Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/OD4ibgrgOaQNNghd1HzDUbcf_fk.roa
File:                     OD4ibgrgOaQNNghd1HzDUbcf_fk.roa (raw, json)
Hash identifier:          82Dq3fXqf2HCO6944dSPC28xwHMJBRcM3RRX9YoLTB8=
Subject key identifier:   38:3E:22:6E:0A:E0:39:A4:0D:36:08:5D:D4:7C:C3:51:B7:1F:FD:F9
Certificate issuer:       /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial:       0796F7AF
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/OD4ibgrgOaQNNghd1HzDUbcf_fk.roa
Signing time:             Wed 19 Jan 2022 14:08:44 +0000
ROA not before:           Wed 19 Jan 2022 14:08:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208247
IP address blocks:        45.151.87.0/24 maxlen: 24
                          45.151.86.0/24 maxlen: 24
                          2a0f:1500::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127334319 (0x796f7af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
        Validity
            Not Before: Jan 19 14:08:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=383e226e0ae039a40d36085dd47cc351b71ffdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:c3:91:31:9e:e7:a3:33:f1:6a:13:41:15:
                    09:c4:36:03:19:b0:ad:5e:83:99:6d:9c:8b:52:f3:
                    2e:80:94:ea:12:a4:d8:e5:d5:2a:e3:02:87:b0:2b:
                    78:94:e2:57:70:fa:6f:aa:dd:f3:09:7a:e9:12:74:
                    9e:91:62:9f:34:94:a3:2e:3f:be:3f:83:b7:13:89:
                    81:d0:af:64:9d:77:12:ab:ec:ae:6a:e5:ed:00:a5:
                    28:4c:5e:79:6b:e1:82:e9:bb:f9:2e:a3:4f:01:8e:
                    13:41:8b:d9:19:d4:7c:70:1a:b2:4e:7a:0a:97:3b:
                    59:c9:95:a4:65:a3:60:98:89:5c:25:82:df:b5:f3:
                    6d:e4:dd:97:43:4d:16:b8:b0:7f:29:43:8a:0a:6a:
                    e1:31:ee:e7:54:70:98:47:20:32:e0:2a:ce:8b:b5:
                    3d:e6:f5:37:9f:80:85:33:38:e3:9f:81:f0:4a:43:
                    d0:fd:9a:9e:ce:d8:a3:ba:6b:06:18:74:7e:19:7b:
                    2f:59:ad:80:0c:4e:50:e7:3b:b5:4c:70:a2:ef:65:
                    40:a5:2c:4c:4c:31:8a:28:69:f5:27:56:2f:53:71:
                    75:57:e8:43:51:89:c5:e8:86:ab:a8:6b:ca:10:00:
                    c3:3f:ba:68:8f:93:17:58:d9:fe:db:4d:5e:cb:3d:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3E:22:6E:0A:E0:39:A4:0D:36:08:5D:D4:7C:C3:51:B7:1F:FD:F9
            X509v3 Authority Key Identifier:
                keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/OD4ibgrgOaQNNghd1HzDUbcf_fk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.86.0/23
                IPv6:
                  2a0f:1500::/29

    Signature Algorithm: sha256WithRSAEncryption
         37:23:3e:55:72:8f:d0:46:92:f8:81:b6:6e:99:60:fb:17:bf:
         f2:1c:b8:df:11:3a:16:18:74:cd:c1:cd:ab:46:b0:41:cb:b0:
         05:69:aa:2b:cb:44:3f:0f:ca:b4:0e:6c:e8:d9:72:64:6d:9d:
         3d:b2:2b:b3:07:88:60:96:da:99:41:f5:99:3d:6c:38:ac:d3:
         09:45:fc:71:9e:e3:6d:6c:ad:1c:df:bd:ee:be:c8:00:60:ff:
         64:59:b1:16:44:ed:e7:1b:42:54:74:c3:43:f3:7e:58:01:82:
         38:be:a4:7e:64:bc:a7:d7:52:74:ce:b1:88:a0:0d:41:9e:a7:
         a0:c4:bd:86:0a:ec:21:c3:bb:5f:7d:0f:c5:77:c7:5c:80:63:
         30:3e:b9:1f:50:7c:12:83:fb:6c:47:c7:6b:de:fc:8d:5c:04:
         23:e4:af:f4:a8:d2:7c:60:b1:d0:cc:86:c1:32:f9:53:27:74:
         16:06:c3:bb:cb:02:19:fc:82:c9:4a:11:0d:c2:71:b3:5a:0b:
         3e:4e:43:07:f5:e7:e1:ff:37:47:84:ec:15:98:bd:49:f3:9f:
         0f:56:3e:89:b9:1a:f9:e8:ff:6c:26:75:07:9a:98:7d:f5:aa:
         bb:bd:70:11:53:ff:65:b3:70:cc:d6:86:6a:07:c2:53:d2:59:
         2a:c0:c2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:23 2024 by rpki-client on console-fra.rpki-client.org