Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/Ecrf4uFoUDBcQqeOvxq_j8oDNIc.roa
File:                     Ecrf4uFoUDBcQqeOvxq_j8oDNIc.roa (raw, json)
Hash identifier:          eeBHb5tC5HpUnmr1OFVnS7ZC4QJ75X6MyH6/w9fXXvw=
Subject key identifier:   11:CA:DF:E2:E1:68:50:30:5C:42:A7:8E:BF:1A:BF:8F:CA:03:34:87
Certificate issuer:       /CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
Certificate serial:       074A77C4
Authority key identifier: C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/Ecrf4uFoUDBcQqeOvxq_j8oDNIc.roa
Signing time:             Sat 01 Jan 2022 11:57:32 +0000
ROA not before:           Sat 01 Jan 2022 11:57:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208557
IP address blocks:        45.129.72.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122320836 (0x74a77c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
        Validity
            Not Before: Jan  1 11:57:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11cadfe2e16850305c42a78ebf1abf8fca033487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b4:f5:d2:56:40:6c:97:e2:2d:6d:bb:42:c5:
                    1c:49:1c:54:fc:b8:c5:61:c6:f9:b7:87:e4:b4:5a:
                    ae:aa:a8:48:d1:52:f1:a8:2c:9a:1e:cb:9c:90:4e:
                    b1:c2:4e:08:76:0f:67:f0:82:1b:94:e7:39:de:5d:
                    43:7a:5e:f0:90:97:55:c9:e0:d5:89:e3:1a:05:96:
                    e3:49:79:02:15:4f:cd:a4:20:f4:c9:55:76:e3:c7:
                    fe:7e:cd:35:28:c4:f5:00:71:74:fc:aa:d7:5e:a3:
                    89:6a:5a:34:f3:ce:b7:87:de:79:dc:aa:19:ef:4f:
                    5e:dc:0b:c3:16:8c:f5:4b:66:82:aa:de:b3:b6:7a:
                    49:6f:8e:8b:66:9d:50:c3:85:bf:e4:6f:02:ae:f6:
                    69:00:2d:84:cd:b6:10:44:8a:ab:6c:0d:7f:b8:6e:
                    eb:0b:e9:e4:8d:71:33:2d:98:49:38:13:e9:a2:ed:
                    cf:3b:9f:e9:58:11:b6:aa:4a:74:5a:ee:fe:0a:1b:
                    76:13:f8:3e:ef:a5:73:34:0e:43:63:ba:a5:68:be:
                    43:72:4b:23:f9:96:84:de:0d:b2:b1:a8:b0:2a:64:
                    7f:39:7d:1f:bf:91:54:c3:7a:cc:8d:f2:9b:c2:ed:
                    e9:e4:c1:a8:96:6c:1d:81:59:eb:80:ef:d3:ae:22:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CA:DF:E2:E1:68:50:30:5C:42:A7:8E:BF:1A:BF:8F:CA:03:34:87
            X509v3 Authority Key Identifier:
                keyid:C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/Ecrf4uFoUDBcQqeOvxq_j8oDNIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:db:6e:2d:1c:61:e5:db:67:98:c5:39:ac:13:81:62:3d:66:
         8f:36:68:59:f7:c2:42:e9:fb:95:44:31:e9:b3:ba:1e:cf:36:
         90:36:8a:49:9f:b4:30:69:0e:b7:85:4e:8b:85:4d:2a:99:38:
         b7:7f:16:f4:31:32:df:49:dd:fc:15:d3:e1:0a:00:93:17:95:
         d8:86:f5:00:be:69:93:bc:a7:55:a8:17:64:01:3a:0b:78:68:
         59:11:b2:a2:b3:d3:e2:50:3c:71:53:83:79:bc:02:e1:05:9c:
         33:d8:65:17:1f:dd:67:df:e4:63:50:93:2b:4b:24:77:70:ec:
         0c:90:5d:0e:05:4f:95:8a:a0:54:e7:25:9e:61:28:4a:3f:55:
         df:36:12:2f:0e:87:83:c3:be:21:4c:eb:2b:41:32:8a:45:d4:
         b9:0e:dc:44:53:1d:7a:f4:c2:61:ba:b5:f1:07:34:da:08:b8:
         08:9f:7e:d5:d4:58:61:c8:8d:a8:63:67:15:cc:3f:b8:69:82:
         69:9a:bd:78:52:e9:dd:6e:84:64:75:52:2f:ed:b5:18:0a:35:
         84:35:ee:17:db:26:59:da:92:2c:53:bb:71:a6:7d:0b:69:f1:
         b5:e8:98:a1:89:1e:da:27:90:5b:c4:0b:68:7e:ed:90:46:03:
         a7:40:dd:ae
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB0p3xDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NTEwYWQ0Njg5ODk2ZmI4NTBjZTc5MGZkZmUzNDRkNGMwMjdhNWFlMB4XDTIyMDEw
MTExNTczMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTFjYWRmZTJlMTY4
NTAzMDVjNDJhNzhlYmYxYWJmOGZjYTAzMzQ4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOi09dJWQGyX4i1tu0LFHEkcVPy4xWHG+beH5LRarqqoSNFS
8agsmh7LnJBOscJOCHYPZ/CCG5TnOd5dQ3pe8JCXVcng1YnjGgWW40l5AhVPzaQg
9MlVduPH/n7NNSjE9QBxdPyq116jiWpaNPPOt4feedyqGe9PXtwLwxaM9Utmgqre
s7Z6SW+Oi2adUMOFv+RvAq72aQAthM22EESKq2wNf7hu6wvp5I1xMy2YSTgT6aLt
zzuf6VgRtqpKdFru/gobdhP4Pu+lczQOQ2O6pWi+Q3JLI/mWhN4NsrGosCpkfzl9
H7+RVMN6zI3ym8Lt6eTBqJZsHYFZ64Dv064isO8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQRyt/i4WhQMFxCp46/Gr+PygM0hzAfBgNVHSMEGDAWgBTFEK1GiYlvuFDO
eQ/f40TUwCelrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hSQ3RSb21KYjdoUXpua1AzLU5FMU1BbnBhNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvNjVmOTU0LTNmODgtNDM1Ny05NjQyLTlhMTZkOWMwY2FmNy8x
L0VjcmY0dUZvVURCY1FxZU92eHFfajhvRE5JYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
NjVmOTU0LTNmODgtNDM1Ny05NjQyLTlhMTZkOWMwY2FmNy8xL3hSQ3RSb21KYjdo
UXpua1AzLU5FMU1BbnBhNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2BSDANBgkqhkiG9w0BAQsFAAOC
AQEAN9tuLRxh5dtnmMU5rBOBYj1mjzZoWffCQun7lUQx6bO6Hs82kDaKSZ+0MGkO
t4VOi4VNKpk4t38W9DEy30nd/BXT4QoAkxeV2Ib1AL5pk7ynVagXZAE6C3hoWRGy
orPT4lA8cVODebwC4QWcM9hlFx/dZ9/kY1CTK0skd3DsDJBdDgVPlYqgVOclnmEo
Sj9V3zYSLw6Hg8O+IUzrK0EyikXUuQ7cRFMdevTCYbq18Qc02gi4CJ9+1dRYYciN
qGNnFcw/uGmCaZq9eFLp3W6EZHVSL+21GAo1hDXuF9smWdqSLFO7caZ9C2nxteiY
oYke2ieQW8QLaH7tkEYDp0Ddrg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-fra.rpki-client.org