Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uWD32mVaS-ONkrtva86KjQh8MAw.roa
File:                     uWD32mVaS-ONkrtva86KjQh8MAw.roa (raw, json)
Hash identifier:          yJlotcabu/7+j0PCXeYPRbqaYkcwdNttbckJ3k8YuAI=
Subject key identifier:   B9:60:F7:DA:65:5A:4B:E3:8D:92:BB:6F:6B:CE:8A:8D:08:7C:30:0C
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0183EA2ABA15660297409C2A07F9B6229C34
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uWD32mVaS-ONkrtva86KjQh8MAw.roa
Signing time:             Tue 18 Oct 2022 08:16:52 +0000
ROA not before:           Tue 18 Oct 2022 08:16:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        81.5.191.0/24 maxlen: 24
                          81.168.123.0/24 maxlen: 24
                          81.168.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ea:2a:ba:15:66:02:97:40:9c:2a:07:f9:b6:22:9c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Oct 18 08:16:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b960f7da655a4be38d92bb6f6bce8a8d087c300c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:5e:68:c7:27:87:16:88:85:dd:29:58:6d:
                    4e:f6:f9:0e:c3:b1:f3:5f:2f:07:6b:ae:50:f9:73:
                    2e:23:73:7d:c4:7a:4d:e1:89:7f:c6:66:19:2a:21:
                    89:43:78:18:f3:17:52:da:29:b2:6a:ad:50:f0:46:
                    77:63:fb:98:74:de:94:72:6d:ac:5b:b2:f0:16:22:
                    6a:26:03:9c:8e:ed:16:a4:8c:72:f0:52:8a:51:ee:
                    52:ba:68:4a:9f:99:bb:b4:e0:81:40:14:bf:16:bb:
                    5e:a0:8f:51:d7:88:0e:2e:92:6f:70:42:c1:f6:ff:
                    96:74:f2:dc:ab:44:a0:09:80:cd:67:03:62:34:c4:
                    dd:99:cb:92:de:9d:6c:44:10:85:69:83:fd:06:48:
                    ab:48:f5:de:3c:96:e6:79:d6:ca:32:09:aa:4d:a7:
                    3d:66:df:e6:97:a7:d8:44:58:59:08:10:a1:3d:a8:
                    8f:12:c4:9d:29:4e:11:ba:d0:42:4e:1e:f9:b2:08:
                    ce:f9:9e:88:d8:3b:76:66:85:c4:f4:10:91:e2:69:
                    b5:04:42:e0:ba:72:9a:17:26:fb:5d:2f:e5:fa:9c:
                    85:5d:b3:68:be:24:5a:61:d3:cd:b5:2b:34:0b:8e:
                    be:ee:88:c8:72:d1:f3:49:9f:53:1b:13:20:c2:b5:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:60:F7:DA:65:5A:4B:E3:8D:92:BB:6F:6B:CE:8A:8D:08:7C:30:0C
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uWD32mVaS-ONkrtva86KjQh8MAw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.5.191.0/24
                  81.168.119.0/24
                  81.168.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:3b:2a:ce:25:29:0f:ed:26:d2:74:bf:67:8c:81:91:45:30:
         34:8e:32:01:9f:93:7f:c8:37:21:ee:f4:d4:9f:ed:60:df:d0:
         a2:3b:59:93:07:60:3e:be:a9:b1:b4:f2:f0:94:54:d7:09:04:
         b9:58:d9:f0:8e:7d:65:e9:57:05:c6:f6:4c:49:78:74:87:13:
         d6:8d:75:c3:bb:1e:42:19:36:b4:1a:69:50:6e:cd:47:44:a1:
         4f:6a:c0:9a:07:e7:9d:e0:7c:22:eb:43:13:98:8d:29:e1:48:
         66:71:3b:5f:3e:28:13:49:f0:20:69:09:ae:7d:0e:f6:8f:8e:
         25:97:52:5b:2b:20:12:24:b6:35:5b:82:4b:8f:1b:7a:fa:4f:
         dc:5e:44:92:34:f7:8a:6d:af:b4:bf:07:69:8b:9f:c8:c6:a6:
         f7:d4:3a:7c:0c:6d:74:6d:e8:ac:0f:1a:0d:75:85:34:a6:bd:
         47:ac:4e:7f:4a:a2:23:f8:41:4a:75:be:a3:24:30:f0:8a:cd:
         39:31:02:3a:a7:f9:32:79:e0:0f:1f:be:cc:ed:04:63:f5:fb:
         17:fe:52:63:b3:1e:a0:d1:aa:a3:07:22:b4:f0:dd:d7:4b:57:
         6a:03:82:cd:68:fd:4e:eb:80:77:17:40:4b:a6:81:26:9a:5d:
         c3:83:60:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org