Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EMXTEk7QsfO4r_F6XdtQo6GQF8E.roa
File:                     EMXTEk7QsfO4r_F6XdtQo6GQF8E.roa (raw, json)
Hash identifier:          qErkW+NsrSz25Pl80YqBT8Up4MjtBVKFWhgAxtkeQ9c=
Subject key identifier:   10:C5:D3:12:4E:D0:B1:F3:B8:AF:F1:7A:5D:DB:50:A3:A1:90:17:C1
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       179F8C9A
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EMXTEk7QsfO4r_F6XdtQo6GQF8E.roa
Signing time:             Sat 01 Jan 2022 04:54:00 +0000
ROA not before:           Sat 01 Jan 2022 04:54:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34924
IP address blocks:        45.145.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396332186 (0x179f8c9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10c5d3124ed0b1f3b8aff17a5ddb50a3a19017c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:05:bb:f9:dd:53:77:65:75:30:80:df:f7:7b:
                    b8:6b:ec:57:51:f0:fb:e4:1a:fe:65:6e:3c:92:a4:
                    cb:57:ca:19:5d:26:72:e9:c4:d5:ce:47:3a:c4:d1:
                    63:85:f4:c8:d3:50:9d:a9:08:aa:f3:b9:99:8b:49:
                    63:3b:bc:97:d1:4a:f2:db:b3:4a:88:b3:fb:d6:06:
                    43:25:b7:79:d7:6d:a4:bb:c5:62:de:09:f6:72:43:
                    d6:20:41:03:6b:fb:2b:bb:28:fc:a3:64:18:86:0e:
                    e9:7f:c8:d9:28:03:6d:e4:49:f2:1d:05:3f:90:1d:
                    71:83:2e:d0:c0:38:ce:1e:7f:9e:e4:3d:b8:d7:97:
                    2a:19:2e:eb:07:9b:29:20:df:3f:12:7d:d2:b7:df:
                    74:c8:51:9e:c2:0f:e1:40:a8:3f:30:70:9e:8d:78:
                    0a:e4:ac:a7:59:99:77:e4:96:30:d2:63:3e:a3:7e:
                    b9:e9:42:67:6b:a5:41:78:19:89:82:69:fc:f7:60:
                    83:d2:29:73:e6:54:c7:e2:f2:05:05:ba:cd:65:40:
                    fa:0c:8d:53:2f:5e:e1:ee:1d:37:50:e2:64:f8:3f:
                    6b:b3:9a:73:e1:5e:f7:28:51:9f:b5:01:2b:e8:ec:
                    98:03:49:20:7d:50:e3:39:3e:00:d6:44:d0:39:72:
                    4c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C5:D3:12:4E:D0:B1:F3:B8:AF:F1:7A:5D:DB:50:A3:A1:90:17:C1
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EMXTEk7QsfO4r_F6XdtQo6GQF8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:06:61:e3:5e:97:f3:f8:c1:60:2a:9d:01:6f:ac:b9:bf:c0:
         7b:12:76:14:cc:de:23:68:6a:0e:30:14:9f:92:56:e3:b7:35:
         74:93:9c:17:d0:a1:06:f5:da:52:c5:7c:37:29:0c:1c:cc:6b:
         cb:4e:88:ff:04:a2:97:d7:44:7a:48:ca:5c:1f:fe:af:ba:a5:
         b8:ac:47:1e:7d:b4:4b:ae:9e:f1:0c:85:68:16:4c:7c:1e:8b:
         8f:2c:f2:08:86:3e:76:df:d6:43:49:71:60:a6:91:a4:53:cf:
         27:66:ab:b2:51:8d:c3:52:91:db:f4:01:a0:00:d5:d7:10:70:
         b2:37:4e:bf:ee:33:6b:77:fc:55:2b:10:68:cf:a8:77:33:4e:
         f7:ac:74:87:6c:77:d7:24:7a:e9:6b:08:21:4c:d0:d6:bb:7f:
         20:77:02:3c:e0:16:2c:69:56:66:3e:ed:b6:a4:f0:cc:23:4f:
         c5:8b:06:73:05:35:54:fa:74:06:3c:de:5d:01:f1:8a:53:2b:
         58:3a:22:69:1d:07:11:05:26:db:4a:48:b7:21:50:e8:a4:22:
         83:40:b7:93:75:ec:c7:e3:3b:0a:08:d1:f8:87:22:8f:53:c2:
         ae:0c:41:44:7c:57:ae:06:91:89:80:91:70:a8:d9:ab:97:b9:
         b3:74:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org