Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/pJpzcOWMynQ1LnQLgGuL2GRlujQ.roa
File:                     pJpzcOWMynQ1LnQLgGuL2GRlujQ.roa (raw, json)
Hash identifier:          yHP9Ep7qZe7FDA9KgmW9lkNrQ+5zEPBz+9OSg1V+2Ao=
Subject key identifier:   A4:9A:73:70:E5:8C:CA:74:35:2E:74:0B:80:6B:8B:D8:64:65:BA:34
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       0184994D61951CA4970F27832C8B29F2A3F3
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/pJpzcOWMynQ1LnQLgGuL2GRlujQ.roa
Signing time:             Mon 21 Nov 2022 08:28:16 +0000
ROA not before:           Mon 21 Nov 2022 08:28:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15731
IP address blocks:        45.129.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:99:4d:61:95:1c:a4:97:0f:27:83:2c:8b:29:f2:a3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Nov 21 08:28:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a49a7370e58cca74352e740b806b8bd86465ba34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:98:da:47:ad:6f:35:bf:b5:af:6f:dd:74:
                    22:d2:d2:25:46:62:eb:46:da:8a:0f:18:36:5f:ae:
                    c8:ca:a5:38:2a:27:de:ab:00:c4:0d:72:f3:c5:4e:
                    d2:41:e9:30:a4:9d:c7:ff:d3:8d:4b:7d:2c:b3:b7:
                    cf:43:81:76:4e:72:27:e8:31:dc:e7:3b:e7:b2:cc:
                    ee:67:99:39:68:87:26:1c:bd:d1:4a:de:58:02:fe:
                    02:73:36:4c:68:de:a7:30:d7:fb:03:eb:34:9d:bc:
                    a8:41:0c:5f:e4:db:35:7c:a2:0e:d5:a8:5a:5c:47:
                    24:31:74:11:e9:5d:3d:84:88:da:48:01:f0:a2:ec:
                    d5:0d:5b:09:01:c5:0d:af:90:2b:b0:1a:60:6a:14:
                    3e:49:21:a6:25:35:cc:35:d6:a6:63:b2:fb:5a:54:
                    04:11:40:a0:e8:fa:e2:c3:78:1a:05:7b:f8:be:c0:
                    33:bb:83:7c:42:5d:af:a1:d7:df:36:7a:d3:76:c3:
                    82:16:70:e5:64:b8:34:c0:aa:0d:fe:65:f9:d0:17:
                    0c:37:a6:33:d5:91:be:d4:47:d3:33:97:c3:66:27:
                    8e:63:04:8b:00:b0:c9:65:b0:84:fa:b1:00:7b:66:
                    92:27:bc:ad:00:ec:a8:4d:41:88:08:a4:06:26:20:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9A:73:70:E5:8C:CA:74:35:2E:74:0B:80:6B:8B:D8:64:65:BA:34
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/pJpzcOWMynQ1LnQLgGuL2GRlujQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f3:06:22:c6:ec:a3:f6:14:83:af:e8:11:cf:a6:e7:1e:30:
         6d:e5:6e:0b:f4:c6:fa:39:4e:9f:2c:00:8b:6b:05:73:1f:ad:
         1c:55:e0:8b:f6:ba:fa:a5:64:f1:a5:07:cc:a1:c8:41:a0:af:
         b0:e9:81:42:51:7a:73:81:a5:09:a6:8a:33:ca:64:2f:4c:10:
         a5:49:6c:60:5c:dc:b6:b5:fb:e8:90:89:79:95:57:33:00:d2:
         3e:eb:d7:a0:b7:e9:4a:7b:00:bb:1d:35:01:72:20:a5:73:06:
         2f:cc:50:c8:e8:50:8d:f2:95:58:4b:55:93:e2:95:5d:13:d9:
         92:bc:88:11:dc:77:41:22:e3:e3:5f:c5:ef:30:a4:54:6d:74:
         13:be:cf:12:b3:35:8a:b5:75:08:98:50:23:3c:9e:df:3e:7c:
         30:e7:e1:61:07:5b:ec:4c:1e:14:98:37:9c:07:ea:9d:24:18:
         b9:18:80:4a:93:d0:71:78:35:0b:aa:07:96:32:19:23:87:f1:
         97:0d:69:99:bf:28:f1:7e:66:5b:b5:10:ab:98:d2:74:f4:0e:
         b6:dd:f9:87:7b:84:21:78:85:66:31:0b:93:91:41:6f:da:71:
         dc:6e:ef:f5:5c:e3:35:85:88:7c:55:26:dc:75:29:7d:18:8f:
         d6:f6:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:12 2024 by rpki-client on console-ams.rpki-client.org