Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/GWVP_LCeiDzS1uDguO3ofA343fQ.roa
File:                     GWVP_LCeiDzS1uDguO3ofA343fQ.roa (raw, json)
Hash identifier:          r2q+ADtaWfxI4Lib3oSe73grWDoCcoa55snrAJgNSKc=
Subject key identifier:   19:65:4F:FC:B0:9E:88:3C:D2:D6:E0:E0:B8:ED:E8:7C:0D:F8:DD:F4
Certificate issuer:       /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial:       04433A76
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/GWVP_LCeiDzS1uDguO3ofA343fQ.roa
Signing time:             Thu 03 Mar 2022 06:22:25 +0000
ROA not before:           Thu 03 Mar 2022 06:22:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39312
IP address blocks:        195.90.110.0/23 maxlen: 23
                          84.47.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71514742 (0x4433a76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
        Validity
            Not Before: Mar  3 06:22:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19654ffcb09e883cd2d6e0e0b8ede87c0df8ddf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:98:16:6e:54:12:35:08:75:b2:5a:3f:62:
                    38:63:f2:b7:dd:92:84:c4:aa:5a:f4:6b:d3:22:06:
                    8b:33:02:41:0f:e2:3c:eb:dd:55:2f:9a:a2:68:2b:
                    2a:ba:6b:a7:31:4a:65:f9:46:c6:c1:2f:20:ed:a0:
                    4b:7d:19:06:ca:96:91:e6:fa:68:c9:8e:83:c7:61:
                    d9:3a:f6:17:bf:ef:b4:03:60:38:cf:d5:71:0c:3d:
                    bd:74:d0:92:45:d7:04:9c:1a:7c:89:b6:62:97:03:
                    09:4f:46:32:fe:9c:67:43:a3:c6:05:85:c3:8f:82:
                    7a:e5:5a:a6:ea:1f:98:38:65:aa:8c:5b:2d:76:f7:
                    59:3b:47:20:ea:5d:dc:3c:17:b3:44:96:bc:21:cb:
                    31:02:d6:e8:97:17:ea:26:aa:00:f6:c6:fd:ea:11:
                    31:9c:ec:77:13:dd:0c:7e:a5:b0:50:4e:ec:4a:d9:
                    f9:d9:78:34:a7:1a:77:7c:e9:fc:c8:c2:80:0e:ad:
                    0e:e5:c1:00:ea:5e:8a:7b:c0:73:9f:93:20:7b:84:
                    c5:69:87:63:5a:8f:10:c7:e4:f8:2f:b9:04:18:b2:
                    6e:e8:97:35:8c:ac:8f:1f:f6:65:2e:d0:5e:e4:0d:
                    ed:e1:d2:2e:70:64:49:67:73:4f:48:52:bd:e3:da:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:65:4F:FC:B0:9E:88:3C:D2:D6:E0:E0:B8:ED:E8:7C:0D:F8:DD:F4
            X509v3 Authority Key Identifier:
                keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/GWVP_LCeiDzS1uDguO3ofA343fQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.47.180.0/24
                  195.90.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:4a:51:0a:47:b2:82:6b:e2:e2:55:a0:1b:56:57:0e:b7:fc:
         ad:f9:85:12:f0:df:29:f8:6a:a6:0e:98:62:1d:22:fe:f0:f6:
         d5:e0:e9:19:d9:df:77:07:61:c4:97:1c:55:30:61:82:fb:df:
         9a:d0:c3:8c:fb:77:fa:1f:e3:20:8e:13:8d:f9:29:2a:0b:f9:
         08:ce:7e:e9:9a:04:9e:8f:44:ad:8a:83:f7:bd:49:69:43:5e:
         95:3e:da:56:7a:aa:21:32:85:15:04:46:14:f3:c5:7b:76:2f:
         f1:a0:0e:bf:b4:a1:21:cc:9b:fd:9e:5b:43:62:b9:35:a6:59:
         55:f0:87:be:21:32:5a:32:7f:12:e2:e3:1b:6f:09:6a:b4:7e:
         71:bc:c8:42:eb:97:6d:e5:18:c2:2e:5a:9c:93:5f:82:84:2e:
         34:d1:fc:67:70:ff:d6:63:56:c6:69:63:44:63:dc:15:c4:9e:
         5c:05:6b:b8:f0:ba:ec:95:03:70:56:e2:0e:a7:d2:32:4f:6c:
         51:4b:1b:00:de:53:db:82:e4:1b:64:d0:79:cc:c7:03:0e:5c:
         1f:84:68:6e:ba:98:14:57:b6:bb:ce:79:b9:16:0a:26:f2:63:
         df:d0:64:f4:d5:96:b5:49:cb:75:ae:9d:83:36:5f:e8:e1:12:
         0c:b2:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:33 2024 by rpki-client on console-fra.rpki-client.org