Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/E11nhrjjamJy_rmx4AFMyFGTWEw.roa
File:                     E11nhrjjamJy_rmx4AFMyFGTWEw.roa (raw, json)
Hash identifier:          ddz3kYsqxC8GNc14B5yPbeZYc1F9UGpX5UDbwiREAlw=
Subject key identifier:   13:5D:67:86:B8:E3:6A:62:72:FE:B9:B1:E0:01:4C:C8:51:93:58:4C
Certificate issuer:       /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial:       076EB15E
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/E11nhrjjamJy_rmx4AFMyFGTWEw.roa
Signing time:             Sat 01 Jan 2022 15:07:14 +0000
ROA not before:           Sat 01 Jan 2022 15:07:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206607
IP address blocks:        45.147.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124694878 (0x76eb15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
        Validity
            Not Before: Jan  1 15:07:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=135d6786b8e36a6272feb9b1e0014cc85193584c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:a6:29:8e:18:ec:82:be:51:5b:f4:72:be:
                    a3:97:2e:a9:f7:ca:db:99:83:bb:51:cd:89:e8:bf:
                    ba:83:2f:ce:88:ff:8d:d5:52:73:04:cb:14:d3:67:
                    ea:cc:7a:89:fb:d8:fd:d1:a1:1e:b8:03:ef:2f:40:
                    97:b2:fe:05:66:d0:d8:6a:59:20:72:ac:a1:a0:40:
                    38:c7:fc:59:56:77:fe:da:6b:8f:1d:87:4a:8d:dd:
                    f9:08:07:6b:d6:8f:cc:57:0d:46:86:f9:5b:79:11:
                    5d:28:9b:fe:1f:6d:b0:62:b4:16:cf:2a:8a:d3:2e:
                    82:8f:dc:ee:da:e5:50:c4:fe:88:23:cf:af:a3:66:
                    2b:3f:92:69:8d:17:42:9f:f2:12:3c:5a:23:25:89:
                    d3:a1:db:b1:3a:3e:a8:d4:e8:b4:c3:4c:5c:a2:e9:
                    4d:e5:60:04:3c:eb:c0:62:86:a6:e5:c6:62:d8:94:
                    53:93:80:b4:8b:a2:7a:da:96:f3:bc:ed:b2:ab:7c:
                    69:32:2e:21:34:43:56:62:6c:5e:1e:15:ec:8e:ea:
                    2e:6c:e0:27:41:94:46:04:e6:37:a0:4b:28:90:43:
                    fb:73:37:83:f2:84:8b:8d:ca:cc:08:0f:29:5d:53:
                    84:39:87:37:c9:4d:77:a3:b9:3d:98:43:62:96:05:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5D:67:86:B8:E3:6A:62:72:FE:B9:B1:E0:01:4C:C8:51:93:58:4C
            X509v3 Authority Key Identifier:
                keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/E11nhrjjamJy_rmx4AFMyFGTWEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:3e:ab:59:df:c7:36:33:a8:0b:d5:7a:d7:57:a5:8b:0f:98:
         69:12:07:d3:ca:2c:81:29:6b:12:a7:09:2c:b9:e2:cb:97:50:
         8a:e2:aa:60:97:a8:65:5a:b3:3f:c7:fd:32:a1:a3:07:10:d4:
         14:95:77:25:ea:d8:40:65:9b:e1:67:f6:23:a7:1c:1f:55:64:
         c7:49:af:81:20:dc:cd:a6:5a:7f:96:d6:c4:b8:52:b8:b3:f6:
         4b:a4:5d:d4:79:b8:bb:33:2e:8c:3c:b0:31:08:36:a8:6f:ae:
         43:07:fa:2a:fc:12:cd:89:be:fe:59:41:a5:20:be:66:4c:b9:
         c4:fa:59:0b:6d:10:cc:5c:2b:d8:c7:ed:6d:ed:a6:46:0b:0c:
         9a:75:1d:bf:e9:0b:a9:07:ac:fc:c2:66:10:d7:98:8e:d8:6c:
         81:e6:e6:1f:33:18:d8:31:ac:0b:bc:d7:21:dc:2e:d2:e3:08:
         d4:4d:f1:30:0f:e8:29:09:1c:aa:c1:97:5e:2c:8a:ec:3d:4a:
         07:b4:28:f2:5b:b3:56:7e:3d:9c:24:86:cb:26:c8:82:5e:33:
         df:c9:9a:ae:35:44:b6:e0:3f:c1:79:bf:7c:2c:b6:81:67:51:
         b9:1e:34:8c:50:f7:a9:17:93:cd:4e:06:12:15:1f:c5:af:f9:
         3d:03:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:09 2023 by rpki-client on console-fra.rpki-client.org