Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/SEdea-zx-94upt_3dALbooAb38A.roa
File:                     SEdea-zx-94upt_3dALbooAb38A.roa (raw, json)
Hash identifier:          EYGITa26Aq6QrS+QgArIE1lONn0jf3y0Nq8x3f3TWPU=
Subject key identifier:   48:47:5E:6B:EC:F1:FB:DE:2E:A6:DF:F7:74:02:DB:A2:80:1B:DF:C0
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       1B5A47AB
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/SEdea-zx-94upt_3dALbooAb38A.roa
Signing time:             Sat 01 Jan 2022 10:56:00 +0000
ROA not before:           Sat 01 Jan 2022 10:56:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39444
IP address blocks:        85.31.211.0/24 maxlen: 24
                          85.31.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458901419 (0x1b5a47ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jan  1 10:56:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48475e6becf1fbde2ea6dff77402dba2801bdfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:22:d3:1d:e8:ba:27:0e:7c:d7:22:76:fb:
                    70:bf:e2:88:63:e3:bc:e3:cf:b8:da:f3:89:dd:8c:
                    f8:78:48:0c:0d:29:ef:19:d9:ec:a4:07:77:bc:5f:
                    78:a7:b4:06:1d:67:30:cb:89:a3:94:5e:ba:fc:52:
                    62:a4:d7:2a:2c:88:a6:e7:4c:fd:68:37:c2:fe:00:
                    56:f0:78:a5:a6:90:fd:3e:f2:d7:80:e3:24:8a:97:
                    de:1e:aa:73:dc:23:0b:33:e4:f0:0c:1f:62:54:ad:
                    45:ff:c8:67:37:bc:24:90:55:07:aa:98:2f:2d:b2:
                    a6:53:50:97:da:4a:36:32:eb:c7:71:84:0b:66:20:
                    87:55:60:68:08:e7:53:12:f8:12:3e:33:ab:43:d5:
                    d3:74:12:f2:23:b3:cc:e8:51:f3:63:79:b6:c3:c4:
                    47:33:5d:d1:b0:de:e6:a7:5b:4d:85:fa:92:58:9d:
                    d3:67:56:ae:1c:4f:13:f1:60:be:fc:56:bc:0d:d5:
                    88:a0:ba:6b:36:61:06:11:37:85:d1:ee:7f:54:0c:
                    05:b7:3a:9c:59:61:80:ff:06:82:7c:9e:ae:33:a6:
                    06:1a:ad:8e:91:25:6b:cd:b5:c6:bc:9c:8a:a3:39:
                    23:8e:13:12:c1:97:ae:77:50:15:8f:63:6b:9d:5c:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:47:5E:6B:EC:F1:FB:DE:2E:A6:DF:F7:74:02:DB:A2:80:1B:DF:C0
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/SEdea-zx-94upt_3dALbooAb38A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.31.211.0-85.31.212.255

    Signature Algorithm: sha256WithRSAEncryption
         ad:14:d5:44:1f:e1:b0:42:a3:98:92:ae:b9:d7:e3:01:f6:be:
         8c:7b:7d:e3:50:c7:ee:dc:2e:d0:1b:e0:c7:ea:ce:9d:ab:6f:
         5a:91:20:1b:3e:e4:29:22:7b:a1:55:6e:33:fc:75:d3:93:d1:
         52:87:f8:ba:94:4f:0d:f7:5b:92:f7:38:e0:a6:3e:e9:57:50:
         2e:a8:8e:91:d7:eb:49:09:a2:05:73:4f:7d:aa:00:27:e2:e5:
         51:27:ac:24:46:2e:ff:d6:6e:99:84:25:2d:28:be:d3:03:9f:
         ef:62:ff:9b:5b:67:9e:ee:6d:be:51:89:07:86:96:51:e9:b3:
         63:28:6a:c1:ef:d3:73:ac:46:5b:ca:30:85:1d:0c:66:04:fd:
         ad:1e:ec:64:1a:13:17:d7:c1:67:b3:18:27:f6:c1:e9:40:56:
         74:5d:b5:c3:1f:26:a8:0b:3f:55:16:8c:6c:8a:78:11:eb:7f:
         8c:92:c1:a9:81:5a:86:8c:92:d0:46:70:0d:de:fa:18:59:0a:
         a4:db:6a:3b:be:10:8e:d9:14:22:e7:af:04:eb:7f:c3:07:53:
         d1:8a:81:d5:7a:43:7a:42:16:40:d3:81:8a:c8:ab:fd:b2:5e:
         b6:38:ea:1f:89:1b:18:a6:b8:c5:d1:c6:3e:c2:b7:ce:90:db:
         f3:57:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:17 2024 by rpki-client on console-ams.rpki-client.org