Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/S8Eyl6trrbuZozHoruT9jvVNMbU.roa
File:                     S8Eyl6trrbuZozHoruT9jvVNMbU.roa (raw, json)
Hash identifier:          jWgeCAYrqXNfnQA1sEMAtxlvFtbZ8GB4sQ0z/LUMIFE=
Subject key identifier:   4B:C1:32:97:AB:6B:AD:BB:99:A3:31:E8:AE:E4:FD:8E:F5:4D:31:B5
Certificate issuer:       /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial:       0184D3915E1AEE83A993ED4369B9C26EB5BE
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/S8Eyl6trrbuZozHoruT9jvVNMbU.roa
Signing time:             Fri 02 Dec 2022 16:00:30 +0000
ROA not before:           Fri 02 Dec 2022 16:00:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200542
IP address blocks:        185.100.236.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d3:91:5e:1a:ee:83:a9:93:ed:43:69:b9:c2:6e:b5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
        Validity
            Not Before: Dec  2 16:00:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4bc13297ab6badbb99a331e8aee4fd8ef54d31b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:57:6a:b9:0d:a3:3f:2e:01:53:4f:5c:1e:5f:
                    ac:42:fc:cd:42:e5:e5:a3:0e:b1:c7:04:14:87:b1:
                    04:f2:f4:53:2b:79:e4:4f:54:7a:35:7c:48:a2:69:
                    d0:18:28:c2:06:d2:e4:59:06:ba:0d:3c:7c:60:a6:
                    36:a4:ef:45:88:67:28:05:3c:b1:dc:f1:3d:52:0f:
                    88:47:10:3b:9a:e5:9e:f1:ec:90:1f:4e:a7:d5:5a:
                    64:62:30:39:bc:d0:2f:83:3c:2e:1a:0e:e1:1f:36:
                    84:0d:8f:28:63:b4:61:a5:89:5c:99:40:15:41:98:
                    f8:93:2d:81:5a:ea:0b:03:75:9b:87:93:1a:3a:89:
                    0d:39:f0:6c:18:d3:4f:39:bf:9a:85:76:ff:9a:70:
                    cc:93:1f:72:a6:6b:36:47:77:7d:e7:9a:8b:58:f4:
                    10:f0:9c:dd:3c:1b:2a:d6:23:b4:5a:d8:c7:b7:bd:
                    37:9d:a8:85:58:32:05:4e:e2:53:99:7c:64:40:27:
                    5b:e1:eb:da:3d:9f:8e:7b:ea:e3:46:cd:e2:fa:86:
                    aa:76:a4:06:02:89:50:55:2d:1a:ac:cb:34:7d:da:
                    28:90:0f:05:f8:cd:4e:c4:a5:f4:78:73:28:b5:a1:
                    e0:81:66:a1:17:f3:6a:1e:37:9f:b2:4e:ac:d8:4d:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C1:32:97:AB:6B:AD:BB:99:A3:31:E8:AE:E4:FD:8E:F5:4D:31:B5
            X509v3 Authority Key Identifier:
                keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/S8Eyl6trrbuZozHoruT9jvVNMbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.100.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:b6:ab:9c:ba:a6:ff:2c:fe:7e:ef:36:c6:7d:b7:25:a1:99:
         7e:64:59:55:26:9c:ff:75:89:99:f7:43:b5:97:aa:f7:b3:7c:
         04:b7:80:c4:f3:60:5d:9a:26:9c:0e:3f:82:73:67:b2:96:ba:
         2b:21:a6:40:dc:38:18:62:11:95:72:98:ce:af:c8:51:b2:ad:
         30:98:c4:cd:f2:8d:bf:b1:c7:c0:dd:28:7f:6f:3f:56:3e:0a:
         21:03:10:a9:15:d9:71:78:2c:79:79:16:29:7d:4c:79:59:98:
         00:f0:04:e5:bd:db:49:45:49:05:ae:71:8b:ec:76:61:e2:10:
         27:c6:b9:9c:d7:73:f7:8a:4d:6e:7d:23:d8:e0:8a:aa:07:59:
         09:d1:ca:88:60:c0:bd:0a:2b:73:f3:23:a3:90:8f:ea:a4:ce:
         05:cd:8f:01:7f:e8:fa:d8:f8:5a:a7:b1:8e:49:ab:63:54:b9:
         1a:b2:31:1d:bc:36:74:4d:96:44:f2:e2:90:98:8b:83:9a:5c:
         91:4d:fa:d1:43:65:c3:19:8b:d2:a6:06:f2:74:2c:a4:f3:bc:
         a2:b1:21:d8:39:72:f4:07:e5:e3:23:29:db:2f:75:de:e6:0d:
         a6:a1:45:73:81:53:0a:9c:7e:04:a8:8a:d9:5b:db:5e:1e:b3:
         b1:72:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:39 2024 by rpki-client on console-ams.rpki-client.org