Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/uboXuRsJi0k3weCej6yqBmvzfZ8.roa
File:                     uboXuRsJi0k3weCej6yqBmvzfZ8.roa (raw, json)
Hash identifier:          4kLy2SJAQrSxTZHs/XbW3bDnffBhuS4S44JnWFDBcdc=
Subject key identifier:   B9:BA:17:B9:1B:09:8B:49:37:C1:E0:9E:8F:AC:AA:06:6B:F3:7D:9F
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       07B7D46A
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/uboXuRsJi0k3weCej6yqBmvzfZ8.roa
Signing time:             Mon 09 May 2022 20:38:15 +0000
ROA not before:           Mon 09 May 2022 20:38:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34549
IP address blocks:        45.156.44.0/22 maxlen: 22
                          45.158.88.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129487978 (0x7b7d46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: May  9 20:38:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9ba17b91b098b4937c1e09e8facaa066bf37d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:01:2f:6a:6e:f7:4a:48:e5:68:a8:73:8b:
                    c4:1b:73:2d:35:79:b8:40:cc:a0:69:0b:d7:5f:6c:
                    ef:8e:ab:3a:8c:dc:b8:c6:e1:f1:e5:22:81:dd:a7:
                    fd:96:a5:04:7c:c5:23:89:ca:9b:b4:e2:1e:a2:f2:
                    0a:c7:2a:22:a9:d9:b8:d0:29:d2:c5:af:9f:04:78:
                    8a:27:51:e5:05:b2:fc:b0:d6:1c:c8:ad:1e:96:f5:
                    c8:49:a1:a2:96:b3:6c:00:2f:a7:d5:c5:7b:9f:b5:
                    c5:f9:5d:cb:8d:40:98:6d:3f:29:ed:21:c0:c7:9d:
                    3c:5e:f3:c4:68:6e:8b:3d:78:73:3d:18:57:8f:a6:
                    e5:3e:fc:8a:0d:60:6b:96:c4:82:9f:4e:13:1e:fb:
                    07:df:b0:f0:36:4b:b7:58:6e:d9:04:81:15:d6:9b:
                    63:6e:44:8c:b0:23:ad:cc:d9:55:5b:d9:e9:6c:1d:
                    a8:76:af:ba:d0:5f:b5:db:e1:4c:17:4c:aa:c5:54:
                    38:34:aa:fe:66:1e:b7:9e:28:0a:60:15:19:2d:47:
                    e2:9b:5b:8e:a6:aa:46:51:97:ab:2c:3d:ac:18:d6:
                    37:2a:27:bc:fa:4d:47:88:13:47:f8:b8:29:a2:f7:
                    aa:d3:ae:96:10:63:2e:25:66:14:b4:2e:99:da:12:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BA:17:B9:1B:09:8B:49:37:C1:E0:9E:8F:AC:AA:06:6B:F3:7D:9F
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/uboXuRsJi0k3weCej6yqBmvzfZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.44.0/22
                  45.158.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:55:0f:8b:e1:80:46:f0:b4:db:86:6e:8f:61:7d:a4:29:8c:
         68:c9:33:5e:11:f8:59:21:26:20:46:43:0e:93:19:ba:3b:ce:
         53:6a:13:c4:ee:dd:91:43:62:b5:b8:df:16:15:dc:2d:44:17:
         11:5c:37:ba:f2:0d:a5:d7:b1:14:3c:ad:1f:4a:74:54:6f:07:
         83:db:fa:bf:75:8a:64:1c:be:b3:e3:ee:ab:38:3f:c9:76:7d:
         98:13:a5:07:2e:6e:23:13:c1:25:0a:d1:98:ab:92:f3:6a:af:
         54:a9:b4:6a:9a:06:66:7c:1a:83:56:0f:9e:71:a6:d4:9c:4d:
         64:fa:dc:52:62:7f:6b:50:f8:40:87:98:ff:9d:16:58:8f:bd:
         0c:c7:25:89:09:94:4a:b4:29:c2:24:9e:d3:a3:89:bc:ec:64:
         f6:ff:d6:1a:cc:90:69:9e:1d:c0:e3:88:c4:7d:15:88:bc:d3:
         3f:80:d8:cc:ec:7d:33:7b:93:fb:c9:7d:43:62:5c:ae:ae:5a:
         89:68:6d:0d:fa:fd:8a:04:e6:43:dc:28:3d:3e:f4:d6:8c:54:
         2b:12:29:cc:40:ff:e3:37:24:07:3e:b9:38:5f:4f:8d:6d:fd:
         cf:41:9d:23:73:83:6d:ab:f7:d4:27:ae:b3:37:b9:4c:cb:04:
         81:fc:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:05 2023 by rpki-client on console-fra.rpki-client.org