Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/VFubP7pcQh8Ip95wkKaOllFIe6E.roa
File:                     VFubP7pcQh8Ip95wkKaOllFIe6E.roa (raw, json)
Hash identifier:          J8D203iwM7h9tNHFjP9i7PNFPdrWAvamiGoqys7yUFY=
Subject key identifier:   54:5B:9B:3F:BA:5C:42:1F:08:A7:DE:70:90:A6:8E:96:51:48:7B:A1
Certificate issuer:       /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial:       03C5E4EB
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/VFubP7pcQh8Ip95wkKaOllFIe6E.roa
Signing time:             Sat 01 Jan 2022 03:02:49 +0000
ROA not before:           Sat 01 Jan 2022 03:02:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44285
IP address blocks:        185.137.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63300843 (0x3c5e4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
        Validity
            Not Before: Jan  1 03:02:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=545b9b3fba5c421f08a7de7090a68e9651487ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cc:ec:f4:e5:d8:c0:b3:82:d8:a7:b3:dc:74:
                    0d:4c:1f:9a:a4:bc:3b:75:96:77:f2:b3:97:60:22:
                    3f:24:4e:b8:34:bd:f4:77:0c:4e:5c:cd:15:74:f1:
                    12:17:82:48:32:3d:26:a3:b7:f2:c7:d0:1d:89:37:
                    5e:15:a3:78:a3:fb:09:5d:45:97:c8:ec:09:bb:7c:
                    fa:e3:8e:7f:73:09:d7:18:a1:3e:e5:de:17:ef:c2:
                    01:50:f0:52:1a:d0:44:72:75:e0:a6:52:83:09:09:
                    7b:94:e3:c9:44:63:1f:8d:a2:dc:54:51:76:b7:a2:
                    b3:cf:38:a6:43:af:0e:cc:c7:5f:55:67:bc:f6:b8:
                    d7:22:f7:39:79:35:79:79:12:ed:9c:51:b4:46:60:
                    1a:a3:63:5b:14:21:62:13:f9:43:75:0d:66:7b:eb:
                    19:a7:b5:fd:54:10:b2:60:1e:2c:7a:0f:23:81:2b:
                    af:c3:d6:45:33:c8:63:db:3b:8e:68:c6:f6:cf:27:
                    8f:9c:8c:5d:81:55:49:4a:c8:95:66:05:66:9e:37:
                    ee:6e:b3:23:5e:49:ed:83:1a:32:27:b5:57:54:9d:
                    c9:22:39:ec:43:86:cf:96:95:f2:88:a8:88:cf:5d:
                    e9:77:66:99:95:33:57:ee:7a:c4:90:5f:35:08:bf:
                    5e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5B:9B:3F:BA:5C:42:1F:08:A7:DE:70:90:A6:8E:96:51:48:7B:A1
            X509v3 Authority Key Identifier:
                keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/VFubP7pcQh8Ip95wkKaOllFIe6E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:cb:8e:63:a1:1d:02:33:f7:23:15:81:52:31:67:eb:53:89:
         1d:07:9d:5f:56:b0:59:4f:ba:7c:58:41:b7:03:f0:35:6e:e2:
         ec:97:e1:25:63:39:ed:e7:12:57:d9:d5:d3:0b:d8:b6:01:08:
         03:58:d4:73:a4:0c:ab:69:62:25:8b:67:25:9c:eb:3d:21:82:
         81:d7:ca:5e:df:8a:0a:c6:54:2d:33:69:b5:a2:f2:31:9c:c4:
         91:64:44:2d:6b:78:ec:e5:e3:1d:10:00:0d:a0:30:29:84:69:
         86:4b:58:2e:fe:f8:89:ba:18:82:77:6d:d9:16:c3:7b:32:f2:
         56:45:a7:2c:8a:54:03:39:a9:10:5e:8a:03:b1:34:f2:38:17:
         2d:40:04:7c:b3:8b:ed:78:fa:99:bf:ac:7e:1f:5f:56:be:32:
         dd:97:9e:73:ba:84:72:dd:1c:e9:45:a5:c1:48:50:5a:c6:95:
         0d:39:a3:43:7b:7a:9b:1a:fd:17:fb:5c:51:63:41:97:0a:f8:
         8b:9f:07:0e:5d:f7:2a:18:09:fe:24:eb:59:77:d6:17:77:46:
         4b:b4:d6:43:18:9e:b2:63:77:37:78:17:7a:68:05:c0:0f:46:
         82:3c:62:4f:49:c2:85:d3:a4:77:c9:85:4c:11:d0:73:94:ab:
         bb:fe:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:37 2024 by rpki-client on console-ams.rpki-client.org