Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/SSkSsUpDjYoroueI5AaAHPViE00.roa
File:                     SSkSsUpDjYoroueI5AaAHPViE00.roa (raw, json)
Hash identifier:          aUpoGrXH5yOVSVsI2aWyxG7afGCiBqbc4XrDCsZLdFs=
Subject key identifier:   49:29:12:B1:4A:43:8D:8A:2B:A2:E7:88:E4:06:80:1C:F5:62:13:4D
Certificate issuer:       /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial:       018A0E50
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/SSkSsUpDjYoroueI5AaAHPViE00.roa
Signing time:             Sat 01 Jan 2022 06:01:22 +0000
ROA not before:           Sat 01 Jan 2022 06:01:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48314
IP address blocks:        185.135.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25824848 (0x18a0e50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
        Validity
            Not Before: Jan  1 06:01:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=492912b14a438d8a2ba2e788e406801cf562134d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:ab:ea:ea:60:2a:53:c1:28:e0:99:7c:d3:
                    52:26:a3:22:ef:60:d6:09:b3:0d:76:b1:64:dd:7c:
                    95:48:33:b2:6d:a6:88:71:b5:fd:35:00:11:d3:53:
                    db:6c:83:32:1d:20:27:01:43:f9:3a:3b:d2:c6:a1:
                    e7:ad:9b:f4:85:03:55:62:03:84:9b:15:59:53:cf:
                    da:fa:6b:42:2f:14:23:4c:0f:4b:01:bc:7e:82:d9:
                    f6:3b:10:71:78:fe:6b:e2:55:ce:85:0d:e3:36:63:
                    1e:51:9c:90:c8:0d:0b:bc:a7:f4:03:e9:5d:cf:0e:
                    5c:63:35:c7:d9:c3:cc:7f:10:47:b1:25:e5:45:e3:
                    69:6e:65:e5:22:91:96:d1:e0:83:1b:05:ea:6d:6b:
                    57:4a:23:ae:39:aa:c0:9b:02:3b:c9:9d:45:c0:47:
                    fc:cf:8f:6f:d2:d0:d2:3a:e5:09:91:1e:bf:ac:33:
                    b3:ec:05:88:de:7b:7e:4a:67:ff:16:43:c5:ac:13:
                    3c:31:a9:dc:19:4a:5e:df:4b:b4:42:86:9a:d6:4e:
                    bd:f4:4e:45:4d:6e:54:b0:8a:89:98:1d:e4:c7:91:
                    d0:1c:1e:e2:70:c7:db:07:bf:5a:82:0e:b9:19:bd:
                    0d:d9:58:9a:e1:55:10:c1:25:fe:81:65:70:7b:44:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:12:B1:4A:43:8D:8A:2B:A2:E7:88:E4:06:80:1C:F5:62:13:4D
            X509v3 Authority Key Identifier:
                keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/SSkSsUpDjYoroueI5AaAHPViE00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:1c:a8:6c:39:f8:54:f4:c5:4a:5f:6b:9c:ef:17:ef:00:4e:
         b3:3a:32:7d:ab:31:62:0f:75:a5:41:e3:56:63:7e:5b:ba:69:
         47:be:b5:06:0d:67:e5:a3:d4:ee:c2:02:e1:5c:ad:fd:fe:33:
         03:89:d3:d2:60:12:85:85:ea:73:16:99:50:da:4e:c0:27:01:
         dd:e5:45:26:d3:83:3f:72:16:6b:a7:52:10:b2:33:96:fb:c3:
         2a:a1:d0:7b:2f:67:f5:56:be:1e:44:a1:d2:71:5c:df:4f:10:
         ed:83:2d:c6:9d:61:cd:48:07:47:5a:ac:3e:a9:0c:94:5a:93:
         44:0e:af:dd:99:d4:d2:7a:af:c0:c3:98:c7:2d:d2:c5:38:ad:
         34:6f:7a:2e:29:30:6c:1c:ae:99:63:c8:39:8b:02:ec:a2:f5:
         05:c9:2c:07:ba:af:9f:90:93:ec:f9:b6:df:2f:eb:61:fb:0a:
         e5:7a:95:99:d4:cc:03:4e:a0:33:53:a9:63:41:cf:ef:62:8b:
         b4:af:67:e9:16:a1:30:16:60:a6:f6:39:f1:64:b5:f9:32:e0:
         ba:f4:39:2c:55:2f:e9:fe:34:dc:85:e8:45:2b:60:fc:cb:9d:
         7e:b3:9d:02:82:e7:4a:da:5f:04:b5:fd:7b:27:86:60:40:a5:
         84:80:2b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:48 2024 by rpki-client on console-fra.rpki-client.org