Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/XBJJ4Y89aEDntRXdKMskKthAOug.roa
File:                     XBJJ4Y89aEDntRXdKMskKthAOug.roa (raw, json)
Hash identifier:          xUi9Qn7eouUMd4sLEXc4Y4OIu/KHnc0QXS7qMFlBY8M=
Subject key identifier:   5C:12:49:E1:8F:3D:68:40:E7:B5:15:DD:28:CB:24:2A:D8:40:3A:E8
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       1B5DD15B
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/XBJJ4Y89aEDntRXdKMskKthAOug.roa
Signing time:             Sat 01 Jan 2022 10:56:01 +0000
ROA not before:           Sat 01 Jan 2022 10:56:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59413
IP address blocks:        37.110.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459133275 (0x1b5dd15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jan  1 10:56:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5c1249e18f3d6840e7b515dd28cb242ad8403ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:5b:85:79:7d:e1:53:ca:d0:b7:9b:66:c2:
                    9e:52:3d:2b:2a:f6:c1:50:e8:b5:1e:25:0d:1a:56:
                    0a:9f:3d:ff:d6:c9:6f:01:d7:be:c2:c4:f2:42:46:
                    a7:90:90:e0:30:67:e5:0d:52:5d:07:a5:81:f1:ed:
                    2b:31:b1:04:af:ea:de:26:2b:aa:a5:ca:88:c3:a3:
                    e9:2a:a1:83:52:64:e0:e7:aa:7f:9e:eb:6d:a7:58:
                    1a:f4:08:1c:59:7f:17:37:05:99:63:cd:27:b1:09:
                    59:7c:b5:8c:56:6a:f0:da:45:51:4a:83:a1:23:14:
                    40:d8:5c:28:a4:83:35:51:a1:90:9c:c8:ec:e4:cf:
                    36:39:27:a7:f5:b9:33:db:4e:49:c2:0d:5f:51:73:
                    54:5c:a5:fe:e5:18:48:c3:62:9a:bc:02:1f:65:ee:
                    1d:f3:f8:71:b9:9c:68:14:eb:4d:96:a8:12:22:37:
                    6b:29:ee:f9:22:e3:88:76:fe:d3:e4:f0:d2:e6:1e:
                    b1:eb:9b:91:ea:10:b0:86:10:82:34:0e:2a:84:be:
                    1d:a9:42:8f:ba:eb:d0:f3:1e:f0:93:98:9f:c8:af:
                    a6:71:55:63:2a:de:14:41:14:0b:c1:08:0c:e0:95:
                    dc:36:b5:3e:12:e5:de:51:c9:65:1c:e3:af:59:0d:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:12:49:E1:8F:3D:68:40:E7:B5:15:DD:28:CB:24:2A:D8:40:3A:E8
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/XBJJ4Y89aEDntRXdKMskKthAOug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.110.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:98:25:01:78:35:fb:bd:e1:34:6c:52:8b:61:2f:ce:eb:7c:
         b1:51:0b:a9:5d:f7:b7:be:7c:cd:cf:a3:ef:35:2c:cf:9e:32:
         e9:c7:5b:6a:96:1a:75:98:af:3f:c1:84:1c:c7:af:92:22:0c:
         c2:92:5f:13:1e:9f:1d:89:ae:37:4e:93:a2:b8:35:04:1a:97:
         1a:16:1b:dc:03:f8:dc:64:2d:f0:ba:e6:76:2e:54:40:07:62:
         19:fb:cc:1a:56:cb:61:fd:b1:89:87:ea:e2:3a:99:8b:cd:57:
         bf:b6:72:52:a4:36:a3:58:d9:f1:57:05:df:8b:6b:19:31:ba:
         54:1d:42:44:bf:cc:c9:88:57:53:80:3f:9a:b6:a1:26:17:3f:
         68:99:42:fa:20:1a:ad:9b:ca:e2:07:22:0f:32:66:36:b4:e6:
         ab:0f:67:11:c0:62:0a:17:f2:d9:21:c8:ae:02:da:d0:6c:8e:
         83:1b:e0:9d:41:58:c9:e6:7a:e5:f9:d6:6d:08:77:4e:51:98:
         4e:ba:f4:d3:bc:d4:02:f1:32:81:d8:8c:84:32:40:0a:bd:7c:
         1e:b3:17:3a:19:c9:b8:f4:8c:2e:31:45:b6:03:a6:3a:b8:df:
         18:7c:06:02:cc:63:bc:68:82:40:be:13:9f:a2:e1:46:4e:3e:
         da:7f:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:17 2024 by rpki-client on console-ams.rpki-client.org