Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/EvClIbisQz6IEn580CW1xhsjQks.roa
File:                     EvClIbisQz6IEn580CW1xhsjQks.roa (raw, json)
Hash identifier:          nN4E+qQ/5fuPfwFt/qOXVsp0sUa7MwTs28rq9ywr/qg=
Subject key identifier:   12:F0:A5:21:B8:AC:43:3E:88:12:7E:7C:D0:25:B5:C6:1B:23:42:4B
Certificate issuer:       /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial:       04286642
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/EvClIbisQz6IEn580CW1xhsjQks.roa
Signing time:             Sat 01 Jan 2022 05:04:22 +0000
ROA not before:           Sat 01 Jan 2022 05:04:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25465
IP address blocks:        45.83.96.0/24 maxlen: 24
                          45.83.98.0/24 maxlen: 32
                          45.83.97.0/24 maxlen: 24
                          45.83.99.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69756482 (0x4286642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
        Validity
            Not Before: Jan  1 05:04:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12f0a521b8ac433e88127e7cd025b5c61b23424b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:d7:d3:ca:26:30:be:6e:97:85:d6:b0:3d:
                    c2:d5:58:44:c4:a1:49:4d:09:4d:8b:22:d3:2e:d1:
                    66:aa:f6:b6:97:5d:7d:20:26:5f:37:23:db:2e:16:
                    6e:90:57:f5:d5:bd:ef:9f:09:c5:cb:fe:30:9b:05:
                    90:f2:78:28:45:c1:d8:36:62:a9:08:1b:0d:2e:92:
                    09:2a:09:db:47:0d:5e:1a:b1:ac:c6:e5:75:22:7d:
                    2d:b1:d9:de:ea:9f:9c:ee:49:4d:6d:04:6c:94:ea:
                    d7:07:78:ef:d5:73:00:68:78:c1:e5:83:b2:3f:0a:
                    1a:61:56:8e:c2:ba:ba:4a:d4:0d:24:46:1a:05:8b:
                    b4:45:40:91:48:24:a4:ac:50:9c:d2:6c:2a:b4:ff:
                    2b:f8:68:88:db:f1:4e:e7:ab:fa:b4:2c:2a:68:9b:
                    ca:31:ff:83:a7:f8:08:49:5b:f1:1c:e7:f0:64:93:
                    8f:ac:00:29:d8:63:0f:1b:8b:8c:ac:73:89:71:c2:
                    e9:c3:fe:96:83:16:d6:49:e2:c8:73:91:f2:25:87:
                    62:f2:83:02:df:cd:9e:0f:1a:d9:db:c0:77:22:71:
                    bc:94:6e:4a:a9:6a:e2:95:df:12:4e:b6:88:ca:15:
                    65:37:b1:bd:20:81:3a:fa:a6:59:52:8e:a5:dc:c3:
                    ab:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F0:A5:21:B8:AC:43:3E:88:12:7E:7C:D0:25:B5:C6:1B:23:42:4B
            X509v3 Authority Key Identifier:
                keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/EvClIbisQz6IEn580CW1xhsjQks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:82:b7:2b:e2:c5:0e:3f:80:29:9c:fb:71:b5:98:22:2f:
         50:23:a1:95:5f:fe:2e:88:c7:fb:34:ba:76:85:61:ff:f8:75:
         ef:3c:6a:46:dc:0c:15:33:8f:c8:fb:58:1c:f8:88:6e:fb:55:
         0d:04:a9:a1:e9:d6:21:9f:d4:59:65:28:96:25:d1:07:a3:8b:
         a5:61:7d:26:9a:fe:8c:78:c5:41:0c:f8:6b:cc:b1:ac:83:18:
         05:45:79:29:64:f5:49:c0:c0:8c:aa:20:b6:46:e4:3a:e8:92:
         69:34:7d:c8:55:a5:1d:86:51:c3:90:ed:a0:31:cb:9b:db:7d:
         30:ea:04:3a:99:65:ee:f0:f6:3d:16:63:e2:5d:9b:2a:c9:44:
         e1:70:e2:26:29:96:76:2e:66:96:14:69:5c:3e:f4:bc:62:47:
         fd:ae:56:1b:24:b2:84:dc:74:7d:fb:14:15:d7:2c:a9:99:01:
         21:7d:bc:0e:99:ab:fd:04:72:95:8f:18:5b:28:3d:20:3b:bb:
         d8:66:0c:ee:8f:f5:63:75:42:fb:96:13:ef:6d:ef:49:93:1f:
         e4:42:93:72:47:79:fc:f2:c3:16:5e:f0:17:dc:36:dd:c3:1a:
         4e:b0:34:a7:7e:4a:12:1d:97:b5:98:c2:2b:64:a5:87:68:fd:
         fb:c1:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org