Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/J0pSgGZGzaz8SPPwtkoVUhlthDw.roa
File:                     J0pSgGZGzaz8SPPwtkoVUhlthDw.roa (raw, json)
Hash identifier:          9hwn9q2eazbShtYOtU6MmoUBtvs/N9ndIroDsL91vdE=
Subject key identifier:   27:4A:52:80:66:46:CD:AC:FC:48:F3:F0:B6:4A:15:52:19:6D:84:3C
Certificate issuer:       /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial:       36B0CBF8
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/J0pSgGZGzaz8SPPwtkoVUhlthDw.roa
Signing time:             Sat 01 Jan 2022 04:56:55 +0000
ROA not before:           Sat 01 Jan 2022 04:56:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210611
IP address blocks:        46.31.183.0/24 maxlen: 24
                          2a00:df80:ffff::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917556216 (0x36b0cbf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
        Validity
            Not Before: Jan  1 04:56:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=274a52806646cdacfc48f3f0b64a1552196d843c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:5c:a1:7e:0e:c2:27:46:2c:8c:40:6a:6e:
                    c8:36:4b:68:60:3d:43:ae:d2:82:07:2e:83:a1:ab:
                    7c:9e:0a:c8:20:1c:98:7d:fe:7e:30:32:1f:85:f5:
                    1f:1a:af:5e:1f:64:07:42:6a:8f:7c:b6:70:74:06:
                    3b:22:fe:90:4b:14:f8:13:75:03:67:69:2d:d0:30:
                    a8:4e:c7:18:6e:29:eb:8b:c7:a4:e1:8c:8d:b9:c7:
                    83:1d:1d:b0:da:8a:5e:54:56:52:e8:79:67:7b:55:
                    7f:96:c5:87:51:96:19:df:7c:df:41:a7:4e:6e:8c:
                    36:52:d7:e7:08:1d:90:a9:14:1c:d5:25:cb:57:17:
                    f8:4c:1d:f0:cb:a8:df:3f:1f:28:92:d9:8c:cd:69:
                    e1:0c:a2:c0:5a:34:aa:8f:1b:aa:b4:48:f5:9a:cd:
                    50:6e:a4:bf:31:f3:26:8a:78:ea:5b:84:15:0d:e0:
                    92:e3:f6:ad:be:5c:aa:8f:4b:fa:86:83:52:34:90:
                    75:3e:06:50:92:06:eb:2b:f6:06:05:d2:a9:0d:4d:
                    4a:bf:37:bc:50:47:e8:c8:33:38:14:11:5c:f8:28:
                    08:9c:06:c7:55:57:08:72:08:76:2f:dd:82:06:af:
                    f5:c9:6a:a0:e1:e0:7a:77:5e:eb:b9:0e:8b:56:13:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4A:52:80:66:46:CD:AC:FC:48:F3:F0:B6:4A:15:52:19:6D:84:3C
            X509v3 Authority Key Identifier:
                keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/J0pSgGZGzaz8SPPwtkoVUhlthDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.183.0/24
                IPv6:
                  2a00:df80:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:c9:6a:6b:9f:ea:f2:67:b2:45:c0:9c:cc:52:1b:b0:aa:
         3f:27:ff:43:4f:ab:aa:e1:c7:a8:4d:01:a3:c3:fa:de:43:85:
         f4:0d:2b:6c:6a:87:a8:2a:eb:00:2b:fc:27:b9:ba:9d:3d:fe:
         74:50:04:c4:5c:d8:51:09:3b:bd:17:5b:b4:ee:e9:aa:e1:74:
         54:fd:9b:bc:d3:7e:32:5a:1d:56:6f:4f:06:f8:c1:7e:86:e9:
         f0:39:14:e0:b5:30:fb:d4:39:5d:b9:94:0e:f3:2d:fa:b6:34:
         ee:a5:ec:36:b6:93:9f:dc:9c:f7:a5:98:70:1d:0f:6d:86:91:
         17:e4:fb:2b:fe:d1:7b:5d:60:80:c2:56:08:f5:e9:e8:95:1e:
         4c:3d:9c:a3:d6:28:b5:59:a0:18:87:c7:f5:e4:dc:d5:0d:4a:
         b4:28:cd:9f:87:38:61:9c:04:f1:4a:bf:a4:32:2a:4e:ed:2a:
         fe:03:aa:dd:ba:24:0e:09:85:1b:15:d9:6f:14:30:a8:6f:09:
         71:2c:72:8c:4e:53:d8:c8:18:30:67:1d:b6:8d:56:21:00:bb:
         45:99:f2:16:26:f6:95:59:34:1f:b7:a9:04:1a:b3:dd:89:94:
         40:b5:3a:a3:4c:97:0b:db:0a:2c:e4:fa:60:b3:3c:fd:4a:37:
         f3:84:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:37 2025 by rpki-client