Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/L48f7DjBErvt6QorcwhS4T2Z19E.roa
File:                     L48f7DjBErvt6QorcwhS4T2Z19E.roa (raw, json)
Hash identifier:          /2noAgnE3p92uWFETmKhpXqToFXRjJcImaBy7l/SeAU=
Subject key identifier:   2F:8F:1F:EC:38:C1:12:BB:ED:E9:0A:2B:73:08:52:E1:3D:99:D7:D1
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       1A4F9113
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/L48f7DjBErvt6QorcwhS4T2Z19E.roa
Signing time:             Tue 31 May 2022 22:10:15 +0000
ROA not before:           Tue 31 May 2022 22:10:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46261
IP address blocks:        45.138.210.0/23 maxlen: 24
                          213.232.104.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441422099 (0x1a4f9113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: May 31 22:10:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f8f1fec38c112bbede90a2b730852e13d99d7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:ad:37:6e:ee:e9:19:68:9b:62:7a:05:25:
                    e9:96:48:d8:2e:cc:b5:1d:74:be:cd:9d:c4:9d:46:
                    8a:cf:61:19:95:3b:a0:c6:aa:a3:d4:d7:dd:f8:39:
                    10:75:f5:ed:75:dd:68:6c:f5:7c:c0:06:37:8a:70:
                    6e:b8:2b:2a:f1:0c:5f:da:44:ff:97:4f:41:1e:02:
                    b8:d8:f4:44:76:1b:c9:2a:8d:4f:6b:67:fe:9b:e4:
                    8a:84:e4:99:fa:16:16:92:02:47:2e:94:a7:c9:35:
                    d2:81:28:ac:ca:4b:48:f2:62:84:1c:ac:47:7a:89:
                    b6:44:73:43:ef:9d:b2:bf:f9:7b:0d:45:1d:b5:95:
                    49:40:c2:68:b9:75:dc:f2:e6:e8:13:9b:fd:41:bc:
                    88:cf:6b:78:4a:1e:e0:0e:22:4c:ac:76:70:1b:c2:
                    6b:21:59:dd:11:f1:c3:64:95:7c:32:3a:ca:18:be:
                    72:3b:78:8a:5d:6e:60:73:3a:a3:5f:53:f5:83:cb:
                    93:00:74:c8:47:ea:50:8f:d3:bf:05:a0:9e:bc:76:
                    f5:7a:a3:21:2b:9c:03:e1:0a:b6:56:3d:b2:68:57:
                    6f:f8:9d:7d:dc:a4:34:7c:e1:63:76:6c:9e:1a:ed:
                    cf:fa:dd:56:11:f4:d8:b2:4c:99:d5:1f:b9:51:47:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:1F:EC:38:C1:12:BB:ED:E9:0A:2B:73:08:52:E1:3D:99:D7:D1
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/L48f7DjBErvt6QorcwhS4T2Z19E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.210.0/23
                  213.232.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:7a:53:6e:b6:45:40:55:d6:8a:06:54:0f:60:3e:09:15:cb:
         b3:3b:1f:bb:71:7c:6d:2a:08:29:71:73:09:66:3b:f3:13:b0:
         ea:39:9d:7f:65:19:dc:74:92:f1:c0:f8:46:4f:a7:bc:ac:10:
         9c:24:ee:a8:0e:66:a0:a2:59:e5:d4:55:10:a9:83:1c:53:ec:
         f1:f8:01:a8:5d:ba:b9:2b:77:cc:b1:1a:6c:f2:3b:2e:6c:20:
         21:89:d0:1c:4c:19:4a:81:af:19:78:b4:bc:b9:1f:da:e2:1f:
         19:ef:53:9e:0e:1b:53:13:0b:cb:b6:15:3c:a0:52:e5:a9:69:
         eb:f9:b1:de:90:a2:43:d5:01:8c:5f:d7:4a:36:3a:77:25:fa:
         75:39:58:9e:9f:ef:ef:35:97:27:b1:f7:f4:33:56:d5:bc:e4:
         34:e2:95:2a:e3:c8:3b:02:bc:7a:20:d3:6f:f8:30:e4:14:24:
         0b:de:bc:87:46:bc:bf:13:36:82:bd:1b:9c:83:e0:cb:ce:77:
         1d:08:eb:2c:b5:ec:45:d6:07:d6:26:75:aa:cd:78:a2:84:60:
         0b:c6:44:08:c1:e9:a1:c6:41:3c:24:f4:37:7f:98:02:59:23:
         f9:16:3c:7b:ee:d0:5a:90:33:14:68:0f:6d:12:be:00:53:16:
         d0:3b:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:32 2024 by rpki-client on console-ams.rpki-client.org