Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/05MAOJqTPq9DJF9RpSSw6s0QnCs.roa
File:                     05MAOJqTPq9DJF9RpSSw6s0QnCs.roa (raw, json)
Hash identifier:          S6eRQy+3iRzk3A0pLY8QFIXAh4jpemCcD0/sFPBAcJg=
Subject key identifier:   D3:93:00:38:9A:93:3E:AF:43:24:5F:51:A5:24:B0:EA:CD:10:9C:2B
Certificate issuer:       /CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Certificate serial:       0AB68E7D
Authority key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/05MAOJqTPq9DJF9RpSSw6s0QnCs.roa
Signing time:             Fri 15 Apr 2022 17:56:17 +0000
ROA not before:           Fri 15 Apr 2022 17:56:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61381
IP address blocks:        45.84.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179736189 (0xab68e7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
        Validity
            Not Before: Apr 15 17:56:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d39300389a933eaf43245f51a524b0eacd109c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ca:59:e0:12:8e:dc:6b:09:1b:ca:71:aa:65:
                    76:e0:7d:d8:fc:53:90:0f:86:8c:45:40:f0:27:d3:
                    b9:0f:9a:3e:dd:73:b7:b1:f6:5d:f6:26:83:6d:ee:
                    06:a1:e4:96:63:b4:95:23:77:67:c9:fd:3b:b5:75:
                    cf:f4:bd:f1:e1:4e:30:9f:e9:75:82:06:30:1a:22:
                    e1:ad:88:ad:21:59:db:77:1f:b4:5b:12:8c:db:fd:
                    ea:3a:12:22:14:a3:67:15:7e:80:d8:06:e2:86:68:
                    84:62:e5:b0:98:af:54:67:3b:f4:c2:d5:51:52:c0:
                    1c:5e:5c:6a:9c:45:01:fc:12:b5:a9:8c:97:ac:7a:
                    10:c9:31:ec:0e:dd:b7:f5:48:0a:01:ec:97:65:7e:
                    36:ca:2c:6e:ea:9a:98:e6:58:30:f3:02:bd:39:17:
                    8f:5a:bc:01:ba:22:28:3b:88:45:c8:e7:6e:df:34:
                    ab:a4:a0:fd:09:63:f7:31:ee:65:ed:91:77:57:d5:
                    3f:ba:81:e5:0d:80:1a:98:89:fb:81:de:df:a7:3a:
                    4c:f7:a0:de:ad:8d:a7:b4:c4:f4:8e:aa:8c:fb:3b:
                    ba:c3:b6:01:d3:c0:ad:f6:0e:87:a6:ff:dd:73:ef:
                    5e:62:9e:fe:7c:c7:ef:5f:53:2a:51:ab:0e:bc:de:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:93:00:38:9A:93:3E:AF:43:24:5F:51:A5:24:B0:EA:CD:10:9C:2B
            X509v3 Authority Key Identifier:
                keyid:59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/05MAOJqTPq9DJF9RpSSw6s0QnCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:ca:6c:b6:f0:1c:66:08:fd:40:75:17:40:6b:85:bd:1c:
         4a:f0:8d:87:8f:86:58:dd:fb:e9:99:1e:93:05:e2:dd:34:5b:
         c0:8a:ad:f3:04:36:15:04:a6:b2:db:82:27:d9:cc:f9:60:87:
         15:02:a6:af:e6:21:99:cd:3b:df:4e:04:4b:0a:7c:2a:f4:52:
         12:dc:01:80:b0:74:c3:e3:17:ba:de:7b:a2:d5:ad:d2:a8:0d:
         fc:20:d5:73:5c:38:fb:9e:7a:5f:11:a5:7b:27:8e:75:d7:40:
         34:04:ba:95:90:b9:a0:5f:6a:40:99:f1:a9:17:73:01:86:73:
         f4:40:86:dd:56:13:ad:24:2c:51:c6:99:9e:b0:cd:bb:b0:a1:
         6f:02:8f:f8:c9:b3:b8:b3:4d:d3:a5:5f:37:63:f3:0e:f9:fc:
         6c:6f:35:22:5e:be:87:25:92:ee:75:23:e3:59:42:af:35:90:
         a8:c2:fe:38:83:44:77:88:08:e6:1b:fc:25:b0:c1:d5:59:13:
         09:22:16:b3:f4:77:38:a5:b8:fc:62:e5:d9:db:59:57:30:27:
         7c:37:2a:d6:c3:1b:85:24:68:00:b4:0e:6f:fa:9b:5b:26:4b:
         df:d5:18:22:66:50:3f:b7:a9:0c:fc:72:b0:9d:9e:32:61:11:
         44:54:72:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:36 2023 by rpki-client on console.sobornost.net