Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uV6Ae-RaqojEAPbnt7lN5ODhcL0.roa
File:                     uV6Ae-RaqojEAPbnt7lN5ODhcL0.roa (raw, json)
Hash identifier:          TNUlP2SSMF783jrjfwOmkABL2FaOWBGFyOMLimkvQmU=
Subject key identifier:   B9:5E:80:7B:E4:5A:AA:88:C4:00:F6:E7:B7:B9:4D:E4:E0:E1:70:BD
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       07B32DA2
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uV6Ae-RaqojEAPbnt7lN5ODhcL0.roa
Signing time:             Sat 01 Jan 2022 05:57:04 +0000
ROA not before:           Sat 01 Jan 2022 05:57:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203879
IP address blocks:        81.18.48.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129183138 (0x7b32da2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  1 05:57:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b95e807be45aaa88c400f6e7b7b94de4e0e170bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:13:77:e0:30:4f:0b:47:2a:a9:9c:27:09:
                    0f:8a:c6:c3:cf:62:a0:aa:73:d0:f0:dc:d6:c2:9f:
                    6a:53:8a:52:86:0a:2f:eb:0c:b2:54:92:02:19:48:
                    bd:02:3c:3d:a8:79:b4:4e:f7:e9:98:fd:e3:10:85:
                    bd:e5:93:c1:74:2c:12:d3:73:51:a9:51:90:9f:1c:
                    fb:7c:b3:77:5c:cc:ab:9d:d3:2d:44:9d:9a:bb:79:
                    73:e1:54:86:dc:52:2f:cc:7d:33:0d:e4:9f:68:4d:
                    33:dd:21:4b:9c:9d:dc:33:ff:df:58:c6:3a:69:4b:
                    af:90:48:e3:f7:b7:06:d1:03:04:ad:16:7e:cf:16:
                    26:ac:b2:e7:a4:d3:c9:ef:37:70:ea:ea:d4:0c:31:
                    65:fd:5e:cf:78:7c:51:ce:42:3d:16:0e:95:79:1f:
                    21:9b:64:39:c5:03:53:da:e4:9f:96:f7:e8:01:55:
                    82:55:05:f6:89:b8:3a:1f:9f:6c:c0:0c:ea:4e:20:
                    8c:15:32:af:6f:10:57:fe:89:0b:24:8d:4d:cf:95:
                    24:a4:9b:29:ec:e2:0d:ee:71:35:ae:06:30:74:2e:
                    6f:6f:7f:2c:18:9d:fa:e9:5e:19:8b:8f:e0:67:bf:
                    ee:85:55:1a:19:8f:5b:bc:ad:b7:a1:71:ec:b3:59:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5E:80:7B:E4:5A:AA:88:C4:00:F6:E7:B7:B9:4D:E4:E0:E1:70:BD
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uV6Ae-RaqojEAPbnt7lN5ODhcL0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.18.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:85:df:42:98:4a:fc:0e:9e:3a:14:84:5b:5f:bb:9f:a9:ae:
         58:c9:93:32:83:b1:d0:14:24:cf:98:52:74:b0:3c:e9:57:ee:
         15:0b:1c:a8:ef:87:f7:74:f7:e6:6b:0d:ec:d0:84:3a:0b:04:
         14:23:a7:96:33:b9:39:6b:0f:8a:2c:a0:d6:41:fa:48:48:3b:
         18:8a:5b:8e:dc:e9:fe:e1:e7:44:95:e3:51:68:36:70:2a:1e:
         4f:4b:40:9c:44:7f:85:24:1d:0b:b6:a8:37:a5:ca:54:a0:3b:
         18:d8:7d:a9:29:dc:99:d4:b0:65:ce:44:42:cc:65:23:f8:e6:
         b9:47:2b:cb:f4:d7:c9:0a:6e:fa:f1:0b:fa:75:fa:cf:4e:ac:
         b8:fb:86:96:e3:60:0f:0e:e5:58:84:7b:43:41:c4:0c:14:2c:
         95:70:6b:3c:0d:99:b4:bf:32:40:a5:06:33:8b:ad:ae:c1:03:
         26:43:5a:18:37:65:0c:40:88:6d:72:d4:59:65:8d:dc:1e:20:
         e6:fb:57:41:2f:22:b4:89:dd:92:ee:d2:76:32:e1:aa:71:0e:
         07:da:9c:fe:4d:82:bf:80:85:ae:87:e5:d2:72:f9:31:db:24:
         9f:e1:0b:41:ae:0b:08:44:7e:cd:8d:f0:10:36:f3:ab:41:2f:
         c2:7d:4f:ba
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB7MtojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Zjg0ZTQ3MzhhNzBlYTM5YzA4Y2VmMjEwNDMyYWUzOTllYzdlOTE1MB4XDTIyMDEw
MTA1NTcwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjk1ZTgwN2JlNDVh
YWE4OGM0MDBmNmU3YjdiOTRkZTRlMGUxNzBiZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHHE3fgME8LRyqpnCcJD4rGw89ioKpz0PDc1sKfalOKUoYK
L+sMslSSAhlIvQI8Pah5tE736Zj94xCFveWTwXQsEtNzUalRkJ8c+3yzd1zMq53T
LUSdmrt5c+FUhtxSL8x9Mw3kn2hNM90hS5yd3DP/31jGOmlLr5BI4/e3BtEDBK0W
fs8WJqyy56TTye83cOrq1AwxZf1ez3h8Uc5CPRYOlXkfIZtkOcUDU9rkn5b36AFV
glUF9om4Oh+fbMAM6k4gjBUyr28QV/6JCySNTc+VJKSbKeziDe5xNa4GMHQub29/
LBid+uleGYuP4Ge/7oVVGhmPW7ytt6Fx7LNZO+MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS5XoB75FqqiMQA9ue3uU3k4OFwvTAfBgNVHSMEGDAWgBRvhORzinDqOcCM
7yEEMq45nsfpFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8x
L3VWNkFlLVJhcW9qRUFQYm50N2xONU9EaGNMMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8xL2I0VGtjNHB3Nmpu
QWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFESMDANBgkqhkiG9w0BAQsFAAOC
AQEAKYXfQphK/A6eOhSEW1+7n6muWMmTMoOx0BQkz5hSdLA86VfuFQscqO+H93T3
5msN7NCEOgsEFCOnljO5OWsPiiyg1kH6SEg7GIpbjtzp/uHnRJXjUWg2cCoeT0tA
nER/hSQdC7aoN6XKVKA7GNh9qSncmdSwZc5EQsxlI/jmuUcry/TXyQpu+vEL+nX6
z06suPuGluNgDw7lWIR7Q0HEDBQslXBrPA2ZtL8yQKUGM4utrsEDJkNaGDdlDECI
bXLUWWWN3B4g5vtXQS8itIndku7SdjLhqnEOB9qc/k2Cv4CFrofl0nL5Mdskn+EL
Qa4LCER+zY3wEDbzq0Evwn1Pug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org