Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UWJeL00--bS8n3dlD9ksfxsU0b8.roa
File:                     UWJeL00--bS8n3dlD9ksfxsU0b8.roa (raw, json)
Hash identifier:          awKbD2HF8lfchHT92cf2jYSa/Ae5Nvu7Kiwd0J5JXiU=
Subject key identifier:   51:62:5E:2F:4D:3E:F9:B4:BC:9F:77:65:0F:D9:2C:7F:1B:14:D1:BF
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       10BECF0D
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UWJeL00--bS8n3dlD9ksfxsU0b8.roa
Signing time:             Wed 11 May 2022 06:13:02 +0000
ROA not before:           Wed 11 May 2022 06:13:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210993
IP address blocks:        62.76.141.0/24 maxlen: 24
                          194.226.42.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280940301 (0x10becf0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: May 11 06:13:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51625e2f4d3ef9b4bc9f77650fd92c7f1b14d1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:15:4a:24:80:6f:1e:12:b7:c0:04:61:eb:19:
                    a6:30:a9:03:4d:8c:5f:74:95:a9:d8:c7:45:34:de:
                    f8:55:b6:2a:7c:08:10:06:ba:08:89:84:85:ea:da:
                    62:47:54:f1:f7:ca:47:a0:31:c0:ed:73:04:ef:e9:
                    68:63:c7:3d:db:51:25:44:18:30:5b:cc:a4:36:3f:
                    d0:7a:2b:7a:28:4d:92:cd:5a:65:7a:89:4f:0e:c9:
                    f1:8e:de:af:4d:53:b7:3b:f1:b3:f5:45:07:b2:5e:
                    94:10:b8:c7:48:d8:0b:77:51:ee:51:cd:69:12:7f:
                    44:f9:fc:4b:27:d5:79:14:9c:a2:16:0d:12:e4:6d:
                    7c:e8:35:3f:b8:f2:32:6b:81:e5:85:26:a7:15:c7:
                    13:b7:37:53:03:b5:19:87:57:17:be:3c:30:a5:11:
                    ba:72:6f:7f:67:1f:b1:f3:09:9c:a6:62:da:1f:60:
                    58:7b:2f:ef:1a:a0:11:12:ce:00:d9:26:c3:86:3b:
                    41:dc:04:a5:82:39:86:68:81:a1:71:7b:d6:bd:5b:
                    46:32:19:72:38:27:d7:be:77:bb:40:7c:46:85:65:
                    97:b2:37:43:20:f5:fa:2c:6f:ae:e7:0b:49:51:7f:
                    a3:c9:99:88:27:94:1e:01:61:f9:08:c2:45:dc:cd:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:62:5E:2F:4D:3E:F9:B4:BC:9F:77:65:0F:D9:2C:7F:1B:14:D1:BF
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UWJeL00--bS8n3dlD9ksfxsU0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.141.0/24
                  194.226.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:e6:c4:37:7c:72:78:9a:3c:e6:80:65:a8:e3:2c:a0:1b:97:
         77:7f:27:14:1a:3e:a2:e2:24:7e:6c:3d:38:e4:9e:30:d1:23:
         01:30:06:c2:cc:00:86:fb:4a:36:b7:7a:37:e2:31:11:96:24:
         54:dc:89:b0:65:0e:45:99:90:86:38:8f:eb:b6:fa:02:43:1b:
         78:40:57:9e:9f:a8:5c:5a:8a:aa:aa:69:12:9c:4c:cc:42:7d:
         6b:38:7f:15:ae:a0:e8:db:02:de:9b:fb:57:f3:eb:f9:1b:d5:
         9c:8d:85:36:86:84:5f:27:e4:db:d9:be:10:93:2a:e4:00:16:
         e8:aa:32:ae:0f:86:0e:03:7e:24:7d:7b:2d:a3:c6:ff:21:7b:
         2d:c5:90:dc:9a:00:44:7e:6f:a3:29:16:d7:20:f7:db:31:d3:
         2c:fb:d4:6f:e9:91:d2:33:c0:07:0a:26:51:95:fa:32:f3:b2:
         37:ff:52:f6:4d:3b:24:d9:f9:4c:4e:e6:ef:e1:ef:a6:06:35:
         16:17:41:45:1a:b8:e4:1d:c0:85:a6:ca:52:f2:50:d7:d4:88:
         8c:d6:63:de:44:52:27:3e:f6:21:33:4c:a0:61:0d:f1:86:ab:
         ca:2c:42:70:03:ab:3d:ea:0a:4c:d3:b9:b4:0e:53:3d:d5:1f:
         f2:fd:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org