Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/XwGe7LEreMsLapNQPJgTHk76GBQ.roa
File:                     XwGe7LEreMsLapNQPJgTHk76GBQ.roa (raw, json)
Hash identifier:          qTKFKgG4Ptd5jp+WpCeCSYWvhdLV9SOfDDZoPILLTY8=
Subject key identifier:   5F:01:9E:EC:B1:2B:78:CB:0B:6A:93:50:3C:98:13:1E:4E:FA:18:14
Certificate issuer:       /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial:       0727BCBF
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/XwGe7LEreMsLapNQPJgTHk76GBQ.roa
Signing time:             Thu 30 Jun 2022 15:35:02 +0000
ROA not before:           Thu 30 Jun 2022 15:35:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34177
IP address blocks:        45.85.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120044735 (0x727bcbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
        Validity
            Not Before: Jun 30 15:35:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5f019eecb12b78cb0b6a93503c98131e4efa1814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:8a:16:96:e9:80:8b:85:10:fe:dd:68:e4:
                    61:fa:5c:64:18:fc:7c:93:4d:dd:11:59:42:28:2b:
                    4d:68:a6:20:20:eb:83:6c:d8:a1:26:43:57:5f:7a:
                    92:c0:8e:25:19:1f:37:63:96:43:ab:3e:cf:37:d9:
                    6e:b4:71:a9:54:44:cc:2a:d8:50:21:35:6d:ff:7e:
                    39:78:87:b2:16:1e:8b:62:ca:bf:63:11:9b:4e:3a:
                    da:ab:a4:0d:93:70:c6:12:41:ae:ac:0c:8a:ed:9f:
                    6e:d9:90:80:cc:20:8a:d5:e0:ab:be:a4:3e:fa:39:
                    4d:6a:f8:41:5d:6f:c9:d0:93:46:27:35:bc:38:11:
                    99:23:38:6b:41:47:ae:ad:67:5f:2e:6a:48:a1:d0:
                    05:62:94:42:15:e2:8b:c2:54:8f:f3:a0:7d:4a:37:
                    5c:d9:95:f5:4b:c1:16:89:7f:fe:65:b8:eb:25:0e:
                    79:54:03:1d:76:4a:58:6c:19:c3:48:10:99:1a:a8:
                    54:49:0b:d9:5c:6d:55:d5:96:11:79:22:6a:b9:2d:
                    2f:1e:18:a9:c8:8d:84:a5:4f:05:20:7b:75:bf:fe:
                    ba:1d:0f:04:7b:a6:ed:87:f2:25:24:c3:ec:69:8e:
                    3b:28:36:0e:e8:f3:64:af:9d:69:a5:06:4a:b5:ca:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:01:9E:EC:B1:2B:78:CB:0B:6A:93:50:3C:98:13:1E:4E:FA:18:14
            X509v3 Authority Key Identifier:
                keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/XwGe7LEreMsLapNQPJgTHk76GBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ce:c1:5f:23:7a:68:c6:1c:b5:b3:70:15:36:7d:a0:cb:ce:
         1e:ed:ce:5d:ae:e4:08:84:78:0c:76:5b:cd:bb:e9:dd:68:cd:
         ab:20:45:67:07:6a:f0:b2:67:ac:2e:59:ed:87:b2:60:0d:de:
         ec:49:e7:66:9c:f3:7f:62:cd:ba:7c:b0:67:b9:b8:47:33:23:
         65:81:56:cd:91:f7:a2:a8:cb:fe:87:d8:9f:21:30:50:99:e0:
         5d:f9:ee:a8:9a:21:8b:a4:11:61:f6:e8:4e:01:35:c4:f9:9d:
         b0:3e:c8:65:e9:f1:45:ef:67:9a:f3:5e:fd:88:ec:3b:c7:c6:
         83:36:dd:fa:b0:ef:1b:e0:5d:37:88:b3:ae:1d:80:5f:0d:eb:
         9d:2f:36:ec:43:98:ef:06:18:86:35:f0:5c:a3:c0:b1:6d:65:
         f7:2f:c8:18:75:40:be:9c:9b:d1:13:6c:07:95:90:b7:3b:4c:
         c2:f1:69:27:9a:57:c8:a2:35:d4:1d:bf:24:59:0e:8f:f7:81:
         1c:c3:07:d0:e5:7e:98:16:79:92:e7:a5:65:86:bc:da:62:f3:
         c7:9c:c6:4f:b8:de:46:86:ae:ed:ed:8f:00:54:24:61:b0:6e:
         87:e0:aa:f2:9a:59:0d:77:a9:57:c7:97:93:84:12:a8:17:52:
         19:25:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:50 2024 by rpki-client on console-fra.rpki-client.org