Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/6ER-NIzPqrBdrzKvSA7mXvH4gnM.roa
File:                     6ER-NIzPqrBdrzKvSA7mXvH4gnM.roa (raw, json)
Hash identifier:          ycBIMCo1dWsr/aiGrx9tzjr8zGNmHBaljtq9TgVqbyI=
Subject key identifier:   E8:44:7E:34:8C:CF:AA:B0:5D:AF:32:AF:48:0E:E6:5E:F1:F8:82:73
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       06841C24
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/6ER-NIzPqrBdrzKvSA7mXvH4gnM.roa
Signing time:             Sat 01 Jan 2022 10:05:16 +0000
ROA not before:           Sat 01 Jan 2022 10:05:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58040
IP address blocks:        45.132.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109321252 (0x6841c24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Jan  1 10:05:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8447e348ccfaab05daf32af480ee65ef1f88273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0d:71:56:34:95:93:ba:25:a2:63:b2:34:a3:
                    28:94:fa:c4:49:63:a9:09:5a:d5:a8:1e:5b:95:18:
                    05:53:82:7e:6a:81:04:4b:61:fe:68:6d:9b:42:89:
                    92:31:18:b1:5d:f5:83:2f:c0:94:d9:38:1a:72:6e:
                    11:54:68:a4:c0:c4:4e:c2:ec:df:a8:a5:1c:c5:f5:
                    a4:32:c7:a1:6b:e4:ca:23:1a:f0:fc:76:c7:ec:6a:
                    f6:71:62:f0:60:c4:1a:f4:d3:a9:3d:68:8e:67:71:
                    98:5f:b8:ab:cd:92:99:df:bd:9a:27:8b:6f:53:ab:
                    6c:b4:9a:01:eb:25:0d:e4:be:db:f2:fc:66:90:2e:
                    b0:e5:b9:81:01:d5:84:cd:d7:6c:b9:9a:82:87:53:
                    c8:4f:bd:c7:01:48:15:cf:dd:83:cf:40:ae:28:80:
                    df:4e:11:23:94:95:70:61:ce:48:8d:29:89:1c:f6:
                    83:3b:13:33:d2:92:8f:9a:ac:b6:d4:38:41:e1:c0:
                    ad:1d:5b:ab:59:d2:11:1e:18:a4:fe:f3:89:c9:f7:
                    8b:49:0f:69:e6:32:88:78:4e:f4:7a:18:97:cb:69:
                    af:ac:a8:62:61:19:08:81:d6:f3:c3:b7:81:1c:01:
                    ee:72:e8:b0:fc:77:ab:ab:0b:ec:f5:9c:76:02:1e:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:44:7E:34:8C:CF:AA:B0:5D:AF:32:AF:48:0E:E6:5E:F1:F8:82:73
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/6ER-NIzPqrBdrzKvSA7mXvH4gnM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:ec:0a:ee:a2:5e:78:b8:3b:75:54:a0:42:13:95:72:1b:c3:
         f8:91:f0:3c:79:46:ae:b0:72:75:fc:3e:b2:01:f6:04:8e:2b:
         16:cc:59:6d:86:4a:54:ee:19:72:6f:1c:26:af:b0:ff:7b:f8:
         e5:28:a6:d0:73:f2:fd:bd:34:ec:fa:5c:a4:ac:31:a1:29:51:
         4c:43:fc:16:e5:34:57:f7:28:74:8f:24:6a:dd:32:11:29:d0:
         3a:ea:fd:b8:4d:98:fd:a9:11:dd:a7:83:f6:e0:c3:aa:67:cb:
         a4:40:e0:2a:7f:59:ac:f2:8f:f8:26:1f:e2:c1:28:ed:8b:f2:
         22:64:dc:54:56:08:24:c3:1b:f9:97:9d:9b:85:44:9f:e7:dd:
         62:d3:a0:78:82:88:f2:70:53:35:57:0f:15:50:f3:ae:db:9e:
         a4:76:79:e6:a4:c7:17:4a:c7:ce:79:7f:85:35:3c:a3:66:c3:
         f4:8e:61:99:f3:ef:31:e7:9f:ce:b7:71:d3:4d:aa:14:f5:56:
         cd:1f:9b:59:a8:f1:4c:9a:fd:33:62:64:ef:42:b6:ea:3a:db:
         59:87:22:60:9c:d7:49:19:3f:9d:12:21:d3:d2:63:75:1b:f9:
         a5:a9:80:3f:40:c8:0c:fc:53:7c:57:cb:84:fb:41:76:db:c7:
         d3:15:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org