Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/Wsj7chCiTryQ0nao05Auybflgh4.roa
File:                     Wsj7chCiTryQ0nao05Auybflgh4.roa (raw, json)
Hash identifier:          v1+8kxUEx2mx8aqXGLhGIzwaKbeTBJxJxW6dhVqRXmY=
Subject key identifier:   5A:C8:FB:72:10:A2:4E:BC:90:D2:76:A8:D3:90:2E:C9:B7:E5:82:1E
Certificate issuer:       /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial:       019546
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/Wsj7chCiTryQ0nao05Auybflgh4.roa
Signing time:             Wed 08 Jun 2022 09:17:02 +0000
ROA not before:           Wed 08 Jun 2022 09:17:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8075
IP address blocks:        91.216.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103750 (0x19546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
        Validity
            Not Before: Jun  8 09:17:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ac8fb7210a24ebc90d276a8d3902ec9b7e5821e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:e8:f0:20:da:aa:a0:3c:4d:57:32:22:4e:
                    84:7e:f1:1e:cc:71:f3:e5:43:05:52:9b:83:2c:ae:
                    47:d1:cb:e8:e7:8d:8c:84:7b:32:b8:65:7e:52:a9:
                    61:20:72:00:95:4d:74:b3:29:c1:74:8c:2f:35:57:
                    8d:d7:d3:89:03:81:22:65:94:01:26:5d:80:35:13:
                    d3:bd:99:a7:71:d7:30:c6:28:ee:3e:dc:b1:69:e9:
                    09:b5:a1:58:56:8e:59:9b:66:e7:4e:fd:7c:f0:a4:
                    05:64:96:34:e6:3a:86:ea:14:57:74:2b:31:b2:cd:
                    09:eb:65:d0:89:54:ec:e2:dc:e3:fe:cc:65:ab:7e:
                    40:02:d1:4b:49:37:70:8c:f9:a4:1e:97:f7:97:b8:
                    be:04:5e:a9:9d:a8:00:48:8e:ec:25:49:b1:27:e9:
                    d0:3d:64:6a:25:e3:cc:f4:d6:3d:ca:12:ad:78:e7:
                    4f:05:bd:e3:62:16:4f:a8:7a:02:7e:0c:55:75:fe:
                    8c:1d:a0:3e:08:39:be:c8:4b:0c:ae:13:0b:c3:cf:
                    55:31:ff:d4:c9:35:05:2f:1c:06:76:10:20:bd:99:
                    54:72:47:c2:79:ce:b7:ee:2a:45:2a:5d:cd:71:de:
                    cb:fe:d9:f7:06:17:7e:03:35:87:c6:47:fa:17:bf:
                    16:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C8:FB:72:10:A2:4E:BC:90:D2:76:A8:D3:90:2E:C9:B7:E5:82:1E
            X509v3 Authority Key Identifier:
                keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/Wsj7chCiTryQ0nao05Auybflgh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f0:d7:bd:7f:f1:90:8e:5b:52:42:96:c5:9f:b2:98:56:92:
         3f:15:8a:c0:f5:83:98:b4:8c:6e:80:cd:e2:a5:e0:41:99:ff:
         5c:10:b0:20:f4:f9:83:ed:9c:b2:5a:7c:17:e3:13:4e:97:e9:
         96:d1:5f:fd:25:1a:22:a4:58:b6:5e:ff:a2:c7:eb:3d:ec:c5:
         4f:82:37:71:4e:06:9b:fc:fb:0b:d7:b5:22:70:39:53:c4:3c:
         d4:b5:66:96:92:a1:69:f9:b0:ca:19:94:2e:1c:69:35:a3:00:
         51:66:34:17:b8:69:23:c4:58:e9:71:69:d8:a8:b5:dc:7d:90:
         26:22:9d:32:2e:d2:7c:e6:83:3c:84:9f:99:37:e5:8b:30:cd:
         7f:0f:ef:64:1e:90:b8:41:3f:07:c6:7d:68:18:0e:b3:9f:36:
         3a:50:08:ae:8c:da:53:2c:c5:74:ac:9d:b0:77:7d:79:b9:e8:
         0e:a9:f9:80:82:34:c8:49:a8:75:88:80:98:4f:fe:b8:fb:71:
         cc:88:26:3c:88:72:d0:22:93:39:57:89:d1:91:c1:6b:ff:94:
         d6:ea:71:46:a4:32:af:5d:c6:14:7c:69:5c:b9:fc:34:68:db:
         ec:7e:e6:2f:90:9e:4f:58:57:3c:a7:2f:6e:97:d4:43:8e:61:
         9c:e6:ba:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:12 2024 by rpki-client on console-ams.rpki-client.org