Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/WRBLUG7xBlKOFU9k0HtLBYWabJU.roa
File:                     WRBLUG7xBlKOFU9k0HtLBYWabJU.roa (raw, json)
Hash identifier:          2VM9+6YoMGwLXc/ncHGGKgyDPsK6xcLTtN2JWGBCaeg=
Subject key identifier:   59:10:4B:50:6E:F1:06:52:8E:15:4F:64:D0:7B:4B:05:85:9A:6C:95
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       40AC55
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/WRBLUG7xBlKOFU9k0HtLBYWabJU.roa
Signing time:             Tue 04 Jan 2022 23:36:58 +0000
ROA not before:           Tue 04 Jan 2022 23:36:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57436
IP address blocks:        185.19.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4238421 (0x40ac55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Jan  4 23:36:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59104b506ef106528e154f64d07b4b05859a6c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:73:95:a4:e5:66:1c:78:8f:e8:bd:14:58:
                    b8:55:b9:9d:52:32:3b:f0:65:3c:4a:a8:f8:c1:5e:
                    0e:7a:d0:ec:7d:90:7f:ca:98:30:8f:64:ca:4a:cc:
                    ea:2c:5b:db:ae:1c:b9:88:71:23:65:67:7f:e1:67:
                    e3:30:0b:06:2e:31:30:84:a4:ff:b9:4c:66:c4:07:
                    70:22:09:e5:31:d5:5e:da:4e:88:5b:a1:11:0f:13:
                    d8:6d:c6:47:d6:0d:c5:36:bc:11:e7:8e:c8:30:22:
                    e5:d4:d6:e2:a1:e1:95:76:dc:fb:a1:ca:55:82:0f:
                    12:55:f7:2a:4c:a1:d8:04:d3:e2:90:9b:65:b5:41:
                    ce:7c:ce:f4:cb:3c:74:aa:1d:40:fa:49:72:f9:76:
                    21:3f:69:e7:44:54:c9:a7:ca:f3:d0:26:8b:e0:a6:
                    42:4e:cc:75:08:0d:2d:a1:c1:51:d4:7d:04:e1:91:
                    d7:8c:bb:4e:30:91:94:8a:8f:90:66:b6:83:5a:aa:
                    ad:5e:19:f6:ee:76:fe:9d:c1:aa:23:3d:62:4a:7c:
                    7b:ac:0b:ed:97:eb:59:9b:25:d1:dc:91:80:26:b0:
                    4e:ce:98:d3:e3:59:08:43:a9:76:d0:cd:db:bd:be:
                    af:5e:13:8d:e2:9b:25:d6:fa:ef:50:32:a9:1f:e2:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:10:4B:50:6E:F1:06:52:8E:15:4F:64:D0:7B:4B:05:85:9A:6C:95
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/WRBLUG7xBlKOFU9k0HtLBYWabJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:dd:e0:05:a7:6c:bf:bc:1c:fc:75:ad:e0:1a:19:cb:05:b5:
         b5:61:e0:a3:d8:27:fc:4e:7d:ea:2e:c5:0b:d8:56:59:65:5c:
         e1:b9:71:4d:a4:1d:5a:e1:05:55:55:09:65:f3:bf:65:fa:37:
         d6:5f:7f:1d:36:d1:03:3d:7b:df:5c:40:91:45:a0:07:e9:b6:
         18:bf:6a:8c:a3:ca:ed:ff:81:24:13:02:87:dc:5e:4d:de:c6:
         9e:cb:73:ca:fc:01:54:4e:e7:f2:86:2e:3d:87:29:d9:26:79:
         11:73:49:f0:c0:2c:7e:5b:48:68:99:59:b9:0a:e3:67:72:1d:
         5a:91:34:43:09:ad:37:f4:e7:ac:20:9d:54:fe:db:46:9a:7a:
         8d:42:83:f3:d8:e4:1f:a2:f5:91:b5:0e:3c:ab:85:5f:85:a7:
         b6:54:e1:27:bc:ad:d3:ac:41:01:ac:55:3b:6c:10:b8:89:da:
         fe:75:9a:9c:bc:e1:e1:99:1c:6f:11:da:99:ed:f3:e5:d6:75:
         64:b8:e5:2d:e5:e2:80:14:29:94:53:10:6e:8e:8b:60:a6:93:
         bd:ef:34:f9:30:8e:d1:2a:f7:7e:9f:8a:cd:5a:6e:4c:e2:21:
         a8:73:45:29:a5:0f:2e:b0:7d:ae:4f:36:ac:1a:97:3c:21:a5:
         46:9e:bf:89
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDQKxVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIy
NjJiZjIxZGU1MTM4NTg1OTQxNmM0YzYwODAwMWUyMDI1YTVkMjUwHhcNMjIwMTA0
MjMzNjU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1OTEwNGI1MDZlZjEw
NjUyOGUxNTRmNjRkMDdiNGIwNTg1OWE2Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv1xzlaTlZhx4j+i9FFi4VbmdUjI78GU8Sqj4wV4OetDsfZB/
ypgwj2TKSszqLFvbrhy5iHEjZWd/4WfjMAsGLjEwhKT/uUxmxAdwIgnlMdVe2k6I
W6ERDxPYbcZH1g3FNrwR547IMCLl1NbioeGVdtz7ocpVgg8SVfcqTKHYBNPikJtl
tUHOfM70yzx0qh1A+kly+XYhP2nnRFTJp8rz0CaL4KZCTsx1CA0tocFR1H0E4ZHX
jLtOMJGUio+QZraDWqqtXhn27nb+ncGqIz1iSnx7rAvtl+tZmyXR3JGAJrBOzpjT
41kIQ6l20M3bvb6vXhON4psl1vrvUDKpH+LaMQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFkQS1Bu8QZSjhVPZNB7SwWFmmyVMB8GA1UdIwQYMBaAFLJivyHeUThYWUFs
TGCAAeICWl0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
c21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84Zi84NjMwOTMtNWVkNi00M2IyLWJiZGEtMTRjNmM1MDU1Zjg4LzEv
V1JCTFVHN3hCbEtPRlU5azBIdExCWVdhYkpVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84
NjMwOTMtNWVkNi00M2IyLWJiZGEtMTRjNmM1MDU1Zjg4LzEvc21LX0lkNVJPRmha
UVd4TVlJQUI0Z0phWFNVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuROXMA0GCSqGSIb3DQEBCwUAA4IB
AQBK3eAFp2y/vBz8da3gGhnLBbW1YeCj2Cf8Tn3qLsUL2FZZZVzhuXFNpB1a4QVV
VQll879l+jfWX38dNtEDPXvfXECRRaAH6bYYv2qMo8rt/4EkEwKH3F5N3saey3PK
/AFUTufyhi49hynZJnkRc0nwwCx+W0homVm5CuNnch1akTRDCa039OesIJ1U/ttG
mnqNQoPz2OQfovWRtQ48q4Vfhae2VOEnvK3TrEEBrFU7bBC4idr+dZqcvOHhmRxv
EdqZ7fPl1nVkuOUt5eKAFCmUUxBujotgppO97zT5MI7RKvd+n4rNWm5M4iGoc0Up
pQ8usH2uTzasGpc8IaVGnr+J
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:32 2024 by rpki-client on console-ams.rpki-client.org