:0D:1C:EF:7C:FC:76:EF:B1:DC:C3:70:A6:02
            X509v3 Authority Key Identifier:
                keyid:C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/wPUxYdg6ZA0c73z8du-x3MNwpgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:52:15:36:45:54:ae:87:2e:07:52:f6:04:eb:4e:1f:d6:c1:
         38:69:50:72:1a:16:86:e3:f1:b0:ec:26:e2:d3:7a:9e:0e:03:
         e5:45:d2:c5:60:59:ff:fb:02:af:63:c9:74:80:33:f1:25:af:
         74:58:38:eb:3c:73:72:f7:20:13:79:99:7a:77:6e:fe:01:86:
         9d:ab:60:2d:66:71:a1:ab:f1:7f:ef:8b:80:09:8a:25:58:e5:
         9f:97:57:32:83:5f:17:9c:a9:fb:71:24:61:43:c9:4a:8e:fa:
         f5:e2:41:35:58:ed:53:8c:3b:4e:c9:66:db:0c:c4:00:22:4d:
         1a:78:85:70:dc:20:3a:08:22:f3:c2:51:62:2e:13:a1:6d:0c:
         fd:0f:71:95:d5:ad:b6:94:e0:d3:41:12:bb:f0:0e:54:34:e6:
         69:12:5d:de:83:88:6e:9a:ca:be:c4:e4:82:9a:7b:db:1f:98:
         21:82:d8:32:e4:36:b7:43:da:3d:f8:92:e0:ed:76:b5:24:ae:
         49:c8:e1:12:81:a3:33:c1:bd:95:be:5c:97:1e:94:3e:e8:07:
         dd:07:9d:44:8d:1a:eb:ba:14:a4:0a:c4:d6:78:bf:ce:31:0a:
         3e:8d:db:a1:e9:35:76:6f:5f:83:78:85:a4:e0:c0:d4:56:2c:
         d6:63:8c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:27 2024 by rpki-client on console-fra.rpki-client.org