Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/UAiJ4VxWNQeh3C9_oFJX3UQhEa4.roa
File:                     UAiJ4VxWNQeh3C9_oFJX3UQhEa4.roa (raw, json)
Hash identifier:          jQwcMcP1fPlJ+dFo2QGe3SOUhSMtJKf2kWguLnesOmg=
Subject key identifier:   50:08:89:E1:5C:56:35:07:A1:DC:2F:7F:A0:52:57:DD:44:21:11:AE
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       0390A35D
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/UAiJ4VxWNQeh3C9_oFJX3UQhEa4.roa
Signing time:             Sat 01 Jan 2022 06:06:45 +0000
ROA not before:           Sat 01 Jan 2022 06:06:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60218
IP address blocks:        185.32.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59810653 (0x390a35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Jan  1 06:06:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=500889e15c563507a1dc2f7fa05257dd442111ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d6:1f:7f:be:64:2a:de:62:37:a2:9c:78:68:
                    36:7b:fa:27:83:a3:90:07:b8:f7:51:6f:15:f7:5d:
                    de:3d:da:9e:a3:e5:cd:93:bb:15:25:6d:0f:8d:07:
                    c4:48:e5:5e:d7:89:c9:bb:8e:cb:1b:2d:99:de:42:
                    88:24:a3:fd:bf:82:96:8a:84:92:a7:47:bb:fd:43:
                    7c:6a:35:c5:49:35:f4:40:8a:e7:1f:f0:2a:14:fb:
                    55:14:2a:08:36:b1:d8:9d:de:ba:3b:3b:d3:35:e7:
                    39:90:b1:96:20:db:0f:1f:60:c9:7b:ae:51:89:b3:
                    b1:ac:00:4e:91:d5:01:41:d8:9b:41:8e:4b:35:4d:
                    71:73:ff:ae:8c:7c:e8:a1:e1:b9:6b:7c:e6:ab:09:
                    01:85:fe:85:52:3d:85:5b:ee:f2:29:af:d3:a7:bc:
                    d9:95:32:58:c3:5a:a2:42:d2:13:41:d1:d9:02:56:
                    08:74:0d:e1:ab:4e:53:74:6c:bf:70:22:fa:ff:82:
                    15:dc:2a:01:95:15:e9:17:02:94:0a:f5:f8:12:0f:
                    6f:03:a5:d9:ab:7f:8b:0d:e9:fc:86:dc:f3:0d:03:
                    1b:d9:ce:e5:70:fa:29:49:69:dd:a6:db:a8:ed:4f:
                    66:67:09:34:d4:55:5e:37:fb:97:df:18:da:b7:8a:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:08:89:E1:5C:56:35:07:A1:DC:2F:7F:A0:52:57:DD:44:21:11:AE
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/UAiJ4VxWNQeh3C9_oFJX3UQhEa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.32.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a5:83:3e:50:76:65:15:db:c1:e4:4f:5c:82:87:ce:07:c2:
         20:4f:cb:cb:03:02:74:b7:4e:a8:e2:33:70:bd:ea:e0:cb:0f:
         28:5c:26:f2:5b:a4:cc:4f:f1:9f:31:c0:39:31:77:71:45:5b:
         cf:ab:c6:4b:19:d4:3f:90:4e:18:99:c3:52:25:0f:3c:3e:c0:
         ff:0e:6c:78:11:22:82:85:cd:89:d2:d7:d6:b0:6f:52:6e:ec:
         bf:ff:b6:08:0e:ef:f5:7b:cc:3f:f9:18:12:73:8b:df:29:3e:
         7a:0d:ea:82:16:dc:b9:10:46:2b:1c:7f:bb:c7:7c:48:60:f8:
         cc:31:84:f6:e5:9b:38:8a:bc:c9:af:0a:a6:4c:fb:ed:ac:b0:
         b2:d8:18:c1:f9:ca:53:b3:1e:33:af:3c:3f:d0:77:a7:27:0b:
         33:d2:98:58:b8:0d:a4:d2:15:a4:dd:4e:38:2f:6e:93:c5:0a:
         a8:1e:34:ed:95:0e:b1:bb:a8:49:2f:3e:bd:f0:9b:ae:3e:77:
         2f:21:92:53:bd:14:35:66:e8:93:20:37:2d:9b:d2:a0:b6:26:
         6c:b5:6d:e7:aa:70:95:10:09:cb:43:90:62:86:28:94:67:51:
         dd:06:33:db:fa:90:b0:75:65:92:6c:a6:ba:a5:67:99:a5:76:
         8b:28:8f:60
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA5CjXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZjkzZDNiYTE5N2Y1Y2UzMDk4YmZhNzcwMGI0Mzg1NGVhYTgwZTllMB4XDTIyMDEw
MTA2MDY0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTAwODg5ZTE1YzU2
MzUwN2ExZGMyZjdmYTA1MjU3ZGQ0NDIxMTFhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN7WH3++ZCreYjeinHhoNnv6J4OjkAe491FvFfdd3j3anqPl
zZO7FSVtD40HxEjlXteJybuOyxstmd5CiCSj/b+CloqEkqdHu/1DfGo1xUk19ECK
5x/wKhT7VRQqCDax2J3eujs70zXnOZCxliDbDx9gyXuuUYmzsawATpHVAUHYm0GO
SzVNcXP/rox86KHhuWt85qsJAYX+hVI9hVvu8imv06e82ZUyWMNaokLSE0HR2QJW
CHQN4atOU3Rsv3Ai+v+CFdwqAZUV6RcClAr1+BIPbwOl2at/iw3p/Ibc8w0DG9nO
5XD6KUlp3abbqO1PZmcJNNRVXjf7l98Y2reKs1ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRQCInhXFY1B6HcL3+gUlfdRCERrjAfBgNVHSMEGDAWgBQvk9O6GX9c4wmL
+ncAtDhU6qgOnjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0w1UFR1aGxfWE9NSmlfcDNBTFE0Vk9xb0RwNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvN2E4N2EwLTgwMTQtNDYwNS05ZmI1LTllNzFkYzI0YTY4My8x
L1VBaUo0VnhXTlFlaDNDOV9vRkpYM1VRaEVhNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
N2E4N2EwLTgwMTQtNDYwNS05ZmI1LTllNzFkYzI0YTY4My8xL0w1UFR1aGxfWE9N
SmlfcDNBTFE0Vk9xb0RwNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkgQDANBgkqhkiG9w0BAQsFAAOC
AQEAYKWDPlB2ZRXbweRPXIKHzgfCIE/LywMCdLdOqOIzcL3q4MsPKFwm8lukzE/x
nzHAOTF3cUVbz6vGSxnUP5BOGJnDUiUPPD7A/w5seBEigoXNidLX1rBvUm7sv/+2
CA7v9XvMP/kYEnOL3yk+eg3qghbcuRBGKxx/u8d8SGD4zDGE9uWbOIq8ya8Kpkz7
7aywstgYwfnKU7MeM688P9B3pycLM9KYWLgNpNIVpN1OOC9uk8UKqB407ZUOsbuo
SS8+vfCbrj53LyGSU70UNWbokyA3LZvSoLYmbLVt56pwlRAJy0OQYoYolGdR3QYz
2/qQsHVlkmymuqVnmaV2iyiPYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org