Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/ic6rRCo_6lcdhfxPC7H_VppmY4Y.roa
File:                     ic6rRCo_6lcdhfxPC7H_VppmY4Y.roa (raw, json)
Hash identifier:          UyrW7/2VXuRudyUGQN2ntASgeVUJv8LAccC2WlAsEV8=
Subject key identifier:   89:CE:AB:44:2A:3F:EA:57:1D:85:FC:4F:0B:B1:FF:56:9A:66:63:86
Certificate issuer:       /CN=26d0b2a2954b5e757164444d42bbe8a14ad9b69e
Certificate serial:       018364BF5D38CA783ADAE91FBB802BE01A0B
Authority key identifier: 26:D0:B2:A2:95:4B:5E:75:71:64:44:4D:42:BB:E8:A1:4A:D9:B6:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/ic6rRCo_6lcdhfxPC7H_VppmY4Y.roa
Signing time:             Thu 22 Sep 2022 10:30:06 +0000
ROA not before:           Thu 22 Sep 2022 10:30:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204704
IP address blocks:        45.84.66.0/24 maxlen: 24
                          45.84.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:64:bf:5d:38:ca:78:3a:da:e9:1f:bb:80:2b:e0:1a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d0b2a2954b5e757164444d42bbe8a14ad9b69e
        Validity
            Not Before: Sep 22 10:30:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89ceab442a3fea571d85fc4f0bb1ff569a666386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:9d:ab:ec:2b:3f:a6:3e:ec:0b:dd:6b:33:
                    09:6a:be:fe:18:a3:f7:f5:07:95:8e:e5:9e:83:89:
                    7b:43:b2:a0:58:84:17:a4:b8:a5:49:ff:8f:56:ca:
                    21:f2:8f:af:e1:90:f0:25:60:fe:09:a8:ee:66:dc:
                    cd:81:72:e7:b0:39:d8:ad:9d:47:a3:74:5d:06:f8:
                    0a:b0:63:2a:fb:d6:64:8f:37:5b:fa:3b:4b:a5:f7:
                    07:55:9c:1f:d1:7f:03:36:38:55:16:4e:b4:c8:7f:
                    73:e2:6e:8c:6d:ed:0a:6e:65:db:9f:9d:05:53:4c:
                    3c:6d:44:c4:84:28:57:23:98:20:a8:fe:fe:62:55:
                    dc:d0:88:0e:17:f0:61:44:b7:71:28:cb:ae:94:50:
                    3b:12:83:12:2c:3b:18:89:ed:4f:f0:89:de:04:94:
                    83:c1:0e:86:f6:f9:5c:86:11:ed:aa:7f:dc:32:c5:
                    36:19:63:2d:d8:fe:59:fd:96:32:88:be:e9:f9:7f:
                    3c:86:8d:15:4c:7e:9b:a2:e9:51:ce:e7:e0:b1:b6:
                    63:16:6b:3f:da:75:c2:bf:83:b4:d0:9a:c9:f0:97:
                    33:21:4b:ff:74:a9:4e:2e:cd:3f:dc:07:ba:f8:2a:
                    da:ff:bb:31:aa:49:4a:2c:95:5b:bf:d4:0e:1f:9d:
                    0c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CE:AB:44:2A:3F:EA:57:1D:85:FC:4F:0B:B1:FF:56:9A:66:63:86
            X509v3 Authority Key Identifier:
                keyid:26:D0:B2:A2:95:4B:5E:75:71:64:44:4D:42:BB:E8:A1:4A:D9:B6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/ic6rRCo_6lcdhfxPC7H_VppmY4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/JtCyopVLXnVxZERNQrvooUrZtp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:a7:62:93:14:d6:d1:5c:56:4c:33:cd:8b:12:34:4c:83:c0:
         1e:99:e9:d3:d7:5b:bd:5d:77:2b:de:6c:39:1b:93:89:85:5a:
         05:8f:16:70:b6:17:1c:47:9b:97:97:bb:08:3b:9e:64:04:1d:
         df:48:78:91:5c:d4:75:3e:ad:75:6a:75:dc:01:37:5e:bf:96:
         7d:e4:a4:30:d8:2b:c9:18:57:82:82:ab:8f:30:67:83:23:b4:
         27:6b:dc:92:cd:1d:e8:2f:fe:47:93:f4:58:b6:94:74:23:c0:
         4c:3e:4f:59:f8:6c:16:14:ba:5c:f1:9b:2f:1d:f1:6e:72:02:
         fb:7c:3e:4e:07:64:46:47:05:88:4c:36:e1:32:9b:95:5b:3c:
         28:b8:d2:c6:ed:38:ba:1a:62:ee:9d:31:51:55:ad:9c:ec:5a:
         ae:71:06:b4:37:78:01:05:b5:4f:f5:c5:ae:93:6a:66:c6:50:
         fb:d5:dd:3d:54:fc:51:e9:d1:90:b2:2d:0d:d1:80:39:43:42:
         db:f0:57:60:3f:06:bb:fa:0c:b2:90:1b:90:9b:13:1e:41:26:
         de:43:09:ae:04:54:37:d5:b8:e4:73:85:6a:df:48:76:bd:28:
         ad:71:3f:5c:b2:d7:f9:ed:81:5e:89:7e:1d:bc:29:9e:7c:42:
         1f:a2:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org