Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/UJbvy0U90N6nNsSfxFLYBLIOJoo.roa
File:                     UJbvy0U90N6nNsSfxFLYBLIOJoo.roa (raw, json)
Hash identifier:          bpKHxYB6iEL1OIG2SbaykNMfgKfmdhPEkhBtr6dGd0k=
Subject key identifier:   50:96:EF:CB:45:3D:D0:DE:A7:36:C4:9F:C4:52:D8:04:B2:0E:26:8A
Certificate issuer:       /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial:       776230
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/UJbvy0U90N6nNsSfxFLYBLIOJoo.roa
Signing time:             Mon 16 May 2022 20:40:29 +0000
ROA not before:           Mon 16 May 2022 20:40:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        193.26.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7823920 (0x776230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
        Validity
            Not Before: May 16 20:40:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5096efcb453dd0dea736c49fc452d804b20e268a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:da:0b:f2:8f:16:ab:d2:cb:7e:15:07:54:
                    a5:d5:69:0c:05:00:8b:41:c6:df:fb:7f:02:84:69:
                    14:0e:42:95:21:ed:fe:c9:68:4e:b5:15:fa:18:d9:
                    86:ba:fd:e4:b1:8c:de:02:d4:83:8d:ae:34:f2:24:
                    18:18:11:e0:83:ae:11:df:2f:5c:18:5a:92:80:08:
                    25:22:b3:33:d6:cb:c3:9a:11:d1:ce:51:e5:dc:f2:
                    18:e4:6b:db:04:38:34:e5:55:b7:99:8e:cf:f3:4b:
                    ee:18:93:6e:05:c3:eb:24:7c:f5:a9:31:5c:18:49:
                    c9:9d:41:7e:7f:f8:4f:ca:ff:1e:1f:c8:04:30:5b:
                    92:0e:8c:b2:50:b1:39:bb:b5:1c:3d:4b:cc:1e:e6:
                    74:bb:c9:3a:ed:f9:04:c4:6f:7e:e2:b1:d8:54:2e:
                    0b:5f:6d:61:c7:1d:fa:22:76:6d:6d:53:89:c6:a5:
                    e8:25:78:34:e8:c0:2c:20:68:ea:05:7f:3a:ab:3e:
                    cf:58:3f:c7:57:9e:65:45:26:19:58:e6:ef:af:4d:
                    10:92:6d:42:37:51:67:f4:0c:d0:d3:3a:cf:08:14:
                    85:c5:05:01:a8:6f:23:e1:a7:46:33:23:97:55:96:
                    2d:8d:ba:24:e4:a4:e4:a4:2a:7f:41:1a:ee:75:84:
                    f6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:96:EF:CB:45:3D:D0:DE:A7:36:C4:9F:C4:52:D8:04:B2:0E:26:8A
            X509v3 Authority Key Identifier:
                keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/UJbvy0U90N6nNsSfxFLYBLIOJoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:cc:10:c3:20:71:23:a1:45:6d:3a:d2:7b:3c:04:f2:68:
         56:a7:f1:2d:17:0a:a0:61:81:49:ab:40:a8:12:b5:76:1f:b7:
         13:2c:9f:83:9c:7d:5b:dc:d1:52:ed:e5:cd:bc:12:90:64:ea:
         36:d4:be:6e:61:5c:fa:ca:1a:36:61:32:8e:a7:91:6b:e4:a5:
         71:0b:d3:08:3c:60:38:56:ce:6a:06:fd:a5:a1:1e:e4:fb:98:
         a7:45:55:b0:33:ae:a7:4e:e6:0c:5c:4b:82:c0:e5:b9:f6:a7:
         65:0e:e7:c7:95:8f:b2:71:38:6c:e2:ea:fc:43:6c:fa:f2:ad:
         79:ec:bd:32:f3:ed:9c:35:1d:ad:06:f3:fd:f6:1b:0f:c9:aa:
         b9:a3:1d:f8:98:f0:9e:ba:f7:c6:06:31:84:fe:4f:06:cb:7a:
         4b:b6:d0:ee:57:21:f7:2e:0f:32:27:b8:48:aa:a6:90:f7:5b:
         52:94:4f:7b:2a:83:2e:ef:d7:c6:e1:de:20:9d:20:ca:32:fb:
         e3:fa:d2:9a:07:04:74:44:f4:a2:09:fc:e1:e3:87:0f:26:8b:
         55:c3:61:c1:b5:f0:d8:33:7c:1a:98:54:61:aa:a8:99:8f:46:
         89:43:d4:95:c7:1a:b6:87:64:c8:e5:e7:20:44:1b:6f:b7:1c:
         15:73:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:12 2024 by rpki-client on console-ams.rpki-client.org