Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/RqDcrlQ2FqVGP0hJZN1zCPL3Ie0.roa
File:                     RqDcrlQ2FqVGP0hJZN1zCPL3Ie0.roa (raw, json)
Hash identifier:          jlN0q8RLiXnzQUyz2ZmA/p9tkig+qSQA+QDYWYb68kI=
Subject key identifier:   46:A0:DC:AE:54:36:16:A5:46:3F:48:49:64:DD:73:08:F2:F7:21:ED
Certificate issuer:       /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial:       0424A799
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/RqDcrlQ2FqVGP0hJZN1zCPL3Ie0.roa
Signing time:             Thu 10 Mar 2022 17:01:05 +0000
ROA not before:           Thu 10 Mar 2022 17:01:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.149.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69511065 (0x424a799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
        Validity
            Not Before: Mar 10 17:01:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46a0dcae543616a5463f484964dd7308f2f721ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:10:6a:ff:67:4d:ac:a6:3a:c5:60:c6:e4:
                    24:57:46:2c:ed:90:67:9a:52:10:34:f9:6c:9a:11:
                    63:3f:15:c7:56:e3:aa:c6:64:12:97:0c:7e:21:7e:
                    0d:6e:d8:61:f7:45:61:80:8a:93:e3:01:db:2e:da:
                    dc:be:04:73:bd:59:9c:e5:e6:7d:dc:7d:3f:99:18:
                    45:d3:8b:66:5d:46:d5:e2:c1:a1:dd:be:c5:c7:2e:
                    fd:b7:4a:2c:ce:88:5c:90:ac:98:6b:4f:35:4d:49:
                    71:c9:d3:3f:7a:d3:25:7d:3d:47:82:10:70:b9:75:
                    60:7f:ae:4f:db:85:fb:1a:1d:4c:a5:9d:65:e1:5d:
                    ab:32:04:32:0b:1a:f4:b0:eb:0e:46:b9:16:1e:dd:
                    be:25:38:07:15:c0:e9:f0:a5:f4:6e:54:b9:a6:e8:
                    32:10:fa:5c:86:0e:ff:ba:71:fb:b3:79:36:04:d5:
                    c5:18:16:95:d3:fe:5f:74:2e:e9:ad:6a:9e:73:f2:
                    f0:d1:5a:fe:85:f7:81:37:30:21:82:dd:c7:77:fb:
                    98:be:c0:1b:a0:52:a0:27:ec:bb:f8:d5:c8:31:dd:
                    5a:5c:da:36:ee:f9:99:ab:ca:26:5d:3b:88:77:4c:
                    44:2d:0b:f1:97:6b:cf:7f:81:60:a7:25:09:cc:20:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A0:DC:AE:54:36:16:A5:46:3F:48:49:64:DD:73:08:F2:F7:21:ED
            X509v3 Authority Key Identifier:
                keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/RqDcrlQ2FqVGP0hJZN1zCPL3Ie0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:27:81:95:4d:c9:94:95:c2:76:2c:a7:61:52:8c:d1:7e:a6:
         ce:36:71:43:d4:bc:9e:2f:b3:42:a2:82:11:bf:43:e7:07:db:
         ea:24:4e:a8:49:c1:bb:46:df:b6:91:a9:a2:0b:c6:17:3e:25:
         54:fd:59:dc:31:c8:fb:a7:cc:a5:b7:9c:5a:c9:56:1e:04:6f:
         f2:3a:36:e7:84:4c:8d:d6:9a:3d:73:3c:e2:c8:7e:72:66:d2:
         4a:00:e7:ee:6e:20:87:4f:d5:ba:23:82:8f:80:c4:5c:d3:f0:
         15:45:be:7b:a9:49:0f:88:60:5a:4e:f7:da:44:ec:13:d0:7c:
         a4:68:af:1b:49:4e:d1:a9:6d:f8:61:3a:4a:da:db:7b:0f:79:
         87:05:6b:7d:9f:bd:32:a1:ca:94:2f:73:ce:ea:d9:c8:23:52:
         37:d8:d4:78:83:79:7f:f7:8b:4e:52:6f:92:b9:e6:8b:0d:1e:
         9a:c8:fc:c2:8e:f3:91:a6:8c:4a:9c:38:ba:ab:83:6f:10:a5:
         40:ba:38:a8:f8:c8:49:eb:7e:86:30:4b:29:e1:fd:55:bf:9f:
         99:40:b7:53:d2:25:8d:96:f7:90:1c:cb:35:58:ff:23:40:f3:
         a9:e6:ff:40:e5:c2:37:06:4b:44:d9:af:0f:60:69:b4:80:d2:
         a1:e2:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org