Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/BV_uOq0lfPRhV7z2RrVyx93y0Zo.roa
File:                     BV_uOq0lfPRhV7z2RrVyx93y0Zo.roa (raw, json)
Hash identifier:          prOk94zZ2Tm7lfMCUktNZ8vryVEeBEu08Izkne6/DHs=
Subject key identifier:   05:5F:EE:3A:AD:25:7C:F4:61:57:BC:F6:46:B5:72:C7:DD:F2:D1:9A
Certificate issuer:       /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial:       0A5CA3
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/BV_uOq0lfPRhV7z2RrVyx93y0Zo.roa
Signing time:             Sat 01 Jan 2022 00:51:51 +0000
ROA not before:           Sat 01 Jan 2022 00:51:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15404
IP address blocks:        91.213.65.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679075 (0xa5ca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594b79990f616a8344c860148fc922910e154dad
        Validity
            Not Before: Jan  1 00:51:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=055fee3aad257cf46157bcf646b572c7ddf2d19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:5d:57:1f:15:75:dc:0e:45:a5:39:23:e3:
                    ff:aa:fa:26:11:f6:19:5b:a6:fe:e5:f8:38:77:26:
                    38:90:5f:04:16:49:4c:9c:e7:56:01:c5:cd:41:12:
                    ff:57:02:ad:7b:65:9f:24:ed:c6:98:77:59:2f:49:
                    a0:92:cf:28:9a:77:80:bf:fc:d3:e7:75:04:98:08:
                    d1:5f:f9:65:34:d6:3f:b2:79:d6:d1:ba:14:e9:79:
                    55:e1:87:d1:a4:26:49:bd:12:7c:1f:2d:39:3f:e1:
                    dc:cb:fd:09:95:e0:d3:0e:5c:42:ae:43:57:41:ea:
                    25:d8:f3:5f:31:fb:47:70:05:a3:2e:e4:35:d1:a5:
                    fc:98:de:af:53:13:43:c8:56:be:d1:f3:58:8f:32:
                    9e:09:ed:50:2b:e5:37:12:9c:c4:7d:f9:17:cb:bc:
                    85:d2:e8:3c:e3:55:9c:8a:e2:c3:50:6f:ac:44:61:
                    3a:4c:7a:1c:5a:e7:e3:84:b6:31:58:40:de:b7:4e:
                    b8:c6:bd:4c:20:44:dd:64:f4:ef:23:1c:35:ce:a4:
                    d2:2b:dc:0d:19:5f:ec:fd:e3:60:67:9e:92:cd:52:
                    b6:28:37:1c:c2:e8:8e:8b:6e:38:ff:74:36:b2:6d:
                    f9:53:32:58:e1:6b:97:25:16:95:7f:7d:da:61:7e:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5F:EE:3A:AD:25:7C:F4:61:57:BC:F6:46:B5:72:C7:DD:F2:D1:9A
            X509v3 Authority Key Identifier:
                keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/BV_uOq0lfPRhV7z2RrVyx93y0Zo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:f8:df:71:93:de:7b:a4:fc:fd:a3:d3:d1:69:0a:cf:e4:
         a3:ea:bf:74:d3:db:ae:ba:d1:2c:9b:b9:3b:88:dd:11:ca:d0:
         95:f6:22:ca:0e:13:36:de:c1:b0:4e:47:de:cd:4f:fa:8f:1b:
         45:e0:ae:6a:c8:df:43:a7:3d:07:b6:bf:c2:c9:90:c5:23:98:
         e0:c8:e8:0e:63:8a:36:7a:e1:05:13:e2:bf:6e:05:e1:59:c5:
         e8:fa:aa:0a:7d:ae:06:f3:5a:a5:b1:e6:1e:3e:cc:66:4b:3e:
         32:86:eb:0b:b3:8a:cc:9f:ac:b1:6d:8f:fd:72:c6:ef:18:d2:
         48:8d:28:13:57:66:9b:56:3c:26:7a:fa:03:ee:5a:d9:f9:64:
         21:3f:ba:9c:59:6e:7b:dd:d7:12:2d:79:aa:57:6c:a1:6d:b2:
         e2:c1:3b:2d:3d:ab:41:8f:42:72:96:98:90:32:3e:1e:65:f0:
         a1:19:30:71:e5:62:ea:5c:3d:ed:b1:a9:f4:a7:ef:8b:85:ec:
         b0:3b:a7:4c:c1:20:58:b5:28:2f:81:1b:28:22:ba:1b:c2:1d:
         6a:df:18:44:6c:61:a7:1a:58:09:7d:b2:e6:0d:04:0d:96:aa:
         91:41:6d:6a:c1:83:c9:5c:ab:68:47:a3:db:15:84:96:8b:e9:
         63:58:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:29 2025 by rpki-client