Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nTrKIh91Cs7xmdNu_nCotuDgWAA.roa
File:                     nTrKIh91Cs7xmdNu_nCotuDgWAA.roa (raw, json)
Hash identifier:          EpXkF6D5PQdEG3QiBVRR5rxKZaQLA0Th3rWDDUwx214=
Subject key identifier:   9D:3A:CA:22:1F:75:0A:CE:F1:99:D3:6E:FE:70:A8:B6:E0:E0:58:00
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       07CED465
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nTrKIh91Cs7xmdNu_nCotuDgWAA.roa
Signing time:             Thu 05 May 2022 10:06:04 +0000
ROA not before:           Thu 05 May 2022 10:06:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46573
IP address blocks:        185.230.53.0/24 maxlen: 24
                          45.8.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130995301 (0x7ced465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: May  5 10:06:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9d3aca221f750acef199d36efe70a8b6e0e05800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:01:53:2c:ee:aa:06:f6:27:60:40:87:0b:
                    51:55:52:91:36:34:5a:ec:e5:f1:5f:1d:56:94:ee:
                    11:36:f3:ae:65:03:19:2f:33:7a:ad:87:84:37:fb:
                    6c:a5:06:ea:ad:08:b4:3b:c2:b5:03:4b:2e:f8:65:
                    61:17:03:1b:e2:f9:38:b8:89:9f:ac:59:b7:81:fb:
                    ac:2d:f9:6d:65:9c:75:63:6d:e5:c5:93:eb:fe:05:
                    0c:83:5d:f1:cd:a0:60:cf:ac:c2:88:df:f3:90:69:
                    68:15:d9:64:6f:3e:ab:61:5f:19:39:90:59:e9:22:
                    e3:aa:06:a5:c6:65:58:de:d5:b9:ba:68:a2:fb:69:
                    75:c2:3e:52:e1:a4:5a:8f:02:43:f3:14:56:21:74:
                    d2:1a:f0:9f:05:05:a1:31:1e:60:3e:3b:8b:cf:95:
                    f1:1c:1c:b6:22:ea:42:e9:c3:53:70:5f:65:b7:c3:
                    8f:11:a9:15:da:bd:ca:c9:c4:21:85:cb:75:01:60:
                    7c:89:b7:17:2e:43:22:e7:8b:42:c2:47:b6:45:e1:
                    a8:2d:68:5c:10:8d:2e:79:55:c9:91:70:d7:89:24:
                    9d:9b:ee:6f:09:b0:d5:bf:1f:ac:e7:d0:7d:d5:af:
                    0d:19:6d:0e:26:89:e5:7b:14:0d:bd:cc:1e:a0:9a:
                    87:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3A:CA:22:1F:75:0A:CE:F1:99:D3:6E:FE:70:A8:B6:E0:E0:58:00
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nTrKIh91Cs7xmdNu_nCotuDgWAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.23.0/24
                  185.230.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:ef:87:9e:9e:99:5b:22:51:1c:96:3b:18:94:4e:99:7c:84:
         3a:60:9b:3d:b8:e3:e1:4a:b5:1b:59:53:20:78:9d:17:8c:f1:
         56:7e:b3:f6:b5:86:49:fb:f5:eb:6d:0d:4f:ce:a7:f6:60:2f:
         c9:9f:7e:59:ac:1e:a6:ac:ce:07:0a:81:4e:8c:c9:4c:e6:c6:
         9a:ee:eb:ef:95:fb:06:b5:df:9f:44:12:72:9f:68:70:9f:ab:
         38:10:37:d9:59:97:50:4b:6e:30:af:73:d0:ea:e7:b9:9b:ba:
         b9:11:d6:67:0d:c9:d6:ed:5b:f9:cf:33:c2:55:07:8a:ed:82:
         b3:d0:64:55:3a:18:dd:89:d7:48:0f:3a:c8:a2:02:8d:9a:33:
         ed:8b:a7:74:0f:d9:43:1f:ce:53:c6:61:a5:4c:b3:2f:23:c2:
         80:37:c5:f1:94:37:3e:66:c7:77:e4:d4:c2:92:51:ba:68:df:
         91:48:6e:0e:60:78:20:47:ff:d6:2e:75:af:0d:33:3e:a6:09:
         18:13:d4:aa:46:cb:da:a9:3b:bb:28:d2:2f:9b:48:56:8c:bc:
         f0:1b:75:5c:af:3d:5f:e9:a7:ec:19:1f:b8:74:f4:db:91:a7:
         0a:e7:7f:bb:28:6b:c7:bd:9f:78:1e:69:2f:91:1a:a6:34:74:
         57:80:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org