Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/wVvvMmYYgnXs058B6H7Fl-Eh-4c.roa
File:                     wVvvMmYYgnXs058B6H7Fl-Eh-4c.roa (raw, json)
Hash identifier:          c/KDUt371cpPAPBIRxamwxJ52hhU1PoqvOlJNbOjb1Y=
Subject key identifier:   C1:5B:EF:32:66:18:82:75:EC:D3:9F:01:E8:7E:C5:97:E1:21:FB:87
Certificate issuer:       /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial:       CD6A05
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/wVvvMmYYgnXs058B6H7Fl-Eh-4c.roa
Signing time:             Sat 01 Jan 2022 12:05:30 +0000
ROA not before:           Sat 01 Jan 2022 12:05:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39558
IP address blocks:        195.244.4.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13462021 (0xcd6a05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
        Validity
            Not Before: Jan  1 12:05:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c15bef3266188275ecd39f01e87ec597e121fb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:f4:4f:04:2a:44:f6:f2:74:d0:67:5a:29:
                    b3:09:e1:a1:03:86:b7:ea:80:c8:9f:ab:2d:02:2f:
                    08:44:91:b7:98:bd:23:b9:23:34:01:9f:cb:cb:25:
                    48:c0:7c:c2:bf:db:89:a9:be:8a:14:a5:e9:ae:ba:
                    29:f5:3a:78:4d:c4:85:33:dc:1c:ac:91:9d:8f:85:
                    24:3b:e4:e3:bb:0f:1d:ab:e6:4f:47:a1:fa:7d:40:
                    1a:31:e3:85:e0:f4:c4:05:77:71:6b:2b:44:59:7c:
                    8f:2f:17:18:74:cf:7d:e3:6b:f0:8f:95:9a:f4:f1:
                    64:9b:6c:34:65:b0:24:69:6e:12:30:65:82:5d:53:
                    37:b8:ab:94:a1:07:e9:8e:4b:17:98:ff:7a:7d:79:
                    29:ff:fa:c5:4f:9e:e0:38:f6:97:b7:33:f7:23:81:
                    8c:8e:5e:36:16:d7:3c:95:9b:e0:1e:51:5d:e8:31:
                    ee:e4:8e:43:58:df:84:3a:e0:f4:ff:2d:66:38:7d:
                    74:02:75:3b:9c:8e:60:28:1f:bf:5c:6b:21:4a:a7:
                    6c:1e:9a:30:f5:e9:0e:97:f0:82:5c:a9:a5:78:76:
                    36:b8:e0:4e:60:4b:54:de:46:7c:5a:ab:cd:2b:58:
                    10:f7:49:37:fd:d4:c9:34:06:76:f8:6d:28:95:7e:
                    9d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5B:EF:32:66:18:82:75:EC:D3:9F:01:E8:7E:C5:97:E1:21:FB:87
            X509v3 Authority Key Identifier:
                keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/wVvvMmYYgnXs058B6H7Fl-Eh-4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.244.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:16:80:0a:a1:ee:d0:a7:27:49:a2:9a:2e:0c:62:bb:3c:5e:
         5e:b4:b4:17:f0:9d:4f:42:3e:3c:9c:5f:f1:a8:d6:3f:1e:ff:
         a7:61:31:3b:49:fb:1d:bf:b3:02:09:ef:26:c5:e9:a5:ae:a5:
         58:a5:6f:11:84:57:0c:91:02:db:cc:19:9d:4f:8f:81:11:67:
         5c:1c:f0:20:09:0b:a2:cb:1d:d4:90:27:76:fe:6e:58:db:3d:
         7d:89:25:f4:b2:66:2c:12:82:79:ad:b1:a3:c3:98:8b:e2:86:
         24:b3:5a:f0:4e:14:b5:33:1f:54:c9:c2:42:d4:94:bb:19:64:
         6c:4a:ec:b2:c1:81:82:7a:be:9a:24:04:bf:4b:c5:40:31:c7:
         f8:42:43:7a:53:de:b4:df:df:c7:60:ca:76:a0:03:f4:c4:af:
         ba:13:14:57:14:8a:42:31:9a:74:1c:5f:cb:f9:7c:82:d2:81:
         23:de:b1:27:e6:d8:ac:37:33:c1:55:8a:ea:2a:44:28:c3:a0:
         0c:d0:66:e0:75:b4:1d:98:c7:63:f1:75:8e:7c:70:c0:aa:0d:
         ef:dd:ac:51:c4:3e:28:c7:d1:3c:de:ab:61:71:84:46:e7:b5:
         81:07:b4:62:93:77:39:23:72:9a:04:b4:f2:b0:72:e2:66:89:
         47:f8:bc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:21 2024 by rpki-client on console-fra.rpki-client.org