Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/Uvko3IDOmEkk3M0txzw1GgSGOjc.roa
File:                     Uvko3IDOmEkk3M0txzw1GgSGOjc.roa (raw, json)
Hash identifier:          VVu1FzCl7/ayNL1UQTj+LPlwKFKMc87kDYnsnnJniDw=
Subject key identifier:   52:F9:28:DC:80:CE:98:49:24:DC:CD:2D:C7:3C:35:1A:04:86:3A:37
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       4DED96
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/Uvko3IDOmEkk3M0txzw1GgSGOjc.roa
Signing time:             Tue 03 May 2022 06:19:15 +0000
ROA not before:           Tue 03 May 2022 06:19:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2116
IP address blocks:        77.223.160.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5107094 (0x4ded96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: May  3 06:19:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=52f928dc80ce984924dccd2dc73c351a04863a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:27:0d:07:54:e8:00:2d:ca:08:07:67:9d:
                    e6:42:5f:20:ba:b9:63:38:76:86:d4:c0:a9:62:d9:
                    20:04:7c:e2:8b:eb:5b:c9:f7:46:0a:64:ac:07:84:
                    36:a3:eb:34:12:9a:c4:94:cc:cb:2d:98:4b:00:ab:
                    86:bd:b5:ab:cb:a1:1a:17:0c:60:bb:a3:f1:e9:4e:
                    e0:3c:2f:0b:cf:55:dd:6b:f4:73:c2:5f:8a:9f:8e:
                    30:17:6e:41:36:19:a2:12:84:ee:d5:c4:47:d0:39:
                    07:12:c2:dd:13:00:6d:c6:34:a6:07:e2:a5:fa:6a:
                    30:58:58:ca:f5:ac:b7:14:b9:47:02:57:fa:94:56:
                    76:b7:29:56:6c:da:e8:fb:71:c8:7c:d6:2c:a7:88:
                    ca:89:d0:21:62:11:f4:22:ab:bd:4e:23:82:13:23:
                    4f:d8:c1:47:7e:95:da:f4:1f:79:9e:ba:6a:5b:6b:
                    99:2a:59:77:3e:b0:7a:52:82:17:d7:ce:ea:e1:2f:
                    a3:aa:8f:4c:8f:74:66:00:36:0f:52:d7:e7:62:f6:
                    ca:d0:6a:e6:18:9a:7f:15:71:21:54:48:0e:11:e1:
                    23:a7:5e:55:75:32:fb:3c:81:0c:b3:83:77:9e:2d:
                    6d:cc:0c:b4:79:74:71:22:b3:4a:f2:a1:f9:5d:86:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F9:28:DC:80:CE:98:49:24:DC:CD:2D:C7:3C:35:1A:04:86:3A:37
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/Uvko3IDOmEkk3M0txzw1GgSGOjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.223.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:a1:bf:81:3a:c7:95:00:4d:6c:e5:d1:13:6c:cb:67:66:ee:
         a0:b7:f8:4e:e7:88:29:6e:d2:85:26:25:a8:3b:f5:3c:83:22:
         c3:23:cd:c9:99:cc:c5:ee:77:59:17:bb:8e:3c:db:d6:f5:b2:
         81:8a:93:ed:96:81:a7:47:a5:08:81:dc:2b:40:07:64:7b:df:
         fb:91:b2:b2:32:30:84:68:a2:c3:85:a3:c3:ea:92:9d:ee:73:
         c1:5a:89:7c:ab:72:9a:e3:30:b2:4d:68:16:b4:b6:97:84:32:
         f5:03:bc:34:70:db:8f:34:d3:7c:de:0a:ee:fe:46:be:d9:ed:
         6a:12:8c:d4:4c:dc:c1:05:50:44:76:9c:aa:cd:26:95:01:47:
         20:36:27:42:d2:10:cd:5b:dc:80:22:2d:cd:1a:34:bb:5f:40:
         24:4f:2e:7e:25:d9:22:43:b2:44:95:5d:83:16:5b:5a:13:6c:
         c1:76:c3:18:12:16:d5:25:fa:6a:90:84:8c:1c:7d:b2:9d:6e:
         70:40:d0:23:3b:8c:46:ee:65:ef:8b:f2:3b:03:2f:8f:1b:1e:
         c5:ca:c4:85:b9:fc:0b:8a:8f:d8:b0:3a:9d:fb:11:09:19:b9:
         8c:74:3e:8a:ce:16:b2:10:c2:22:35:0f:1f:6a:b6:cc:ea:6f:
         5d:07:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:38 2024 by rpki-client on console-ams.rpki-client.org