Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/UwWlEj1VH0DjFGK9__14782uGDs.roa
File:                     UwWlEj1VH0DjFGK9__14782uGDs.roa (raw, json)
Hash identifier:          UKW907EoF3gdZgw4GLGwETNQCUO7FHg0PeHo6lQbYOQ=
Subject key identifier:   53:05:A5:12:3D:55:1F:40:E3:14:62:BD:FF:FD:78:EF:CD:AE:18:3B
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       0A9B58AC
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/UwWlEj1VH0DjFGK9__14782uGDs.roa
Signing time:             Sat 01 Jan 2022 07:02:37 +0000
ROA not before:           Sat 01 Jan 2022 07:02:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1103
IP address blocks:        131.174.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177952940 (0xa9b58ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: Jan  1 07:02:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5305a5123d551f40e31462bdfffd78efcdae183b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:3e:3f:57:b5:2a:27:88:a6:55:f5:7c:56:
                    ce:16:fd:16:18:f0:ef:bc:4d:72:5c:6b:3a:f7:9d:
                    6d:de:1c:ad:32:0e:76:20:bd:93:91:5b:08:b2:47:
                    ef:fe:41:f0:3b:9b:f1:33:f5:0b:5e:f2:ad:e5:b3:
                    10:6b:4a:4f:92:ae:24:69:fb:d7:41:fd:cc:7a:7f:
                    49:0f:1d:b7:64:15:3c:ad:08:d9:69:1c:00:2d:18:
                    f0:e2:75:03:ce:6e:d1:ed:94:ac:81:35:89:06:ed:
                    37:b2:23:68:a6:b3:c2:58:e0:1f:c4:ac:65:b8:2c:
                    ee:19:6e:5e:03:e5:64:88:88:b4:7e:34:f3:10:55:
                    4b:03:7c:c8:39:64:57:59:b6:f0:f3:6f:04:b1:dd:
                    f3:d8:ae:81:c0:68:c4:cf:91:95:74:2b:59:97:6e:
                    d7:ef:f8:9b:d0:92:58:c4:c5:a3:b4:99:77:31:43:
                    06:09:84:42:73:1b:6f:74:a0:46:63:de:f7:44:e2:
                    37:2e:fc:05:d8:f6:5a:33:08:d5:0e:f1:7c:a3:e1:
                    d2:e9:59:ab:76:90:62:5a:7c:96:b4:70:62:84:f8:
                    72:27:99:f4:d4:b6:95:f1:eb:bc:b9:29:cc:4c:c1:
                    da:6c:50:a3:c5:07:be:c2:a4:85:0e:ca:6c:a6:15:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:05:A5:12:3D:55:1F:40:E3:14:62:BD:FF:FD:78:EF:CD:AE:18:3B
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/UwWlEj1VH0DjFGK9__14782uGDs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         60:3d:7c:a8:82:2c:f7:5f:a5:d8:aa:5b:6a:ee:73:b3:7a:67:
         19:52:3e:45:1e:2d:4a:b9:3c:e7:37:e1:2e:f3:10:af:84:76:
         b3:b5:96:da:3c:da:19:10:b9:41:cb:6c:4e:7c:80:e8:ff:52:
         36:0b:44:da:fa:4b:30:65:b2:60:08:c8:99:19:1c:6f:a6:37:
         b4:70:96:1d:02:c3:64:c7:5c:e1:c8:ff:58:48:f7:94:9a:11:
         a4:99:dd:df:79:0c:a6:fc:cd:46:30:dc:8e:3b:ba:79:24:44:
         78:6f:e3:40:ec:24:b2:ac:d4:9f:7c:35:00:40:15:a3:3a:ce:
         a6:a9:a5:09:d7:de:a9:27:05:be:71:07:b4:18:be:76:ca:49:
         62:fe:14:de:4e:c1:30:f5:c9:3d:6e:86:a6:2b:7a:41:77:8e:
         b2:df:63:03:48:14:dc:f7:17:66:74:58:4a:b0:48:41:2c:59:
         c7:8e:8f:04:af:46:27:5e:48:86:0f:b2:48:86:ab:dc:2f:e0:
         c1:32:e8:5a:ac:6d:84:16:b5:75:9f:5a:32:1b:56:2a:81:b7:
         c4:bf:0d:ad:1e:e6:49:a8:48:a6:d6:38:1a:b8:d6:94:88:3f:
         54:c8:d8:92:cc:84:e9:8f:03:49:a1:fd:80:c7:ac:ab:2e:d8:
         5e:ae:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:01 2024 by rpki-client on console-fra.rpki-client.org