Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/WC-y3ABgsCHOESk5EBzP3DIX2Qw.roa
File:                     WC-y3ABgsCHOESk5EBzP3DIX2Qw.roa (raw, json)
Hash identifier:          L2WZNjwVsB8/SawE0e2i9eZ4CBpBjDaHLthxYCjbW04=
Subject key identifier:   58:2F:B2:DC:00:60:B0:21:CE:11:29:39:10:1C:CF:DC:32:17:D9:0C
Certificate issuer:       /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial:       380C43B7
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/WC-y3ABgsCHOESk5EBzP3DIX2Qw.roa
Signing time:             Wed 19 Jan 2022 10:14:10 +0000
ROA not before:           Wed 19 Jan 2022 10:14:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210050
IP address blocks:        46.229.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940327863 (0x380c43b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
        Validity
            Not Before: Jan 19 10:14:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=582fb2dc0060b021ce112939101ccfdc3217d90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:41:f0:64:e5:ac:8f:bd:8d:4d:d1:cb:6b:
                    ad:b9:19:29:87:c4:10:dc:2a:be:36:ea:30:d9:46:
                    25:c7:da:ad:3e:56:f6:83:2a:3e:a9:48:f0:cb:83:
                    38:db:66:9e:63:1e:f0:a3:01:8d:72:ef:20:de:bc:
                    7a:12:9a:f4:4c:96:f1:fe:83:48:a1:c2:0a:a5:8d:
                    a5:72:a6:bc:82:d9:70:65:fe:99:a2:ac:42:1a:d7:
                    22:8c:64:1a:64:e8:45:32:fe:c8:2b:33:b7:01:d2:
                    ba:aa:2c:62:e5:0b:c7:fa:f5:f9:8a:37:0d:7d:c2:
                    cb:34:c7:ae:f0:2c:e1:2e:ff:fe:46:cd:c1:80:b9:
                    f1:d3:1d:d0:d9:08:19:28:93:f3:9a:3d:cc:b0:ca:
                    ec:8c:91:52:ca:cf:7e:2d:6f:15:5e:8c:93:17:46:
                    2c:25:a4:35:0e:3c:4b:6e:ed:c6:8a:15:8e:4a:fe:
                    0a:6f:a8:cb:0f:a3:92:87:9c:87:19:2c:12:b9:d8:
                    71:5e:bb:2f:31:94:3f:7a:a5:c9:05:98:51:76:ff:
                    b3:f9:0f:00:9d:e8:1d:58:8e:24:ae:5f:b3:fd:31:
                    1d:e0:74:16:6d:92:2b:fa:11:e8:26:39:bd:5c:c4:
                    2e:1b:88:93:35:dd:e8:28:ca:71:5c:82:b0:bf:7b:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:B2:DC:00:60:B0:21:CE:11:29:39:10:1C:CF:DC:32:17:D9:0C
            X509v3 Authority Key Identifier:
                keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/WC-y3ABgsCHOESk5EBzP3DIX2Qw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:af:b7:f3:a1:e1:2c:40:6b:34:0e:f7:c9:90:2b:d5:1b:f7:
         5b:75:b1:6f:40:cc:ea:de:9e:b1:9a:d5:60:d6:74:f4:4f:46:
         7c:ca:8b:9d:d7:73:dc:c0:5a:13:16:70:44:2f:55:e0:56:ec:
         a8:b0:26:91:31:03:43:50:9c:fb:3d:b2:33:5b:98:e8:cd:82:
         1a:c3:7f:34:8c:1f:c2:10:0c:8a:2b:c3:55:28:2f:8f:88:31:
         d4:08:72:b6:10:24:e7:91:23:25:52:13:bf:12:ff:9e:01:eb:
         42:f9:fa:72:5f:59:38:a7:de:c4:09:79:c0:c8:c9:0c:f3:a0:
         50:da:66:f9:c5:a3:b4:56:6b:ca:83:ee:53:b6:ca:4e:f9:87:
         9d:31:4c:e4:be:58:4b:84:c8:ae:92:a5:5c:c7:30:e3:b5:64:
         67:c6:e0:80:83:27:ee:63:24:5b:be:04:45:4c:0e:68:2e:0a:
         d0:00:0e:49:cd:2a:98:b7:15:09:fc:c9:ae:3c:f4:83:20:d0:
         c9:2d:8d:b4:41:78:18:d0:15:e5:c9:bc:08:0b:ff:8b:5a:15:
         46:87:d8:24:2c:6a:30:e0:e9:a5:f5:c8:ca:0b:f7:e6:bd:4b:
         4e:7e:16:21:ed:1e:b2:8b:4a:c0:be:d8:ef:73:d4:eb:65:3e:
         f8:7f:58:50
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOAxDtzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NGJjYzEyYWZhNGYwNTczOWY0NWY2MDVlMjIxYzY0YzNjMGQyZWQ2MB4XDTIyMDEx
OTEwMTQxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTgyZmIyZGMwMDYw
YjAyMWNlMTEyOTM5MTAxY2NmZGMzMjE3ZDkwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVEQfBk5ayPvY1N0ctrrbkZKYfEENwqvjbqMNlGJcfarT5W
9oMqPqlI8MuDONtmnmMe8KMBjXLvIN68ehKa9EyW8f6DSKHCCqWNpXKmvILZcGX+
maKsQhrXIoxkGmToRTL+yCsztwHSuqosYuULx/r1+Yo3DX3CyzTHrvAs4S7//kbN
wYC58dMd0NkIGSiT85o9zLDK7IyRUsrPfi1vFV6MkxdGLCWkNQ48S27txooVjkr+
Cm+oyw+jkoechxksErnYcV67LzGUP3qlyQWYUXb/s/kPAJ3oHViOJK5fs/0xHeB0
Fm2SK/oR6CY5vVzELhuIkzXd6CjKcVyCsL97U90CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRYL7LcAGCwIc4RKTkQHM/cMhfZDDAfBgNVHSMEGDAWgBSkvMEq+k8Fc59F
9gXiIcZMPA0u1jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BMekJLdnBQQlhPZlJmWUY0aUhHVER3Tkx0WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvYmIxNDBhLTJhMjEtNGY1Zi1iZGNjLTg4YjAxNmJiZDU4MS8x
L1dDLXkzQUJnc0NIT0VTazVFQnpQM0RJWDJRdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
YmIxNDBhLTJhMjEtNGY1Zi1iZGNjLTg4YjAxNmJiZDU4MS8xL3BMekJLdnBQQlhP
ZlJmWUY0aUhHVER3Tkx0WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC7lNDANBgkqhkiG9w0BAQsFAAOC
AQEASa+386HhLEBrNA73yZAr1Rv3W3Wxb0DM6t6esZrVYNZ09E9GfMqLnddz3MBa
ExZwRC9V4FbsqLAmkTEDQ1Cc+z2yM1uY6M2CGsN/NIwfwhAMiivDVSgvj4gx1Ahy
thAk55EjJVITvxL/ngHrQvn6cl9ZOKfexAl5wMjJDPOgUNpm+cWjtFZryoPuU7bK
TvmHnTFM5L5YS4TIrpKlXMcw47VkZ8bggIMn7mMkW74ERUwOaC4K0AAOSc0qmLcV
CfzJrjz0gyDQyS2NtEF4GNAV5cm8CAv/i1oVRofYJCxqMODppfXIygv35r1LTn4W
Ie0esotKwL7Y73PU62U++H9YUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:42 2024 by rpki-client on console-ams.rpki-client.org