Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/4rB15sCcRf2a90XelPulF71ETyA.roa
File:                     4rB15sCcRf2a90XelPulF71ETyA.roa (raw, json)
Hash identifier:          EBSwwO25HUoTuBBLIJmB2zHKQl09uf43HzvuzvT496c=
Subject key identifier:   E2:B0:75:E6:C0:9C:45:FD:9A:F7:45:DE:94:FB:A5:17:BD:44:4F:20
Certificate issuer:       /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial:       096A31A4
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/4rB15sCcRf2a90XelPulF71ETyA.roa
Signing time:             Wed 20 Apr 2022 23:59:00 +0000
ROA not before:           Wed 20 Apr 2022 23:59:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.13.84.0/22 maxlen: 22
                          45.13.85.0/24 maxlen: 24
                          45.13.84.0/24 maxlen: 24
                          45.13.87.0/24 maxlen: 24
                          45.13.86.0/24 maxlen: 24
                          2a12:fd00::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157954468 (0x96a31a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
        Validity
            Not Before: Apr 20 23:59:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2b075e6c09c45fd9af745de94fba517bd444f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:33:db:a6:11:88:1f:2d:92:71:dd:31:bf:cf:
                    83:39:1b:8f:25:49:e9:2d:28:d3:17:d7:fc:0e:60:
                    af:61:6c:62:c9:ea:b5:a1:70:98:ed:96:b0:87:35:
                    a8:cf:96:74:1f:ee:dd:cb:18:75:96:29:39:d6:c5:
                    e4:8e:85:0e:8b:47:e0:49:48:2f:67:8d:2d:b2:20:
                    52:5d:f5:7c:6d:ee:1f:50:ab:88:d0:33:92:70:2c:
                    d3:88:d7:81:08:e9:64:14:d9:df:a2:a4:7d:a3:f5:
                    d0:2d:d7:bf:cd:6b:d1:01:36:04:cd:aa:01:58:91:
                    b5:08:f5:fb:c8:62:4a:11:3c:8e:ea:5f:6b:4d:35:
                    41:cd:7d:98:d1:10:8f:8b:4c:d1:fb:89:05:64:2b:
                    77:a0:20:81:d7:28:66:ee:d3:22:72:2f:0e:b3:97:
                    4a:08:e9:1a:87:dd:2d:73:4b:ab:37:5f:fb:60:e7:
                    b7:f9:61:bf:1c:d4:61:11:cb:12:5e:dc:cc:14:61:
                    19:30:73:2d:a3:73:32:db:5a:e0:28:8f:00:7d:a5:
                    fb:91:7e:05:2a:3c:81:8b:cd:56:de:cb:32:9b:aa:
                    4d:3e:3d:43:80:a0:25:22:42:cf:a4:78:9a:50:4e:
                    88:28:12:df:ec:4c:b2:7f:07:6b:37:34:fc:f0:26:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:75:E6:C0:9C:45:FD:9A:F7:45:DE:94:FB:A5:17:BD:44:4F:20
            X509v3 Authority Key Identifier:
                keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/4rB15sCcRf2a90XelPulF71ETyA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.84.0/22
                IPv6:
                  2a12:fd00::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:af:c6:16:2e:ce:00:1e:b7:a1:85:ee:62:f5:a0:9a:4d:75:
         ff:8e:5a:86:a1:3c:41:8a:cf:40:5e:61:de:72:f1:aa:63:71:
         f6:78:71:9b:85:f7:6c:9d:fb:4b:c7:4a:cc:a1:ae:6b:be:2b:
         98:32:f6:3f:28:2b:4f:3a:73:3b:cd:0c:30:0a:10:b1:5a:48:
         fc:f1:37:c0:2b:7c:f5:32:86:52:8b:a6:6f:93:fb:45:c7:8f:
         89:49:e1:ef:27:e1:0b:67:1c:63:46:c7:c8:45:e1:73:60:5d:
         6b:4c:4b:ba:c0:12:64:ab:7b:c7:6e:40:4a:05:3d:46:0c:b4:
         fb:95:37:59:0e:ed:1d:41:a0:1f:c2:db:69:63:60:57:af:90:
         f6:ba:f3:3e:ba:49:bc:10:57:0b:d6:15:5a:a1:40:ee:ab:e4:
         71:ec:4e:ce:38:f4:6d:15:f2:7e:63:fb:81:af:20:8c:de:91:
         ca:6e:b4:bf:49:62:0d:7a:48:21:d6:1b:54:3f:1a:48:6c:e7:
         b9:8d:01:53:79:49:c7:67:26:ec:5b:9e:81:46:00:bf:57:3d:
         75:f8:1c:68:75:4a:d5:22:6e:69:c8:fc:70:15:9c:bc:6e:92:
         96:46:d5:4a:fd:61:72:d4:88:90:0a:34:04:59:bd:cf:78:83:
         04:ae:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-fra.rpki-client.org