Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UfQOYcHozjtA59vyPnDmXXHjKck.roa
File:                     UfQOYcHozjtA59vyPnDmXXHjKck.roa (raw, json)
Hash identifier:          f4YUpv/rxE1tKGUi7ciLmi48qCepeYwnfFujzqs/X7s=
Subject key identifier:   51:F4:0E:61:C1:E8:CE:3B:40:E7:DB:F2:3E:70:E6:5D:71:E3:29:C9
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       030E5A1E
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UfQOYcHozjtA59vyPnDmXXHjKck.roa
Signing time:             Sat 01 Jan 2022 17:44:18 +0000
ROA not before:           Sat 01 Jan 2022 17:44:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        83.147.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51272222 (0x30e5a1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 17:44:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51f40e61c1e8ce3b40e7dbf23e70e65d71e329c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:f2:9f:7b:66:34:a4:f1:b3:be:e7:9f:f4:
                    50:80:5e:58:54:81:71:07:a1:f5:97:d6:fa:f2:27:
                    e8:b8:dd:52:c9:69:0e:c4:a3:7c:ec:01:49:c1:84:
                    bf:60:22:0f:25:8c:24:8f:9e:e1:67:2a:0e:6b:bc:
                    04:cf:69:bc:e9:eb:63:5f:c8:79:75:71:50:05:35:
                    03:47:c8:9d:5a:7d:aa:1c:ef:bb:bb:fa:b8:5b:41:
                    4c:27:50:cb:d5:40:d9:65:ae:ce:f7:12:58:46:4a:
                    2e:46:8f:c5:06:ae:03:d5:a7:29:12:84:2c:f5:ba:
                    b3:bb:98:25:40:6f:82:65:19:d0:f0:5e:ee:de:32:
                    66:6f:ac:97:b0:54:08:69:df:4d:4b:92:58:87:03:
                    c2:c6:e8:b8:1e:9e:9c:5d:81:0d:12:04:5b:07:d7:
                    59:28:7e:02:66:62:e6:21:bc:b2:71:4f:15:f0:24:
                    0a:99:44:b2:95:b4:95:b7:84:6a:26:9c:b0:c8:a6:
                    f8:49:a7:44:5d:68:ef:83:be:0f:6f:5e:41:66:2b:
                    18:14:f4:8d:ce:e3:54:af:21:42:e0:ff:da:33:36:
                    f9:41:de:81:19:60:eb:f2:56:2e:6d:5f:e6:cf:e1:
                    9e:78:79:34:44:37:cd:86:9c:c9:9a:9a:fc:1c:a0:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F4:0E:61:C1:E8:CE:3B:40:E7:DB:F2:3E:70:E6:5D:71:E3:29:C9
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UfQOYcHozjtA59vyPnDmXXHjKck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:86:f5:36:c0:e7:e4:20:26:a0:fa:46:ab:a6:ee:a5:69:d5:
         04:3d:dd:28:72:4c:3d:97:4d:6d:30:6e:a7:12:c5:a4:36:81:
         8f:68:4f:9d:c9:9b:da:80:77:f1:8d:c2:e1:5c:1e:04:a0:78:
         4b:b6:ec:ce:4a:84:5f:43:b9:6c:cd:2f:a9:2a:aa:da:f0:eb:
         bd:c0:26:e7:5c:1d:19:37:51:94:0a:7a:8a:c9:70:c8:be:32:
         38:aa:03:34:3e:59:d7:38:0c:52:61:36:60:b0:e0:06:52:70:
         c4:85:5c:be:14:a5:29:74:51:55:65:5d:b5:33:01:c2:0a:c6:
         61:5a:a5:10:28:e4:0d:68:2f:bd:3b:48:14:4e:26:aa:85:53:
         5d:0b:0d:00:94:53:2f:db:37:0f:e2:8d:7f:f4:50:5b:fb:8a:
         f2:85:7c:9b:68:0a:04:53:10:da:c1:42:f5:37:29:a7:ee:42:
         16:aa:f4:54:9b:84:a0:0c:fd:8f:c4:dd:11:c0:36:a2:26:13:
         48:85:45:6e:33:50:35:21:f6:0f:ca:ba:0b:f6:f3:6b:f8:3d:
         cc:f4:28:88:27:e0:8d:b9:51:d8:8c:47:e3:40:6a:c8:a2:f7:
         09:9f:33:b1:d2:3b:4f:d5:ba:1e:5a:ee:8c:e1:34:e8:dd:0f:
         52:7e:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:32 2023 by rpki-client on console-ams.rpki-client.org