Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wLZSWx6_8ZjQbUWEpO65FDE5JCc.roa
File:                     wLZSWx6_8ZjQbUWEpO65FDE5JCc.roa (raw, json)
Hash identifier:          LLV2zEramyplTM6vDRPe2AuPINPtvthAFz+kD89dvIk=
Subject key identifier:   C0:B6:52:5B:1E:BF:F1:98:D0:6D:45:84:A4:EE:B9:14:31:39:24:27
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       38787445
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wLZSWx6_8ZjQbUWEpO65FDE5JCc.roa
Signing time:             Sat 01 Jan 2022 05:54:13 +0000
ROA not before:           Sat 01 Jan 2022 05:54:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15818
IP address blocks:        159.148.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947418181 (0x38787445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Jan  1 05:54:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0b6525b1ebff198d06d4584a4eeb91431392427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:a7:20:d9:58:be:72:de:23:bb:4c:7e:e8:
                    fd:c4:ff:41:60:8d:98:da:59:64:ee:72:8d:9c:a0:
                    61:b3:b2:99:59:b7:4b:51:9c:2d:18:0a:85:f3:2c:
                    47:f7:23:92:44:b9:6d:59:21:eb:ea:4f:23:05:2f:
                    4a:44:c7:2a:1a:38:b5:08:d6:8f:d0:c3:0d:cf:1d:
                    f4:82:cb:40:05:45:04:46:a4:0b:bf:a4:17:2d:d2:
                    3e:1b:8f:3b:2f:4a:60:6f:f4:a1:42:52:02:6f:d2:
                    c8:89:fd:31:45:ef:81:14:db:13:fd:9e:a0:2f:df:
                    65:97:c5:c2:3f:44:04:a7:c3:f1:d0:22:fb:e1:84:
                    53:d5:b2:d6:eb:87:74:80:da:04:30:19:b8:2d:3e:
                    42:dd:36:57:b3:a4:01:4b:09:d5:a9:03:66:25:f6:
                    dc:d3:18:57:e8:4c:63:59:a3:80:e5:5e:ad:40:07:
                    2d:8c:a4:0c:cc:4e:e1:58:75:e8:ba:70:5a:26:b9:
                    81:c4:7f:26:c0:86:e6:05:94:fe:05:da:23:79:7d:
                    64:25:b3:d0:4d:2a:a7:aa:bf:37:ff:8b:6c:61:7e:
                    d5:ea:4f:ea:22:43:80:ba:c6:d6:dd:d7:63:b3:bf:
                    5a:44:f3:48:19:c4:97:67:fd:24:f3:25:38:e3:ca:
                    4f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B6:52:5B:1E:BF:F1:98:D0:6D:45:84:A4:EE:B9:14:31:39:24:27
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wLZSWx6_8ZjQbUWEpO65FDE5JCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.148.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ec:37:79:34:dc:f0:e3:a0:19:05:12:17:44:e9:cf:4d:8a:
         a3:6a:57:c7:8b:e5:ec:46:9c:86:04:8b:3a:2c:9d:f5:06:17:
         17:81:59:6d:5f:aa:a7:d3:60:71:85:f2:66:ae:73:b0:fe:f3:
         07:ab:46:6a:e6:67:be:12:88:75:ee:b0:d2:52:16:dc:da:0e:
         1c:62:12:fe:f0:59:cf:34:97:60:36:00:63:03:c2:ff:76:b6:
         52:86:57:f6:12:ab:2f:ec:9b:46:ff:02:5c:0b:50:cd:16:e1:
         af:9f:3e:53:bb:e3:39:0c:82:36:35:d4:c8:37:fe:33:c4:62:
         0a:b1:e5:46:28:ee:c0:a8:37:e7:59:a0:34:57:8f:aa:06:1c:
         17:d0:6b:fe:3b:7f:a6:ce:78:9b:50:85:aa:af:e8:d8:48:6a:
         5a:34:c1:59:d4:ba:ce:07:69:98:5c:b5:d6:85:20:bf:f5:56:
         e4:d5:fc:ca:1b:20:d2:bd:19:16:84:75:25:de:74:58:e9:65:
         6d:79:c1:f8:90:6b:94:15:21:8c:14:e2:78:ae:ae:7a:33:e5:
         13:d9:90:d4:3c:2e:4d:75:8e:b0:38:e8:d2:9a:90:1a:c9:d3:
         04:9d:db:dd:c0:1a:e1:fc:82:c8:27:95:da:c5:ea:be:c5:22:
         81:e6:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:46 2023 by rpki-client on console-fra.rpki-client.org