Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/wlLf6CrXqGyZPjr4bofGhgU46a0.roa
File:                     wlLf6CrXqGyZPjr4bofGhgU46a0.roa (raw, json)
Hash identifier:          Sq4Kk8DZyNrMufMpD+RS3xhI57Cif8nukiCVyOBP8Q8=
Subject key identifier:   C2:52:DF:E8:2A:D7:A8:6C:99:3E:3A:F8:6E:87:C6:86:05:38:E9:AD
Certificate issuer:       /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial:       01852AC141C2ED72760A86D14795AE25C832
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/wlLf6CrXqGyZPjr4bofGhgU46a0.roa
Signing time:             Mon 19 Dec 2022 14:19:46 +0000
ROA not before:           Mon 19 Dec 2022 14:19:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41585
IP address blocks:        194.9.124.0/23 maxlen: 23
                          194.9.126.0/24 maxlen: 24
                          91.195.50.0/23 maxlen: 23
                          91.194.254.0/23 maxlen: 23
                          91.136.128.0/17 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2a:c1:41:c2:ed:72:76:0a:86:d1:47:95:ae:25:c8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
        Validity
            Not Before: Dec 19 14:19:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c252dfe82ad7a86c993e3af86e87c6860538e9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:2b:ac:45:cc:24:9d:5a:78:e2:b4:12:eb:
                    76:91:08:33:f4:04:80:5b:ce:26:6b:a8:bd:22:0a:
                    09:4a:3c:ea:54:a5:e9:4a:92:04:be:14:a8:98:63:
                    eb:82:83:72:a0:13:f1:ce:03:5b:f6:71:20:01:be:
                    1a:ef:9a:ef:d0:4d:bb:14:4a:c4:3d:eb:ad:45:18:
                    7e:13:ac:a1:80:c4:bc:7d:f0:a5:33:21:6a:4a:6d:
                    66:da:87:ec:df:38:04:dc:18:54:77:58:d3:30:64:
                    88:d3:c2:25:d2:47:55:9c:d6:58:84:44:64:c1:89:
                    c5:64:42:f9:a4:ea:f4:a8:b2:2d:e0:d1:f8:7a:bf:
                    0f:39:b5:18:ca:e9:31:ef:e5:ec:ad:fa:8a:55:1b:
                    be:fd:a0:7b:13:88:9c:6d:01:0f:36:01:a1:8c:19:
                    69:72:5d:f6:86:34:53:74:ee:3a:95:f0:39:d1:a5:
                    cc:76:3d:8d:aa:0b:d6:1b:73:9a:57:8f:de:16:93:
                    a8:12:59:43:08:09:bd:e7:7d:18:85:8f:25:3c:d6:
                    c9:3a:9f:81:88:8a:7c:88:89:8d:67:f1:f7:a3:ae:
                    49:c9:14:ac:cf:0a:29:32:6d:df:bc:f8:39:00:36:
                    ed:36:d2:ef:54:44:ac:c4:71:bb:7f:e6:54:ea:bb:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:52:DF:E8:2A:D7:A8:6C:99:3E:3A:F8:6E:87:C6:86:05:38:E9:AD
            X509v3 Authority Key Identifier:
                keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/wlLf6CrXqGyZPjr4bofGhgU46a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.136.128.0/17
                  91.194.254.0/23
                  91.195.50.0/23
                  194.9.124.0-194.9.126.255

    Signature Algorithm: sha256WithRSAEncryption
         43:21:c6:87:3d:29:b1:dc:46:0f:13:0e:d8:6e:f7:47:11:76:
         4f:b3:95:55:a7:10:1c:5c:27:03:3b:0c:d8:83:97:e3:08:e4:
         3d:9d:c4:6e:5d:64:f5:c8:61:49:f5:94:21:67:f3:bd:4e:fa:
         aa:37:62:ac:c7:31:1f:36:5d:f0:68:81:a6:2b:c6:d3:0b:a1:
         c2:cd:25:6f:4d:4a:22:e3:ab:ca:32:ef:fd:4c:f2:0b:34:2f:
         0c:f5:05:d8:93:c4:5e:0c:40:da:69:c2:af:4c:d1:3d:1d:0a:
         6e:a2:9d:5a:6d:13:09:ec:d6:f9:8e:e7:1c:5d:20:26:f3:48:
         08:14:14:77:ca:d6:2b:fa:0e:76:96:aa:7e:46:27:e8:61:69:
         50:aa:8a:ed:23:1c:d4:93:5e:ef:c1:41:48:07:e3:a0:e2:7c:
         05:b7:88:08:8e:01:2d:cf:15:5c:10:eb:c4:80:32:a8:52:67:
         3d:e4:ab:bf:03:8a:ff:c0:f3:8c:74:59:1f:e8:b0:03:b9:1b:
         07:e2:65:cf:69:9f:7f:d5:a9:6c:cc:86:00:aa:e6:78:6a:63:
         80:3e:94:8f:7f:17:45:c4:02:33:90:6e:68:a3:18:1f:d6:77:
         08:ec:22:9e:1e:a1:61:d5:a4:e8:14:c8:2e:cb:ba:3f:16:99:
         ba:c3:9a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:51 2024 by rpki-client on console-fra.rpki-client.org