Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uwuCLaLmXw3sf4DjRdaYXeiXLqE.roa
File:                     uwuCLaLmXw3sf4DjRdaYXeiXLqE.roa (raw, json)
Hash identifier:          ul6Cwct651szkBIu9lAT7bKwr4FqiciqICwAqx4I+tk=
Subject key identifier:   BB:0B:82:2D:A2:E6:5F:0D:EC:7F:80:E3:45:D6:98:5D:E8:97:2E:A1
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       212A9889
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uwuCLaLmXw3sf4DjRdaYXeiXLqE.roa
Signing time:             Sat 01 Jan 2022 13:00:37 +0000
ROA not before:           Sat 01 Jan 2022 13:00:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212157
IP address blocks:        185.52.4.0/22 maxlen: 24
                          2a04:9a00:1010::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556439689 (0x212a9889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Jan  1 13:00:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bb0b822da2e65f0dec7f80e345d6985de8972ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:1c:63:92:b5:8f:64:e2:dd:7a:3d:58:0e:
                    2c:f0:39:4f:11:76:f7:be:7d:1a:95:f1:13:53:51:
                    e6:e3:1e:85:e9:b6:a3:71:f8:31:eb:d1:2a:18:70:
                    4e:c0:b0:b5:c4:d1:b1:dc:2e:63:58:5c:4f:62:84:
                    c4:96:76:6b:ae:cc:4f:06:df:e1:71:17:ad:da:b2:
                    9f:f4:74:22:3d:cd:0b:63:58:6c:98:f4:02:c3:d7:
                    94:e6:28:69:6c:f3:99:de:50:44:dc:98:e3:fa:b6:
                    27:be:34:f3:4d:a6:65:ed:6f:78:c0:87:41:5e:46:
                    ec:aa:fa:06:8f:64:15:98:0e:df:95:25:67:f5:49:
                    0a:51:fd:54:77:16:01:f6:09:6c:1f:b3:fe:ce:0d:
                    3a:3e:f7:15:ae:f4:05:75:12:b8:61:4c:84:b1:dc:
                    a4:95:94:c7:5f:2f:d0:2e:f8:98:42:77:ef:5d:95:
                    de:86:a2:2f:d1:b0:14:6c:ed:d0:a2:fa:ac:70:98:
                    f4:a2:9c:0c:f6:be:9d:cb:13:86:c2:2f:ec:da:45:
                    b7:85:ff:93:2b:b2:a9:7a:db:35:6c:64:af:d9:e1:
                    2f:b9:a8:31:e3:af:19:18:1e:05:59:4d:82:54:ec:
                    e2:eb:39:1a:94:fa:e0:4c:f2:d1:a3:5d:8c:38:83:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0B:82:2D:A2:E6:5F:0D:EC:7F:80:E3:45:D6:98:5D:E8:97:2E:A1
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uwuCLaLmXw3sf4DjRdaYXeiXLqE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.52.4.0/22
                IPv6:
                  2a04:9a00:1010::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:a7:75:6f:30:29:3c:ac:43:7b:fd:e0:13:22:60:2b:66:
         b1:03:61:ab:3c:08:e4:b0:3d:4e:b5:1d:37:d2:90:0b:fa:e3:
         2e:5d:99:ee:18:cf:9c:a3:0a:ab:0e:9e:8a:5f:dd:90:57:a2:
         19:2e:fd:a6:38:d4:eb:10:a1:e4:f8:2e:c6:39:ef:7c:35:3d:
         8e:d4:42:0d:19:7c:c7:a8:9b:6c:7e:1a:a4:27:59:35:5f:9a:
         24:d6:34:54:99:e2:72:a1:ee:ed:7b:bf:3a:e5:57:ef:c7:76:
         99:f2:88:21:6e:55:de:b1:24:2c:2f:fc:8a:d7:4c:db:09:d5:
         c7:a4:7f:ea:59:10:08:8f:cb:26:d8:5f:d1:40:1f:b1:44:bf:
         eb:b7:9f:50:6b:ce:38:6e:c0:0c:b6:c9:e9:90:1d:e5:f4:d7:
         3a:64:59:c4:73:ff:04:f6:82:f2:25:2e:cc:e2:5b:cf:92:f0:
         9f:e1:4a:06:b7:c5:84:89:7f:b4:81:2a:7a:44:44:85:d3:f7:
         62:e3:a3:d8:b2:58:5a:f8:ee:64:c8:03:11:e7:19:4f:78:3c:
         0d:30:24:3a:88:d2:1e:19:ca:ca:96:d7:39:85:a6:e9:06:d3:
         61:f6:e6:b0:4a:31:e8:a3:ed:62:27:86:53:e7:6f:62:07:02:
         51:37:a1:ac
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEISqYiTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MDVkMjhkMTY2MjZiYzVkY2FiZjJlOTE1NDM1NzgyYjk2ZTE0MDcxMB4XDTIyMDEw
MTEzMDAzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmIwYjgyMmRhMmU2
NWYwZGVjN2Y4MGUzNDVkNjk4NWRlODk3MmVhMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJh3HGOStY9k4t16PVgOLPA5TxF29759GpXxE1NR5uMehem2
o3H4MevRKhhwTsCwtcTRsdwuY1hcT2KExJZ2a67MTwbf4XEXrdqyn/R0Ij3NC2NY
bJj0AsPXlOYoaWzzmd5QRNyY4/q2J740802mZe1veMCHQV5G7Kr6Bo9kFZgO35Ul
Z/VJClH9VHcWAfYJbB+z/s4NOj73Fa70BXUSuGFMhLHcpJWUx18v0C74mEJ3712V
3oaiL9GwFGzt0KL6rHCY9KKcDPa+ncsThsIv7NpFt4X/kyuyqXrbNWxkr9nhL7mo
MeOvGRgeBVlNglTs4us5GpT64Ezy0aNdjDiDqO0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS7C4ItouZfDex/gONF1phd6JcuoTAfBgNVHSMEGDAWgBSwXSjRZia8Xcq/
LpFUNXgrluFAcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NGMG8wV1ltdkYzS3Z5NlJWRFY0SzViaFFIRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvYmJhOTczLTdjOWYtNGIxMS1iNjExLWFkNTc1NTIyYjM2NS8x
L3V3dUNMYUxtWHczc2Y0RGpSZGFZWGVpWExxRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
YmJhOTczLTdjOWYtNGIxMS1iNjExLWFkNTc1NTIyYjM2NS8xL3NGMG8wV1ltdkYz
S3Z5NlJWRFY0SzViaFFIRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEArk0BDAPBAIAAjAJAwcEKgSaABAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAI/qd1bzApPKxDe/3gEyJgK2axA2GrPAjksD1O
tR030pAL+uMuXZnuGM+cowqrDp6KX92QV6IZLv2mONTrEKHk+C7GOe98NT2O1EIN
GXzHqJtsfhqkJ1k1X5ok1jRUmeJyoe7te7865Vfvx3aZ8oghblXesSQsL/yK10zb
CdXHpH/qWRAIj8sm2F/RQB+xRL/rt59Qa844bsAMtsnpkB3l9Nc6ZFnEc/8E9oLy
JS7M4lvPkvCf4UoGt8WEiX+0gSp6RESF0/di46PYslha+O5kyAMR5xlPeDwNMCQ6
iNIeGcrKltc5habpBtNh9uawSjHoo+1iJ4ZT529iBwJRN6Gs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org