Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uv_xyTQt3hISclY1XNYGNQl8ipI.roa
File:                     Uv_xyTQt3hISclY1XNYGNQl8ipI.roa (raw, json)
Hash identifier:          LT4Zzg3W9wxWQvLBux0c8/o+IgtvkCizps7D6xKvP3M=
Subject key identifier:   52:FF:F1:C9:34:2D:DE:12:12:72:56:35:5C:D6:06:35:09:7C:8A:92
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       27D9267D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uv_xyTQt3hISclY1XNYGNQl8ipI.roa
Signing time:             Sat 01 Jan 2022 16:08:58 +0000
ROA not before:           Sat 01 Jan 2022 16:08:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58047
IP address blocks:        93.171.168.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668542589 (0x27d9267d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:08:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=52fff1c9342dde12127256355cd60635097c8a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8c:95:bc:c4:9c:59:97:8d:85:31:ab:53:17:
                    df:a4:cb:b3:29:54:df:3e:60:4b:d9:51:83:e3:13:
                    ed:77:67:44:ba:e9:61:f1:d2:78:1f:da:2d:90:52:
                    4a:ad:e1:8d:47:bd:0f:0a:b0:a3:8b:37:19:7a:12:
                    ce:06:87:f5:41:a4:75:a0:71:07:69:c9:af:2e:cd:
                    2f:29:4e:54:e3:9d:a2:52:0e:1b:f0:df:77:ae:2a:
                    b2:a2:5d:80:a7:44:a0:c6:f6:c2:4e:e2:cb:ee:08:
                    da:80:72:a7:6f:4b:49:4b:ba:0e:6b:f4:42:5a:69:
                    f1:1f:72:4b:1f:2d:a5:74:ee:d5:fa:bc:48:90:70:
                    c5:7c:d8:6e:52:d5:15:f8:24:15:34:33:b9:40:7e:
                    33:2b:2b:dc:5c:d3:ee:be:0a:ac:08:83:25:97:77:
                    db:b6:77:a8:72:9c:17:3d:57:14:72:38:50:78:0b:
                    94:a6:44:7c:d3:42:59:c8:36:d8:61:32:fd:07:48:
                    81:b6:12:c8:da:5c:8f:fb:a1:81:53:09:d1:81:59:
                    45:0d:92:d9:68:0a:ab:0d:7e:02:e4:06:a5:27:0c:
                    5b:76:3c:b6:d5:d0:7a:56:31:20:d3:64:b8:84:ea:
                    31:66:0b:0c:82:fa:45:aa:67:b7:32:4a:5f:cb:33:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FF:F1:C9:34:2D:DE:12:12:72:56:35:5C:D6:06:35:09:7C:8A:92
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uv_xyTQt3hISclY1XNYGNQl8ipI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:7d:0f:0b:9a:88:0b:65:ae:50:83:93:93:94:0b:04:10:
         4d:02:40:73:ee:d7:96:ca:c0:9e:a1:4e:7a:60:3a:07:07:36:
         08:b5:67:34:ce:71:fa:e7:51:ac:8e:b6:78:5e:2e:4f:e4:38:
         f2:3f:32:76:5a:6d:a7:f7:20:9f:3f:61:ac:38:8e:17:f7:47:
         3a:1c:22:e2:03:25:4e:95:06:d3:18:4e:04:3a:27:45:e0:73:
         a4:0c:71:35:20:61:12:f2:c0:3c:b1:b4:61:8a:b7:9a:06:8c:
         ec:51:3f:74:2e:37:04:e8:d7:47:c2:1d:f9:59:e5:19:81:00:
         dc:43:b7:c2:3f:52:66:23:22:1a:d9:b4:63:be:de:84:3f:48:
         77:81:2e:68:11:f8:3f:78:e4:30:08:0f:4c:55:55:ff:00:f4:
         d6:e3:8f:6c:e3:d8:39:47:6b:88:40:93:f6:bd:f7:c6:07:19:
         46:ae:2b:8f:e1:10:82:70:ea:f5:bd:f6:a2:94:6d:52:39:87:
         20:7b:77:41:f3:95:bf:04:ea:0d:24:00:34:f7:5f:91:8a:71:
         e5:af:9a:60:b2:08:11:62:18:dd:f0:c9:e6:05:f2:cd:5c:98:
         6f:2b:a9:64:a8:20:41:03:64:a6:f2:49:bb:70:17:b1:b1:5f:
         5c:1b:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:50 2024 by rpki-client on console-ams.rpki-client.org