Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/uhwZoEtddxw37Zc9uW8hChQFMiY.roa
File:                     uhwZoEtddxw37Zc9uW8hChQFMiY.roa (raw, json)
Hash identifier:          g7QA4wmwlUDrYr0VtvGUKhRM+susXNvYv8TMyqjUa+A=
Subject key identifier:   BA:1C:19:A0:4B:5D:77:1C:37:ED:97:3D:B9:6F:21:0A:14:05:32:26
Certificate issuer:       /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial:       0182E9D01E7BD343448BF17C20A137160B30
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/uhwZoEtddxw37Zc9uW8hChQFMiY.roa
Signing time:             Mon 29 Aug 2022 13:35:06 +0000
ROA not before:           Mon 29 Aug 2022 13:35:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50463
IP address blocks:        194.56.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e9:d0:1e:7b:d3:43:44:8b:f1:7c:20:a1:37:16:0b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
        Validity
            Not Before: Aug 29 13:35:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba1c19a04b5d771c37ed973db96f210a14053226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:1e:41:0b:58:91:87:61:c1:b1:a9:1c:85:
                    f6:99:51:58:7d:d5:bc:bb:bb:31:01:37:ec:d8:45:
                    1f:cf:6e:14:a6:03:f9:70:8b:35:4d:d6:94:b0:80:
                    dc:d9:26:13:72:78:cc:86:01:75:eb:a9:56:eb:05:
                    51:10:68:43:43:f6:5b:09:af:d3:5a:b4:56:92:66:
                    e1:f5:34:96:7c:b6:45:13:b0:22:6b:c6:8e:12:b9:
                    cf:cf:e3:c6:7d:ea:42:b3:d5:99:71:f4:a0:b9:8e:
                    16:94:7c:97:79:7c:01:95:24:e2:d1:1b:d1:a2:8f:
                    69:11:62:05:85:ad:56:28:09:14:37:0b:3c:50:f6:
                    e1:66:ed:1c:e5:c6:3a:11:46:66:28:6f:99:b2:53:
                    7d:33:08:e4:c8:f9:ff:65:0d:ea:0b:26:08:29:0e:
                    65:89:6b:32:66:2a:d7:eb:ce:67:9c:f0:6f:97:5e:
                    20:c5:02:8b:e4:a3:63:d0:4b:7e:18:98:06:9c:aa:
                    a0:b0:2b:60:ac:ea:15:a9:ae:5a:fe:d5:ee:97:fa:
                    3e:93:ea:8e:d8:ee:13:a8:fd:9d:3e:b7:f4:b9:f3:
                    15:f7:24:89:21:08:22:fb:76:80:ee:ed:35:6c:c9:
                    d1:68:0b:67:0b:19:9c:56:1a:f6:0e:5f:62:12:6e:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1C:19:A0:4B:5D:77:1C:37:ED:97:3D:B9:6F:21:0A:14:05:32:26
            X509v3 Authority Key Identifier:
                keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/uhwZoEtddxw37Zc9uW8hChQFMiY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:14:d2:81:4a:3d:ee:57:bf:25:69:78:0c:09:ab:c8:91:e0:
         ed:6e:3e:01:4a:7c:3b:df:80:ab:41:27:75:78:6f:3f:5c:f0:
         3f:fa:b0:64:bc:f8:7f:10:b4:55:1c:77:07:07:3b:e8:8b:4f:
         90:8d:8c:c5:11:f9:0e:df:ea:31:7b:4f:31:22:13:47:53:7a:
         24:aa:d1:55:2e:41:5c:64:39:77:60:74:e3:04:7a:27:3d:09:
         5c:0a:04:80:ed:30:54:34:c8:83:f4:39:82:2a:37:08:c7:27:
         82:1d:34:fa:8b:ad:7e:4f:af:84:cb:d0:90:e4:0a:54:0c:0c:
         62:8c:e5:5f:14:8b:de:90:8f:6d:27:18:80:0f:66:5a:24:31:
         96:50:64:99:b3:94:e4:91:2a:e9:e0:56:e8:dc:80:fd:2c:f4:
         a8:6c:4b:82:f2:0a:a7:92:2c:b0:0b:5c:6a:17:f1:d0:ea:5b:
         ba:22:89:c8:71:0d:ea:3b:3a:94:94:c5:2f:2f:86:ab:52:77:
         0b:b2:cd:8b:55:03:26:5a:90:57:2d:02:4e:3f:5c:8f:3a:2f:
         79:df:47:2a:f3:2e:7d:c4:ed:a6:40:46:54:87:13:a4:74:16:
         c5:d0:8d:07:30:6f:5b:9a:f3:1e:97:27:78:17:15:8d:3c:90:
         c6:0c:6b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:55 2024 by rpki-client on console-fra.rpki-client.org