Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uw-NE-Nl_CmWlCbW9O8MnKyTUnU.roa
File:                     Uw-NE-Nl_CmWlCbW9O8MnKyTUnU.roa (raw, json)
Hash identifier:          52dyXnDi2csMpH2tE27ArdKFgSoFt1Sp8j4CMU4VoMc=
Subject key identifier:   53:0F:8D:13:E3:65:FC:29:96:94:26:D6:F4:EF:0C:9C:AC:93:52:75
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       28503FEB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uw-NE-Nl_CmWlCbW9O8MnKyTUnU.roa
Signing time:             Sat 01 Jan 2022 16:10:12 +0000
ROA not before:           Sat 01 Jan 2022 16:10:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209668
IP address blocks:        92.253.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676347883 (0x28503feb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:10:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=530f8d13e365fc29969426d6f4ef0c9cac935275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:1f:dc:91:65:d4:45:4b:bc:c3:80:dc:0b:
                    8f:d1:81:44:e9:c3:35:83:95:54:69:fb:02:c6:4b:
                    db:9c:85:cc:d5:74:05:07:63:72:97:d5:27:ea:f4:
                    ea:7c:b6:5a:dd:65:80:d4:04:51:06:19:a9:8d:b4:
                    ec:37:97:7b:75:60:b9:4b:c1:6b:2b:b9:1c:c7:69:
                    76:52:35:bf:c3:87:53:bb:ef:bb:75:4e:1c:97:63:
                    37:87:ae:e3:e0:25:96:18:0d:88:6b:57:df:17:7e:
                    cc:ec:6c:d3:d8:83:98:ad:ed:c5:5a:78:cb:f1:13:
                    e3:23:17:08:67:0a:b8:1f:39:54:73:de:82:89:b9:
                    3e:1f:e6:9f:8b:43:13:8f:b4:b3:74:9f:f0:fc:df:
                    14:6b:3d:3e:a6:ac:37:bb:02:88:7b:42:ea:38:60:
                    b2:ee:1f:fa:38:7a:9a:73:26:55:3d:52:f3:58:0a:
                    6a:5c:ab:ab:38:b4:bf:69:e5:c1:b8:ff:3f:3a:d6:
                    2b:c4:ce:86:90:68:08:4f:50:4a:86:a8:ab:2e:20:
                    60:2d:a6:16:18:d2:e5:32:58:dc:33:2d:c9:3a:f5:
                    5a:e3:20:12:05:0f:90:ea:40:75:4b:3d:9e:a2:63:
                    b1:0c:78:db:7d:5c:3a:c2:a2:50:7b:b6:f6:2b:42:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:8D:13:E3:65:FC:29:96:94:26:D6:F4:EF:0C:9C:AC:93:52:75
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uw-NE-Nl_CmWlCbW9O8MnKyTUnU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.253.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:12:cb:d3:0d:2f:9a:cc:21:a8:65:6c:a2:e6:a9:e0:86:
         74:f6:21:c9:4a:33:3d:62:9e:47:54:80:06:07:40:4b:5b:58:
         f9:f4:86:3a:2b:98:ba:4b:ab:74:f9:a4:dd:aa:54:ff:dd:26:
         a3:db:75:13:c5:83:44:e2:d8:d9:e9:2a:f7:72:a4:32:ac:10:
         e2:7e:e6:cf:2a:f5:80:f5:ac:7f:7e:6e:e0:17:c5:3d:36:eb:
         4c:cf:ee:fb:d9:8b:cb:d6:87:2e:f8:c0:29:5e:4f:a4:ec:0e:
         27:7c:96:7a:60:e0:19:e9:16:15:a2:f5:4f:b6:a4:7b:94:68:
         8c:07:6d:c6:24:00:c7:05:b5:62:b2:70:50:0f:b8:5b:b3:16:
         9b:49:9a:69:72:7a:b6:44:88:33:b6:cb:c5:26:d5:5b:20:f6:
         ab:7c:e1:bf:61:77:a9:e8:46:ae:2d:5e:25:3d:7d:82:43:e5:
         62:7e:12:52:a7:fe:45:66:8d:7f:ed:98:34:ee:d4:cf:ca:3f:
         2f:45:9c:be:74:5a:ba:2b:b7:38:42:01:54:c8:40:44:12:19:
         59:8f:8f:39:c2:ca:44:9d:fe:55:39:83:89:5a:2d:2a:99:d1:
         05:53:cd:ad:dc:45:d7:81:45:f9:90:a5:27:e7:3d:13:92:5b:
         0f:50:a5:8b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKFA/6zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MTAxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTMwZjhkMTNlMzY1
ZmMyOTk2OTQyNmQ2ZjRlZjBjOWNhYzkzNTI3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALMZH9yRZdRFS7zDgNwLj9GBROnDNYOVVGn7AsZL25yFzNV0
BQdjcpfVJ+r06ny2Wt1lgNQEUQYZqY207DeXe3VguUvBayu5HMdpdlI1v8OHU7vv
u3VOHJdjN4eu4+AllhgNiGtX3xd+zOxs09iDmK3txVp4y/ET4yMXCGcKuB85VHPe
gom5Ph/mn4tDE4+0s3Sf8PzfFGs9PqasN7sCiHtC6jhgsu4f+jh6mnMmVT1S81gK
alyrqzi0v2nlwbj/PzrWK8TOhpBoCE9QSoaoqy4gYC2mFhjS5TJY3DMtyTr1WuMg
EgUPkOpAdUs9nqJjsQx4231cOsKiUHu29itC0S0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRTD40T42X8KZaUJtb07wycrJNSdTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L1V3LU5FLU5sX0NtV2xDYlc5TzhNbkt5VFVuVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFz96DANBgkqhkiG9w0BAQsFAAOC
AQEAAbwSy9MNL5rMIahlbKLmqeCGdPYhyUozPWKeR1SABgdAS1tY+fSGOiuYukur
dPmk3apU/90mo9t1E8WDROLY2ekq93KkMqwQ4n7mzyr1gPWsf35u4BfFPTbrTM/u
+9mLy9aHLvjAKV5PpOwOJ3yWemDgGekWFaL1T7ake5RojAdtxiQAxwW1YrJwUA+4
W7MWm0maaXJ6tkSIM7bLxSbVWyD2q3zhv2F3qehGri1eJT19gkPlYn4SUqf+RWaN
f+2YNO7Uz8o/L0WcvnRauiu3OEIBVMhARBIZWY+POcLKRJ3+VTmDiVotKpnRBVPN
rdxF14FF+ZClJ+c9E5JbD1Cliw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:50 2024 by rpki-client on console-ams.rpki-client.org