Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WWPNwSv3eiLM_3MwZ449xx4GKXU.roa
File:                     WWPNwSv3eiLM_3MwZ449xx4GKXU.roa (raw, json)
Hash identifier:          V+XCL0ajcI3k59GSlitCc7SWHRbCK54DfXyKw7ECdjE=
Subject key identifier:   59:63:CD:C1:2B:F7:7A:22:CC:FF:73:30:67:8E:3D:C7:1E:06:29:75
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       0183B1EA7AD3E4D3BD627AD0C6E63F58ECBC
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WWPNwSv3eiLM_3MwZ449xx4GKXU.roa
Signing time:             Fri 07 Oct 2022 10:07:57 +0000
ROA not before:           Fri 07 Oct 2022 10:07:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     422794
IP address blocks:        92.247.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b1:ea:7a:d3:e4:d3:bd:62:7a:d0:c6:e6:3f:58:ec:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Oct  7 10:07:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5963cdc12bf77a22ccff7330678e3dc71e062975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4a:7f:28:1a:3f:8a:19:31:fd:18:f3:ff:f4:
                    ca:5b:1d:1c:69:73:24:5e:43:8b:f1:ef:19:0f:cb:
                    12:ab:cd:fb:26:28:ea:6e:2a:16:47:ab:9f:c5:4c:
                    79:d3:17:36:ad:51:17:b2:7d:3b:7d:a7:21:cc:49:
                    cd:67:57:c8:4e:46:f5:cb:9a:81:bd:a7:59:83:85:
                    ea:38:9a:82:2a:ec:6a:12:ad:da:38:1e:2e:99:a9:
                    2d:9d:66:3e:16:29:03:72:42:9b:d6:f1:a1:a8:25:
                    e6:0a:38:36:4a:2d:89:3d:31:cc:8a:d0:81:a1:6b:
                    c0:ad:09:65:09:d9:09:cf:49:14:e7:ea:af:3c:a0:
                    fa:88:15:3e:f0:1c:23:e2:39:86:2f:f3:13:b4:8c:
                    68:c8:a9:ff:cc:8c:3b:c3:17:5c:da:1b:ce:24:e3:
                    03:cf:e3:d0:fc:2d:ea:2a:f7:cf:12:5d:bc:23:e7:
                    7d:c9:f6:f9:4f:b8:05:32:89:ff:25:1a:33:1b:fe:
                    43:47:d6:6a:96:bc:cf:e2:d0:bd:0d:87:60:ed:0a:
                    a4:5e:43:0d:3a:52:53:93:3a:0e:7d:ab:87:d4:3a:
                    8b:0b:f4:2f:16:cf:84:c0:33:bb:9d:72:3f:f1:ec:
                    3d:38:9c:2f:01:b7:11:d4:04:41:f3:65:44:5c:fd:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:CD:C1:2B:F7:7A:22:CC:FF:73:30:67:8E:3D:C7:1E:06:29:75
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WWPNwSv3eiLM_3MwZ449xx4GKXU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.247.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:1f:35:a3:15:66:98:8e:78:ef:c6:63:ec:d0:4c:74:00:
         5e:b6:1a:f2:a1:36:a1:aa:aa:2c:34:ce:cf:28:f4:12:e0:61:
         19:45:bc:45:67:cf:90:8e:46:5e:f0:9e:53:5e:59:e8:1c:dc:
         f8:7a:8d:ff:ae:cc:ce:e6:bf:a8:85:96:90:68:98:84:b6:2a:
         80:bd:ba:16:17:9c:20:eb:31:f3:22:cc:9f:84:6f:3d:3a:f1:
         9a:28:c1:72:2a:ef:8d:c1:a4:af:83:0e:e5:f8:dc:c0:20:da:
         3c:92:3f:ea:e4:26:54:4c:78:ba:2a:c8:8d:2b:21:81:00:2d:
         37:25:f5:3d:f9:61:9c:42:2e:19:4a:42:37:13:4a:7b:bb:81:
         70:38:f7:d3:e6:dd:3e:5e:a1:d4:13:17:e1:e7:26:56:0d:85:
         47:a9:8d:9e:e0:ee:cd:68:42:62:da:dd:58:2e:9c:5b:97:71:
         87:17:11:5c:70:d7:25:ed:9d:b8:1b:22:69:ce:1e:88:f6:9a:
         93:c3:1e:25:b1:a2:ce:c9:42:23:82:3f:d9:d8:71:45:65:f1:
         46:26:f0:41:c4:f0:36:af:9c:4a:62:8a:c8:56:eb:ea:b6:17:
         8d:9d:b4:10:7f:cb:5a:ce:aa:c3:e3:2e:d0:92:2d:84:dc:c3:
         f9:44:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:12 2023 by rpki-client on console-ams.rpki-client.org