Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/eQjCrSF-_U7BOstyPXqAa3BzcZA.roa
File:                     eQjCrSF-_U7BOstyPXqAa3BzcZA.roa (raw, json)
Hash identifier:          D5VdhLJzQ03pTLHPQeZ6PKL5aydjZwLauCwS115haW4=
Subject key identifier:   79:08:C2:AD:21:7E:FD:4E:C1:3A:CB:72:3D:7A:80:6B:70:73:71:90
Certificate issuer:       /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial:       047DC1F6
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/eQjCrSF-_U7BOstyPXqAa3BzcZA.roa
Signing time:             Wed 02 Mar 2022 15:15:04 +0000
ROA not before:           Wed 02 Mar 2022 15:15:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8100
IP address blocks:        45.134.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75350518 (0x47dc1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
        Validity
            Not Before: Mar  2 15:15:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7908c2ad217efd4ec13acb723d7a806b70737190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:b5:89:36:ae:95:03:74:6a:58:19:d3:30:
                    ff:93:a5:95:ec:d1:63:ef:0d:64:80:59:50:19:7a:
                    10:91:e3:5f:2a:4c:c9:7d:f1:c0:a0:36:22:c2:35:
                    1e:50:3c:14:b3:2c:3f:78:18:31:33:3d:95:be:cd:
                    11:a8:7c:c0:e1:e6:b9:44:d6:84:7b:c9:f2:e5:af:
                    69:f3:7c:2a:81:14:75:ce:53:57:c0:6f:37:c9:e4:
                    0f:a6:4c:09:dc:09:ee:df:9d:6a:1b:62:45:e0:0f:
                    13:0e:ee:82:48:75:3a:f3:87:43:66:b4:8a:3c:0a:
                    d4:26:bf:2e:cb:f4:77:17:4d:19:80:be:8f:47:95:
                    fe:74:18:69:6e:83:d1:07:09:0e:3a:da:89:1f:a6:
                    55:3f:91:b8:1c:bb:84:37:f8:09:3b:d1:57:7d:d8:
                    6b:56:8e:27:eb:ac:f4:84:03:11:8c:f1:8e:ce:b3:
                    04:59:99:55:dd:0d:eb:a3:e0:af:72:d3:54:25:ae:
                    ad:2a:11:97:a3:41:39:7f:c6:42:68:cc:6c:40:0e:
                    44:6d:7a:61:ab:89:5d:12:a9:36:14:69:78:a5:72:
                    0a:7d:aa:be:b9:61:1a:c7:bc:4a:ca:5f:9f:5e:3a:
                    10:a0:21:bb:72:87:28:33:5b:95:4b:e3:e3:af:01:
                    a7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:08:C2:AD:21:7E:FD:4E:C1:3A:CB:72:3D:7A:80:6B:70:73:71:90
            X509v3 Authority Key Identifier:
                keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/eQjCrSF-_U7BOstyPXqAa3BzcZA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b1:5c:20:13:82:89:37:ef:10:84:8f:0a:d9:90:ba:c7:c1:
         cb:6e:18:df:3b:9e:d9:d3:2e:41:2c:85:da:1c:39:24:49:31:
         ca:02:fd:b3:5f:9c:40:07:e8:a4:2a:0e:80:9b:a3:4c:a8:0a:
         99:5a:f4:5c:bd:90:54:e0:01:c6:12:6b:d4:ce:9f:20:3f:bf:
         45:c5:7d:a8:d2:e7:36:36:57:59:05:4c:18:8f:06:ad:28:51:
         15:bf:43:3e:4c:d7:ea:96:08:1f:16:79:50:6a:d4:d6:90:5b:
         59:f3:4a:7b:3a:0c:5d:d8:3c:b5:5b:e4:ae:3a:b1:af:da:1c:
         78:8d:8b:10:2c:83:03:0c:b1:ba:4b:58:32:32:73:8e:82:96:
         05:7a:4e:a8:d8:81:b8:02:89:d9:d2:f6:ef:2a:0c:97:87:d8:
         08:c1:c9:2a:6c:66:97:c2:03:94:67:03:59:5d:e4:cb:27:60:
         00:3c:2e:ed:8d:92:8e:fb:3b:88:f1:7d:95:b4:72:52:ed:50:
         3a:43:76:24:c3:f5:d3:ba:74:0c:4e:89:92:d6:a7:06:91:7e:
         5e:1d:45:47:81:22:9c:a5:d1:87:7b:43:10:17:55:04:1c:b0:
         6b:d3:85:66:c2:36:de:6f:23:30:cc:80:05:92:f5:bb:f1:41:
         8c:19:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org