Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WyQIlEnLDwSPS-bluQJauH5KpEk.roa
File:                     WyQIlEnLDwSPS-bluQJauH5KpEk.roa (raw, json)
Hash identifier:          c9CXFo0Lx7ftIn9LHAUNNDIxI32MXwbRjKuAjJnNRZc=
Subject key identifier:   5B:24:08:94:49:CB:0F:04:8F:4B:E6:E5:B9:02:5A:B8:7E:4A:A4:49
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0182CB3CD165A35E6317BE027F090D0E96E0
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WyQIlEnLDwSPS-bluQJauH5KpEk.roa
Signing time:             Tue 23 Aug 2022 15:05:36 +0000
ROA not before:           Tue 23 Aug 2022 15:05:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197071
IP address blocks:        45.67.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:cb:3c:d1:65:a3:5e:63:17:be:02:7f:09:0d:0e:96:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Aug 23 15:05:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b24089449cb0f048f4be6e5b9025ab87e4aa449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:95:91:15:ab:7a:63:81:63:2a:d0:96:f9:
                    d5:98:37:85:c2:3e:f4:4b:f9:52:4a:ef:9c:98:59:
                    fe:e9:cf:f3:94:18:f4:ee:54:09:74:bd:e6:96:5e:
                    a4:19:6a:ef:c1:9c:bd:48:8c:0b:49:f5:b4:ab:d8:
                    a9:4a:65:60:4f:56:77:9b:c8:61:66:26:40:12:77:
                    a8:95:ce:df:7e:44:2c:14:12:f7:70:ec:a6:d0:57:
                    f1:a1:80:df:cc:be:a8:57:e2:40:91:cf:70:22:f8:
                    c0:9c:75:74:a7:b3:10:aa:aa:0b:d5:b2:6a:9b:3f:
                    ad:44:9c:fa:f0:56:48:c8:4f:62:d9:5b:76:b7:1b:
                    cc:ad:b2:35:bd:ed:75:4c:ee:a2:fa:46:1f:ca:bd:
                    6d:39:f3:55:55:3a:03:fb:f9:52:d2:35:bf:21:8d:
                    4d:1f:13:7f:ce:a5:a4:cd:18:18:2a:35:ab:b5:7f:
                    3e:5f:8f:6a:0d:fa:fd:0d:9e:08:92:32:c6:0f:9f:
                    8b:00:5b:5d:a8:c4:4f:08:c1:c7:d1:df:01:41:2b:
                    68:80:3e:21:b6:72:ee:28:24:60:13:e1:c5:3e:69:
                    23:06:7f:95:a4:80:83:20:d7:87:05:9f:11:2d:ad:
                    a0:14:d7:8f:52:49:a4:72:98:c3:63:38:f1:4c:14:
                    43:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:24:08:94:49:CB:0F:04:8F:4B:E6:E5:B9:02:5A:B8:7E:4A:A4:49
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WyQIlEnLDwSPS-bluQJauH5KpEk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:61:15:ec:93:9f:99:7f:33:33:e7:98:76:e8:7e:26:1b:13:
         ed:8c:63:d2:3d:cf:3a:50:99:4f:94:c1:78:5f:e6:d9:1e:cb:
         02:f1:6e:1b:1b:71:0c:71:c6:b7:22:40:71:49:16:93:04:55:
         b4:78:91:87:80:b6:b2:3a:08:b0:af:2b:7f:3d:20:7a:a2:f2:
         bd:17:5f:69:1b:bc:df:8e:b5:81:ee:43:92:29:6a:b0:43:41:
         28:46:5e:04:a7:f0:50:ca:66:f8:e7:24:80:10:ac:bc:36:f9:
         a2:c2:98:86:6d:5d:2f:eb:b1:b8:5d:8e:76:e3:1e:cd:f3:97:
         17:f9:ff:ff:d5:f6:3f:e9:a8:00:40:b9:98:05:3c:db:c2:92:
         49:aa:66:da:b3:65:fb:99:99:8d:88:72:1f:93:d5:9b:67:82:
         31:48:95:43:2f:63:a7:a2:7c:5b:b9:54:58:ed:01:22:ea:de:
         a0:64:72:a9:85:fa:ef:a0:d7:12:38:be:60:9e:7f:3c:d3:54:
         9d:46:51:0e:7d:09:e3:b7:04:b4:bc:10:d9:06:48:3f:4d:95:
         83:09:62:4a:61:4f:bd:14:48:0a:cf:d3:bc:41:7d:09:4f:42:
         06:b5:3e:1a:f1:08:b3:94:36:23:10:cc:19:4c:06:43:59:d0:
         43:29:7c:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLLPNFlo15jF74CfwkNDpbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjIwODIzMTUwNTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjI0MDg5NDQ5Y2IwZjA0OGY0YmU2ZTViOTAyNWFiODdlNGFhNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4aVkRWremOBYyrQlvnVmDeFwj70
S/lSSu+cmFn+6c/zlBj07lQJdL3mll6kGWrvwZy9SIwLSfW0q9ipSmVgT1Z3m8hh
ZiZAEneolc7ffkQsFBL3cOym0FfxoYDfzL6oV+JAkc9wIvjAnHV0p7MQqqoL1bJq
mz+tRJz68FZIyE9i2Vt2txvMrbI1ve11TO6i+kYfyr1tOfNVVToD+/lS0jW/IY1N
HxN/zqWkzRgYKjWrtX8+X49qDfr9DZ4IkjLGD5+LAFtdqMRPCMHH0d8BQStogD4h
tnLuKCRgE+HFPmkjBn+VpICDINeHBZ8RLa2gFNePUkmkcpjDYzjxTBRD/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFskCJRJyw8Ej0vm5bkCWrh+SqRJMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvV3lRSWxFbkxEd1NQUy1ibHVRSmF1SDVLcEVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUOLMA0G
CSqGSIb3DQEBCwUAA4IBAQAQYRXsk5+ZfzMz55h26H4mGxPtjGPSPc86UJlPlMF4
X+bZHssC8W4bG3EMcca3IkBxSRaTBFW0eJGHgLayOgiwryt/PSB6ovK9F19pG7zf
jrWB7kOSKWqwQ0EoRl4Ep/BQymb45ySAEKy8NvmiwpiGbV0v67G4XY524x7N85cX
+f//1fY/6agAQLmYBTzbwpJJqmbas2X7mZmNiHIfk9WbZ4IxSJVDL2OnonxbuVRY
7QEi6t6gZHKphfrvoNcSOL5gnn8801SdRlEOfQnjtwS0vBDZBkg/TZWDCWJKYU+9
FEgKz9O8QX0JT0IGtT4a8QizlDYjEMwZTAZDWdBDKXy0
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org