Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/wZdNnGXeKBAp0W0L7MZYpBV5udU.roa
File:                     wZdNnGXeKBAp0W0L7MZYpBV5udU.roa (raw, json)
Hash identifier:          KU8LELCRB0opJNtAjdwdJ/oo2pKWsBjb3K76M7bNmZQ=
Subject key identifier:   C1:97:4D:9C:65:DE:28:10:29:D1:6D:0B:EC:C6:58:A4:15:79:B9:D5
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0947D16A
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/wZdNnGXeKBAp0W0L7MZYpBV5udU.roa
Signing time:             Sat 01 Jan 2022 06:00:36 +0000
ROA not before:           Sat 01 Jan 2022 06:00:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204035
IP address blocks:        46.243.76.0/22 maxlen: 22
                          94.154.136.0/22 maxlen: 22
                          193.42.60.0/22 maxlen: 22
                          77.83.32.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155701610 (0x947d16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 06:00:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1974d9c65de281029d16d0becc658a41579b9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:b0:18:7b:36:98:c8:2b:76:ff:d6:b3:f2:
                    d4:ad:51:4c:5c:a4:4d:2a:4c:28:62:fb:0a:52:96:
                    10:64:94:e1:40:64:bb:f9:63:ff:7e:3f:c7:c0:2f:
                    74:59:f6:ac:9e:6e:5b:2a:70:a8:00:12:86:c9:97:
                    2e:7c:99:c0:07:72:90:86:9d:95:ac:44:6e:c4:de:
                    17:5f:52:30:ed:83:46:3e:a8:ef:70:10:d1:af:24:
                    15:70:1f:a3:56:b3:d3:82:a1:2d:b2:59:ac:40:de:
                    d9:b2:b9:c2:22:82:c0:12:15:1c:b8:22:da:3b:46:
                    32:16:0f:f5:3d:9b:04:98:f2:54:39:d5:b2:3c:ff:
                    4b:47:21:3a:b4:ab:6e:61:eb:6a:6d:dc:06:4c:1a:
                    79:4b:9d:a1:63:5e:8a:66:54:86:d9:9e:8b:1b:77:
                    45:97:a2:2f:d7:bd:ff:fb:f8:8a:b6:cb:46:f6:62:
                    9c:91:02:b9:00:7f:e7:f3:df:88:95:17:42:ba:38:
                    f1:1e:b4:c9:dd:41:2c:34:1b:c6:42:34:ed:81:90:
                    f9:fa:01:f3:ff:78:4b:05:b0:96:3a:78:f2:97:e9:
                    f0:bd:98:11:f3:62:02:67:d1:cc:e3:d2:b0:8e:aa:
                    73:06:c5:41:b4:44:a6:6a:6e:12:88:91:59:f5:05:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:97:4D:9C:65:DE:28:10:29:D1:6D:0B:EC:C6:58:A4:15:79:B9:D5
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/wZdNnGXeKBAp0W0L7MZYpBV5udU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.243.76.0/22
                  77.83.32.0/22
                  94.154.136.0/22
                  193.42.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:ad:2d:9d:b5:4f:d7:f0:73:b1:27:21:04:3e:d6:31:9d:
         cc:ed:c9:84:08:d9:76:8e:68:ad:ff:55:cb:d4:e1:22:c7:b3:
         ee:99:b9:17:22:b3:ae:9c:35:cb:44:3d:c9:20:55:7e:a5:4e:
         3b:c9:2f:05:02:21:fb:dc:18:a9:07:17:bc:2b:3f:b2:a8:4e:
         4d:09:1d:78:bb:e8:98:22:fb:08:a8:aa:dc:cc:4b:5d:29:6d:
         ab:ff:3e:ad:1d:28:54:54:92:fb:7a:7a:54:96:f7:aa:61:e3:
         55:e7:ef:a3:6b:76:7c:d3:11:d0:e2:5e:3c:95:16:5b:24:53:
         a5:51:d0:51:67:a7:7c:e5:d0:93:e7:83:54:e0:ed:9f:bc:8c:
         4a:bb:d7:0f:7b:3c:43:27:3b:0d:fc:43:8e:af:14:d2:45:a8:
         21:7d:9b:18:97:c6:bb:14:9f:07:9a:a1:85:01:08:5e:d1:2a:
         bc:42:19:e1:a2:ca:2c:ac:4e:d4:12:35:4a:5b:f2:fb:d4:ec:
         d9:bd:df:d6:bd:db:99:da:a7:54:e0:72:01:30:85:94:29:9c:
         81:cb:44:f5:ae:fb:5b:35:c2:32:62:6a:5a:48:2e:6b:b4:a2:
         bc:af:a9:49:1a:56:98:fb:0d:66:9e:c4:a6:d9:c1:60:00:f6:
         44:e5:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:14 2024 by rpki-client on console-ams.rpki-client.org