Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Np1Kf28sV6gSisT5JDyndi23Kbc.roa
File:                     Np1Kf28sV6gSisT5JDyndi23Kbc.roa (raw, json)
Hash identifier:          //s9i/qBeF6YO+U4d7gve30rLNoDhW1O6wacwBfbP8o=
Subject key identifier:   36:9D:4A:7F:6F:2C:57:A8:12:8A:C4:F9:24:3C:A7:76:2D:B7:29:B7
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       01843D8978ABF3B2E23902FBBC02BC678688
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Np1Kf28sV6gSisT5JDyndi23Kbc.roa
Signing time:             Thu 03 Nov 2022 12:48:50 +0000
ROA not before:           Thu 03 Nov 2022 12:48:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        45.146.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3d:89:78:ab:f3:b2:e2:39:02:fb:bc:02:bc:67:86:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Nov  3 12:48:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=369d4a7f6f2c57a8128ac4f9243ca7762db729b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:c8:49:b7:87:1d:b8:7c:4a:3b:f4:b6:ad:
                    83:a2:28:76:5f:c5:45:8f:2c:33:38:a2:75:90:3c:
                    5f:1b:ae:85:ff:06:74:f7:de:c7:15:b8:6d:b5:c1:
                    37:5d:68:eb:fb:01:4e:48:10:94:b2:4e:12:ab:2b:
                    dd:1d:81:3e:fa:d8:54:fb:5f:d5:b0:86:22:8a:d5:
                    de:f9:34:43:f3:25:6c:62:5b:91:72:a5:5a:cd:1a:
                    cb:d1:f7:48:66:5a:4e:d5:63:fb:9c:85:2c:e6:ac:
                    5e:b4:c2:1c:01:d0:29:2b:89:d7:56:82:ea:18:4e:
                    09:40:13:00:39:27:fc:59:fb:06:f0:be:ae:64:29:
                    41:e7:64:27:7a:e3:78:3c:b7:f1:d3:c0:5b:7f:3f:
                    e2:13:f6:e5:13:64:a8:4f:e8:e4:63:e1:95:f4:c4:
                    19:23:30:02:2b:45:a9:73:54:a4:f1:2c:e9:02:f9:
                    23:e3:e0:5d:a5:1a:df:72:e6:57:d5:97:66:66:b5:
                    8f:5c:3e:5c:6e:09:a5:46:be:72:6b:4c:e5:f9:1e:
                    ba:11:c9:37:45:58:97:32:0a:9a:74:1f:d4:96:6a:
                    69:80:7e:91:98:4a:4a:09:be:33:8b:50:81:78:c5:
                    83:5b:a4:12:4d:ea:36:72:b9:4b:5a:93:9c:ee:78:
                    fc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9D:4A:7F:6F:2C:57:A8:12:8A:C4:F9:24:3C:A7:76:2D:B7:29:B7
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Np1Kf28sV6gSisT5JDyndi23Kbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:fd:33:ea:b8:0f:ac:df:73:1c:13:eb:07:e0:0a:f9:42:f8:
         1a:53:c8:72:9f:b7:ec:10:53:d1:62:ef:c5:ea:93:d9:36:61:
         48:72:93:6f:20:ea:35:eb:5f:73:57:86:61:79:94:de:89:45:
         bd:7e:52:0e:33:73:bb:b9:b1:22:2f:4b:7a:58:a7:22:a8:cc:
         7b:18:d5:02:42:d8:a6:a9:b4:4c:62:b7:89:93:c8:97:ed:61:
         0d:3a:b7:e9:4c:04:da:d9:23:93:f0:cd:df:d8:89:85:11:8b:
         a5:50:c0:eb:eb:7c:55:62:08:6f:7a:b0:b0:fc:fa:0c:33:81:
         d0:38:15:62:4f:49:28:fe:5f:3c:7d:d8:39:c5:b3:b9:05:4b:
         2e:6d:5f:ae:21:b6:8c:30:88:42:67:ad:08:6f:78:01:00:a7:
         50:4a:81:8c:76:b8:4d:2b:3c:0c:b0:53:92:97:bb:45:f1:bf:
         3a:5c:e4:aa:a1:54:e3:d4:b3:e8:17:a6:c2:4b:bf:d7:46:34:
         bd:18:be:42:28:29:88:10:59:05:c3:01:d2:32:63:60:69:ac:
         c5:b9:df:ec:ed:bd:b7:1f:b7:27:a0:83:5f:75:0f:e5:52:0d:
         9b:2b:95:3c:8f:6f:6c:16:42:87:78:93:33:d5:ca:bb:55:be:
         ce:7d:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org