Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/N22L5Qv3t4d2NkXx0YNd3hUjhhQ.roa
File:                     N22L5Qv3t4d2NkXx0YNd3hUjhhQ.roa (raw, json)
Hash identifier:          6eVh+sQlzk58IQ/RaXQJkF+D2fCb/QxlUhAWXOp06uY=
Subject key identifier:   37:6D:8B:E5:0B:F7:B7:87:76:36:45:F1:D1:83:5D:DE:15:23:86:14
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       2007F77D
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/N22L5Qv3t4d2NkXx0YNd3hUjhhQ.roa
Signing time:             Tue 15 Feb 2022 22:12:23 +0000
ROA not before:           Tue 15 Feb 2022 22:12:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48314
IP address blocks:        37.114.61.0/24 maxlen: 24
                          2a00:ccc1:5::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537393021 (0x2007f77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Feb 15 22:12:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=376d8be50bf7b787763645f1d1835dde15238614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:00:8c:54:bb:6b:bd:4f:ba:4a:ec:57:d0:
                    f9:79:79:2f:11:0f:03:dd:7b:0c:a9:29:51:3b:52:
                    c1:18:4d:84:9a:ba:e0:b9:8a:33:ba:e0:da:15:a2:
                    23:f8:6e:19:57:c9:83:da:19:13:18:31:a2:e3:50:
                    44:44:59:c8:be:cc:a0:e8:a9:82:4c:b6:55:d9:d8:
                    40:bc:e3:d4:7f:73:95:1a:60:c3:f6:da:60:b1:ed:
                    e8:55:24:9a:7a:ce:80:07:e9:f6:9c:a8:5f:14:1a:
                    cd:72:be:65:9b:c7:30:a8:ad:47:3c:96:37:da:bd:
                    e3:48:4c:b0:62:8f:6d:91:07:6a:1e:1c:0d:93:59:
                    24:51:e6:31:c3:70:1e:5f:b4:88:1d:59:b8:a2:5d:
                    59:f0:9e:ad:a3:a4:33:cc:c1:3c:73:ff:68:18:b7:
                    93:d3:38:c9:d9:72:68:78:4c:d1:a2:ad:2f:20:c2:
                    57:d0:9c:f6:c9:73:fb:54:70:bd:f4:0e:b1:d5:5b:
                    44:8d:ef:e4:11:3c:8d:63:3c:3a:ef:9e:c0:00:2b:
                    f8:97:21:f6:f6:6b:24:f7:17:e1:79:ea:74:51:9d:
                    90:ee:3f:fb:3a:47:ae:d9:bb:d4:29:bd:aa:6b:8e:
                    94:0d:f7:23:d1:1f:b7:28:58:8c:d9:a8:97:96:a6:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6D:8B:E5:0B:F7:B7:87:76:36:45:F1:D1:83:5D:DE:15:23:86:14
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/N22L5Qv3t4d2NkXx0YNd3hUjhhQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.114.61.0/24
                IPv6:
                  2a00:ccc1:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:75:7e:e2:34:f5:03:83:69:ce:b8:94:2a:83:4c:1b:0a:ed:
         87:33:bb:a9:ce:d4:99:fc:50:6f:1a:ce:12:da:aa:99:72:69:
         09:57:40:43:20:18:5e:bb:88:76:0b:62:3c:c3:f6:81:bb:ee:
         58:1c:69:8d:47:f9:40:20:11:61:8e:79:d1:a1:bb:57:d2:c5:
         10:ba:4a:96:82:67:eb:5c:8f:58:08:60:b6:42:94:a7:b2:be:
         65:04:2d:54:64:b4:fe:79:65:ac:fd:6e:f2:52:0c:b0:ea:83:
         83:ad:36:4a:8e:59:d2:d9:e5:5d:a3:8b:b2:ca:a3:03:79:d4:
         db:1f:42:c4:bf:3a:4f:8e:0f:4d:86:17:6f:b6:b3:28:d5:74:
         9a:ac:63:5f:00:6e:c0:b3:32:49:13:a0:21:99:39:7b:71:d3:
         58:51:0b:72:bb:21:c5:7e:30:12:75:f2:28:37:1e:c0:c2:67:
         ab:10:ef:f3:c8:0e:4a:40:0d:71:83:d7:ce:24:af:8c:08:27:
         27:43:34:1c:4c:42:93:e4:af:b0:c5:51:7e:1f:6e:fd:46:23:
         39:65:e6:b3:05:02:3a:f2:64:ef:de:5b:27:cd:55:50:42:92:
         70:fc:fc:99:23:21:ef:b1:8a:44:72:7a:b0:d3:89:af:54:0c:
         e3:53:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org