Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/UuwNSdzdEXD2qSOXGU9kX9nGmIg.roa
File:                     UuwNSdzdEXD2qSOXGU9kX9nGmIg.roa (raw, json)
Hash identifier:          3YizG+e3eNkM8dbYZsceopu4gGwJhWiCrIwiFbIqleo=
Subject key identifier:   52:EC:0D:49:DC:DD:11:70:F6:A9:23:97:19:4F:64:5F:D9:C6:98:88
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       06A7E0D9
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/UuwNSdzdEXD2qSOXGU9kX9nGmIg.roa
Signing time:             Tue 21 Jun 2022 20:48:44 +0000
ROA not before:           Tue 21 Jun 2022 20:48:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57391
IP address blocks:        95.81.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111665369 (0x6a7e0d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: Jun 21 20:48:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=52ec0d49dcdd1170f6a92397194f645fd9c69888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:93:00:c4:8e:cb:67:66:ef:ee:77:38:96:
                    56:80:e3:57:37:d3:37:30:e1:2d:94:1d:f2:98:e6:
                    69:7d:47:8f:51:65:95:ab:2a:cc:f8:20:bb:7e:3e:
                    9f:ab:08:85:8f:51:53:49:98:06:b8:a3:dd:a9:61:
                    47:61:56:e5:c4:1a:82:14:47:43:88:72:f2:41:88:
                    77:0f:d8:01:61:82:87:73:24:32:03:2a:6b:f7:8a:
                    64:f0:fc:18:07:7b:c6:35:9e:98:5b:47:74:c6:43:
                    a4:92:63:5a:45:ed:69:59:73:8d:92:02:56:47:29:
                    9d:db:4e:f2:11:50:f8:77:d4:b7:53:4f:3a:42:da:
                    15:bb:19:94:16:be:5d:b4:e1:9b:1c:ab:09:a7:de:
                    78:53:7d:6d:95:ee:e6:f2:46:d2:bb:59:f9:9d:3e:
                    bb:78:9d:37:01:a5:3e:b1:da:5f:ee:72:46:27:28:
                    57:c6:b6:31:48:a0:ec:da:f2:fe:c1:e5:7a:6d:1b:
                    34:54:94:25:a0:02:95:07:1a:27:48:96:4b:3b:7a:
                    ad:76:be:dd:10:7f:77:67:c9:07:02:e9:d8:8b:96:
                    8b:39:db:a2:02:40:54:6b:66:ed:cc:cf:f3:ca:1b:
                    0d:ae:6e:71:4f:84:28:2f:0c:13:12:48:2f:89:ce:
                    37:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EC:0D:49:DC:DD:11:70:F6:A9:23:97:19:4F:64:5F:D9:C6:98:88
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/UuwNSdzdEXD2qSOXGU9kX9nGmIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.81.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:52:9a:e9:91:13:01:7e:ab:62:bb:1c:d2:7f:eb:4a:0e:e7:
         d2:68:82:b0:ac:85:c2:2f:43:98:b3:12:de:3f:39:c0:1e:13:
         1f:19:7c:ee:00:b4:90:e1:4f:2a:78:7c:7b:26:56:0c:0e:62:
         a3:05:12:8e:dc:0c:97:9b:b1:8c:bf:c3:a1:f5:c7:67:7b:f9:
         99:d7:19:85:cb:8a:cc:89:6c:b7:fa:54:f7:c0:5b:18:27:fc:
         f4:70:42:da:ae:00:b1:80:b5:72:d8:17:26:33:35:41:94:6d:
         0c:e0:98:de:01:57:a8:fe:0d:22:4e:a0:bc:73:2f:f3:79:51:
         d3:f2:02:89:7a:51:3c:66:a7:8e:9a:72:08:54:c7:f9:ab:6f:
         68:05:cb:90:fc:4a:a5:3d:12:5c:13:d0:23:69:40:17:b8:36:
         50:81:51:7a:6a:3b:5e:af:22:58:7a:e4:aa:84:f9:c9:e9:14:
         c9:2f:c0:ef:63:9f:38:47:ea:af:d7:ce:24:63:29:be:d9:b3:
         43:62:51:bc:8f:f3:7d:28:dd:b6:d7:dd:8b:b1:cb:db:3b:84:
         50:46:b3:6d:ca:cd:3a:87:db:06:aa:1a:56:d8:15:f2:a9:f6:
         8c:9c:44:33:59:f5:14:cb:5c:7f:0d:c9:d5:06:11:d9:8d:c5:
         83:32:b1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org