Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/twMyjponii2Vo3txz5TBXiLTm9M.roa
File:                     twMyjponii2Vo3txz5TBXiLTm9M.roa (raw, json)
Hash identifier:          f2XdVZMNhowCDDaWVzsXbIbQd+4LDc3kNEheRYE1+wU=
Subject key identifier:   B7:03:32:8E:9A:27:8A:2D:95:A3:7B:71:CF:94:C1:5E:22:D3:9B:D3
Certificate issuer:       /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial:       07BAF2ED
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/twMyjponii2Vo3txz5TBXiLTm9M.roa
Signing time:             Sat 01 Jan 2022 11:05:02 +0000
ROA not before:           Sat 01 Jan 2022 11:05:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58197
IP address blocks:        45.128.168.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129692397 (0x7baf2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
        Validity
            Not Before: Jan  1 11:05:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b703328e9a278a2d95a37b71cf94c15e22d39bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:c7:3a:1f:cf:9f:90:43:4e:d7:5b:bd:e5:
                    54:3f:09:1f:e8:b9:8a:6f:b3:f5:3a:c9:e2:39:27:
                    be:43:7f:70:6e:f5:ab:f0:73:4a:bc:88:08:8e:b6:
                    e1:79:b7:4e:67:1e:a5:cf:fe:67:5c:85:20:64:19:
                    9e:bc:a4:62:d1:52:73:6e:09:8a:d7:da:b5:c6:da:
                    41:17:78:2f:4c:22:c3:c6:44:c9:64:3a:17:98:26:
                    2c:c6:82:49:7d:20:33:7c:a5:25:69:71:94:ce:cc:
                    ab:0a:6d:3e:c4:c4:64:36:32:e2:c5:c6:ad:27:26:
                    cb:33:35:10:ec:25:72:25:2a:27:10:c1:33:86:05:
                    76:d1:d6:c2:1e:e1:58:fc:1a:fa:45:69:9f:ae:d7:
                    80:53:87:f0:7e:0e:74:a8:34:fd:34:0f:f5:12:41:
                    0e:f4:f9:b4:ac:54:6c:62:fa:7a:ad:be:9a:5d:e3:
                    a8:17:57:9c:85:cc:ab:9d:24:dc:ed:d3:d2:48:3d:
                    c5:e9:da:bc:01:b6:fc:5a:66:d1:71:87:8d:8a:94:
                    56:d6:03:67:4b:5f:3b:b1:59:f3:a6:04:5e:04:23:
                    95:fc:7e:46:7f:51:b4:ed:34:cc:bf:ce:ef:6c:aa:
                    30:4d:ec:6a:56:dd:ca:ed:10:9e:ac:49:18:fc:f4:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:03:32:8E:9A:27:8A:2D:95:A3:7B:71:CF:94:C1:5E:22:D3:9B:D3
            X509v3 Authority Key Identifier:
                keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/twMyjponii2Vo3txz5TBXiLTm9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:08:18:f0:7a:ee:06:5b:12:76:c7:fe:48:b9:c6:34:16:4b:
         21:20:57:18:f3:d0:97:3a:01:91:af:4d:7d:16:6f:17:67:f8:
         0a:7f:10:04:ad:82:62:fb:09:12:2b:c7:90:50:24:de:88:ad:
         1d:03:aa:a5:a7:f1:f2:42:05:d9:88:d6:18:f5:ac:6f:2e:3e:
         a2:ac:6c:80:94:10:35:26:60:07:49:ad:81:f3:6a:07:00:c1:
         6a:15:a0:ed:44:89:41:48:39:2a:b5:23:e8:5b:3c:b7:6c:09:
         a6:3d:ac:c6:e5:49:85:62:18:5c:cf:fb:d1:d2:24:54:f9:9e:
         62:6f:00:d6:10:39:cb:ad:24:6f:62:ec:06:21:bd:9d:77:99:
         49:4a:81:ed:0f:a9:3d:a8:d5:0b:49:c2:84:be:ab:87:03:5e:
         1f:b2:b5:4c:01:5e:2a:f4:d7:3b:b2:5f:46:2e:2a:1d:f1:c6:
         29:b5:02:0e:ff:84:46:45:57:d1:a9:6a:cc:97:0d:2e:65:b7:
         99:22:08:8d:a8:7f:fa:e5:08:dd:10:99:ab:72:c0:17:1e:aa:
         83:da:87:c0:46:81:6e:0b:39:e2:f0:3f:68:69:f2:ef:f9:eb:
         77:5f:b9:d1:1c:a8:88:ec:43:66:c7:bb:58:04:f2:9a:79:70:
         11:18:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-fra.rpki-client.org