Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/UMa0BuNEy4GuYWoaU-ff9eUzkfU.roa
File:                     UMa0BuNEy4GuYWoaU-ff9eUzkfU.roa (raw, json)
Hash identifier:          pdTmuQvr/TIPKmXXfzXZXkJztQmSC5T3tUP2gd95NAY=
Subject key identifier:   50:C6:B4:06:E3:44:CB:81:AE:61:6A:1A:53:E7:DF:F5:E5:33:91:F5
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       380571E9
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/UMa0BuNEy4GuYWoaU-ff9eUzkfU.roa
Signing time:             Sat 01 Jan 2022 11:02:21 +0000
ROA not before:           Sat 01 Jan 2022 11:02:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        87.251.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939880937 (0x380571e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Jan  1 11:02:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=50c6b406e344cb81ae616a1a53e7dff5e53391f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:56:32:03:72:b6:fc:3c:18:2a:ae:83:0e:
                    42:8e:70:a2:b4:5f:30:fa:55:af:49:98:70:c1:9d:
                    69:33:68:fd:24:9a:ec:31:1a:7d:b9:58:4a:93:f6:
                    65:31:d8:f5:ab:c3:3a:d5:bf:2e:42:f0:46:9a:62:
                    82:65:ea:a6:d4:b5:8b:31:2a:30:7c:a8:48:3a:44:
                    a3:cb:c1:5a:a1:30:85:5b:5e:68:72:cb:73:1b:69:
                    bd:2b:d1:2f:1d:66:6d:f8:23:c5:27:b5:b0:ce:9d:
                    da:ba:54:e3:dd:72:a5:18:9f:60:67:30:f8:68:13:
                    d1:ed:c4:6b:b9:88:ed:fb:d4:86:43:a5:61:dd:54:
                    b8:e3:e3:96:3b:14:2d:a4:de:02:f4:4f:1e:03:22:
                    21:78:4f:30:7f:56:c4:78:21:fa:f2:65:61:76:11:
                    50:32:2c:53:12:14:67:1b:72:f1:d0:37:e6:d4:7a:
                    7a:60:71:a0:3f:0f:47:16:5b:89:5c:d4:ad:5a:dc:
                    41:5c:bc:27:63:41:f6:45:be:14:3c:e8:e5:6a:75:
                    0b:58:6b:e1:f2:d6:8f:8c:63:4a:42:f3:86:30:45:
                    9c:16:32:31:67:9c:4f:77:6b:86:7f:67:81:9b:93:
                    b5:2c:28:e5:16:be:4d:57:26:73:4d:1e:d0:4a:0f:
                    fd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C6:B4:06:E3:44:CB:81:AE:61:6A:1A:53:E7:DF:F5:E5:33:91:F5
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/UMa0BuNEy4GuYWoaU-ff9eUzkfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.251.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:86:0c:d9:cd:42:08:07:7a:0f:4b:ee:8f:88:2a:05:22:91:
         27:3e:a6:12:c6:e5:d3:54:3d:a5:79:0f:9d:a5:0e:d4:0a:6f:
         55:6d:0f:b4:b1:8e:2f:d1:dd:04:2a:d4:5f:28:15:c3:a9:bb:
         ba:b8:30:88:2e:d3:08:64:db:86:81:be:a9:3e:4d:22:ee:a6:
         58:81:60:84:c4:da:2d:a0:93:b7:83:51:2d:4b:dd:4d:67:1b:
         28:c6:5e:90:b1:34:c6:17:98:c6:73:9d:be:5f:0a:4f:5f:a2:
         3c:73:62:41:b3:c5:89:ca:c5:f5:42:0f:e1:1c:79:2a:b4:1f:
         09:5a:8b:6a:17:04:32:d8:88:68:b6:5c:bf:d0:44:22:a3:80:
         03:7f:50:2c:4e:43:c5:b2:13:b2:3a:5f:e4:77:4f:3e:cb:c7:
         61:1a:d2:2d:22:b1:cb:a7:c7:9d:b9:c1:cb:35:1f:3f:3e:a6:
         78:ed:fb:bd:d6:c1:a8:96:2f:f9:92:21:71:a9:85:92:ef:58:
         7a:1c:7b:93:ab:a8:09:02:eb:95:f9:80:e1:07:b2:23:d8:82:
         f6:78:7b:e6:57:44:c6:91:b8:48:09:91:71:96:4b:22:45:16:
         fb:2a:50:8d:58:c7:9e:63:84:a5:3e:ea:35:7f:78:bf:57:cb:
         22:2f:e5:f1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOAVx6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NTAxODE1YzZmOThmM2EyYjYxODRhZmViZjE4ZWEzNDFiZTg4MmVhMB4XDTIyMDEw
MTExMDIyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTBjNmI0MDZlMzQ0
Y2I4MWFlNjE2YTFhNTNlN2RmZjVlNTMzOTFmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMNNVjIDcrb8PBgqroMOQo5worRfMPpVr0mYcMGdaTNo/SSa
7DEafblYSpP2ZTHY9avDOtW/LkLwRppigmXqptS1izEqMHyoSDpEo8vBWqEwhVte
aHLLcxtpvSvRLx1mbfgjxSe1sM6d2rpU491ypRifYGcw+GgT0e3Ea7mI7fvUhkOl
Yd1UuOPjljsULaTeAvRPHgMiIXhPMH9WxHgh+vJlYXYRUDIsUxIUZxty8dA35tR6
emBxoD8PRxZbiVzUrVrcQVy8J2NB9kW+FDzo5Wp1C1hr4fLWj4xjSkLzhjBFnBYy
MWecT3drhn9ngZuTtSwo5Ra+TVcmc00e0EoP/XUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRQxrQG40TLga5hahpT59/15TOR9TAfBgNVHSMEGDAWgBTlAYFcb5jzorYY
Sv6/GOo0G+iC6jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVRR0JYRy1ZODZLMkdFci12eGpxTkJ2b2d1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvNWIwMjIyLWVkNjQtNGY1NS1iNDViLTAwNTlmNzM3ZWYwNS8x
L1VNYTBCdU5FeTRHdVlXb2FVLWZmOWVVemtmVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
NWIwMjIyLWVkNjQtNGY1NS1iNDViLTAwNTlmNzM3ZWYwNS8xLzVRR0JYRy1ZODZL
MkdFci12eGpxTkJ2b2d1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFf7EzANBgkqhkiG9w0BAQsFAAOC
AQEAXoYM2c1CCAd6D0vuj4gqBSKRJz6mEsbl01Q9pXkPnaUO1ApvVW0PtLGOL9Hd
BCrUXygVw6m7urgwiC7TCGTbhoG+qT5NIu6mWIFghMTaLaCTt4NRLUvdTWcbKMZe
kLE0xheYxnOdvl8KT1+iPHNiQbPFicrF9UIP4Rx5KrQfCVqLahcEMtiIaLZcv9BE
IqOAA39QLE5DxbITsjpf5HdPPsvHYRrSLSKxy6fHnbnByzUfPz6meO37vdbBqJYv
+ZIhcamFku9Yehx7k6uoCQLrlfmA4QeyI9iC9nh75ldExpG4SAmRcZZLIkUW+ypQ
jVjHnmOEpT7qNX94v1fLIi/l8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:31 2024 by rpki-client on console-fra.rpki-client.org