Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/UpFn3Ys_t1Zy9XDlQ7G4Ed7Q2pE.roa
File:                     UpFn3Ys_t1Zy9XDlQ7G4Ed7Q2pE.roa (raw, json)
Hash identifier:          wwXMHRjQZvbUObuyXhyeVEeWiyDGHH9HWmpu73UQvkk=
Subject key identifier:   52:91:67:DD:8B:3F:B7:56:72:F5:70:E5:43:B1:B8:11:DE:D0:DA:91
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       3513BAAC
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/UpFn3Ys_t1Zy9XDlQ7G4Ed7Q2pE.roa
Signing time:             Sat 01 Jan 2022 07:55:02 +0000
ROA not before:           Sat 01 Jan 2022 07:55:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203993
IP address blocks:        185.54.92.0/22 maxlen: 24
                          2a00:8640::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890485420 (0x3513baac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Jan  1 07:55:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=529167dd8b3fb75672f570e543b1b811ded0da91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:bf:f2:1a:af:dd:e8:c3:6d:ac:24:54:c0:
                    0e:17:09:65:86:82:14:a2:b9:f1:34:c2:54:39:17:
                    bd:ef:9e:25:a3:31:8c:76:54:0b:ec:2b:92:6d:8a:
                    7b:61:58:46:db:59:96:3c:4b:ea:18:e4:02:a4:97:
                    72:18:0a:d7:86:f7:fb:6e:29:da:57:34:d2:8e:fc:
                    6b:52:52:93:59:43:e9:3b:55:12:f2:20:6a:28:57:
                    09:87:ce:44:33:2c:3c:61:e4:c3:70:9f:bb:7f:54:
                    24:4b:63:28:33:53:6b:90:39:c4:c9:1f:34:9b:bb:
                    de:f5:73:8c:51:c2:eb:e0:28:7f:6b:2c:f1:57:e9:
                    72:e1:db:5f:70:c3:14:0f:11:e3:42:03:83:66:0e:
                    f9:d9:2c:8c:91:b6:a1:2b:cc:30:c1:45:df:3b:fe:
                    64:fc:a1:58:30:83:ca:15:2d:ad:f8:b6:f4:44:df:
                    e9:6b:e4:4b:e0:6d:09:7e:75:ec:2f:18:5a:f8:25:
                    9f:b5:2c:60:42:a7:80:9f:6f:d5:aa:2b:72:e1:56:
                    8c:39:15:b9:dc:ef:f1:c6:4c:e1:98:a1:29:1e:fe:
                    3b:bf:bf:e4:a2:3b:37:fa:22:50:2c:18:98:3d:5f:
                    cf:ef:80:20:05:8a:79:00:4c:8c:b6:cc:52:33:38:
                    23:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:91:67:DD:8B:3F:B7:56:72:F5:70:E5:43:B1:B8:11:DE:D0:DA:91
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/UpFn3Ys_t1Zy9XDlQ7G4Ed7Q2pE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.92.0/22
                IPv6:
                  2a00:8640::/29

    Signature Algorithm: sha256WithRSAEncryption
         89:84:86:59:d7:4d:b7:e6:61:31:29:f4:96:f1:52:41:ee:c4:
         fd:53:d7:6b:c7:db:39:61:bf:56:97:48:ac:70:62:4b:c2:be:
         e5:7d:9f:0d:1f:f1:fd:cf:02:75:56:7e:82:5b:5e:51:57:ff:
         f8:0a:81:cb:06:ff:d6:82:36:19:ea:8d:f3:f0:8c:16:36:62:
         df:7f:98:8f:32:78:28:aa:9f:f9:67:34:8a:3c:85:63:27:f3:
         23:42:9c:e1:7d:5d:96:f5:19:ef:85:eb:92:3c:3b:75:52:dd:
         70:fa:90:21:a5:73:0d:76:83:8f:d4:71:31:f3:18:69:db:99:
         22:11:63:f4:ef:85:23:13:34:10:12:a4:af:a9:c6:9e:57:42:
         1c:3a:9c:71:92:28:4a:ab:13:bb:0f:82:ff:b1:23:08:e4:67:
         f3:9e:c8:08:4e:63:00:ff:dd:8b:38:5b:3d:0d:a8:ec:24:da:
         1f:1a:da:c0:4e:85:4f:bc:71:46:41:41:e6:b7:a6:e5:be:04:
         f1:3e:da:76:a7:e0:92:d3:43:f8:59:9f:44:fe:9c:25:fb:b6:
         cf:ec:af:45:f9:39:e5:c2:c9:10:d9:57:28:06:0a:36:c0:d1:
         51:45:38:a2:c2:e2:92:48:de:58:a8:e0:95:a9:7a:86:e4:31:
         68:e9:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:24 2024 by rpki-client on console-ams.rpki-client.org