Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/wtl_mREfeU6f0jUqKQxZeA86wko.roa
File:                     wtl_mREfeU6f0jUqKQxZeA86wko.roa (raw, json)
Hash identifier:          nKNhEpyW/9ypQwBSKEL5yeqzqEJH6VeCVkhXQkyDMso=
Subject key identifier:   C2:D9:7F:99:11:1F:79:4E:9F:D2:35:2A:29:0C:59:78:0F:3A:C2:4A
Certificate issuer:       /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial:       080CBBAB
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/wtl_mREfeU6f0jUqKQxZeA86wko.roa
Signing time:             Sat 01 Jan 2022 16:10:48 +0000
ROA not before:           Sat 01 Jan 2022 16:10:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49218
IP address blocks:        46.165.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135052203 (0x80cbbab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
        Validity
            Not Before: Jan  1 16:10:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2d97f99111f794e9fd2352a290c59780f3ac24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:8c:69:2f:d9:8a:cd:de:57:3e:49:c1:8b:
                    08:f9:19:19:7b:e0:68:5f:73:f7:ce:92:14:dd:47:
                    60:79:ad:60:3a:ef:ae:05:58:a9:40:81:c5:b1:06:
                    c7:96:eb:b4:90:48:60:dd:05:f0:9a:ae:04:4e:b1:
                    fe:66:08:c7:79:1e:4e:55:0a:04:a4:e1:5c:d3:df:
                    d2:8c:ff:8b:d9:e1:07:eb:39:d9:9e:b5:7e:76:05:
                    fe:25:46:e1:80:42:96:b5:75:0e:b2:85:2e:17:68:
                    62:6a:d4:7d:21:a3:36:76:aa:39:16:dd:08:6f:f6:
                    aa:4b:9b:74:50:ad:5f:26:7a:68:cd:05:2b:93:41:
                    98:8c:c4:1d:2b:07:07:5d:9c:82:64:34:15:fb:40:
                    64:97:e1:c3:22:32:1a:41:84:65:6f:bc:06:f3:12:
                    4a:67:e3:75:61:a1:8a:1d:b9:b4:2f:b4:ba:78:ba:
                    62:2c:fa:f2:23:fc:8a:e9:83:a7:4b:5f:23:19:67:
                    c1:b3:4d:c0:6b:d2:ed:76:03:eb:cf:54:c1:c9:59:
                    48:6f:bd:77:43:b2:41:01:19:41:3e:30:d5:f7:55:
                    f5:5d:88:17:11:a9:46:15:dd:e0:5c:f0:5d:c8:b7:
                    5b:46:75:9e:9a:0f:bd:99:28:39:bd:d1:e6:07:d9:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D9:7F:99:11:1F:79:4E:9F:D2:35:2A:29:0C:59:78:0F:3A:C2:4A
            X509v3 Authority Key Identifier:
                keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/wtl_mREfeU6f0jUqKQxZeA86wko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.165.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:2a:39:cb:5f:ef:e6:24:b5:8e:fb:12:9d:48:3f:90:a3:
         d2:84:0b:87:eb:c8:fb:e6:52:ae:5a:8d:28:db:c5:cc:31:df:
         c7:ae:6e:4c:0d:46:2b:4f:ee:95:6b:a4:61:87:f6:85:a1:8f:
         54:22:38:96:9f:ed:ee:19:24:95:42:ed:49:15:45:78:a9:fc:
         ab:9a:98:82:72:2a:45:46:b4:3d:22:08:c6:da:70:42:ef:af:
         a2:63:8f:ab:80:16:90:a4:24:6d:a2:38:cb:25:d1:0b:02:bf:
         b5:7d:39:e1:5d:8f:85:a9:36:9f:58:d6:64:28:bc:07:fa:e5:
         ca:39:7e:6b:39:0c:a7:eb:18:93:d1:0d:3d:ff:ac:96:2c:b9:
         72:c8:9e:ba:b1:88:ff:f2:2c:7d:d7:07:bf:f9:7d:0d:b2:84:
         32:61:cc:b9:25:a1:f7:1b:3d:c4:7a:db:3d:82:69:9d:04:ce:
         26:fc:db:ea:a7:ca:68:fd:a0:a0:61:30:c7:03:ed:52:c8:d3:
         e1:56:02:bc:36:d6:d3:1c:1c:99:09:f7:b2:2c:52:79:12:8c:
         af:78:27:62:1d:04:45:f0:68:34:49:d1:06:31:16:3a:2f:cd:
         b2:4c:c2:04:68:cb:f9:46:10:0f:91:d3:f7:47:0c:58:6b:68:
         65:32:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org