Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/uAUnTKDsCoFgFRL5GGoAhrRW5ME.roa
File:                     uAUnTKDsCoFgFRL5GGoAhrRW5ME.roa (raw, json)
Hash identifier:          FoR4TZZGIxUnohaMrw7jUCBCLcfqeugtExH1hUqP+R0=
Subject key identifier:   B8:05:27:4C:A0:EC:0A:81:60:15:12:F9:18:6A:00:86:B4:56:E4:C1
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38C161BD
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/uAUnTKDsCoFgFRL5GGoAhrRW5ME.roa
Signing time:             Tue 17 May 2022 05:30:31 +0000
ROA not before:           Tue 17 May 2022 05:30:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203578
IP address blocks:        212.36.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952197565 (0x38c161bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:30:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b805274ca0ec0a81601512f9186a0086b456e4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:b0:71:bb:cf:ec:a3:ac:d0:e4:4a:6b:ef:
                    b0:42:af:49:6d:56:f4:88:ea:d4:39:2b:aa:2b:33:
                    b0:11:f8:2e:fe:ea:11:cd:f8:b7:2d:cc:48:77:7a:
                    1b:91:ca:45:b4:4c:5b:93:ee:c0:e1:b5:2d:d4:42:
                    a0:b2:20:30:49:c0:0b:ff:f6:2b:2f:af:bd:80:ec:
                    4b:31:06:9b:9e:df:01:b1:00:88:dd:a6:97:cb:ea:
                    4a:07:6c:33:2a:a3:fe:ec:4a:54:bc:94:30:8f:f2:
                    72:47:d2:e7:f1:50:a2:41:9e:83:e3:bf:45:f5:89:
                    db:f6:2a:e4:1d:bd:a0:d2:d5:d3:85:77:80:bb:26:
                    ca:fb:2e:ec:dd:74:e5:14:12:f7:5e:fd:10:b9:4d:
                    a7:2f:80:18:77:d3:bc:77:81:b2:64:11:21:18:a6:
                    f5:17:59:4d:a1:75:80:84:56:86:dc:f1:b3:0b:87:
                    e8:2b:0b:5a:16:2e:3f:27:d0:31:b1:3a:23:be:fb:
                    96:42:d3:bd:f9:30:6f:40:63:1a:6f:fc:45:69:0a:
                    23:8f:9c:42:f6:cb:2a:f3:b5:52:67:78:35:67:9f:
                    88:6a:80:39:c1:63:30:19:8f:bf:38:19:f5:f7:0f:
                    1d:19:0f:31:18:d8:be:1f:d9:16:9b:ae:24:74:eb:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:27:4C:A0:EC:0A:81:60:15:12:F9:18:6A:00:86:B4:56:E4:C1
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/uAUnTKDsCoFgFRL5GGoAhrRW5ME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.36.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:91:39:35:3c:da:21:00:1c:40:4a:dd:24:eb:52:71:68:43:
         c2:72:e2:4e:10:a7:9e:8e:f2:9e:03:ae:06:c2:6a:6e:d0:8a:
         c1:c9:d5:06:17:56:2f:74:01:94:1d:de:98:a2:95:42:1c:7d:
         b2:d4:cb:46:92:cb:1a:3f:05:55:a9:46:7d:fc:ca:4b:a5:96:
         97:3b:b0:95:ea:ce:d0:86:70:b8:a7:e7:8e:d8:5e:b6:c0:a9:
         9d:5e:50:28:f0:36:2b:a2:11:7e:29:8d:bd:16:c5:83:fb:2f:
         0a:49:39:26:ce:15:ff:89:78:47:79:29:9d:28:b2:b4:81:ee:
         3c:cf:7a:7f:d6:be:37:d8:ed:bd:bc:e7:c0:38:8c:85:ab:b6:
         c0:59:c0:a4:04:dd:01:cb:f8:76:b3:b1:f6:e0:30:81:0e:b2:
         3f:7b:70:71:24:2a:bc:4a:92:f6:d6:41:99:4a:a9:cf:4b:4c:
         ec:f4:9a:ad:54:1e:dd:df:a1:a9:fa:a3:c7:4a:9e:8f:e1:0e:
         5a:5a:d7:9d:c7:61:c0:ad:ae:de:ad:95:ed:b5:34:7f:9f:0d:
         a2:57:da:e4:d1:b0:8f:7a:bb:64:d6:d6:d3:00:87:3d:58:6c:
         83:af:c1:84:15:c0:68:0d:35:12:c7:5a:f5:eb:bd:20:8c:df:
         c8:5a:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:21 2023 by rpki-client on console-fra.rpki-client.org