Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/W__g6kbU-sh8ZA5GScJoSh4vTqk.roa
File:                     W__g6kbU-sh8ZA5GScJoSh4vTqk.roa (raw, json)
Hash identifier:          wnFlLuzmbqKl0R0NMwIIYCFrmDdX4Icyf/YoSMGDlSU=
Subject key identifier:   5B:FF:E0:EA:46:D4:FA:C8:7C:64:0E:46:49:C2:68:4A:1E:2F:4E:A9
Certificate issuer:       /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial:       14AFCA95
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/W__g6kbU-sh8ZA5GScJoSh4vTqk.roa
Signing time:             Sat 01 Jan 2022 09:59:32 +0000
ROA not before:           Sat 01 Jan 2022 09:59:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44432
IP address blocks:        79.134.242.0/24 maxlen: 24
                          79.134.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347064981 (0x14afca95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
        Validity
            Not Before: Jan  1 09:59:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bffe0ea46d4fac87c640e4649c2684a1e2f4ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:64:9d:8a:8d:30:9b:55:c4:12:32:dd:ef:
                    f6:85:e5:61:44:a2:50:cf:30:be:73:e9:29:0f:a0:
                    c7:81:49:ae:1f:13:42:f2:02:e5:a5:42:3a:cc:5a:
                    18:cb:bb:26:41:1a:5c:60:18:f9:a8:1c:3b:55:dd:
                    fd:e1:af:ba:2c:2e:3c:a0:89:07:9a:6f:42:8d:19:
                    64:52:94:03:03:7d:52:84:9b:af:ae:5c:7a:76:8c:
                    06:25:bc:41:47:a8:9f:76:68:2e:84:ee:9b:6a:12:
                    08:9e:2c:0b:fc:2d:5b:b2:39:eb:32:41:b1:0b:17:
                    2f:de:60:5c:52:ee:47:cd:18:03:14:e8:f3:d9:e7:
                    b1:02:44:32:a2:bb:f9:fd:19:f4:1c:1d:da:e4:0e:
                    e5:30:f5:59:59:37:f1:02:71:6a:d0:1d:54:7c:64:
                    bf:2d:79:44:f4:80:6a:ec:9d:bb:16:77:b1:71:d6:
                    b4:75:47:37:e2:ea:89:45:5f:6b:cc:36:6f:9b:a8:
                    50:9b:2b:de:11:ff:4f:1b:ed:da:65:44:d5:90:f3:
                    5e:15:53:1b:4f:a6:ea:c9:2b:90:cc:03:b3:36:2a:
                    e2:83:e9:c9:33:65:e0:96:47:e7:3e:4c:88:f1:f4:
                    c6:ef:bc:85:70:37:fc:4d:51:90:7e:7a:a1:16:73:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:E0:EA:46:D4:FA:C8:7C:64:0E:46:49:C2:68:4A:1E:2F:4E:A9
            X509v3 Authority Key Identifier:
                keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/W__g6kbU-sh8ZA5GScJoSh4vTqk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.134.226.0/24
                  79.134.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:43:d7:12:8c:95:0e:1e:c6:80:72:5f:b5:b1:f5:98:fd:
         20:71:90:ab:a2:25:f0:f2:c7:cc:f8:50:51:03:d2:90:0b:98:
         66:a5:e1:2f:eb:84:71:57:92:ef:5a:99:df:43:06:15:ac:55:
         7c:2a:20:56:2c:9b:c9:a7:6b:58:1a:83:ff:bc:e0:94:da:bf:
         cb:1e:05:fd:5e:06:f2:a8:3f:b6:b3:d8:af:2d:f4:51:6e:72:
         97:e7:9e:e8:de:77:d6:5a:d6:18:b9:ed:00:b2:d7:64:64:56:
         77:ec:fb:53:85:bb:0f:94:12:bf:ee:6f:a1:dc:07:01:cf:ae:
         60:84:6d:dd:3d:51:01:52:6c:f0:51:2a:6a:94:05:aa:96:4c:
         bc:1d:a9:62:95:4f:ec:1b:6a:4a:14:19:ba:c4:f3:57:f0:f7:
         db:68:45:e3:dc:b6:55:49:31:68:19:ae:f7:56:27:d4:3c:ad:
         fc:9e:34:2c:b6:82:c3:d3:50:18:d4:c2:1e:fa:b1:19:a0:f4:
         8a:5d:31:7d:32:a8:f3:54:59:b7:3f:8f:b9:3a:55:c8:a0:dd:
         09:e5:d3:bf:9a:52:db:3e:d8:de:ed:a6:52:ed:b0:a7:5a:24:
         6a:02:89:b1:5a:be:d0:d4:41:0e:2b:6b:85:65:22:7c:84:c9:
         62:85:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:41 2024 by rpki-client on console-ams.rpki-client.org