Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/VxoLI1_jrpTeWyyTpovdJ8WYg-k.roa
File:                     VxoLI1_jrpTeWyyTpovdJ8WYg-k.roa (raw, json)
Hash identifier:          0B6eiEttigEKcnElTw6W0eWiKBbFtgmVagLXGkMCIuc=
Subject key identifier:   57:1A:0B:23:5F:E3:AE:94:DE:5B:2C:93:A6:8B:DD:27:C5:98:83:E9
Certificate issuer:       /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial:       018233F5CDF177609163963F4ECB86ACC292
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/VxoLI1_jrpTeWyyTpovdJ8WYg-k.roa
Signing time:             Mon 25 Jul 2022 06:05:23 +0000
ROA not before:           Mon 25 Jul 2022 06:05:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31221
IP address blocks:        185.145.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:33:f5:cd:f1:77:60:91:63:96:3f:4e:cb:86:ac:c2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
        Validity
            Not Before: Jul 25 06:05:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=571a0b235fe3ae94de5b2c93a68bdd27c59883e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:bb:57:33:62:01:d4:5e:ef:40:b9:1a:ab:
                    9f:a6:3f:04:d1:a3:87:06:cb:b3:2c:d0:9a:14:2d:
                    0c:e8:56:73:3c:7e:e1:4c:c4:b9:e0:7d:9e:be:87:
                    b5:5a:a6:69:3c:9e:2c:4e:f9:0f:5f:71:86:15:40:
                    d3:3d:db:c0:de:c1:8f:6b:ec:4f:99:01:51:67:d0:
                    18:88:5d:62:5a:84:e8:78:66:50:61:e2:fc:82:65:
                    bf:f3:cb:fc:09:25:e1:ee:ee:3b:32:fd:07:ac:dd:
                    d9:f3:8b:4c:79:6d:b5:13:23:d3:7d:f8:dc:cd:88:
                    2f:71:cf:85:c6:d8:d6:54:15:2b:49:57:44:bc:32:
                    af:df:64:7d:74:b9:0d:16:d0:9c:21:b1:c1:56:aa:
                    77:41:2a:50:cf:c0:1a:10:f0:e4:d1:86:91:bf:60:
                    b8:bd:c8:49:01:43:d8:f7:e2:5c:58:9d:21:9c:f5:
                    42:eb:be:55:e4:0e:8e:82:45:08:1a:c1:6a:cf:ee:
                    46:ad:af:17:38:66:ac:82:dd:55:17:ca:4c:7f:4e:
                    e7:91:9c:2c:4b:eb:00:5e:58:a7:ed:93:2b:cc:7d:
                    ab:e5:15:eb:86:ee:ed:8e:58:33:5a:87:9a:82:2d:
                    c5:90:c4:c3:a6:44:9d:bb:d5:74:0c:a5:34:40:d8:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:0B:23:5F:E3:AE:94:DE:5B:2C:93:A6:8B:DD:27:C5:98:83:E9
            X509v3 Authority Key Identifier:
                keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/VxoLI1_jrpTeWyyTpovdJ8WYg-k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ea:f1:b6:34:6b:14:01:e1:86:dc:f8:32:38:6a:24:b4:32:
         f6:7c:34:ed:79:b0:8b:95:7f:89:10:7c:16:19:9a:ae:1a:4b:
         e5:b1:84:cf:82:da:00:02:50:33:4f:e8:14:89:42:19:83:e6:
         82:fb:1d:25:e2:aa:65:04:74:d0:b2:22:43:bd:f9:ab:67:2c:
         8c:24:f1:e4:27:65:d5:f0:6e:76:0d:7b:ad:40:8e:c9:bb:c9:
         e9:2a:e6:d7:36:21:67:ea:6e:63:78:6c:4b:b9:7f:4f:7f:47:
         69:88:50:e0:49:bb:80:a7:ea:62:bc:c0:18:30:29:ee:ad:81:
         2f:6e:1f:a1:9b:a0:31:cb:47:af:d4:00:f3:8a:62:5e:4c:a1:
         39:ea:87:f1:70:f4:95:78:d4:98:56:3c:8d:09:a2:8d:29:1d:
         20:2a:3c:2a:13:a1:87:6d:c5:ff:d7:50:e5:9d:cd:55:b5:24:
         2f:82:2c:50:1c:a2:84:f6:1b:61:8e:dc:28:9a:7a:e1:58:6c:
         ac:5f:55:65:8c:bd:66:0a:4e:0a:6d:80:a0:f0:dc:6b:aa:4e:
         b6:5b:a1:09:27:fe:76:7a:78:5a:47:da:5c:80:90:4b:07:82:
         fe:aa:d6:ad:73:94:ed:4e:dd:b8:10:d5:7b:2b:ab:9a:50:d4:
         e2:c1:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org