Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9AYTPko1aOFcYAfonGAeZ2LvYiA.roa
File:                     9AYTPko1aOFcYAfonGAeZ2LvYiA.roa (raw, json)
Hash identifier:          OURk15r9ui2NYo1ANjwWCFYbS4UUSdqUyRY72FiOjG0=
Subject key identifier:   F4:06:13:3E:4A:35:68:E1:5C:60:07:E8:9C:60:1E:67:62:EF:62:20
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0183E6FF970F9D9CCEE7E960F5E941C69E1A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9AYTPko1aOFcYAfonGAeZ2LvYiA.roa
Signing time:             Mon 17 Oct 2022 17:30:53 +0000
ROA not before:           Mon 17 Oct 2022 17:30:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134176
IP address blocks:        176.105.229.0/24 maxlen: 24
                          45.150.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e6:ff:97:0f:9d:9c:ce:e7:e9:60:f5:e9:41:c6:9e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Oct 17 17:30:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f406133e4a3568e15c6007e89c601e6762ef6220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:02:a8:f8:8a:8a:29:4c:e5:91:06:42:c2:
                    da:5f:f7:c0:a0:b8:4a:32:09:98:9d:c6:c3:a6:6a:
                    ff:69:e1:aa:68:24:b4:71:94:f4:25:1c:ef:c2:6b:
                    4c:8e:91:17:f7:14:f9:59:6b:1d:75:88:cf:07:50:
                    83:90:07:73:d0:5b:b1:7e:5d:53:fa:1b:fe:56:6f:
                    a9:08:5a:53:9a:e8:55:95:cc:3e:89:d2:3d:39:cd:
                    42:36:35:dc:46:f4:6d:9f:21:4a:8e:25:84:e7:cf:
                    db:a2:cc:cb:98:2f:72:91:9d:14:73:a2:b2:35:50:
                    40:f8:f2:58:0a:49:c2:63:f9:e7:30:a6:80:e8:42:
                    ce:c3:82:d6:d7:8e:d2:8f:4a:65:3e:f8:0c:dd:6b:
                    5f:ba:02:4e:a4:93:9f:20:48:11:bb:fb:b9:8f:33:
                    5f:82:4a:27:b1:bd:77:c0:5c:22:cf:56:9f:ac:0b:
                    43:1c:58:47:23:08:3c:61:05:e6:f7:95:39:f8:d7:
                    a7:15:ec:47:89:e6:fc:7e:a0:99:90:d2:5d:d8:be:
                    bc:47:0b:71:de:08:0c:56:29:47:67:de:8c:5a:b4:
                    48:84:45:32:dc:48:3a:af:27:bf:dd:6c:9b:ae:3e:
                    48:62:c5:bf:51:1b:57:81:e2:37:9a:2b:0f:11:88:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:06:13:3E:4A:35:68:E1:5C:60:07:E8:9C:60:1E:67:62:EF:62:20
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9AYTPko1aOFcYAfonGAeZ2LvYiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.53.0/24
                  176.105.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:73:01:14:b9:6a:f9:61:96:b3:29:6a:c1:86:2b:48:78:61:
         bd:59:92:1c:30:a3:2b:d6:00:38:3f:82:1b:5b:27:1f:ce:03:
         98:2c:5c:3d:18:24:b9:01:ec:e0:bb:da:fa:3e:09:23:44:87:
         68:a3:7e:3c:a9:99:4d:e2:59:7e:79:fc:3e:e7:50:43:35:61:
         20:f3:3d:09:e6:7a:84:00:a1:19:3f:c0:62:e5:76:25:6a:40:
         e0:99:fd:01:30:16:ef:7e:17:52:3a:7e:b6:41:36:a6:5b:ed:
         11:05:14:34:16:bc:9a:92:79:d8:05:90:65:d1:c3:c3:49:11:
         fb:60:f5:2b:b8:f0:da:d6:3c:97:b7:9a:d9:b3:98:79:1f:f4:
         09:56:55:3c:5e:0e:4b:3d:ca:49:0e:c5:c8:d3:e7:5d:c9:40:
         d0:ab:85:51:d1:a8:8d:54:52:33:57:4f:86:4d:5a:62:7f:ed:
         0e:c8:59:19:95:80:1f:97:1b:f0:80:4b:97:67:af:d7:28:b6:
         a0:c1:16:80:9e:21:7e:dc:9b:ab:db:80:c5:0b:40:f0:96:2d:
         b5:e6:c4:29:7d:f2:fa:7b:43:6e:05:5b:f8:ae:cd:1a:a2:c4:
         92:45:a5:6f:dd:86:e9:70:f8:64:b4:71:e0:75:e7:df:05:63:
         90:46:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org