Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/WSidbniJAia9Tr8in4ZzWed_M5k.roa
File:                     WSidbniJAia9Tr8in4ZzWed_M5k.roa (raw, json)
Hash identifier:          NPR/uakbRhl7ELhWXhdik3taOjitrOB/8sJXbLEpR8Q=
Subject key identifier:   59:28:9D:6E:78:89:02:26:BD:4E:BF:22:9F:86:73:59:E7:7F:33:99
Certificate issuer:       /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial:       203492CA
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/WSidbniJAia9Tr8in4ZzWed_M5k.roa
Signing time:             Sat 01 Jan 2022 15:06:54 +0000
ROA not before:           Sat 01 Jan 2022 15:06:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     32787
IP address blocks:        193.103.199.0/24 maxlen: 24
                          193.103.193.0/24 maxlen: 24
                          193.103.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540316362 (0x203492ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
        Validity
            Not Before: Jan  1 15:06:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59289d6e78890226bd4ebf229f867359e77f3399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:4c:53:51:94:60:8d:04:cc:96:0a:37:86:
                    31:22:1e:47:1e:7a:a1:e9:01:8c:61:a6:4a:c6:2f:
                    99:88:48:68:30:f1:77:31:37:b9:cb:1b:15:89:1b:
                    e4:38:71:b0:7d:90:8f:c1:40:4a:9f:74:49:b4:ab:
                    93:03:b6:e6:9b:57:b0:2b:84:ae:b5:9f:23:d8:da:
                    2d:a1:60:9e:e9:7c:51:07:37:02:91:5f:47:4a:06:
                    c4:64:6e:f7:e8:89:f8:b9:53:42:44:66:dc:c6:32:
                    b5:d2:e7:96:90:c1:cd:6d:85:e3:ea:28:1f:41:f0:
                    e0:e1:85:b6:05:76:08:e1:6f:ab:4d:7f:47:f3:aa:
                    79:f8:50:74:49:d7:84:31:83:b4:dc:dd:e8:de:3f:
                    43:16:96:c4:12:e2:de:95:fa:de:5e:35:ab:7b:36:
                    9e:1f:36:63:fd:6b:8e:83:cf:ca:aa:61:48:34:a0:
                    69:1a:fd:61:f6:28:4a:2b:18:df:fd:0c:9b:9d:a3:
                    6e:3c:2d:57:17:4b:06:73:1c:f1:03:03:71:7d:24:
                    c8:06:33:5d:2a:1f:bd:d9:c9:85:4c:dc:54:e0:d6:
                    f0:ad:55:34:58:af:2c:94:9d:11:ea:bb:ae:fc:99:
                    e8:4f:a7:10:08:21:2d:0e:d4:55:b5:77:6a:12:b8:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:28:9D:6E:78:89:02:26:BD:4E:BF:22:9F:86:73:59:E7:7F:33:99
            X509v3 Authority Key Identifier:
                keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/WSidbniJAia9Tr8in4ZzWed_M5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.103.193.0-193.103.194.255
                  193.103.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:60:88:c1:6a:05:82:d9:cc:f8:3c:bc:71:0b:b7:39:52:24:
         ea:c0:e3:04:6a:89:68:38:d5:fa:3e:91:51:4d:3b:df:b8:89:
         7c:8d:e7:61:65:b0:74:45:e7:7e:f5:bf:c6:d4:80:75:ed:fa:
         99:14:73:88:6a:73:38:5d:fa:97:60:3c:6d:5f:cd:b7:80:46:
         71:89:21:11:e3:60:9a:9b:36:fc:4b:9f:04:cc:28:3f:51:a9:
         fc:c1:aa:ee:21:00:27:a1:59:17:fa:ba:9a:4b:cc:85:a9:e5:
         81:a1:d9:83:29:3a:34:86:3b:ba:d8:d8:5d:8e:4e:40:7b:ef:
         e3:b5:65:49:1f:71:cf:48:2b:6f:b9:13:b5:b4:58:2c:0f:bb:
         56:27:59:17:ee:c5:13:1f:8a:ec:ee:85:c8:7d:f7:f6:86:51:
         40:26:f9:8a:ef:ca:13:14:ba:b3:f4:e0:cd:ea:d0:8d:68:2e:
         c2:0f:09:a9:f4:47:f7:a9:cb:78:42:f5:58:9d:98:e4:0e:05:
         d4:43:89:7c:3e:fb:ca:d5:9d:e5:0e:7f:2b:2d:41:e5:19:e7:
         1e:aa:b3:d4:b9:7c:12:c3:39:6e:ae:de:00:6e:5c:85:0b:e9:
         3d:61:2b:bf:17:51:3f:4a:18:53:f3:e5:77:ee:1b:c4:74:92:
         97:c6:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:27 2024 by rpki-client on console-ams.rpki-client.org