Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/G50oGogvlHc8madL28YC_NZqyeU.roa
File:                     G50oGogvlHc8madL28YC_NZqyeU.roa (raw, json)
Hash identifier:          4yTTOn0ypiJUBSGlzQJt4eaZMeyJkMd1K03EMBTH5Rw=
Subject key identifier:   1B:9D:28:1A:88:2F:94:77:3C:99:A7:4B:DB:C6:02:FC:D6:6A:C9:E5
Certificate issuer:       /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial:       07F19183
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/G50oGogvlHc8madL28YC_NZqyeU.roa
Signing time:             Sat 01 Jan 2022 15:04:12 +0000
ROA not before:           Sat 01 Jan 2022 15:04:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206583
IP address blocks:        45.93.191.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133271939 (0x7f19183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
        Validity
            Not Before: Jan  1 15:04:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b9d281a882f94773c99a74bdbc602fcd66ac9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:88:ce:c5:27:3a:60:4d:c1:4a:17:54:04:
                    a6:2d:ac:a3:42:0e:2f:e0:d1:b3:a3:f7:c4:42:4e:
                    f4:83:f8:58:31:3f:60:79:e1:88:63:fb:08:7a:3d:
                    b1:fc:fc:a3:cf:ff:23:21:c0:3f:a7:fa:35:87:be:
                    be:27:1c:e5:82:35:a6:0a:99:48:0a:bf:e6:ff:94:
                    29:65:08:ee:5e:c1:ab:8a:e4:3b:2e:3d:db:65:63:
                    0f:d6:11:0f:92:fe:71:5d:0e:ff:d9:a7:8c:64:74:
                    4d:42:93:50:47:8d:ea:22:b9:79:22:bd:8b:6a:51:
                    cd:9c:30:72:2b:cd:c3:a1:49:11:fe:f0:f5:a5:69:
                    bd:32:af:81:dc:7c:bb:b0:8b:26:46:bf:16:6e:38:
                    79:33:db:48:3b:67:d2:18:3a:c6:29:db:a4:e3:5e:
                    ec:81:64:8d:83:b0:50:25:12:9c:f7:a6:8d:eb:92:
                    a8:53:73:01:54:23:e4:58:de:b6:23:d6:54:e5:82:
                    fa:ee:aa:b4:95:3f:e9:9a:1d:c3:18:63:24:dc:5a:
                    00:7c:5d:9e:59:a8:87:7d:83:cf:70:32:dc:8c:bd:
                    a7:7a:ae:ae:84:cb:3e:9d:a3:59:e8:12:d0:38:80:
                    3e:84:1e:3b:85:e6:4c:b9:52:bd:0c:c0:ba:62:fb:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9D:28:1A:88:2F:94:77:3C:99:A7:4B:DB:C6:02:FC:D6:6A:C9:E5
            X509v3 Authority Key Identifier:
                keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/G50oGogvlHc8madL28YC_NZqyeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d4:20:bc:62:b5:43:13:84:a1:60:f4:f1:b2:5b:ae:35:7e:
         c5:a7:38:0a:6e:82:38:41:97:02:2f:bc:2d:b7:8d:cd:62:1a:
         f4:ff:fe:85:6c:29:5f:eb:8d:de:67:79:90:c8:83:ae:07:8a:
         fa:c0:77:40:b8:b3:9a:e5:5b:92:2e:f8:6d:1b:ba:ee:a2:3c:
         49:b1:57:f0:1d:54:b3:64:dc:b0:59:b0:9e:42:77:ec:5a:82:
         67:2d:10:27:1c:3e:d6:fa:49:31:06:a2:3d:e1:24:ef:b2:5a:
         32:7c:e5:cc:74:e5:c4:d8:6c:21:bc:50:6b:6f:7b:5b:99:32:
         04:46:d9:d3:33:77:b2:62:17:d4:91:c4:69:06:ac:05:d8:f7:
         01:b9:2d:37:22:3c:64:c2:b2:70:a4:58:50:82:f0:ea:4b:18:
         40:c9:09:8c:72:60:a9:e5:fd:35:ba:ba:f7:7a:54:6e:36:58:
         fa:57:3b:22:92:98:f8:b0:ea:08:7c:67:04:fa:53:95:ca:7d:
         b0:9e:b5:5a:67:fd:a3:f2:60:44:93:22:af:28:65:2d:e3:8d:
         29:4c:a1:78:c0:62:71:1e:d1:5c:5d:48:6a:72:9f:36:cf:9d:
         8b:c0:24:d2:25:e7:c3:bc:49:e3:18:65:fb:3f:32:91:27:7e:
         56:c5:49:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:17 2025 by rpki-client