Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/qFDsOsTXm05mdM4W32LA9TWwZOQ.roa
File:                     qFDsOsTXm05mdM4W32LA9TWwZOQ.roa (raw, json)
Hash identifier:          6wdt+q1UQWSG3J/9ozjCq1cSklfhsEqvdHPM8NY2yNs=
Subject key identifier:   A8:50:EC:3A:C4:D7:9B:4E:66:74:CE:16:DF:62:C0:F5:35:B0:64:E4
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       AB50B3
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/qFDsOsTXm05mdM4W32LA9TWwZOQ.roa
Signing time:             Sat 01 Jan 2022 06:53:31 +0000
ROA not before:           Sat 01 Jan 2022 06:53:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.81.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11227315 (0xab50b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Jan  1 06:53:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a850ec3ac4d79b4e6674ce16df62c0f535b064e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:bb:62:44:9a:44:b9:72:9b:07:ec:5c:f3:
                    0c:f3:91:32:11:20:54:e3:fe:22:67:22:f5:9c:e2:
                    b0:86:81:f4:c9:ba:57:50:2a:d2:d7:8d:73:b3:61:
                    d0:96:b1:a6:19:9d:ee:e6:21:7b:37:e3:3e:69:16:
                    b2:e9:a5:54:f3:4c:f8:d2:63:9d:d2:2e:85:87:9c:
                    97:49:eb:49:bd:f9:ac:ac:db:63:09:e0:c2:49:0e:
                    98:9d:d2:07:bd:ed:a4:2f:38:82:c6:ae:ae:a4:23:
                    18:8e:4e:0e:72:ec:00:57:49:16:e9:76:85:af:7c:
                    4d:dc:6f:a7:0a:9c:24:b9:36:25:10:cd:9c:d2:56:
                    7c:0e:02:cc:c4:72:d0:2b:6f:3f:79:f1:7b:55:d0:
                    b6:ef:55:14:8a:e1:2c:29:8d:e0:84:17:96:38:56:
                    f0:82:bb:ca:25:cd:7b:ed:c9:9c:36:bd:27:97:e3:
                    5e:e6:fb:eb:60:6f:41:04:36:70:76:fc:a5:a8:d0:
                    87:37:fd:21:c9:24:a6:f7:43:6b:0a:bb:f0:e8:e9:
                    71:ec:b6:bf:df:c4:f1:f5:b0:ef:53:a3:6d:f5:ad:
                    2e:43:64:9f:07:02:18:b3:17:31:48:a1:a6:cb:27:
                    fd:6e:72:27:8c:48:30:96:89:13:a9:d6:46:39:7a:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:50:EC:3A:C4:D7:9B:4E:66:74:CE:16:DF:62:C0:F5:35:B0:64:E4
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/qFDsOsTXm05mdM4W32LA9TWwZOQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c5:fc:8a:c5:53:4c:a6:23:ef:20:4e:7b:9f:ba:51:ca:d4:
         1d:45:59:5b:cc:20:53:a4:0c:05:df:eb:d1:d2:ec:b4:a8:09:
         78:5a:ee:bc:c0:5e:6c:12:7e:db:d6:fe:d2:66:1e:fd:41:89:
         ca:f3:c9:5f:54:4d:cf:00:69:95:51:c3:28:a9:72:37:44:24:
         95:d2:50:5f:a6:3b:c1:c2:4c:bf:38:12:6c:9e:ce:4e:82:81:
         8d:d5:ec:50:ae:24:fc:a8:ee:45:95:18:2c:f6:fc:1d:69:6e:
         42:da:e1:06:23:4f:f9:4d:a8:3b:8d:94:2c:b7:fe:38:18:36:
         14:12:4e:82:44:df:51:76:99:2c:95:8c:26:a7:9a:e6:e1:ce:
         b9:ca:16:d7:c9:70:46:e7:9e:de:72:53:ab:68:09:07:0b:1f:
         1f:1b:da:36:a6:70:7d:2c:8c:c0:f0:c3:54:82:3e:27:02:f8:
         5c:69:7b:9a:c8:96:c4:48:79:b4:1e:80:e0:bd:b8:6f:d6:d4:
         44:9d:91:30:e5:47:82:20:4f:f5:6f:4b:cf:11:92:9d:94:06:
         98:9c:b6:b3:4d:2e:83:87:e2:53:6e:08:e4:b7:43:bf:90:cc:
         2a:49:fe:13:07:43:0a:2d:72:b4:fb:69:c0:cc:a2:e0:a8:da:
         d8:fd:b4:ac
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAKtQszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZGI4M2U5OWJmNzI1NGY5NDgwNTdhNWU5ODFiZTZmYTVjMjA1NGRkMB4XDTIyMDEw
MTA2NTMzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTg1MGVjM2FjNGQ3
OWI0ZTY2NzRjZTE2ZGY2MmMwZjUzNWIwNjRlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN+1u2JEmkS5cpsH7FzzDPORMhEgVOP+Imci9ZzisIaB9Mm6
V1Aq0teNc7Nh0Jaxphmd7uYhezfjPmkWsumlVPNM+NJjndIuhYecl0nrSb35rKzb
YwngwkkOmJ3SB73tpC84gsaurqQjGI5ODnLsAFdJFul2ha98TdxvpwqcJLk2JRDN
nNJWfA4CzMRy0CtvP3nxe1XQtu9VFIrhLCmN4IQXljhW8IK7yiXNe+3JnDa9J5fj
Xub762BvQQQ2cHb8pajQhzf9IckkpvdDawq78Ojpcey2v9/E8fWw71OjbfWtLkNk
nwcCGLMXMUihpssn/W5yJ4xIMJaJE6nWRjl6KoMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSoUOw6xNebTmZ0zhbfYsD1NbBk5DAfBgNVHSMEGDAWgBS9uD6Zv3JU+UgF
el6YG+b6XCBU3TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZiZy1tYjl5VlBsSUJYcGVtQnZtLWx3Z1ZOMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTgvNWUyMDVhLWVjMGEtNGZlZS1hZWYxLWU0OTVhYWEwY2FjMC8x
L3FGRHNPc1RYbTA1bWRNNFczMkxBOVRXd1pPUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgv
NWUyMDVhLWVjMGEtNGZlZS1hZWYxLWU0OTVhYWEwY2FjMC8xL3ZiZy1tYjl5VlBs
SUJYcGVtQnZtLWx3Z1ZOMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1RdDANBgkqhkiG9w0BAQsFAAOC
AQEAP8X8isVTTKYj7yBOe5+6UcrUHUVZW8wgU6QMBd/r0dLstKgJeFruvMBebBJ+
29b+0mYe/UGJyvPJX1RNzwBplVHDKKlyN0QkldJQX6Y7wcJMvzgSbJ7OToKBjdXs
UK4k/KjuRZUYLPb8HWluQtrhBiNP+U2oO42ULLf+OBg2FBJOgkTfUXaZLJWMJqea
5uHOucoW18lwRuee3nJTq2gJBwsfHxvaNqZwfSyMwPDDVII+JwL4XGl7msiWxEh5
tB6A4L24b9bURJ2RMOVHgiBP9W9LzxGSnZQGmJy2s00ug4fiU24I5LdDv5DMKkn+
EwdDCi1ytPtpwMyi4Kja2P20rA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:14 2024 by rpki-client on console-ams.rpki-client.org