Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/MQjJifs_o0iX8JxF_0FfZx7aqEY.roa
File:                     MQjJifs_o0iX8JxF_0FfZx7aqEY.roa (raw, json)
Hash identifier:          bjouB5z3BdcY5roAS2syD0+TGuDSG55+kkgdGasxZ44=
Subject key identifier:   31:08:C9:89:FB:3F:A3:48:97:F0:9C:45:FF:41:5F:67:1E:DA:A8:46
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       01BEE1EE
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/MQjJifs_o0iX8JxF_0FfZx7aqEY.roa
Signing time:             Sun 01 May 2022 18:15:02 +0000
ROA not before:           Sun 01 May 2022 18:15:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46261
IP address blocks:        45.85.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29286894 (0x1bee1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: May  1 18:15:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3108c989fb3fa34897f09c45ff415f671edaa846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:51:e3:39:03:3e:09:7a:6a:0d:70:d8:4d:
                    c0:6d:95:94:1d:b0:2d:77:00:12:1a:ea:55:ad:9b:
                    0d:de:0c:98:c4:44:0d:e9:5e:39:3b:ff:e0:d0:2b:
                    52:5f:41:2d:1f:ec:06:3c:f6:a8:e5:c1:00:d1:22:
                    a8:4f:7f:e5:f1:e9:4a:c4:1d:69:3d:cc:95:d0:f4:
                    0a:1d:df:82:03:dd:4b:4d:ce:95:82:1d:0f:8d:06:
                    6e:5e:d9:ad:f0:35:25:bc:02:85:03:79:5a:99:80:
                    b7:01:68:79:fa:7e:84:18:60:17:65:ba:f0:a9:14:
                    38:3a:c3:a2:d7:fd:cb:c5:da:d0:11:a5:a8:c4:ac:
                    63:ae:40:05:6d:7d:f6:74:d3:56:cc:a9:f3:51:4d:
                    42:0b:00:bd:7b:16:90:f6:7f:4f:5a:9d:19:8c:86:
                    a5:89:e1:ce:0c:11:27:9e:14:02:7c:f0:cf:f9:f3:
                    01:8f:ef:91:94:7a:b6:40:d1:88:7e:e2:ab:2f:1c:
                    45:b5:c7:e4:b0:6f:a9:52:c4:d4:cf:c6:9b:2c:7f:
                    55:8c:13:89:0e:25:9a:ad:f6:f4:81:51:3a:36:95:
                    1d:01:6e:b4:31:1e:a1:6e:f1:f8:fe:c4:0a:23:5c:
                    41:cd:ee:b9:e0:8b:bc:a3:aa:f5:f7:76:ad:62:8d:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:08:C9:89:FB:3F:A3:48:97:F0:9C:45:FF:41:5F:67:1E:DA:A8:46
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/MQjJifs_o0iX8JxF_0FfZx7aqEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:06:20:51:d9:67:10:f4:40:27:9e:ec:38:da:ab:7c:52:09:
         7c:7c:f4:74:89:07:ac:0d:36:08:d9:1b:c4:b2:20:7f:3e:30:
         96:d0:1b:f7:db:7d:d6:53:a5:7b:23:fa:10:9e:31:af:d8:cb:
         61:17:9e:15:af:7c:b6:1b:05:a1:21:85:44:62:48:88:2d:07:
         55:34:5f:e3:25:38:f6:e2:b4:74:a5:fc:cc:7b:0d:c1:da:0e:
         5a:8b:c2:bd:ba:1f:ca:cb:0f:fe:0e:a6:7c:ff:d7:81:11:f5:
         e1:37:3e:ea:96:8b:eb:14:77:ce:79:fa:46:2a:90:fb:71:7c:
         ab:4f:f6:ca:2d:b9:15:67:3f:94:2e:85:df:7d:27:f5:42:cb:
         c6:c9:0e:d9:15:fb:a2:45:41:4c:77:03:4d:cd:b1:f2:de:94:
         03:f1:69:b5:6d:62:44:28:90:c8:d3:4b:17:7b:3e:2f:f0:17:
         0d:e2:9f:bc:a2:19:73:a1:55:db:fd:54:3b:30:08:b1:29:28:
         e4:8d:ae:0e:d7:ec:9c:69:28:b0:30:29:92:5b:40:1e:d8:07:
         af:b6:3d:27:02:73:1c:e4:e8:61:a9:3d:20:d2:f5:e6:fa:67:
         cf:47:ff:fd:dc:0a:91:bc:73:cc:c5:91:df:de:66:11:d7:e7:
         56:82:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:59 2024 by rpki-client on console-fra.rpki-client.org