Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/36UHgQUf1a4lW6_AkiQcgeUUPSg.roa
File:                     36UHgQUf1a4lW6_AkiQcgeUUPSg.roa (raw, json)
Hash identifier:          L/qWBXuj+2KQBZBcv7XQpLm9M7a/7ZbJsGkzYX+bioA=
Subject key identifier:   DF:A5:07:81:05:1F:D5:AE:25:5B:AF:C0:92:24:1C:81:E5:14:3D:28
Certificate issuer:       /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial:       0A15265A
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/36UHgQUf1a4lW6_AkiQcgeUUPSg.roa
Signing time:             Sat 01 Jan 2022 04:55:03 +0000
ROA not before:           Sat 01 Jan 2022 04:55:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198785
IP address blocks:        185.155.217.0/24 maxlen: 24
                          185.155.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169158234 (0xa15265a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
        Validity
            Not Before: Jan  1 04:55:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dfa50781051fd5ae255bafc092241c81e5143d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:96:56:0b:ef:4b:18:c9:5e:50:9c:6f:82:
                    b5:32:c9:e5:3b:0e:4c:99:3a:1e:9f:a2:c8:f8:b8:
                    5a:ef:1c:35:5e:b8:94:4d:56:87:1f:39:b5:5a:36:
                    c4:1f:e0:8e:70:9b:2f:0f:9f:ab:fb:a4:ed:1a:71:
                    33:a1:d7:6f:64:d5:bf:2b:76:80:40:fd:07:56:50:
                    85:4e:1f:1d:51:46:c9:fd:28:27:ca:d5:8e:86:4c:
                    21:06:5e:b4:69:82:c8:33:9c:cd:f6:88:d4:fc:e5:
                    ae:be:08:e8:d7:b8:fd:b4:01:34:77:4c:61:1c:f4:
                    d4:59:46:77:68:83:f9:14:bc:8b:e3:e2:18:23:85:
                    5b:3e:70:13:ef:b6:73:27:ec:30:c3:e5:06:f1:69:
                    dc:94:cd:86:8d:ef:7f:41:a8:dd:96:ca:4f:3f:cd:
                    6b:83:f2:7b:26:be:66:19:63:56:99:d7:03:2b:d7:
                    80:12:9e:d6:91:13:f3:6c:82:31:da:52:a3:56:36:
                    ba:2f:f4:ca:57:03:a0:41:0e:8f:88:de:54:fa:4b:
                    50:1a:4a:49:cc:cd:11:5c:fd:08:2c:ed:c2:20:83:
                    00:4b:ee:88:d1:a8:9b:19:22:6b:86:44:4a:56:94:
                    44:4f:da:a0:20:e5:e7:97:c5:c5:48:6c:e1:7e:d2:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A5:07:81:05:1F:D5:AE:25:5B:AF:C0:92:24:1C:81:E5:14:3D:28
            X509v3 Authority Key Identifier:
                keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/36UHgQUf1a4lW6_AkiQcgeUUPSg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:73:86:4d:e4:12:43:37:a2:7b:5e:56:47:d5:6a:35:a9:da:
         13:dc:43:93:08:f3:f6:e8:27:0e:ef:43:c6:9c:3b:b0:f2:79:
         26:c3:42:b3:d1:c7:b1:ed:5e:bf:6b:4c:ec:c4:61:68:21:26:
         ca:87:6a:30:6a:59:83:07:4e:5b:57:e2:1c:d3:a4:a1:79:18:
         b4:b9:18:cb:b7:23:69:1a:9e:c2:47:aa:e4:23:ee:b5:c5:a6:
         ea:ad:ed:04:d7:3e:c3:cb:4d:34:4c:f2:14:d6:01:9a:89:0d:
         4f:b1:1a:1a:c0:f6:83:98:ed:1c:30:6a:f4:32:eb:27:6e:6c:
         42:aa:20:d2:d0:cd:5e:fc:fe:be:ed:21:67:b0:eb:cc:ed:f7:
         93:d8:ef:3f:bf:48:0c:ef:da:70:8e:82:e8:6a:1e:0a:19:5c:
         e3:2c:50:23:e0:c2:e0:67:af:ac:12:02:e7:d6:53:34:50:57:
         b2:3b:2e:e3:f3:81:7d:bb:b8:13:78:0e:9f:7d:88:fe:c2:22:
         70:25:a6:ca:3b:a4:69:ce:10:68:48:4a:60:0d:3c:d1:72:7e:
         73:a2:a9:66:07:1a:e3:50:58:1e:62:06:ee:75:9f:b4:54:83:
         12:61:d4:b9:26:a6:5b:78:8b:24:89:15:db:f5:c5:7a:92:b5:
         f4:c7:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:37 2024 by rpki-client on console-ams.rpki-client.org