Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/eG8EqdAiDUj44cWVGmRV275MRuA.roa
File:                     eG8EqdAiDUj44cWVGmRV275MRuA.roa (raw, json)
Hash identifier:          ysQcDXxw/2XrbxLbpbjNy11KyByt6ajtEwzNGHrDsEw=
Subject key identifier:   78:6F:04:A9:D0:22:0D:48:F8:E1:C5:95:1A:64:55:DB:BE:4C:46:E0
Certificate issuer:       /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial:       018316B46163E52FDED6CF7E5FA5C674E26C
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/eG8EqdAiDUj44cWVGmRV275MRuA.roa
Signing time:             Wed 07 Sep 2022 06:47:43 +0000
ROA not before:           Wed 07 Sep 2022 06:47:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49121
IP address blocks:        37.77.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:16:b4:61:63:e5:2f:de:d6:cf:7e:5f:a5:c6:74:e2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
        Validity
            Not Before: Sep  7 06:47:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=786f04a9d0220d48f8e1c5951a6455dbbe4c46e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:6a:07:3f:6e:b5:a4:73:47:dd:68:bc:4c:
                    f7:48:bd:23:d8:c1:5e:7e:e5:b7:ad:a4:6a:8b:e7:
                    d7:59:0d:83:ee:39:b4:4d:ce:04:91:53:37:e6:e5:
                    f1:75:c0:95:cf:42:8f:53:83:4c:01:c9:05:04:c7:
                    dd:76:9b:6e:20:09:b3:a8:c6:63:31:e5:84:a4:37:
                    cf:7d:73:05:e5:04:1f:5f:fa:5f:10:62:dc:4a:be:
                    9a:5b:81:62:41:d2:3f:ad:96:d7:f1:a5:a4:c3:cd:
                    e4:18:d2:aa:0f:d9:a7:ac:89:f2:12:49:5f:ca:fd:
                    ee:7f:47:46:cc:ed:6e:89:56:d9:24:89:19:5d:f9:
                    c3:c1:6d:b0:89:c9:04:41:2d:42:b1:9b:fc:fa:98:
                    ac:a7:fc:de:ad:3a:c6:7e:5e:43:47:e3:92:20:ea:
                    d1:2f:6f:43:f6:89:ed:32:b8:80:19:11:12:f3:09:
                    10:76:87:49:1f:b0:99:35:51:39:50:2c:1b:bf:e8:
                    46:b8:a9:2b:1d:a9:67:4b:e2:7f:2c:50:3a:71:30:
                    cc:30:18:30:a1:49:b1:e8:8e:1c:57:d3:23:32:6b:
                    11:63:d2:66:7d:2f:22:ff:e2:8a:61:d9:4b:84:0d:
                    1f:ef:68:4e:78:77:b8:ea:e1:78:01:8a:f5:83:ad:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6F:04:A9:D0:22:0D:48:F8:E1:C5:95:1A:64:55:DB:BE:4C:46:E0
            X509v3 Authority Key Identifier:
                keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/eG8EqdAiDUj44cWVGmRV275MRuA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c9:2a:9c:ec:f2:fe:d3:e3:02:42:8f:23:72:da:cc:cf:bd:
         32:59:96:2b:d7:b8:13:13:53:3a:0b:ee:e4:e7:28:84:c3:e9:
         f7:f7:a6:d7:86:00:8a:68:f4:26:db:6d:ad:b4:24:ab:01:c5:
         d7:ef:6c:f5:a6:76:cd:ee:ac:ca:b8:6f:73:94:46:ad:1c:0d:
         cd:9f:bd:15:8f:75:4d:31:63:00:2c:8d:c0:ed:88:66:0d:9c:
         f3:2c:21:8f:8d:af:8b:19:c3:6b:87:60:e2:4b:3d:b4:52:24:
         b6:ef:86:7d:7b:d7:02:c2:83:b7:77:2c:8f:93:4d:4d:4a:47:
         60:9b:f4:96:92:c9:cd:ff:09:7d:7b:95:20:f1:1b:8c:58:df:
         76:3c:0d:c1:74:bb:8f:db:f3:43:23:c9:5b:d3:ba:ec:af:bb:
         f7:19:91:66:54:fb:c7:fe:36:fa:2e:c8:88:6a:40:1b:30:13:
         a9:06:35:f7:20:d3:39:34:3b:b0:27:d8:81:19:eb:45:08:22:
         75:8d:70:1c:21:20:4a:87:a4:42:d8:63:36:54:b4:ec:d2:9e:
         d8:d4:a5:5d:41:b3:88:5f:2a:ec:5c:ef:2c:2f:e6:79:88:e5:
         9e:4c:88:5a:3c:32:11:68:b3:f9:10:b7:0b:9c:fd:bf:aa:81:
         28:6e:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:01 2024 by rpki-client on console-fra.rpki-client.org