Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UC-WVqmrGNDbP551dhfhskHlYDg.roa
File:                     UC-WVqmrGNDbP551dhfhskHlYDg.roa (raw, json)
Hash identifier:          HDgjtie9xmW8HEunlRLiacgLqdVBTUTBeGjK0P5PXdE=
Subject key identifier:   50:2F:96:56:A9:AB:18:D0:DB:3F:9E:75:76:17:E1:B2:41:E5:60:38
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       02C221C0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UC-WVqmrGNDbP551dhfhskHlYDg.roa
Signing time:             Thu 14 Apr 2022 09:22:28 +0000
ROA not before:           Thu 14 Apr 2022 09:22:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        2a0f:e6c2::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46277056 (0x2c221c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Apr 14 09:22:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=502f9656a9ab18d0db3f9e757617e1b241e56038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:7e:89:dc:fa:47:20:15:0f:3e:3e:4e:9d:
                    bd:1e:81:ed:78:f4:91:d4:0b:f9:fb:68:38:de:f0:
                    08:58:86:73:50:e8:ce:c8:74:53:38:65:61:31:1d:
                    41:63:10:8e:56:34:1a:c2:45:fc:19:83:27:6d:05:
                    c2:b6:36:81:16:01:0c:53:f5:41:3b:a1:4d:fe:c0:
                    e2:69:ec:e7:bd:89:8e:fe:04:1e:da:40:43:bd:bb:
                    27:e8:44:15:2e:07:da:3e:a9:78:4f:70:30:05:be:
                    49:63:01:12:b9:d9:c8:b6:3d:1b:42:ba:ed:fc:d6:
                    c0:2c:4e:32:ce:13:cc:6e:b3:3b:46:e1:99:0f:8e:
                    1d:fc:13:f5:40:e7:3a:2d:44:bc:d2:f1:fa:09:4d:
                    d8:ce:05:8d:50:34:3a:e0:14:87:b6:5f:17:c3:5f:
                    11:f9:f6:c1:ce:5b:e6:11:a4:5b:86:25:f8:2e:81:
                    c7:96:93:38:5f:8a:d2:4e:57:e7:68:89:62:bf:df:
                    a4:42:57:7e:b4:16:58:bd:6a:fe:65:b8:19:c3:a1:
                    d9:b4:0a:f6:47:74:46:40:b5:3e:37:2e:5c:66:9a:
                    ff:14:99:10:fb:e6:97:8b:c0:3e:49:90:f0:9d:21:
                    f4:0c:c6:42:b8:80:b4:49:d5:58:de:03:ea:cc:e2:
                    22:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2F:96:56:A9:AB:18:D0:DB:3F:9E:75:76:17:E1:B2:41:E5:60:38
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UC-WVqmrGNDbP551dhfhskHlYDg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:e6c2::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:3b:1f:6e:60:67:35:80:39:95:e0:0e:22:0f:5b:4c:5e:
         b3:50:5d:6f:cd:43:f5:bd:63:e9:8f:a2:bb:af:60:9e:21:2b:
         88:9b:65:f5:95:b2:2f:a1:84:81:08:7f:8f:3f:23:05:fb:66:
         1b:33:f8:eb:1e:88:33:e6:b3:d1:1d:0d:b5:dd:1b:e0:9d:ea:
         03:b3:a0:09:85:46:63:df:50:e2:96:40:c3:ee:09:82:f6:7d:
         27:38:94:fc:19:2d:9f:d6:7b:69:18:81:5c:db:ea:f7:18:c6:
         f6:f1:6f:a0:91:25:79:5f:59:6c:6f:4e:d5:a1:9b:04:41:98:
         30:b7:5b:44:8a:6e:b6:70:28:57:e0:33:07:26:1d:83:0a:88:
         6d:6a:2c:f3:49:f9:37:f3:1e:ff:19:c5:26:6b:ad:15:04:6a:
         da:65:45:ce:5d:be:88:76:94:ea:4d:05:54:e8:67:3d:ce:2a:
         ca:a3:da:1b:af:3b:f6:4d:d9:3c:6e:b6:f7:42:19:b5:63:b1:
         79:e8:48:65:20:9c:46:a9:1a:58:e5:c5:82:60:75:61:04:7c:
         43:ce:d4:fa:6d:e8:db:04:60:4c:cc:ac:40:1b:9e:48:c4:3f:
         e3:6f:2f:11:f3:73:fe:b2:ca:b9:ed:7c:a3:e2:41:ed:c4:d6:
         28:04:b5:4e
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAsIhwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDQx
NDA5MjIyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTAyZjk2NTZhOWFi
MThkMGRiM2Y5ZTc1NzYxN2UxYjI0MWU1NjAzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKqJfonc+kcgFQ8+Pk6dvR6B7Xj0kdQL+ftoON7wCFiGc1Do
zsh0UzhlYTEdQWMQjlY0GsJF/BmDJ20FwrY2gRYBDFP1QTuhTf7A4mns572Jjv4E
HtpAQ727J+hEFS4H2j6peE9wMAW+SWMBErnZyLY9G0K67fzWwCxOMs4TzG6zO0bh
mQ+OHfwT9UDnOi1EvNLx+glN2M4FjVA0OuAUh7ZfF8NfEfn2wc5b5hGkW4Yl+C6B
x5aTOF+K0k5X52iJYr/fpEJXfrQWWL1q/mW4GcOh2bQK9kd0RkC1PjcuXGaa/xSZ
EPvml4vAPkmQ8J0h9AzGQriAtEnVWN4D6sziIqcCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBRQL5ZWqasY0Ns/nnV2F+GyQeVgODAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
L1VDLVdWcW1yR05EYlA1NTFkaGZoc2tIbFlEZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoP5sIwDQYJKoZIhvcNAQELBQAD
ggEBAGGxOx9uYGc1gDmV4A4iD1tMXrNQXW/NQ/W9Y+mPoruvYJ4hK4ibZfWVsi+h
hIEIf48/IwX7Zhsz+OseiDPms9EdDbXdG+Cd6gOzoAmFRmPfUOKWQMPuCYL2fSc4
lPwZLZ/We2kYgVzb6vcYxvbxb6CRJXlfWWxvTtWhmwRBmDC3W0SKbrZwKFfgMwcm
HYMKiG1qLPNJ+TfzHv8ZxSZrrRUEatplRc5dvoh2lOpNBVToZz3OKsqj2huvO/ZN
2TxutvdCGbVjsXnoSGUgnEapGljlxYJgdWEEfEPO1Ppt6NsEYEzMrEAbnkjEP+Nv
LxHzc/6yyrntfKPiQe3E1igEtU4=
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:07:50 2025 by rpki-client