Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/uISjhh_EVIZT_pb4Y4yRmGzLpYo.roa
File:                     uISjhh_EVIZT_pb4Y4yRmGzLpYo.roa (raw, json)
Hash identifier:          LUxVEUKQmny7JM+0oUHCLZjA/yLVe2x9+Q7AwIR+Kp4=
Subject key identifier:   B8:84:A3:86:1F:C4:54:86:53:FE:96:F8:63:8C:91:98:6C:CB:A5:8A
Certificate issuer:       /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial:       EE135E
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/uISjhh_EVIZT_pb4Y4yRmGzLpYo.roa
Signing time:             Sat 01 Jan 2022 10:56:19 +0000
ROA not before:           Sat 01 Jan 2022 10:56:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24971
IP address blocks:        91.226.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15602526 (0xee135e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
        Validity
            Not Before: Jan  1 10:56:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b884a3861fc4548653fe96f8638c91986ccba58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:94:5e:18:fe:f9:ed:73:37:3c:af:d6:27:
                    d8:c4:a6:48:cd:08:68:d8:a1:36:65:a5:cc:9b:5d:
                    44:ab:d3:d9:f6:7c:6e:c7:39:02:4b:73:2c:d0:ae:
                    91:7f:5e:8f:72:49:43:c1:ca:14:7e:d1:37:90:38:
                    96:39:5d:0c:2b:c9:c1:e4:22:1f:4c:7e:ba:89:0e:
                    3d:18:a7:a0:38:b5:50:a0:ca:a6:55:1c:aa:69:09:
                    65:9f:71:88:46:c8:50:97:2e:6b:78:e4:55:73:7a:
                    0f:f4:63:9b:79:80:ec:28:ff:29:0a:d0:1c:52:2b:
                    a5:5a:18:ef:81:f9:97:2a:89:57:c8:b4:5f:3e:b1:
                    37:14:ea:52:07:d2:55:19:d3:03:4b:ef:da:af:ec:
                    e2:7d:c5:51:91:8a:10:4d:b7:92:c9:b8:ef:1f:37:
                    a0:ed:d0:0a:84:41:ad:cb:8e:20:35:64:a7:ce:d4:
                    41:4d:b1:b3:c4:77:f9:d9:ea:c1:6b:2e:8f:80:84:
                    45:32:05:19:46:d3:fe:bb:92:c9:42:d2:e0:26:b2:
                    6c:fc:6f:75:0a:82:25:0e:3c:6d:06:34:17:f7:2c:
                    0d:ea:e7:87:77:32:4d:70:e9:b5:92:47:57:a6:6e:
                    5f:5a:76:7b:51:56:ff:ff:0d:e4:13:53:04:2e:18:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:A3:86:1F:C4:54:86:53:FE:96:F8:63:8C:91:98:6C:CB:A5:8A
            X509v3 Authority Key Identifier:
                keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/uISjhh_EVIZT_pb4Y4yRmGzLpYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:a9:ba:2b:af:85:51:7f:86:6b:56:41:af:87:d5:c9:6d:fc:
         bc:62:df:06:73:42:9b:90:99:2a:80:a3:22:a4:a3:51:02:01:
         7f:b7:80:b2:11:ab:b0:41:60:17:cb:aa:6f:22:35:ee:51:d8:
         79:63:83:fd:9e:d2:8f:5d:91:32:6d:c1:52:43:19:56:8c:8c:
         c7:ae:3d:e1:52:e6:07:9e:17:43:ed:98:3a:9d:82:ef:06:44:
         ac:1b:61:24:1e:34:68:c7:da:89:6b:24:f5:81:49:f5:8b:be:
         08:73:bc:7b:e5:ea:ff:f8:d9:0b:8d:2c:f4:5c:60:8a:5a:e3:
         a5:64:39:a9:ed:e9:71:bd:80:69:73:c7:8c:2d:7f:2d:6d:e0:
         ab:5a:01:fd:03:b8:02:b4:0c:8b:46:b7:51:c6:47:b6:12:57:
         4c:c0:19:10:d2:a9:77:dc:ef:d1:93:5e:02:dd:60:20:c8:3d:
         b7:38:76:76:49:6d:01:7e:8b:9c:f2:d4:cd:8d:3f:44:b6:c7:
         9a:2a:53:e0:ef:a2:55:32:8f:99:c9:ae:0c:02:e0:94:7f:18:
         b5:cf:c9:81:7d:90:22:f2:f2:57:2f:de:79:ff:68:0a:8b:44:
         49:ca:70:31:8d:e4:02:c8:2a:2d:18:8c:85:c8:49:37:36:12:
         ff:c9:c1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:12 2024 by rpki-client on console-fra.rpki-client.org