Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/94zsLVlTA26GHCnENeoFbOO-tzA.roa
File:                     94zsLVlTA26GHCnENeoFbOO-tzA.roa (raw, json)
Hash identifier:          LDyYNXJNcx8MP2WKxD67Vgfw0RIjhg+gNBZwuXpLJkU=
Subject key identifier:   F7:8C:EC:2D:59:53:03:6E:86:1C:29:C4:35:EA:05:6C:E3:BE:B7:30
Certificate issuer:       /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial:       0421DC
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/94zsLVlTA26GHCnENeoFbOO-tzA.roa
Signing time:             Tue 01 Feb 2022 12:46:10 +0000
ROA not before:           Tue 01 Feb 2022 12:46:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.143.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270812 (0x421dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
        Validity
            Not Before: Feb  1 12:46:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f78cec2d5953036e861c29c435ea056ce3beb730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e1:ec:58:bd:be:14:a2:f7:b2:4e:c1:83:84:
                    53:cf:f9:1d:3e:37:87:fa:26:92:5e:90:12:24:df:
                    3f:9e:a3:72:8b:96:ab:7c:30:3e:f7:60:b6:5b:8a:
                    a0:ba:35:00:d0:7b:6e:75:24:4a:f6:98:53:ce:5a:
                    b6:3c:1c:c3:ac:b2:59:82:32:34:8f:b3:8d:87:b2:
                    07:c7:18:6e:8b:0b:c0:d0:f2:0f:e9:51:fb:60:24:
                    c1:61:38:12:64:71:55:94:a6:30:44:51:e7:47:8d:
                    fe:f4:93:66:fb:ac:2b:a1:b4:74:28:0a:82:fb:57:
                    88:76:18:e9:aa:ef:a3:62:3c:91:30:2d:a1:e8:64:
                    21:c6:a2:39:15:ae:11:43:4d:ab:16:d5:56:7d:b0:
                    52:c8:42:2d:51:6c:86:60:28:2e:72:2f:35:67:63:
                    25:58:1f:e8:3f:93:cf:3a:fe:8c:e4:8a:bd:72:20:
                    4c:6b:fb:e6:05:48:e2:29:d5:b0:d8:ed:61:dd:36:
                    94:97:d5:c3:f5:2b:eb:6a:28:a7:18:aa:ef:9c:02:
                    68:12:23:a4:b0:64:98:bd:c0:55:fb:3a:fc:52:32:
                    cc:cc:ae:e3:df:f6:23:43:fd:b3:77:3d:74:41:e3:
                    a1:02:d7:02:8d:8f:e3:fc:47:b2:52:a1:0d:1d:f3:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8C:EC:2D:59:53:03:6E:86:1C:29:C4:35:EA:05:6C:E3:BE:B7:30
            X509v3 Authority Key Identifier:
                keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/94zsLVlTA26GHCnENeoFbOO-tzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:45:4a:40:d7:be:79:b7:a5:ea:eb:df:ee:4e:3d:ff:56:d8:
         23:c2:49:ae:86:98:a9:b2:2b:98:c0:4b:a2:2b:06:ff:44:da:
         db:2e:6f:27:c7:05:0e:f3:30:c3:56:a0:ed:fc:03:7b:8f:1e:
         8a:59:40:e8:91:2f:22:e1:37:50:f0:8c:f8:dd:59:2c:91:e0:
         1c:28:6a:ad:3f:95:98:68:96:f5:ba:34:9d:17:26:1f:55:ba:
         13:29:96:25:7c:a4:d2:e4:e0:af:1f:aa:f9:b6:a7:4b:c3:97:
         32:ff:a9:47:9f:bd:6c:0d:d9:f8:3b:8d:83:12:78:5b:67:d1:
         6a:12:de:c5:51:e0:13:32:4d:96:91:a2:0d:5e:cc:ff:e2:73:
         7d:cc:70:e5:7c:1d:a7:61:3a:2c:38:b5:00:68:05:06:17:43:
         3c:a2:fa:3d:b5:b8:4d:47:99:d6:1c:27:34:1a:f7:83:72:0e:
         df:cf:34:18:66:a1:18:bb:79:f3:f1:e6:58:eb:35:88:ba:f1:
         80:c7:62:3c:69:b1:71:5e:3c:fa:57:8c:9a:5f:c0:26:e4:5d:
         71:d7:1a:e5:9b:3f:04:8f:13:3a:fd:dc:f7:5c:a7:d1:33:f8:
         65:7b:ea:55:21:cd:9f:7c:71:ae:1f:b4:aa:cc:10:ee:52:0a:
         e5:55:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:30 2024 by rpki-client on console-fra.rpki-client.org