Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WvgWLh9oXUSYKJ91Tggb-vEDasY.roa
File:                     WvgWLh9oXUSYKJ91Tggb-vEDasY.roa (raw, json)
Hash identifier:          Hf5m6C2e/LKiliJJ4qho0/xXtxbUibq4jfsoidpY5Zc=
Subject key identifier:   5A:F8:16:2E:1F:68:5D:44:98:28:9F:75:4E:08:1B:FA:F1:03:6A:C6
Certificate issuer:       /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial:       429640EA
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WvgWLh9oXUSYKJ91Tggb-vEDasY.roa
Signing time:             Sat 01 Jan 2022 06:04:54 +0000
ROA not before:           Sat 01 Jan 2022 06:04:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12668
IP address blocks:        188.18.112.0/24 maxlen: 24
                          188.18.116.0/24 maxlen: 24
                          188.18.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117143274 (0x429640ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
        Validity
            Not Before: Jan  1 06:04:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5af8162e1f685d4498289f754e081bfaf1036ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:bb:02:7f:4e:17:6a:c2:db:20:ef:ff:a3:
                    b2:5f:ac:65:88:d5:30:d0:8b:77:b9:b3:ce:8c:33:
                    fc:ab:45:ee:04:b1:16:6a:67:c6:81:f4:c7:74:33:
                    6a:e2:bf:b0:08:e6:01:51:34:c1:0c:b4:da:9a:57:
                    ac:4f:19:4d:69:d8:33:ec:e4:80:f5:3f:06:7e:12:
                    56:b4:08:c6:2e:5e:14:31:57:d2:a7:fa:d3:6f:a4:
                    e1:b5:a4:a2:7a:1b:3a:71:52:8a:eb:81:09:c5:40:
                    7c:e4:a3:ab:fb:2c:ce:2e:13:ed:57:e4:69:74:04:
                    d3:07:1d:f7:0e:6b:d1:54:cf:d6:24:28:92:c5:8c:
                    2c:29:3b:23:f7:04:36:2e:26:c0:76:a4:4f:df:2d:
                    0c:f2:4f:9f:36:56:52:b7:a2:3d:61:fa:06:28:a0:
                    33:d2:9b:ee:28:d2:22:38:02:01:65:57:29:bd:6d:
                    19:b0:5e:04:1c:0b:57:01:5a:a3:70:67:28:84:c0:
                    e6:90:a1:65:71:da:da:a5:b2:37:e2:2f:5e:f3:28:
                    26:5f:7c:2b:3c:f6:7a:2c:19:ad:60:95:99:9d:7b:
                    cf:61:e1:40:30:cb:24:4d:f7:df:cb:30:1e:fb:25:
                    9b:3e:b2:c1:f3:4e:df:ef:6e:c4:d4:40:90:a3:bb:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F8:16:2E:1F:68:5D:44:98:28:9F:75:4E:08:1B:FA:F1:03:6A:C6
            X509v3 Authority Key Identifier:
                keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WvgWLh9oXUSYKJ91Tggb-vEDasY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.18.112.0/23
                  188.18.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:9c:aa:ff:ce:a2:34:66:a3:16:00:35:77:0a:a9:e3:a7:
         be:b3:46:a0:01:bb:cf:f5:ca:c2:a5:82:57:4f:aa:81:e3:70:
         ef:6e:8e:d7:14:cd:fd:b4:4d:a4:5d:21:36:d0:fb:40:1a:0a:
         a2:48:ec:24:58:fe:12:f6:bf:76:ce:bd:7d:4b:89:e2:14:33:
         7f:f7:43:7e:24:ed:b3:b4:15:80:41:65:da:8c:df:4c:67:40:
         a8:33:dc:bb:33:e6:13:c7:13:73:7b:45:a7:d2:17:02:e5:17:
         00:77:7e:fa:f1:5a:80:2e:4d:1a:f1:a7:07:8b:10:5d:13:80:
         c0:a3:6d:11:77:56:df:d0:c9:44:be:c7:f9:48:b6:95:88:df:
         37:78:9c:d1:dc:18:ee:f1:87:36:01:1f:34:70:c1:95:05:c3:
         55:c0:3d:41:5c:c3:b3:d5:85:28:8d:f3:00:82:b8:38:2e:08:
         45:09:7f:1c:f7:6c:56:12:4d:71:87:1b:49:dc:3a:9b:7d:13:
         c9:00:58:90:8d:a1:a9:10:45:ba:0a:c6:ea:e8:4e:a2:be:fb:
         da:4d:2b:e3:7c:67:33:0b:61:3f:77:99:32:b5:05:58:0e:12:
         cd:5b:6d:77:bf:1e:88:8f:46:09:ed:50:47:be:5b:81:bd:d2:
         2c:87:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-fra.rpki-client.org