Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/6USBHtZwt2CUaXf4Cz4sarvABQk.roa
File:                     6USBHtZwt2CUaXf4Cz4sarvABQk.roa (raw, json)
Hash identifier:          86NclSB2WL7HgNnW5N9mAD+ozrQPhx2CFLdXI6ai0NE=
Subject key identifier:   E9:44:81:1E:D6:70:B7:60:94:69:77:F8:0B:3E:2C:6A:BB:C0:05:09
Certificate issuer:       /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial:       040E5015
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/6USBHtZwt2CUaXf4Cz4sarvABQk.roa
Signing time:             Sat 01 Jan 2022 15:55:34 +0000
ROA not before:           Sat 01 Jan 2022 15:55:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44400
IP address blocks:        45.140.28.0/22 maxlen: 22
                          89.40.110.0/23 maxlen: 23
                          89.37.42.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68046869 (0x40e5015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
        Validity
            Not Before: Jan  1 15:55:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e944811ed670b760946977f80b3e2c6abbc00509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:35:0b:e0:ec:ae:8e:a2:b5:52:45:91:60:
                    b4:3b:bd:3c:93:a1:d4:a5:c6:0e:dc:de:0c:51:38:
                    cd:d5:72:cc:88:b7:58:30:bb:5b:e3:23:b1:84:0e:
                    0b:72:fc:64:6a:02:4b:fc:14:f3:0f:5c:14:f3:bf:
                    a7:99:93:7e:83:e8:df:cf:be:13:67:be:11:1f:80:
                    8a:70:51:cf:2d:ca:8f:e2:3e:6c:77:dc:f7:0b:85:
                    ca:e3:c9:47:68:35:f5:f0:b4:8c:25:5d:59:e6:2a:
                    82:3f:a7:ba:f8:85:c3:e4:04:d3:3e:98:99:f4:af:
                    eb:57:7f:f4:d1:85:97:b2:56:97:55:4f:5e:b0:49:
                    8b:04:47:1c:e4:af:d1:65:cc:53:ba:1a:e0:33:bc:
                    f0:b1:15:ce:0f:84:3b:82:7f:2a:a3:a6:55:62:e6:
                    1e:83:7b:1e:e3:44:b2:c1:0f:cc:3f:f5:b9:9f:3e:
                    b6:09:97:9a:2a:71:d4:7a:83:21:83:12:33:73:6c:
                    b7:f3:2f:ba:e2:b0:80:42:f0:f6:e2:a8:20:c0:d0:
                    05:c3:24:b7:82:39:b4:68:a4:3c:87:81:75:9e:11:
                    34:2e:1a:0d:8b:c8:73:dc:14:d7:fc:dc:c2:fa:85:
                    15:5b:ac:31:68:1f:b2:2d:6f:f5:48:73:fe:5a:93:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:44:81:1E:D6:70:B7:60:94:69:77:F8:0B:3E:2C:6A:BB:C0:05:09
            X509v3 Authority Key Identifier:
                keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/6USBHtZwt2CUaXf4Cz4sarvABQk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.28.0/22
                  89.37.42.0/23
                  89.40.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:e2:b8:19:97:a6:db:4e:ad:2b:95:5f:f3:bc:83:ef:3f:
         86:a1:72:5a:f7:6b:50:73:d1:50:32:82:b2:d6:e0:3d:3c:7c:
         87:69:a0:dd:ee:11:e1:33:fa:71:95:86:9d:24:f5:e8:72:5b:
         e8:aa:42:37:37:85:43:ef:6d:81:10:0e:c2:d8:62:fa:02:f5:
         26:c0:b9:4d:5f:b9:f8:fa:0f:cc:3a:3a:d7:14:65:e4:52:b0:
         a0:0f:ba:e3:eb:6d:28:dc:78:96:b1:a0:97:85:bc:e8:2e:ed:
         f4:36:a4:d1:43:89:93:c2:6c:6c:87:95:78:87:c3:01:a9:56:
         63:bc:41:ac:08:b5:9d:3d:66:32:a1:f8:0b:32:f6:9b:1a:bf:
         69:3c:22:49:dd:67:d8:7b:0c:35:c5:4e:ec:98:3f:48:e0:f5:
         4c:3c:42:bf:2f:55:99:75:e9:d9:86:29:3f:e1:47:0f:8d:f1:
         2f:ac:aa:72:97:7e:d1:72:93:78:0d:d3:ab:3b:27:30:18:8f:
         f6:94:a3:27:9b:cf:18:86:65:5b:47:38:c3:ee:7d:c1:ef:b2:
         76:c0:fb:10:de:b7:6a:6b:25:de:b6:3e:38:d8:9d:86:76:2c:
         4e:7f:e3:51:73:20:44:89:76:6b:de:e0:a1:2e:26:f9:4d:97:
         9c:d8:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:24 2024 by rpki-client on console-ams.rpki-client.org