Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/UVHC_TKzUZRNkzLb-JN1KbdsTyU.roa
File:                     UVHC_TKzUZRNkzLb-JN1KbdsTyU.roa (raw, json)
Hash identifier:          JWvgBrKD8FQ9UTnUkXb5Qsnj1YNETACtrSg/f0rpRYI=
Subject key identifier:   51:51:C2:FD:32:B3:51:94:4D:93:32:DB:F8:93:75:29:B7:6C:4F:25
Certificate issuer:       /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial:       175C50F9
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/UVHC_TKzUZRNkzLb-JN1KbdsTyU.roa
Signing time:             Sat 01 Jan 2022 16:03:59 +0000
ROA not before:           Sat 01 Jan 2022 16:03:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210485
IP address blocks:        89.34.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391926009 (0x175c50f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
        Validity
            Not Before: Jan  1 16:03:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5151c2fd32b351944d9332dbf8937529b76c4f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:15:37:d0:ac:05:96:bd:8f:f8:1a:2a:85:
                    56:7d:70:70:48:2c:b0:39:6c:14:97:62:52:5e:9e:
                    f1:a7:8d:8f:8d:10:b8:8f:91:ce:c4:23:60:bf:99:
                    c0:0f:73:71:cc:f7:9a:00:e6:a5:81:8b:3b:fa:16:
                    62:9a:92:6d:f1:a3:4c:fb:47:2d:03:ce:b9:9c:92:
                    56:23:84:1e:52:f6:24:1f:d0:a4:1e:e4:db:c0:45:
                    dd:6d:82:67:b4:a6:33:d3:36:9c:dc:cb:84:b1:63:
                    4e:a0:c2:50:02:25:13:5c:eb:b6:13:be:9c:8d:b8:
                    81:1b:80:af:3f:b6:5c:5a:ac:14:f8:c3:34:3a:15:
                    08:92:9a:db:9b:73:f8:0b:fa:c6:24:65:c8:13:1a:
                    42:73:cf:a4:e2:51:67:50:b2:25:c3:40:e2:5f:29:
                    28:17:b3:d1:5e:cb:40:f7:0e:fb:40:d2:a7:2a:7d:
                    13:1b:11:99:26:2f:15:f5:29:b7:9b:90:6e:cf:6e:
                    f9:3a:62:81:37:25:5a:3d:17:bc:94:69:7d:d1:03:
                    b5:16:bd:74:0f:26:72:f2:b6:d8:cf:fd:24:2a:e0:
                    06:4b:49:81:c1:c2:82:7b:f7:02:be:e4:02:8f:f9:
                    aa:bf:bd:3f:18:ba:2f:f2:00:d4:66:94:d7:37:cb:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:51:C2:FD:32:B3:51:94:4D:93:32:DB:F8:93:75:29:B7:6C:4F:25
            X509v3 Authority Key Identifier:
                keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/UVHC_TKzUZRNkzLb-JN1KbdsTyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.34.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:9a:25:df:d7:8d:89:69:26:be:d8:6b:b0:d6:0a:32:f3:69:
         69:bc:a0:f5:34:13:f6:ff:2c:97:ee:ec:f9:0a:23:b9:52:13:
         5d:e3:9f:55:46:99:2a:fb:7b:c8:60:ca:7d:89:4a:38:13:f8:
         38:27:b5:2a:af:85:06:11:3a:86:ae:03:24:86:55:c5:23:94:
         b8:d9:c8:9d:51:a2:a5:2b:c9:ca:d4:03:39:00:a1:91:d3:8d:
         e4:3f:9c:c4:37:af:e8:5c:e7:17:4a:92:0f:3b:dc:d6:b6:63:
         78:95:f3:18:91:f7:65:53:eb:86:37:1d:1b:35:b5:cc:f2:30:
         f3:66:22:b5:95:fb:70:02:de:e1:d2:b8:37:ba:e9:a3:81:c0:
         6a:f1:02:9b:41:a0:e3:1e:cd:d7:3f:69:9e:f7:9f:8e:d4:20:
         cf:a8:84:ab:d7:61:b8:92:68:11:46:99:2b:13:d9:dc:06:e5:
         fb:c6:e5:5f:13:6d:f5:60:88:5f:b1:0e:3c:f3:14:d0:ee:9a:
         47:97:17:f7:bb:73:36:76:2b:11:46:51:52:56:95:cf:9a:99:
         98:bb:8b:f6:83:06:cf:f1:64:49:d4:80:c0:82:7d:34:fa:f6:
         45:8b:70:fc:27:50:7a:7f:b5:f5:11:51:66:ef:fc:74:72:d9:
         9a:ed:56:56
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF1xQ+TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZGYxMzJkZjEzZTRiZTUzZDgyNTBjOGM0ODQyMDI2NGVlZjZjMTRjMB4XDTIyMDEw
MTE2MDM1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTE1MWMyZmQzMmIz
NTE5NDRkOTMzMmRiZjg5Mzc1MjliNzZjNGYyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8zFTfQrAWWvY/4GiqFVn1wcEgssDlsFJdiUl6e8aeNj40Q
uI+RzsQjYL+ZwA9zccz3mgDmpYGLO/oWYpqSbfGjTPtHLQPOuZySViOEHlL2JB/Q
pB7k28BF3W2CZ7SmM9M2nNzLhLFjTqDCUAIlE1zrthO+nI24gRuArz+2XFqsFPjD
NDoVCJKa25tz+Av6xiRlyBMaQnPPpOJRZ1CyJcNA4l8pKBez0V7LQPcO+0DSpyp9
ExsRmSYvFfUpt5uQbs9u+TpigTclWj0XvJRpfdEDtRa9dA8mcvK22M/9JCrgBktJ
gcHCgnv3Ar7kAo/5qr+9Pxi6L/IA1GaU1zfLH5ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRRUcL9MrNRlE2TMtv4k3Upt2xPJTAfBgNVHSMEGDAWgBR98TLfE+S+U9gl
DIxIQgJk7vbBTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZmRXkzeFBrdmxQWUpReU1TRUlDWk83MndVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvYzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8x
L1VWSENfVEt6VVpSTmt6TGItSk4xS2Jkc1R5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
YzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8xL2ZmRXkzeFBrdmxQ
WUpReU1TRUlDWk83MndVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFkiATANBgkqhkiG9w0BAQsFAAOC
AQEAIZol39eNiWkmvthrsNYKMvNpabyg9TQT9v8sl+7s+QojuVITXeOfVUaZKvt7
yGDKfYlKOBP4OCe1Kq+FBhE6hq4DJIZVxSOUuNnInVGipSvJytQDOQChkdON5D+c
xDev6FznF0qSDzvc1rZjeJXzGJH3ZVPrhjcdGzW1zPIw82YitZX7cALe4dK4N7rp
o4HAavECm0Gg4x7N1z9pnvefjtQgz6iEq9dhuJJoEUaZKxPZ3Abl+8blXxNt9WCI
X7EOPPMU0O6aR5cX97tzNnYrEUZRUlaVz5qZmLuL9oMGz/FkSdSAwIJ9NPr2RYtw
/CdQen+19RFRZu/8dHLZmu1WVg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:04 2023 by rpki-client on console.sobornost.net