Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/YViIIk3TczoAmLJEA1PD0AZTOVo.roa
File:                     YViIIk3TczoAmLJEA1PD0AZTOVo.roa (raw, json)
Hash identifier:          g3EqnLz4TOor4wDkWFOLxdIUa9HJeJKW1ilz6utOkA4=
Subject key identifier:   61:58:88:22:4D:D3:73:3A:00:98:B2:44:03:53:C3:D0:06:53:39:5A
Certificate issuer:       /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial:       084E0A25
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/YViIIk3TczoAmLJEA1PD0AZTOVo.roa
Signing time:             Sat 01 Jan 2022 09:59:00 +0000
ROA not before:           Sat 01 Jan 2022 09:59:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44684
IP address blocks:        45.13.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139332133 (0x84e0a25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
        Validity
            Not Before: Jan  1 09:59:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=615888224dd3733a0098b2440353c3d00653395a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:15:34:d6:b6:95:63:e3:67:92:c8:54:8e:
                    16:19:7b:ef:dd:a1:3f:5f:06:d1:25:b0:27:eb:07:
                    6b:76:13:d2:86:38:74:7a:d4:e8:4d:b1:9e:ca:fb:
                    b6:92:b9:23:7d:1e:70:ef:38:70:13:16:10:00:fe:
                    c0:79:b9:1e:48:75:b5:4f:b5:5a:3a:66:9b:c5:26:
                    7e:3e:ff:d0:4e:ec:0c:67:56:17:11:67:1e:0b:3c:
                    69:27:72:18:de:55:50:86:5f:d4:a3:c3:3b:97:5f:
                    d6:a6:25:10:1a:bf:cf:f7:18:b2:5f:57:9a:a3:74:
                    c0:c0:8b:c6:fe:23:1b:7d:fb:93:58:db:31:ef:87:
                    47:64:3b:f4:59:74:d3:3f:6a:64:25:d0:ab:be:88:
                    af:20:a6:ba:c5:ac:26:33:1c:07:15:56:7a:bc:19:
                    3d:da:ff:f6:e2:7b:c9:82:e6:54:db:ce:e9:a7:34:
                    fa:d8:c1:3f:43:32:e4:73:c8:c8:9c:e7:f1:fc:49:
                    e9:11:bf:91:d3:3a:3c:ce:f8:23:58:eb:30:4f:58:
                    f6:b0:ec:08:8b:db:65:43:1a:5a:01:48:48:dc:d6:
                    ae:16:31:09:dd:07:af:37:81:8b:48:a2:0b:8f:01:
                    1f:a3:a4:4c:9e:e8:38:1e:9d:40:7e:73:64:dc:9b:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:58:88:22:4D:D3:73:3A:00:98:B2:44:03:53:C3:D0:06:53:39:5A
            X509v3 Authority Key Identifier:
                keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/YViIIk3TczoAmLJEA1PD0AZTOVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:0e:a3:53:61:0d:e1:81:0f:40:50:7d:c7:cb:de:92:ca:bd:
         2f:65:46:df:e0:5c:bf:46:76:49:ce:31:03:81:82:3f:51:87:
         48:15:81:b4:70:c4:71:70:4a:69:47:0e:69:10:65:0e:c4:57:
         e5:a0:0c:ef:8f:74:bd:65:e5:43:46:6d:fc:ac:3f:4c:08:7c:
         49:b0:08:5c:72:58:5b:04:a5:82:85:47:a2:43:0d:ec:44:4c:
         40:2c:c4:ec:e9:ef:6f:fb:6e:6c:45:f7:3f:2f:e8:8b:b5:57:
         34:f0:46:a4:c1:fb:ca:7e:b1:ff:9c:9e:6f:23:03:f7:27:b5:
         7f:5a:46:83:56:b5:c2:c4:a4:ce:1d:5a:9e:84:04:35:8b:c2:
         e5:3f:c6:fa:82:8f:7c:4a:8c:f2:ef:e3:ec:3c:ca:73:1b:48:
         41:c5:1a:32:10:1c:e1:c9:69:c6:25:87:e4:8c:f5:55:64:00:
         14:21:7a:00:27:1a:d3:49:66:26:de:02:a3:20:e8:cb:99:8c:
         e6:00:33:f9:14:3f:f1:41:58:e8:fb:47:10:83:96:04:31:9a:
         04:e4:38:1d:f1:29:79:9e:ca:02:23:4f:5b:e5:80:8c:62:b0:
         39:38:2a:4d:2a:c1:e1:ba:7a:60:ab:92:b6:54:6f:8d:34:7a:
         ac:73:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:04 2024 by rpki-client on console-ams.rpki-client.org