Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/VL-s135LWt1OLucI5G4wyny0V0s.roa
File:                     VL-s135LWt1OLucI5G4wyny0V0s.roa (raw, json)
Hash identifier:          nmWte6kRZe4ho3ZjifS4bixpsSp8FXoqV+LQvAXZhqw=
Subject key identifier:   54:BF:AC:D7:7E:4B:5A:DD:4E:2E:E7:08:E4:6E:30:CA:7C:B4:57:4B
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       0182115E9F6C15F312687C117DC27EAD409C
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/VL-s135LWt1OLucI5G4wyny0V0s.roa
Signing time:             Mon 18 Jul 2022 12:53:09 +0000
ROA not before:           Mon 18 Jul 2022 12:53:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46261
IP address blocks:        45.85.240.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:11:5e:9f:6c:15:f3:12:68:7c:11:7d:c2:7e:ad:40:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Jul 18 12:53:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=54bfacd77e4b5add4e2ee708e46e30ca7cb4574b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:59:3d:28:00:fd:97:c0:3c:70:99:bb:fe:
                    4b:25:57:19:43:8e:05:b9:fe:f8:c7:42:23:ed:38:
                    d8:ba:27:3f:35:e2:04:d5:d6:8c:82:c6:2e:ca:0b:
                    34:4e:dd:77:04:ec:a7:34:7b:17:c5:8c:52:b2:65:
                    e2:a8:e8:54:59:b1:df:c3:a9:85:05:d1:5f:8d:b7:
                    d6:bf:1b:f1:7f:77:fa:ad:43:55:41:11:af:78:f8:
                    94:9f:bd:a1:9a:2f:1d:94:19:e9:3c:d8:21:bd:76:
                    ac:49:47:65:a6:e5:1a:cc:e7:c1:25:22:dd:cf:fc:
                    9a:34:d1:a9:f4:93:1d:1a:70:30:65:59:a6:18:68:
                    31:15:f7:c4:c6:85:c3:8c:38:09:7b:dd:6d:58:e0:
                    e3:c3:e7:d1:ba:c1:44:e4:6c:09:52:dc:94:f4:fe:
                    1d:81:ef:5b:76:c2:86:34:cd:8b:4c:45:95:e9:68:
                    b4:a3:f8:6e:d4:a1:5d:40:59:1b:dc:f9:cc:7c:7e:
                    57:fd:64:2d:81:a7:11:0e:67:f2:86:42:a9:fa:65:
                    ac:67:80:3b:62:3c:32:b5:a3:9f:2d:e4:ee:0a:5f:
                    12:3a:05:ba:94:e3:6e:a6:35:3f:d3:b8:9e:4c:3d:
                    32:7f:a2:c1:bb:3a:a2:93:00:ca:ac:ab:49:64:36:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BF:AC:D7:7E:4B:5A:DD:4E:2E:E7:08:E4:6E:30:CA:7C:B4:57:4B
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/VL-s135LWt1OLucI5G4wyny0V0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:9f:61:9c:d0:78:da:68:e5:1c:79:91:2a:c1:31:4b:03:c4:
         05:c4:0f:e6:8b:31:27:f4:7f:0e:0e:05:10:c8:80:2a:6c:fe:
         45:1a:a3:8b:b8:5b:4f:96:f8:1b:8d:7a:a2:97:b1:1f:ce:36:
         65:ed:80:9b:c8:a7:7e:a0:eb:76:08:29:5c:4a:96:17:fa:47:
         dd:dd:98:0c:26:a1:aa:0f:5d:49:8e:fd:aa:8b:2c:08:e5:d5:
         b0:d7:ec:0b:07:1c:16:8f:2e:c4:58:01:0c:b7:5a:44:1c:fb:
         30:ab:79:f4:0f:0d:e9:96:16:31:7e:01:20:5a:37:d9:e6:13:
         35:eb:a7:36:d6:74:26:b9:3d:bf:61:cf:d7:23:e3:f8:55:61:
         28:da:59:cd:cd:ed:1f:88:41:65:98:4e:90:0d:64:8f:31:60:
         ab:31:a1:72:c9:73:4b:0d:3d:69:eb:33:3e:94:75:3c:eb:5b:
         7a:96:96:94:2f:62:bd:2d:3e:27:f6:d2:87:ce:05:05:e0:74:
         26:de:84:b5:39:a8:f3:11:f0:41:42:d2:eb:36:0c:6d:3c:25:
         d9:56:80:42:51:5d:5f:8c:74:32:de:41:41:c3:63:e7:52:8e:
         22:87:a9:7d:69:d3:34:36:91:15:1d:09:2c:1c:7c:e2:9e:c4:
         4f:5d:14:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:59 2024 by rpki-client on console-fra.rpki-client.org