Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/tTejABPhy6vYmZL1EeFarmFAX24.roa
File:                     tTejABPhy6vYmZL1EeFarmFAX24.roa (raw, json)
Hash identifier:          SwU5G/u4fYtv98PqHA0Cc5LUCl1OtaAbjP38DvfYZH4=
Subject key identifier:   B5:37:A3:00:13:E1:CB:AB:D8:99:92:F5:11:E1:5A:AE:61:40:5F:6E
Certificate issuer:       /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial:       0AE50E
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/tTejABPhy6vYmZL1EeFarmFAX24.roa
Signing time:             Tue 01 Feb 2022 16:22:12 +0000
ROA not before:           Tue 01 Feb 2022 16:22:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.143.135.0/24 maxlen: 24
                          45.143.134.0/24 maxlen: 24
                          45.143.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713998 (0xae50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
        Validity
            Not Before: Feb  1 16:22:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b537a30013e1cbabd89992f511e15aae61405f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:6a:10:f7:37:54:92:87:2e:8a:47:f4:04:
                    59:c9:59:fe:31:98:cf:82:e9:30:75:29:8c:05:30:
                    89:40:42:3d:1d:d7:c8:39:77:4c:0d:68:3f:40:59:
                    ea:a6:29:90:ec:fc:e9:af:e6:3b:49:55:d4:db:f9:
                    77:d3:71:25:56:70:24:ce:89:d7:84:3d:c1:e4:84:
                    06:0d:ab:30:8b:11:e5:37:40:85:68:fb:b8:09:14:
                    4e:37:31:c2:f1:d5:7d:9c:a3:20:bc:cd:8a:60:2e:
                    b4:d5:6b:77:29:09:72:41:10:07:9c:19:99:e6:f4:
                    8e:5f:c1:7f:74:6b:93:25:60:81:7c:c1:a6:c8:6b:
                    1e:96:76:09:02:d9:c5:22:83:71:8e:15:86:00:93:
                    c0:43:b7:ae:3b:82:a1:b2:9b:1d:d1:ed:48:78:1c:
                    eb:fb:a0:38:b7:d4:9e:f2:7a:20:ee:dd:1b:f8:ae:
                    a6:4e:a0:5a:fc:9b:0a:0b:4f:b2:3f:fb:0f:80:4a:
                    f5:ab:4c:b2:6e:eb:14:2f:d3:0c:72:df:0c:4d:22:
                    99:12:5a:c9:ed:85:bc:80:e0:dc:3f:f8:fe:d2:29:
                    bf:1e:23:c6:33:97:08:97:de:a4:1e:05:75:ea:d2:
                    07:80:39:36:1d:a2:f5:1e:e8:20:a0:dc:75:dc:e8:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:37:A3:00:13:E1:CB:AB:D8:99:92:F5:11:E1:5A:AE:61:40:5F:6E
            X509v3 Authority Key Identifier:
                keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/tTejABPhy6vYmZL1EeFarmFAX24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.133.0-45.143.135.255

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:96:0f:55:9d:2b:d1:9b:45:46:49:60:b9:13:65:c5:de:
         88:29:16:df:51:07:fe:a5:fa:c2:39:da:99:c8:bd:89:79:d0:
         5d:3d:85:31:3d:b9:3a:99:fc:8e:30:29:54:76:e6:11:58:0b:
         91:e6:37:bc:3b:da:f1:5f:1d:6c:15:60:71:6c:0d:7b:a5:d9:
         1e:fa:ad:6c:ba:e1:0d:c0:d2:54:45:39:e1:70:45:5a:9e:b5:
         99:e0:80:b6:63:62:19:71:3d:4a:ef:f4:1c:22:f6:67:fe:5b:
         b7:65:10:bc:85:f4:9e:65:a2:b1:f1:c7:75:9c:7f:ff:65:61:
         76:b4:9a:93:1e:d7:3a:0b:f4:bf:d4:6c:4f:bd:45:11:5a:ff:
         b1:c2:13:08:79:9e:50:45:ee:7b:58:e3:6b:aa:30:71:7e:e1:
         fb:d9:b1:c2:40:bd:a1:f3:65:2a:eb:80:42:82:c1:8e:68:71:
         20:f9:20:95:3b:31:d0:86:de:0a:47:c8:80:48:0c:ab:5e:fd:
         e9:a5:f6:da:79:bc:5e:da:4d:a5:84:c4:cc:1a:03:8c:a9:38:
         f4:07:01:d0:78:bf:5b:5a:cb:d7:82:1f:28:7b:6e:75:e5:e2:
         27:27:2b:75:0b:51:43:98:b2:d7:a8:83:8a:3d:93:2c:58:fd:
         81:cf:8f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:00 2024 by rpki-client on console-ams.rpki-client.org