Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/uu_JHkUBdDZNJUpYEX7oEfQOi4U.roa
File:                     uu_JHkUBdDZNJUpYEX7oEfQOi4U.roa (raw, json)
Hash identifier:          US6OmYGk0TEjzia7OzWcaxahrzY/bz8DO3rQzbZG5aI=
Subject key identifier:   BA:EF:C9:1E:45:01:74:36:4D:25:4A:58:11:7E:E8:11:F4:0E:8B:85
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       095FA470
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/uu_JHkUBdDZNJUpYEX7oEfQOi4U.roa
Signing time:             Thu 06 Jan 2022 19:27:52 +0000
ROA not before:           Thu 06 Jan 2022 19:27:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24961
IP address blocks:        185.117.0.0/24 maxlen: 24
                          45.145.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157262960 (0x95fa470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  6 19:27:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=baefc91e450174364d254a58117ee811f40e8b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:20:8d:5a:ed:a6:37:e5:81:11:90:21:5c:
                    e7:bf:05:7e:92:1c:c7:73:36:f7:66:78:eb:cb:94:
                    1a:0e:4b:0b:a1:29:a2:38:1b:e6:da:94:56:7e:fa:
                    b6:2e:32:f1:2e:f2:e9:ce:b2:3e:81:e5:8f:c1:b0:
                    bc:5d:51:1e:72:86:11:b2:a3:28:53:c5:ee:a8:16:
                    af:80:70:eb:57:46:94:5f:c5:3c:79:f2:db:ea:b6:
                    a7:31:30:11:9b:84:14:9e:8e:fe:ed:f7:94:56:90:
                    b2:c0:a5:d9:b2:3c:7a:24:31:43:e2:e0:3a:e6:c5:
                    69:f3:f5:40:43:16:17:07:6a:8b:fa:70:2c:94:d6:
                    f1:e3:7e:04:2e:13:28:8b:21:d9:74:c9:51:17:09:
                    41:0d:70:8f:25:e7:9c:48:32:d6:27:55:f3:f7:d7:
                    0f:e2:5f:38:bf:3c:1b:db:d7:23:74:c8:e7:49:51:
                    d7:9f:da:13:08:bb:dc:dd:1b:0c:02:3b:f0:18:b4:
                    e3:d3:95:13:ca:4a:9f:5d:bf:d0:ca:e5:d4:e2:42:
                    4e:67:32:b5:7f:45:7e:86:8b:42:88:1b:e1:95:f2:
                    50:28:fe:a0:20:31:6c:d9:7d:1a:74:b9:a1:ec:1d:
                    94:33:89:3d:7a:f8:8b:e7:1e:93:26:ed:30:20:2f:
                    2b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EF:C9:1E:45:01:74:36:4D:25:4A:58:11:7E:E8:11:F4:0E:8B:85
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/uu_JHkUBdDZNJUpYEX7oEfQOi4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.226.0/24
                  185.117.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:63:79:40:05:8c:28:86:35:d9:0f:dd:bc:4c:db:ee:da:16:
         2c:46:7d:32:c0:0b:8a:7d:28:ca:ce:7d:b4:14:57:25:7b:91:
         fc:60:ae:62:83:39:1e:7c:c7:41:e9:f2:92:cd:30:18:54:30:
         91:de:8d:3d:39:9e:e6:ee:37:45:ca:b3:13:c2:0a:04:72:f8:
         57:02:44:e5:a7:8f:a9:1c:31:76:cd:27:81:45:31:41:be:b3:
         d4:8f:83:45:d9:e3:be:46:c5:ab:b1:52:22:57:8f:7a:42:c5:
         62:58:67:e2:3b:5e:36:bd:34:0e:da:15:4c:e6:28:86:70:7b:
         1f:37:79:76:5d:f2:24:c9:03:c2:ed:6b:87:28:14:c1:cf:0e:
         40:96:23:0a:ce:57:70:cd:69:cd:b3:ec:3d:d8:c2:de:68:81:
         04:5e:0e:0f:b9:5f:9c:b4:e2:ef:97:e6:2f:98:29:c3:91:43:
         c2:07:3e:09:8c:1f:6a:1b:4c:6d:dc:82:b4:0f:22:7f:34:3b:
         a2:79:c1:e5:33:27:57:88:2e:ac:08:51:f2:77:83:2f:8d:e6:
         5a:6b:c1:dd:c8:2a:d5:b6:11:f0:9a:b7:23:43:be:3a:87:53:
         92:6c:9d:24:ec:e9:48:b6:76:a6:fe:5e:e8:0a:7a:80:7a:32:
         28:4d:ec:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org