Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/Rdqe_saqlgqlQXBMhK1pFDzmY4Y.roa
File:                     Rdqe_saqlgqlQXBMhK1pFDzmY4Y.roa (raw, json)
Hash identifier:          2g47JheBzUZ11gl7I+AwKVHYgl2qhHY660EPRsaXZUI=
Subject key identifier:   45:DA:9E:FE:C6:AA:96:0A:A5:41:70:4C:84:AD:69:14:3C:E6:63:86
Certificate issuer:       /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial:       B89162
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/Rdqe_saqlgqlQXBMhK1pFDzmY4Y.roa
Signing time:             Sat 01 Jan 2022 07:54:44 +0000
ROA not before:           Sat 01 Jan 2022 07:54:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51112
IP address blocks:        178.217.72.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12095842 (0xb89162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
        Validity
            Not Before: Jan  1 07:54:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45da9efec6aa960aa541704c84ad69143ce66386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:89:4a:c8:6c:4b:e7:76:0b:be:59:d3:cb:
                    e5:6e:64:79:3d:24:21:a2:d5:a8:8e:58:09:13:70:
                    0d:c0:42:0c:2d:7f:dc:90:95:5a:12:90:02:45:74:
                    38:96:ce:e8:3d:4b:b8:a1:0b:c2:ac:65:42:df:18:
                    51:de:3a:0d:55:35:e0:0c:71:ed:26:8c:c4:2c:21:
                    03:09:f0:b3:88:7f:f7:2e:4c:2d:10:81:6b:56:b1:
                    ae:c9:90:a9:de:23:59:8e:50:e1:21:ad:61:4a:cb:
                    6c:98:28:1a:48:e0:69:1f:6c:8f:96:7d:3a:5a:60:
                    93:90:ee:63:5e:35:c5:42:06:c2:67:46:89:88:9d:
                    d0:6d:57:3a:f2:eb:8b:16:1e:85:ba:43:10:91:3e:
                    f8:ec:24:85:06:90:ce:9a:b6:a2:4d:c3:0e:68:92:
                    bc:85:a1:f0:21:e2:f9:38:0c:f0:ab:ec:3c:57:3a:
                    7a:40:f9:85:83:01:1a:9f:1f:5a:62:9a:01:2e:17:
                    2c:0c:23:85:9e:73:5b:c1:f8:3e:12:11:df:9e:fa:
                    5f:7d:eb:47:3c:3f:ff:7d:3d:8a:8a:9b:56:95:8c:
                    3f:5d:60:51:5f:1f:fc:70:c3:92:a8:da:06:f1:f8:
                    59:fc:6d:44:80:81:21:16:ea:25:4f:a4:ce:e2:ff:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:9E:FE:C6:AA:96:0A:A5:41:70:4C:84:AD:69:14:3C:E6:63:86
            X509v3 Authority Key Identifier:
                keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/Rdqe_saqlgqlQXBMhK1pFDzmY4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.217.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:bf:8d:e6:8c:5e:23:d1:2c:e9:b1:bf:7c:47:3b:69:e0:c0:
         cd:42:01:2b:1c:d6:97:3d:6e:e0:53:69:b8:7e:b5:43:44:a2:
         46:44:bb:76:9e:45:8c:29:46:f6:c2:cb:6f:f4:72:48:9c:fe:
         29:bc:b3:25:9d:32:7e:94:22:2f:8b:d0:28:0c:9c:75:53:9a:
         50:ec:82:ca:e5:2c:0e:ba:45:99:b1:b6:aa:23:3c:d5:d4:de:
         13:bb:5c:3b:d0:0b:94:72:63:dc:5e:f9:ad:69:90:83:e5:bf:
         04:a9:73:81:95:29:70:90:03:c3:26:1e:f6:76:26:df:b6:e8:
         1c:da:05:3b:6c:20:39:0c:63:ad:67:1c:0d:7c:83:51:51:21:
         ed:cc:2f:4d:45:8a:56:c4:5b:5c:23:de:04:91:d3:67:93:19:
         5c:4c:cc:a8:8b:29:81:1c:96:2c:09:76:33:e4:73:98:1c:44:
         8f:5d:5d:09:09:63:f3:3b:ef:42:71:06:b9:89:a4:23:a8:36:
         5e:6f:bc:97:a3:d6:3d:a0:e1:51:a6:4c:36:55:8f:23:a2:30:
         88:e0:aa:8d:6e:c7:81:2c:95:3c:1a:5d:63:81:20:9f:a8:85:
         5f:68:01:07:15:b6:ee:ff:6d:28:4c:5f:aa:d1:96:1c:c7:8d:
         81:a5:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:58 2024 by rpki-client on console-ams.rpki-client.org