Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/ueLGHOw5d83mrstowjngr2BnTjw.roa
File:                     ueLGHOw5d83mrstowjngr2BnTjw.roa (raw, json)
Hash identifier:          eAWBKfYfW6azgKyCFU/msj4gTexZMV5RIwk9Zxegk+k=
Subject key identifier:   B9:E2:C6:1C:EC:39:77:CD:E6:AE:CB:68:C2:39:E0:AF:60:67:4E:3C
Certificate issuer:       /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial:       0181F2C81D6549A6D65686346128FBD869F0
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/ueLGHOw5d83mrstowjngr2BnTjw.roa
Signing time:             Tue 12 Jul 2022 14:20:09 +0000
ROA not before:           Tue 12 Jul 2022 14:20:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51011
IP address blocks:        2a03:5a00:2e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f2:c8:1d:65:49:a6:d6:56:86:34:61:28:fb:d8:69:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
        Validity
            Not Before: Jul 12 14:20:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9e2c61cec3977cde6aecb68c239e0af60674e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:74:0c:57:dc:31:37:96:0c:e4:ac:74:11:
                    d1:dc:0e:41:b2:c8:33:22:b2:57:4c:88:ac:40:ba:
                    f7:e4:40:85:22:19:97:a1:29:80:9f:33:50:08:bd:
                    e1:59:62:b4:f5:43:e7:61:6e:61:bc:0b:f9:c7:7e:
                    0e:15:38:78:2d:0b:72:eb:bf:62:d2:ab:6a:30:eb:
                    87:34:b6:f8:9c:8a:24:4c:bb:d7:db:9e:7f:3c:7b:
                    cf:b7:11:dd:6d:79:59:01:75:63:03:45:57:c4:a9:
                    a3:d4:b1:3b:75:22:25:8a:4e:c2:fa:66:33:54:1a:
                    48:86:d4:a2:6b:09:d8:e2:73:e5:c1:30:c9:ed:c5:
                    ba:70:b8:2e:28:9e:9c:22:b6:60:a6:23:6f:31:26:
                    36:87:b6:0d:8d:40:d2:81:c6:7a:f3:f1:82:d7:97:
                    3f:3c:29:b6:cd:0b:ce:09:8d:ac:8f:6d:32:9e:f5:
                    52:49:f9:68:a3:f8:2a:47:d3:ea:af:b4:13:cd:40:
                    61:9e:c0:53:02:18:5c:d0:3b:cb:6b:c2:7e:e2:e2:
                    34:e6:d1:ae:93:e1:eb:28:b2:04:e2:73:9e:dd:2e:
                    dc:5a:1a:07:bc:8d:f3:dc:4e:d4:1e:43:00:2a:6d:
                    8c:f8:39:a3:b4:11:5b:59:98:03:ab:6c:66:46:89:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E2:C6:1C:EC:39:77:CD:E6:AE:CB:68:C2:39:E0:AF:60:67:4E:3C
            X509v3 Authority Key Identifier:
                keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/ueLGHOw5d83mrstowjngr2BnTjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5a00:2e::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:94:7f:8f:2c:c2:f4:d8:17:9d:17:ae:c2:4a:65:ad:48:09:
         9a:d9:21:22:e4:8a:90:e4:ca:75:61:cf:14:00:66:1f:8c:10:
         a2:2c:91:1f:33:ef:67:60:3c:f1:e3:7e:b6:f7:47:4b:15:1e:
         b0:d1:67:bb:95:9b:f9:b1:9b:29:f2:86:0e:9e:dd:57:e5:9a:
         c4:21:91:02:d2:39:37:96:1f:ab:a6:c5:66:8d:d4:69:b7:38:
         ca:74:b2:72:80:33:09:16:20:2e:5d:71:a4:29:7d:e0:36:64:
         23:7c:38:54:5b:a5:da:cb:02:0a:26:fa:9d:64:20:c1:a8:93:
         de:a8:96:b4:31:ec:a4:fc:ab:86:d2:2e:71:f3:a8:95:d0:47:
         52:0f:36:61:04:eb:6a:bb:c9:86:9d:28:23:0a:ad:71:cc:4d:
         09:0b:18:67:4c:61:07:68:d1:8d:c9:18:3e:73:d5:ee:4c:6d:
         d6:cb:b7:89:aa:44:23:53:4d:67:62:a2:bc:13:11:2a:70:39:
         d9:25:40:f6:f8:68:68:97:53:52:b1:f7:57:a7:e7:3d:74:a2:
         60:dc:0e:92:22:ea:30:f4:5a:fa:6e:38:9a:dd:29:44:50:ab:
         7c:89:ec:0d:52:46:79:40:7c:84:eb:af:50:77:54:a2:f0:63:
         ac:43:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:47 2024 by rpki-client on console-fra.rpki-client.org