Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/36oC0g0TVEJdf1tZoI7OIxlyJsM.roa
File:                     36oC0g0TVEJdf1tZoI7OIxlyJsM.roa (raw, json)
Hash identifier:          xVbBrRwpdLlJ0T0Ti/EznOAqesfCxYp6QzJZk681K3w=
Subject key identifier:   DF:AA:02:D2:0D:13:54:42:5D:7F:5B:59:A0:8E:CE:23:19:72:26:C3
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       35150EE0
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/36oC0g0TVEJdf1tZoI7OIxlyJsM.roa
Signing time:             Sat 01 Jan 2022 07:55:02 +0000
ROA not before:           Sat 01 Jan 2022 07:55:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208492
IP address blocks:        185.54.94.0/24 maxlen: 25
                          2a00:8640:b000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890572512 (0x35150ee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Jan  1 07:55:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dfaa02d20d1354425d7f5b59a08ece23197226c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:30:c9:f7:ac:a6:72:bf:dc:5a:2b:01:87:
                    06:af:aa:5e:cb:6a:c4:83:81:e0:0b:79:8c:da:a3:
                    12:28:40:06:8d:d2:28:35:36:ac:35:29:df:3d:7c:
                    f1:ac:e6:4e:2c:ed:22:56:2e:57:95:83:d1:0f:d6:
                    1b:f1:a9:b2:93:5a:13:04:bf:08:70:8a:ef:93:a6:
                    fb:e4:9c:30:5a:01:3e:89:e6:c8:77:9a:38:84:3f:
                    7f:44:96:d4:19:72:1f:e8:e1:95:cb:a3:fc:68:33:
                    e6:e0:c5:2f:35:3e:4b:b8:66:08:01:50:41:f7:98:
                    27:a7:1f:e3:ee:bb:63:18:90:ef:6f:08:cf:4f:a6:
                    db:18:64:e5:06:41:bb:78:e2:de:72:17:4e:54:ce:
                    52:99:f1:ae:2f:ed:d7:30:a1:2c:4b:b4:d7:86:3f:
                    b8:a2:1e:5a:f5:2c:49:44:78:22:01:7e:63:8b:09:
                    25:21:8a:86:d4:43:0f:45:35:03:6f:5f:6d:99:4c:
                    3e:49:5f:d8:46:8c:2b:94:30:37:f0:67:e7:02:52:
                    7e:2e:dc:25:d1:ff:d1:a4:1e:c7:e0:b7:0b:2f:86:
                    c2:55:4b:6b:86:1a:11:b3:ad:3b:33:8a:e9:34:fb:
                    ec:76:80:85:07:38:2e:e9:4a:86:cf:1f:d4:13:79:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AA:02:D2:0D:13:54:42:5D:7F:5B:59:A0:8E:CE:23:19:72:26:C3
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/36oC0g0TVEJdf1tZoI7OIxlyJsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.94.0/24
                IPv6:
                  2a00:8640:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         92:b5:77:18:21:05:bb:53:6d:fc:06:cf:5a:62:0d:08:64:47:
         8e:a9:81:99:76:ea:93:68:21:6b:d7:34:81:1d:58:da:12:2f:
         16:82:f9:b2:40:12:1b:74:df:06:c8:c3:0e:4a:76:40:46:21:
         c9:e5:50:fa:a3:a5:f1:45:41:96:6d:bf:0e:c1:69:55:89:b8:
         67:dc:be:5f:62:a7:23:83:b0:26:38:ee:81:c0:49:22:f7:62:
         1a:8f:51:e0:e9:b2:60:f1:8e:51:0b:b0:db:47:aa:dd:4a:68:
         d0:7e:e1:d1:77:52:9d:82:11:8c:f6:68:70:ad:e0:ab:09:63:
         a8:79:02:86:c6:fd:cc:e5:76:51:36:58:f9:6d:82:dc:b0:14:
         cd:a7:b5:88:b5:05:b6:eb:79:2e:79:12:72:3b:c0:b0:da:84:
         fe:38:39:fa:23:79:df:9b:24:40:61:81:c9:e6:07:ae:02:89:
         a4:de:d9:87:3b:82:4f:fd:02:3a:0f:ab:49:f0:da:8c:d9:cf:
         7e:49:e2:fe:81:7c:ca:ed:99:cf:dc:3b:49:cf:81:01:55:53:
         eb:a6:02:1e:53:c1:2a:c5:84:2e:25:86:6b:9d:4b:53:18:88:
         cc:6c:d0:23:18:04:68:98:72:72:cd:1a:db:ae:8e:96:48:8d:
         7f:37:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:49 2024 by rpki-client on console-fra.rpki-client.org