Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/wPqc767zNUH-TY2cbj_FO-jaRDc.roa
File:                     wPqc767zNUH-TY2cbj_FO-jaRDc.roa (raw, json)
Hash identifier:          wb+14Z22drTbjK6tdcMryhrBMmTvDwpJEbYTfDPXJUg=
Subject key identifier:   C0:FA:9C:EF:AE:F3:35:41:FE:4D:8D:9C:6E:3F:C5:3B:E8:DA:44:37
Certificate issuer:       /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial:       077C9C5D
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/wPqc767zNUH-TY2cbj_FO-jaRDc.roa
Signing time:             Sat 01 Jan 2022 08:00:45 +0000
ROA not before:           Sat 01 Jan 2022 08:00:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61072
IP address blocks:        45.154.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125607005 (0x77c9c5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
        Validity
            Not Before: Jan  1 08:00:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0fa9cefaef33541fe4d8d9c6e3fc53be8da4437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:9f:81:11:53:57:dd:83:fa:28:98:c2:82:
                    35:9c:90:33:61:68:b8:2c:39:e0:dd:c3:5f:c9:e4:
                    bf:89:04:a2:a9:4d:d9:a4:78:93:a8:b4:82:94:6a:
                    1c:38:61:c1:af:2f:16:cc:b2:04:bf:23:9c:02:a4:
                    4c:4f:7b:27:0d:3a:14:c8:ac:40:02:d4:84:66:82:
                    bc:7c:c5:64:c5:a3:ce:9a:24:1d:69:d5:9d:c3:64:
                    b3:b9:c6:ac:35:c0:3a:3a:56:c2:5d:aa:23:de:0a:
                    28:2b:19:d5:7f:86:11:d1:79:aa:40:ce:bf:06:e7:
                    b4:e9:47:53:a8:e6:01:5b:62:14:bb:74:1e:24:48:
                    ad:79:0d:37:7a:7d:63:e6:c5:7a:c5:d6:42:ea:be:
                    71:ae:fb:45:ee:3f:b4:e3:2c:ec:1c:91:d7:38:e8:
                    f6:f5:77:f7:db:bb:12:6e:b4:ea:ae:db:87:60:4e:
                    ab:3b:84:c2:c1:83:e5:0a:b1:cc:23:95:10:3f:2d:
                    9a:3c:dc:79:15:42:6a:b4:3c:b5:73:9e:1a:29:23:
                    70:ac:31:4d:ba:e1:20:04:0c:6f:e8:37:44:44:4a:
                    a0:3d:85:e2:84:19:8b:1f:55:9a:b3:7b:c3:4d:48:
                    7c:b5:e6:48:07:87:b3:81:a9:c6:da:49:53:d0:6c:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FA:9C:EF:AE:F3:35:41:FE:4D:8D:9C:6E:3F:C5:3B:E8:DA:44:37
            X509v3 Authority Key Identifier:
                keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/wPqc767zNUH-TY2cbj_FO-jaRDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:c8:9e:34:06:82:5d:dd:53:9c:c9:f0:92:59:11:8b:23:
         78:f2:a1:4d:9b:2b:ad:63:1b:83:69:8c:24:a6:d7:fb:8e:f3:
         fd:37:80:cf:c5:ff:fb:1b:17:0d:33:62:95:ec:6b:72:44:67:
         4a:29:32:2f:16:22:a5:1a:a2:84:f5:ef:72:4d:94:34:1e:d0:
         a2:62:53:ed:a4:5d:5e:4a:90:0a:9f:38:eb:2c:e8:95:a9:fa:
         74:e7:94:17:27:4a:28:5b:73:5e:3a:23:18:d2:84:b0:0e:92:
         62:98:60:49:f0:5f:81:f1:30:3f:e6:97:d8:77:06:4b:fc:a9:
         f1:c2:76:bf:6a:8f:4a:8e:bc:ec:2c:5f:ee:01:bb:f8:4d:c5:
         cd:8c:89:58:83:0c:16:95:57:9c:c9:48:8c:33:46:ee:be:82:
         c4:37:08:8b:37:37:6a:86:65:ef:c0:93:2a:a9:24:0a:69:8b:
         e0:ac:fd:22:44:3e:b8:bd:1e:f0:6c:c6:f8:46:d7:ec:5d:32:
         ee:fd:16:0c:ea:95:ee:64:35:dd:ae:01:2c:64:44:80:72:b3:
         38:7e:42:6e:7a:ca:b9:ea:ab:cf:65:01:ed:1d:74:8c:57:d5:
         1b:cc:47:54:15:16:d1:33:fc:c9:72:21:b1:09:93:1b:f6:64:
         84:72:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:48 2024 by rpki-client on console-ams.rpki-client.org