Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/YIdRNiPiI5rXdIdJo3nkQYD_6Io.roa
File:                     YIdRNiPiI5rXdIdJo3nkQYD_6Io.roa (raw, json)
Hash identifier:          tHnYZR7Kf7mWimUbaOqyDL+IxVmtJO9b00JmPOZKHcg=
Subject key identifier:   60:87:51:36:23:E2:23:9A:D7:74:87:49:A3:79:E4:41:80:FF:E8:8A
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       018252C33DB829F631ED06411742E06AF469
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/YIdRNiPiI5rXdIdJo3nkQYD_6Io.roa
Signing time:             Sun 31 Jul 2022 05:38:23 +0000
ROA not before:           Sun 31 Jul 2022 05:38:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399641
IP address blocks:        45.132.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:52:c3:3d:b8:29:f6:31:ed:06:41:17:42:e0:6a:f4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Jul 31 05:38:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6087513623e2239ad7748749a379e44180ffe88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bd:1f:44:53:05:17:71:59:7a:45:7b:de:33:
                    b9:25:bc:6d:22:81:46:a5:7e:2c:8a:6d:99:bd:dc:
                    dc:68:8a:0a:f4:0f:ec:85:fc:8c:15:94:80:b9:e1:
                    12:0f:17:0e:a9:f1:2c:3e:e8:ba:ae:52:8f:3c:7f:
                    22:60:95:f7:63:1c:c6:ec:7c:6c:b7:d5:b7:7a:1a:
                    1c:06:86:fb:c7:84:56:f7:8a:1e:69:07:7e:ee:c7:
                    fc:83:17:e5:08:1d:c9:09:f9:75:39:29:ed:ab:6e:
                    b9:c0:7f:02:7d:a7:8b:10:f9:4a:ae:60:45:13:18:
                    f6:46:12:f5:71:8c:9f:47:17:24:a0:5e:54:ad:fc:
                    4b:03:6b:bc:02:bd:a8:95:8b:6a:7a:90:23:e0:bb:
                    71:5d:34:9c:57:46:82:db:40:9e:87:59:de:1e:86:
                    29:40:70:7d:41:15:c9:67:05:a7:e7:e4:f6:9d:9a:
                    34:32:7b:f2:9e:1b:99:6f:b9:be:52:e9:79:e4:1f:
                    da:34:9d:a4:9d:cb:6e:20:d5:e5:df:52:a2:79:3e:
                    3c:14:9c:a9:74:ac:1c:9e:62:06:13:89:63:e3:73:
                    73:12:56:de:f7:5d:9c:9c:a4:d8:8c:d7:d3:44:4c:
                    7f:73:f5:d6:64:ee:03:3b:4d:cd:53:ea:da:72:4d:
                    4d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:87:51:36:23:E2:23:9A:D7:74:87:49:A3:79:E4:41:80:FF:E8:8A
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/YIdRNiPiI5rXdIdJo3nkQYD_6Io.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:56:7b:8b:8c:ab:e2:79:a7:d5:6c:8a:30:ee:b3:47:d6:51:
         11:96:88:67:3d:b0:8b:dd:77:ca:d5:59:ae:02:c9:ae:31:05:
         30:69:15:e5:01:67:5a:b4:bb:93:73:36:19:49:8a:af:d1:b7:
         af:2b:ba:b2:09:3f:a7:8b:46:77:95:cd:6a:a5:6e:71:f5:72:
         dc:b0:1a:2b:e4:4f:d8:9c:f2:1e:9e:a3:28:9d:fe:ab:40:29:
         03:88:c2:a3:be:ae:8e:b0:bb:52:8b:e9:73:24:37:62:db:74:
         77:ba:59:89:d1:77:8f:3d:5a:15:b8:39:e6:63:ae:e1:15:54:
         7b:44:10:61:89:a9:39:ed:79:7f:67:3d:59:e3:b5:b0:86:3e:
         16:86:ec:9c:0e:67:a1:b1:74:f4:d0:16:15:34:b0:f8:c6:9e:
         9d:44:91:e5:78:df:df:0a:6e:ba:77:18:a2:37:e5:51:7b:8a:
         58:01:78:c5:fa:07:41:bc:3a:b8:08:f9:2a:2b:99:50:b5:c9:
         df:a7:42:3c:ac:8e:cd:07:0b:01:02:ea:ab:7a:1c:1e:32:73:
         fe:b1:13:75:2d:dc:05:ba:aa:69:e9:54:bb:b4:4d:2c:df:5f:
         68:b8:de:f9:12:a3:b2:f4:e6:12:9e:0c:a9:bd:ae:f5:47:76:
         29:32:6e:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJSwz24KfYx7QZBF0LgavRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjIwNzMxMDUzODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDg3NTEzNjIzZTIyMzlhZDc3NDg3NDlhMzc5ZTQ0MTgwZmZlODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L0fRFMFF3FZekV73jO5JbxtIoFG
pX4sim2ZvdzcaIoK9A/shfyMFZSAueESDxcOqfEsPui6rlKPPH8iYJX3YxzG7Hxs
t9W3ehocBob7x4RW94oeaQd+7sf8gxflCB3JCfl1OSntq265wH8CfaeLEPlKrmBF
Exj2RhL1cYyfRxckoF5UrfxLA2u8Ar2olYtqepAj4LtxXTScV0aC20Ceh1neHoYp
QHB9QRXJZwWn5+T2nZo0MnvynhuZb7m+Uul55B/aNJ2knctuINXl31KieT48FJyp
dKwcnmIGE4lj43NzElbe912cnKTYjNfTREx/c/XWZO4DO03NU+rack1NYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGCHUTYj4iOa13SHSaN55EGA/+iKMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvWUlkUk5pUGlJNXJYZElkSm8zbmtRWURfNklvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYQaMA0G
CSqGSIb3DQEBCwUAA4IBAQChVnuLjKvieafVbIow7rNH1lERlohnPbCL3XfK1Vmu
AsmuMQUwaRXlAWdatLuTczYZSYqv0bevK7qyCT+ni0Z3lc1qpW5x9XLcsBor5E/Y
nPIenqMonf6rQCkDiMKjvq6OsLtSi+lzJDdi23R3ulmJ0XePPVoVuDnmY67hFVR7
RBBhiak57Xl/Zz1Z47Wwhj4WhuycDmehsXT00BYVNLD4xp6dRJHleN/fCm66dxii
N+VRe4pYAXjF+gdBvDq4CPkqK5lQtcnfp0I8rI7NBwsBAuqrehweMnP+sRN1LdwF
uqpp6VS7tE0s319ouN75EqOy9OYSngypva71R3YpMm4T
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org