Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/gNF2NLCWtBNu-NpMV7T-0b2c-oM.roa
File:                     gNF2NLCWtBNu-NpMV7T-0b2c-oM.roa (raw, json)
Hash identifier:          KweMViFD3vkFDbBSzumKTVa1Ynf3CaFKNqg8zPJscc0=
Subject key identifier:   80:D1:76:34:B0:96:B4:13:6E:F8:DA:4C:57:B4:FE:D1:BD:9C:FA:83
Certificate issuer:       /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial:       041F85F1
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/gNF2NLCWtBNu-NpMV7T-0b2c-oM.roa
Signing time:             Tue 18 Jan 2022 08:08:26 +0000
ROA not before:           Tue 18 Jan 2022 08:08:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        212.8.229.0/24 maxlen: 24
                          45.134.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69174769 (0x41f85f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
        Validity
            Not Before: Jan 18 08:08:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80d17634b096b4136ef8da4c57b4fed1bd9cfa83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:bc:47:90:b0:b6:04:fa:75:f2:ac:18:85:
                    c2:cd:45:3e:e2:0f:42:56:89:61:b4:a5:e0:35:49:
                    4d:83:87:f4:a6:11:f3:4c:6c:83:48:ab:9d:55:a6:
                    cb:ca:ac:64:de:fe:ea:7b:02:93:f6:d3:3a:eb:47:
                    3e:00:ee:db:50:a5:33:62:aa:8a:03:cd:88:2f:c0:
                    95:0b:8f:e0:ce:e9:17:1b:26:93:56:66:93:d2:ff:
                    3f:e8:4e:58:c2:d9:85:18:ab:10:23:2c:b3:b0:3d:
                    b5:b1:96:40:3d:33:0a:9e:c8:b5:43:6b:c6:c6:a5:
                    21:08:52:91:07:5d:a5:09:53:24:9e:d1:c8:6d:88:
                    ab:c7:a0:b0:d0:a1:bd:49:35:67:b2:a7:2b:07:60:
                    17:23:20:e5:56:0e:67:00:e1:73:1a:73:a0:a2:f0:
                    b3:9b:6f:bd:9c:cd:d9:87:71:88:79:c5:30:92:18:
                    53:78:6d:7b:b4:da:a3:87:5e:f8:d5:29:37:b0:fd:
                    d4:56:c3:74:92:03:d8:cc:4f:ea:48:10:31:1a:1a:
                    a3:bc:c0:01:dc:e3:dc:61:41:6d:f7:ca:eb:a3:36:
                    2e:c4:6f:63:0c:f7:9b:8e:3f:3f:42:99:31:7e:4e:
                    7a:99:34:16:5e:e5:1e:96:27:ad:15:a2:de:1a:d9:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D1:76:34:B0:96:B4:13:6E:F8:DA:4C:57:B4:FE:D1:BD:9C:FA:83
            X509v3 Authority Key Identifier:
                keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/gNF2NLCWtBNu-NpMV7T-0b2c-oM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.14.0/24
                  212.8.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a9:7f:6c:f3:8d:af:d6:13:a7:2d:36:b9:4b:87:e4:6c:53:
         6e:46:7c:e0:65:18:64:73:6e:26:63:d0:89:1f:f3:8e:f1:90:
         43:d3:9b:6b:5d:4c:15:54:d9:71:32:24:8e:a5:44:8a:64:74:
         42:d5:44:a2:ea:f6:3d:01:79:9a:ae:09:37:65:10:1a:e8:1d:
         29:7c:93:0a:17:fe:35:cb:fc:61:0f:81:f4:e0:d9:ec:30:f8:
         82:d6:72:78:43:c3:92:0a:03:8d:e9:8d:48:05:4a:6d:e7:7d:
         da:dc:8a:39:46:fb:d6:5d:9c:35:15:ea:1d:f8:b1:a7:80:52:
         76:ea:a9:c5:d9:d0:63:3b:2c:47:89:1d:28:61:f0:60:61:00:
         c4:f3:c3:b6:ea:d5:22:51:52:13:b7:6e:47:35:10:f9:1d:58:
         25:ac:de:cc:c2:e4:fb:a3:88:d9:ba:59:17:7e:2e:92:e9:ea:
         7f:6c:7c:65:45:4a:3d:77:94:23:78:03:58:99:04:25:81:22:
         c8:c8:55:fb:63:9e:82:d4:62:1b:a2:52:e7:f4:b6:1f:7b:dd:
         20:55:85:90:e2:ea:45:da:84:79:b3:99:03:65:8c:1b:aa:82:
         76:26:ae:3e:f4:f6:e9:4c:5e:cc:f4:4b:b4:95:b9:0b:e8:5a:
         26:7f:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org