Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/TUjOviCNN0QtTTUf-FkrVXUKB1A.roa
File:                     TUjOviCNN0QtTTUf-FkrVXUKB1A.roa (raw, json)
Hash identifier:          Uu3dyiM2HRB4pyrRFEi9GYkN6nX3HZ1AxQh8uYeOf+c=
Subject key identifier:   4D:48:CE:BE:20:8D:37:44:2D:4D:35:1F:F8:59:2B:55:75:0A:07:50
Certificate issuer:       /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial:       0A567F19
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/TUjOviCNN0QtTTUf-FkrVXUKB1A.roa
Signing time:             Mon 04 Jul 2022 06:41:25 +0000
ROA not before:           Mon 04 Jul 2022 06:41:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211190
IP address blocks:        194.31.244.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173440793 (0xa567f19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
        Validity
            Not Before: Jul  4 06:41:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d48cebe208d37442d4d351ff8592b55750a0750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:87:41:1b:4d:8b:9d:e7:27:56:73:a4:f6:
                    54:f8:aa:cd:28:c6:67:ad:85:0b:5b:4f:ee:c8:b1:
                    08:99:0e:a7:6c:0c:7a:b0:72:8b:4a:6e:53:bc:2a:
                    c7:f0:dd:a5:90:b7:e3:1b:29:29:d5:77:16:6d:ff:
                    62:0e:24:0d:48:ee:d9:47:b0:29:38:24:39:a1:8d:
                    ed:d3:fe:37:cb:96:76:0e:a6:fb:79:d1:e5:16:53:
                    ed:2d:2d:03:04:76:31:08:14:e6:83:f0:e4:f7:29:
                    61:ed:76:1e:ae:89:08:34:e0:7b:41:08:5e:88:f1:
                    6e:e4:df:4b:06:0f:96:b5:47:bd:d8:97:0a:f1:1c:
                    47:21:12:66:e5:31:9f:9e:87:d4:8e:ba:78:14:30:
                    0b:25:93:3e:40:64:e8:b2:40:a3:37:19:27:ec:49:
                    86:40:89:75:a1:bb:46:0b:ce:14:38:75:ce:a1:fb:
                    3e:72:92:a8:57:d0:bb:e0:5a:b1:b7:68:4b:93:08:
                    50:8d:84:2e:fd:04:1f:d1:02:68:0d:f1:43:5a:87:
                    49:53:f2:bd:9d:0d:f1:35:1c:a8:8d:58:ed:fc:3f:
                    11:29:c0:2c:47:3c:86:7d:27:3f:79:1f:d9:83:31:
                    c5:e9:41:1f:77:98:b6:59:d7:ea:35:cd:10:29:bd:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:CE:BE:20:8D:37:44:2D:4D:35:1F:F8:59:2B:55:75:0A:07:50
            X509v3 Authority Key Identifier:
                keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/TUjOviCNN0QtTTUf-FkrVXUKB1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b2:f4:f4:63:09:50:e3:b9:e7:5f:a7:db:49:71:c1:85:66:
         f7:61:7e:b1:02:bc:54:71:b7:26:60:00:c6:68:ea:2c:5d:91:
         42:fb:b7:59:b4:44:3b:dd:f9:52:cc:6f:15:c1:03:1a:c7:ab:
         66:ac:98:2d:ce:5d:a2:34:07:5f:d9:1f:be:39:a5:49:e2:17:
         ea:2d:81:87:ce:2c:a4:28:28:16:41:fd:f7:7b:0f:63:de:ce:
         6e:73:2e:59:5a:58:60:76:df:fc:11:8b:b0:00:6d:b1:04:1c:
         16:9b:44:4b:81:cb:e5:bb:86:7c:38:12:f8:3c:43:c2:e0:69:
         7b:33:1d:b8:e1:af:79:5e:2c:6a:de:fd:19:7c:ab:b0:20:a3:
         b3:31:26:2a:3e:f9:ea:6b:f4:2e:73:ac:9b:69:58:ed:81:14:
         f5:73:b2:e3:a8:bf:fa:3c:3f:34:7b:53:1e:41:29:74:18:09:
         e7:39:c2:a0:1d:e3:6e:88:49:b8:c0:b5:02:76:c4:dc:d5:c3:
         8a:6f:12:30:77:43:e0:04:29:9a:3c:bd:a7:c2:cc:73:e5:95:
         bd:32:d4:8a:11:cc:86:21:ca:6c:00:0e:f9:ef:94:16:56:9e:
         0c:6e:a6:0a:29:9b:85:5a:7a:4c:81:8c:52:cb:41:81:ea:46:
         68:b0:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:48:01 2025 by rpki-client