Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wuZibnJMd0FGQX-kFlOCMd2nwzw.roa
File:                     wuZibnJMd0FGQX-kFlOCMd2nwzw.roa (raw, json)
Hash identifier:          gVBloVKep3uKYobWhSKp4RXIdIiv3CSvxSxZmCjAx8I=
Subject key identifier:   C2:E6:62:6E:72:4C:77:41:46:41:7F:A4:16:53:82:31:DD:A7:C3:3C
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       1B5E8CCA
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wuZibnJMd0FGQX-kFlOCMd2nwzw.roa
Signing time:             Mon 07 Mar 2022 13:06:02 +0000
ROA not before:           Mon 07 Mar 2022 13:06:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        87.248.130.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459181258 (0x1b5e8cca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: Mar  7 13:06:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2e6626e724c774146417fa416538231dda7c33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:55:a3:ed:74:da:02:e0:f9:ad:fa:37:12:
                    0b:00:45:45:61:53:e9:2d:fc:7d:0a:7b:cb:a6:dd:
                    e4:86:b4:da:28:e1:2f:c6:f9:ea:3c:78:43:54:d3:
                    ac:21:b2:5b:eb:50:9a:5e:dc:53:33:ff:9d:3c:c0:
                    4d:e1:6a:e3:cf:c7:6b:3c:ee:62:28:ac:2d:5e:f4:
                    41:0b:06:46:0f:8e:01:65:2c:13:b7:93:ff:a3:fc:
                    f5:26:15:ea:50:d2:ce:47:84:58:8a:5b:72:d8:0f:
                    f5:38:f2:ae:34:90:3e:7f:33:db:43:e6:66:1a:38:
                    56:c6:cd:38:e9:c7:37:94:01:5f:c0:93:c5:68:d8:
                    6d:53:90:c6:33:e8:b5:87:29:63:a6:59:35:20:70:
                    07:a5:bb:f7:9e:e3:04:bb:5d:6f:6b:88:c3:2e:f8:
                    c3:8d:e9:31:b2:ca:66:d7:65:29:a4:fd:43:90:9f:
                    aa:91:e2:b8:17:57:57:9a:91:32:7f:8b:2d:15:fe:
                    9e:d8:d9:97:14:4d:87:2b:52:df:92:40:d1:6f:43:
                    04:f0:75:7f:e4:b7:ee:54:5a:bb:2a:11:ee:9e:d3:
                    d2:ef:59:60:55:44:3b:f9:0d:d6:21:e9:d8:c3:5d:
                    b3:ad:cb:af:a9:52:fb:33:5d:fd:5f:56:a5:a5:c0:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E6:62:6E:72:4C:77:41:46:41:7F:A4:16:53:82:31:DD:A7:C3:3C
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wuZibnJMd0FGQX-kFlOCMd2nwzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.248.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:93:b5:81:9f:78:c3:e4:bc:6c:38:d5:b1:93:30:74:d2:
         a0:04:53:93:9c:32:5a:dc:6f:5d:49:6c:0a:fa:41:65:7a:ca:
         7f:60:2a:b4:a6:41:5f:75:42:5b:31:e2:bd:4a:bf:7b:c0:f7:
         cf:47:92:89:74:cb:9c:05:76:7b:58:2e:40:33:18:5a:d5:78:
         b3:48:87:e7:3c:df:39:73:2f:e5:a2:91:3f:bf:ed:6c:7a:1c:
         37:0c:2e:bd:e0:8d:4e:78:8a:fb:f9:bd:ae:1a:46:d7:ad:0c:
         1e:73:86:ca:f1:6d:07:10:74:0a:af:67:46:9f:61:ae:bc:0c:
         7d:fb:6c:32:a6:0d:2f:3b:6a:9e:19:c3:69:48:0d:51:37:36:
         2c:65:7e:8c:73:aa:9b:59:b9:ec:ae:ea:7d:e3:12:b6:b6:45:
         d6:42:67:74:67:c7:89:2e:10:99:e0:19:e5:e7:da:11:2b:9b:
         8e:62:b3:37:43:5b:01:62:bb:e3:da:ea:c1:80:1e:da:76:e6:
         45:a8:94:05:c8:c8:49:45:8b:24:a4:0c:f2:6d:24:ae:09:e8:
         d5:cd:3b:00:54:e9:11:ee:7b:f7:61:99:5d:66:73:6e:0d:3f:
         1b:e6:b9:9a:1f:be:16:ec:16:55:44:d8:64:de:c2:48:c2:d7:
         ce:3a:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org