Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dQoUFp-PtLxO9AIQfGB9WApbw1o.roa
File:                     dQoUFp-PtLxO9AIQfGB9WApbw1o.roa (raw, json)
Hash identifier:          0Yv1AZjnSajiJx2wi8WDn3hGcfnGGSuCG7OA5H2clzk=
Subject key identifier:   75:0A:14:16:9F:8F:B4:BC:4E:F4:02:10:7C:60:7D:58:0A:5B:C3:5A
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       19E63A71
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dQoUFp-PtLxO9AIQfGB9WApbw1o.roa
Signing time:             Sat 01 Jan 2022 15:56:49 +0000
ROA not before:           Sat 01 Jan 2022 15:56:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61272
IP address blocks:        45.132.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434518641 (0x19e63a71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  1 15:56:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=750a14169f8fb4bc4ef402107c607d580a5bc35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:5c:56:8a:4c:37:fa:44:02:47:d4:4c:b6:
                    85:e8:52:1c:5d:cb:ce:df:ae:60:20:5d:b2:4a:25:
                    b8:7e:45:1f:fc:63:74:d9:72:0f:4f:3a:35:e2:ae:
                    a2:0d:03:ce:6e:ad:96:d9:99:7f:6a:39:28:34:b3:
                    ba:5b:25:36:6d:68:43:f2:86:67:78:03:79:84:d6:
                    56:14:b4:58:cb:90:43:5c:90:dd:99:5a:a6:19:d5:
                    3b:f1:eb:73:a3:c3:2b:51:aa:dd:c3:7d:2f:22:1a:
                    f8:09:b4:96:71:86:a3:b8:06:e8:e2:1e:b0:85:cd:
                    1a:c0:47:0e:19:c5:90:34:31:6e:10:ff:fa:ed:81:
                    be:04:69:4e:ef:4e:bb:1c:0a:98:2d:f7:86:eb:df:
                    e0:4d:ad:47:f1:52:c4:54:3a:8d:e6:a7:07:3c:32:
                    46:46:38:c4:76:f2:49:89:75:7c:78:cb:ff:68:c0:
                    bf:cf:3b:1f:96:fa:59:a4:64:da:f8:ec:a9:36:f2:
                    43:e3:db:9c:b6:81:df:d5:c9:23:05:d1:ca:7d:48:
                    dc:e6:1e:32:4d:0b:0a:f4:37:bd:14:d3:3d:3d:44:
                    84:56:d8:3d:27:56:02:92:50:08:16:d6:99:79:06:
                    84:d9:99:49:f7:13:40:f6:15:1c:fa:82:6b:9f:5a:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0A:14:16:9F:8F:B4:BC:4E:F4:02:10:7C:60:7D:58:0A:5B:C3:5A
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dQoUFp-PtLxO9AIQfGB9WApbw1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:2c:b0:ce:ca:d0:a6:3f:dc:81:7a:44:84:88:a5:5d:b9:
         f8:8b:85:b5:0c:bc:48:96:9b:cd:df:6e:95:ff:ab:0f:31:cd:
         41:7a:9e:95:4a:bc:38:c9:93:63:94:03:70:f2:89:d5:dd:90:
         89:dd:d5:2f:03:c7:18:35:7a:63:d2:4e:2f:64:13:7e:a2:67:
         05:9d:86:38:5f:05:b6:ef:7a:c9:93:4d:34:0b:6a:8f:a3:9b:
         80:9a:22:e5:ec:6b:cf:1e:b7:1d:3a:0f:e7:6b:4b:b9:0a:b7:
         09:bf:b0:a3:ff:19:11:c7:94:95:6c:e1:81:63:84:5f:9e:35:
         b0:0d:2a:79:41:dd:9f:c6:e1:21:8b:39:e1:23:49:79:11:9b:
         5b:16:d0:ed:b9:ad:26:8f:5f:ac:05:63:bc:05:9c:b0:72:35:
         36:58:f2:a6:41:81:6a:68:50:b0:a7:6a:ec:f5:09:f1:33:07:
         f5:bf:79:02:50:0e:40:fa:a1:2f:10:bb:28:86:e3:7f:b7:30:
         33:ef:5f:ad:ae:1e:07:bd:ce:5e:46:82:4e:c5:30:03:74:4a:
         82:c1:4c:28:0d:5a:57:53:6c:03:fb:e2:c9:7e:76:8c:dd:69:
         5e:7e:cf:71:9b:c8:a7:e3:26:3a:12:45:a6:51:80:ee:98:7d:
         a1:3f:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:52 2024 by rpki-client on console-ams.rpki-client.org