Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/EAoC6EVrDxFjcd5HlQ-PmYw3jrc.roa
File:                     EAoC6EVrDxFjcd5HlQ-PmYw3jrc.roa (raw, json)
Hash identifier:          Jw8+OhrmZbHSdxlsUIDnq5dqPf9prTNm3WtrWO058H8=
Subject key identifier:   10:0A:02:E8:45:6B:0F:11:63:71:DE:47:95:0F:8F:99:8C:37:8E:B7
Certificate issuer:       /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial:       0487D52B
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/EAoC6EVrDxFjcd5HlQ-PmYw3jrc.roa
Signing time:             Sat 01 Jan 2022 05:02:21 +0000
ROA not before:           Sat 01 Jan 2022 05:02:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49468
IP address blocks:        45.8.47.0/24 maxlen: 24
                          45.8.45.0/24 maxlen: 24
                          45.8.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76010795 (0x487d52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
        Validity
            Not Before: Jan  1 05:02:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=100a02e8456b0f116371de47950f8f998c378eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:35:f3:b9:55:a9:5c:87:df:3a:c1:29:ee:
                    62:ca:75:ec:dd:20:f2:f2:83:76:46:2e:4f:f5:7a:
                    88:1c:3a:df:76:60:cd:6a:e6:dc:cc:89:18:40:42:
                    8c:72:35:d4:10:03:2c:5c:67:67:cb:2c:62:fd:fc:
                    dc:d3:87:88:7f:f7:5f:9b:a7:d4:d7:29:d8:de:54:
                    4a:9f:23:6d:6f:5b:96:50:5e:02:af:38:86:a5:d1:
                    57:1c:5d:81:e1:f0:ae:99:fe:7e:36:81:f2:c8:35:
                    1c:47:b8:cb:bf:12:d5:ad:af:3c:e8:cc:e8:67:c0:
                    a6:c7:4e:82:bd:2d:40:28:ff:be:bb:03:44:03:c5:
                    75:2e:68:d3:0f:5d:e2:ae:5c:c7:ce:16:92:76:0c:
                    e5:98:bd:6c:05:42:8a:57:61:15:4f:d2:ed:d1:b8:
                    a4:e0:29:29:17:d8:b7:3a:50:b0:36:14:f2:7d:7c:
                    ef:7a:20:a2:f8:2a:55:02:86:21:50:24:7f:cc:03:
                    39:19:70:ff:ba:34:16:69:ed:93:70:bc:1a:e2:9c:
                    ed:62:97:f2:8d:23:85:17:bd:78:d6:39:db:f0:b6:
                    32:7a:df:8a:d3:0a:15:34:f4:55:b2:1e:00:ec:ac:
                    d7:56:90:4f:e6:40:68:12:7d:ad:c4:3e:b7:a4:be:
                    c9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0A:02:E8:45:6B:0F:11:63:71:DE:47:95:0F:8F:99:8C:37:8E:B7
            X509v3 Authority Key Identifier:
                keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/EAoC6EVrDxFjcd5HlQ-PmYw3jrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.45.0-45.8.47.255

    Signature Algorithm: sha256WithRSAEncryption
         c6:4b:2b:0c:49:92:bd:e4:ee:dc:96:36:fa:a1:1d:74:94:5c:
         87:7c:0a:af:87:d7:ce:1c:00:77:e4:2a:df:78:33:59:3a:84:
         fe:e2:3e:29:86:bf:89:36:49:7f:90:ba:e7:3e:0b:91:4b:7d:
         5c:08:50:1f:15:0c:4e:0b:24:c9:33:98:fa:16:86:b2:a4:42:
         81:27:a3:0d:31:33:b5:8a:cd:ea:f7:2f:59:5e:42:7a:3a:ac:
         b4:69:49:b4:75:f4:62:83:45:45:03:07:ef:27:04:83:59:5c:
         77:00:9b:64:96:1b:e3:76:e7:63:75:7b:44:58:e7:26:f7:2b:
         17:7c:d6:bd:0c:ae:8d:7b:5d:04:92:36:84:26:d7:be:e8:55:
         82:77:8f:3d:1e:ff:19:42:26:98:c6:63:64:0b:81:38:fb:bc:
         8a:61:86:55:0c:94:a1:7b:34:4e:d2:e6:f8:64:1e:2c:ff:13:
         25:95:16:d7:b0:8b:b0:c5:f6:d2:42:3c:05:12:7d:71:ba:d9:
         d2:bc:8e:bf:e7:a3:e3:67:31:a3:5a:5e:01:d4:14:2c:c0:f4:
         2b:94:f8:e8:47:5c:a6:d0:67:59:24:a0:ba:1b:79:62:60:aa:
         d7:c2:d6:c0:a9:f6:0a:2e:88:4b:cc:e8:b5:6b:56:12:15:4b:
         1b:c0:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:28 2024 by rpki-client on console-ams.rpki-client.org