Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/P1_PUG2Ds2OyzeIVAMG_S6Fgf3U.roa
File:                     P1_PUG2Ds2OyzeIVAMG_S6Fgf3U.roa (raw, json)
Hash identifier:          j/JOGwbAb7F1xbQs/xtncprsDzgXw9hBjh5xj0CRBRo=
Subject key identifier:   3F:5F:CF:50:6D:83:B3:63:B2:CD:E2:15:00:C1:BF:4B:A1:60:7F:75
Certificate issuer:       /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial:       037F5CCD
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/P1_PUG2Ds2OyzeIVAMG_S6Fgf3U.roa
Signing time:             Sat 01 Jan 2022 15:58:03 +0000
ROA not before:           Sat 01 Jan 2022 15:58:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6134
IP address blocks:        45.134.83.0/24 maxlen: 24
                          45.134.82.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58678477 (0x37f5ccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
        Validity
            Not Before: Jan  1 15:58:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3f5fcf506d83b363b2cde21500c1bf4ba1607f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:4f:17:44:e8:64:9a:66:76:a2:df:5e:6a:
                    f4:e9:d4:58:b1:66:ff:9a:d1:1e:ee:44:12:9e:d5:
                    8a:74:a3:a8:20:b9:29:f5:d1:03:6f:4b:a9:03:eb:
                    dd:d5:bf:c3:f4:c3:2f:de:b8:1a:c0:4d:ad:e0:66:
                    e3:79:08:0a:9a:f8:53:e1:a0:cc:d5:88:5e:e0:26:
                    64:55:42:5c:4d:1e:2b:70:32:3f:d1:32:b8:f2:0c:
                    7d:d0:5c:fb:ca:4a:3a:0a:80:dd:26:2b:f1:fa:2f:
                    b3:30:a3:b5:7a:3d:07:55:8d:6a:e2:2a:c6:73:e3:
                    47:b5:d6:c9:a0:be:74:27:c8:4c:50:71:cd:cf:0e:
                    45:d2:e0:ce:11:6e:f4:64:d4:46:1e:57:3d:ec:50:
                    02:a0:d1:2f:84:8e:08:b9:ef:87:0f:f5:7e:4e:70:
                    9f:39:48:5a:d6:db:c3:28:0a:e0:a4:5d:27:30:e6:
                    27:83:66:78:fa:1d:1d:da:12:2a:27:57:76:0c:16:
                    3e:7e:ef:f5:38:28:00:4b:e8:36:e0:d7:f4:61:1c:
                    89:36:d3:17:2f:b9:4a:85:5e:15:16:d9:b8:50:28:
                    6c:74:19:75:f1:0e:5d:98:1d:16:e3:e3:67:43:28:
                    8f:08:25:9a:55:8a:5b:1d:c7:9f:f2:82:6a:40:1f:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5F:CF:50:6D:83:B3:63:B2:CD:E2:15:00:C1:BF:4B:A1:60:7F:75
            X509v3 Authority Key Identifier:
                keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/P1_PUG2Ds2OyzeIVAMG_S6Fgf3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:a0:78:7b:c6:0d:d5:c8:e6:7d:a1:83:f6:eb:fc:87:3d:2f:
         72:fb:6a:e2:d6:13:2a:d0:d4:38:e2:fd:91:86:fd:0b:d1:94:
         a8:d9:53:96:f0:95:05:2b:ca:2d:cc:fd:35:9a:8d:91:74:5c:
         ef:ea:61:4b:46:28:11:fe:db:de:fe:4d:70:27:5f:e8:50:ab:
         8f:1f:c4:da:c2:5e:7c:5c:47:2a:b1:fd:44:e5:48:1e:c4:67:
         6d:7d:a0:1f:fe:3d:fc:c6:a7:35:4b:f8:f8:fd:ed:51:a5:c9:
         a7:40:14:e8:f8:1a:92:e3:e4:f5:4d:e9:17:ea:06:8b:97:8b:
         f7:ec:f2:8e:c7:4a:45:4f:15:b6:06:94:9e:ad:6f:15:19:b4:
         eb:74:f3:88:74:07:21:cc:94:54:42:9b:6e:ad:22:45:49:c9:
         2f:8f:ef:fe:59:5d:a6:11:04:c0:c4:02:b3:ac:3c:3b:a6:0a:
         cd:a1:18:c9:ed:7d:14:57:d5:77:e2:42:4c:ff:ce:ce:b8:90:
         e1:46:34:9b:0e:ab:7d:46:7e:ca:75:24:6a:74:cd:15:61:c0:
         4d:5f:6e:ea:f4:97:99:4d:f9:6f:c8:4d:7f:08:b5:87:32:65:
         ed:6d:a5:b2:a4:a2:38:68:40:31:7d:f3:ef:2d:12:ac:2e:a6:
         0d:75:da:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:32 2024 by rpki-client on console-ams.rpki-client.org