Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/U4J8KuzNZx2_mCUdvjQTzNf2_Rc.roa
File:                     U4J8KuzNZx2_mCUdvjQTzNf2_Rc.roa (raw, json)
Hash identifier:          pN0ol0lcLSmldCnM5iZ560PiiMzEGZ7XroGKgr9MzXs=
Subject key identifier:   53:82:7C:2A:EC:CD:67:1D:BF:98:25:1D:BE:34:13:CC:D7:F6:FD:17
Certificate issuer:       /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial:       03BEBC69
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/U4J8KuzNZx2_mCUdvjQTzNf2_Rc.roa
Signing time:             Sat 01 Jan 2022 08:53:35 +0000
ROA not before:           Sat 01 Jan 2022 08:53:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202063
IP address blocks:        185.55.51.0/24 maxlen: 24
                          185.55.48.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62831721 (0x3bebc69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
        Validity
            Not Before: Jan  1 08:53:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53827c2aeccd671dbf98251dbe3413ccd7f6fd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:47:0d:41:04:b3:c1:35:a0:5d:d2:c7:d4:
                    63:17:d7:df:1f:85:7c:27:1d:70:37:5a:13:8a:a4:
                    44:75:88:8b:c4:e7:2f:d7:07:2d:80:38:57:8a:f7:
                    d8:08:b3:00:22:1c:fe:d3:66:d8:b2:d4:ee:ac:44:
                    23:f7:2a:e5:ac:4e:ed:94:36:98:a9:3d:37:26:51:
                    95:18:68:e2:ca:b1:15:b4:c8:b4:2a:16:fe:4b:77:
                    bf:79:c3:95:4a:53:db:3a:b9:5f:b8:29:9b:29:d6:
                    0d:b7:63:1d:47:e7:d4:e5:41:f1:d3:3c:73:6f:6d:
                    c5:15:f1:d8:bc:8f:7a:7e:92:d8:4b:14:44:23:df:
                    a0:1c:c3:ee:fb:7a:96:49:bb:5d:e8:cf:ee:47:46:
                    10:6d:a7:70:f3:a9:82:c9:d7:6c:f7:c9:a5:5e:00:
                    df:20:ab:d6:91:2d:ee:8a:fb:31:3e:ac:ce:b2:c9:
                    bd:6e:6f:5b:05:d2:c9:a9:cf:ad:3c:1a:43:66:57:
                    9e:ec:e1:b2:c8:e5:32:34:fb:08:e9:1b:46:64:b9:
                    79:82:f8:54:c3:99:d9:37:b7:cb:30:df:df:f9:e0:
                    e9:d6:37:43:bd:24:4d:a5:bc:0f:e6:a1:85:67:dd:
                    ed:a0:77:f7:7f:55:9b:6f:ee:19:b7:39:fb:97:98:
                    be:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:82:7C:2A:EC:CD:67:1D:BF:98:25:1D:BE:34:13:CC:D7:F6:FD:17
            X509v3 Authority Key Identifier:
                keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/U4J8KuzNZx2_mCUdvjQTzNf2_Rc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.55.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:a3:54:b4:6f:ee:1e:21:ad:1b:90:e1:35:ff:13:2e:5b:49:
         33:10:1f:01:57:ba:06:51:c1:4c:54:77:15:d7:3f:1c:14:79:
         0e:7a:2f:6e:72:17:10:f1:24:90:87:eb:93:20:2b:02:65:d0:
         62:7f:30:0f:69:ed:f8:7d:64:6c:66:d8:b3:07:c6:a9:f9:e4:
         14:0e:4f:00:e5:d5:c7:a8:4f:68:b3:d2:9e:da:1a:47:fc:b6:
         e4:39:6d:cb:13:74:4d:32:1d:fb:62:b1:01:8e:24:9c:86:76:
         ef:84:29:e3:ca:c6:07:5e:57:2c:bf:82:a6:ba:aa:81:df:0c:
         7b:53:e2:7f:39:7f:a6:fc:4a:6c:5c:41:71:6e:e2:87:75:8c:
         a6:ab:23:55:0f:96:11:36:d1:8b:7d:27:8c:c3:c5:a8:66:be:
         2c:bb:c1:97:27:e7:40:9d:3e:15:15:90:c4:38:93:9a:90:5d:
         59:c9:fd:b1:ea:73:d1:54:bd:a5:76:70:bb:e0:44:e5:fb:ec:
         cf:75:da:bc:d9:ef:6a:63:86:be:8e:e7:c7:8d:26:02:40:37:
         6d:5e:09:e7:34:ef:e1:19:85:3c:6f:58:62:9f:e4:bc:d2:8a:
         c5:ce:2a:ca:f4:6f:f6:1e:94:b2:3c:f6:42:66:02:af:55:c0:
         76:b3:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:03 2024 by rpki-client on console-fra.rpki-client.org