Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/wVs-79GG19_rs8FBUoGkVLVoQWk.roa
File:                     wVs-79GG19_rs8FBUoGkVLVoQWk.roa (raw, json)
Hash identifier:          ukAlHFxrlyjjgzl4n7z77rVcmiQUWjJUtlEOzmbCPWQ=
Subject key identifier:   C1:5B:3E:EF:D1:86:D7:DF:EB:B3:C1:41:52:81:A4:54:B5:68:41:69
Certificate issuer:       /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial:       1B6A3240
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/wVs-79GG19_rs8FBUoGkVLVoQWk.roa
Signing time:             Sat 01 Jan 2022 05:03:48 +0000
ROA not before:           Sat 01 Jan 2022 05:03:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        195.82.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459944512 (0x1b6a3240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
        Validity
            Not Before: Jan  1 05:03:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c15b3eefd186d7dfebb3c1415281a454b5684169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:23:11:52:34:41:09:a8:8e:ee:5d:97:f0:
                    73:e9:4f:ec:23:c5:c6:57:a1:ee:75:b0:f9:3a:06:
                    27:9b:cf:d5:8d:5e:5c:b2:f8:57:0b:7a:44:d0:b9:
                    c0:5f:02:3a:34:4e:ec:4c:e2:68:15:ef:85:31:c7:
                    4b:7b:10:ca:75:6b:50:30:55:83:b6:9a:0f:d7:6a:
                    d4:7c:2a:3c:6e:b2:b7:b9:76:dd:8c:58:2b:2b:cb:
                    c8:df:43:9b:1f:7a:4a:ff:1b:b3:06:92:88:86:a5:
                    c8:ca:64:7f:0e:81:6a:2b:cc:49:6f:8c:42:02:7a:
                    15:4d:d1:fe:14:85:e4:4c:58:98:e3:e4:b1:49:c6:
                    25:19:5e:9c:df:29:74:93:05:0a:d5:a6:74:3e:7c:
                    f2:58:08:9d:1e:67:54:60:bc:a3:7b:1c:23:0b:2a:
                    de:e1:55:03:3e:cf:62:f4:23:7c:ef:12:61:9a:c1:
                    58:c7:54:b9:bb:83:04:57:6f:f6:db:60:40:68:d4:
                    b4:1f:fb:18:00:4b:c2:35:4b:11:03:3c:dc:65:c2:
                    e5:fc:e6:a1:ce:d8:3c:81:30:79:09:26:57:eb:75:
                    42:5a:7c:7d:f5:0e:97:03:20:9b:c8:85:9b:98:63:
                    06:88:c4:4e:4c:34:2e:9e:d2:08:f0:d4:11:1e:09:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5B:3E:EF:D1:86:D7:DF:EB:B3:C1:41:52:81:A4:54:B5:68:41:69
            X509v3 Authority Key Identifier:
                keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/wVs-79GG19_rs8FBUoGkVLVoQWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.82.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:70:15:71:84:d4:46:46:38:04:e8:09:f1:ba:af:48:f3:90:
         58:24:c5:80:bf:2f:f6:b9:25:a9:08:dd:3b:c5:24:f4:db:90:
         67:f9:69:14:45:36:77:ad:12:27:66:e1:09:4f:c5:ae:77:ba:
         d5:0d:03:82:46:3e:d8:d3:68:d4:79:7b:24:b4:8a:13:24:74:
         94:47:78:f2:91:3c:83:ea:92:1d:bc:4f:ed:a0:c5:2f:b1:7c:
         2f:18:8e:68:08:be:c4:7b:da:5a:88:b8:ab:2a:81:02:1c:da:
         68:f5:47:8b:40:ea:36:10:a9:e0:eb:6a:02:0b:db:9f:b8:d3:
         d4:55:a8:ec:70:71:5a:e7:00:a5:bb:5e:a9:ab:09:82:4f:20:
         a9:81:95:26:5e:50:33:91:41:d3:e8:e3:97:c1:8c:d8:0f:3e:
         8e:19:37:b6:fc:26:96:37:ad:f8:d1:0b:cc:c5:32:fb:88:c8:
         c4:5f:3d:15:13:b7:32:cc:74:4c:0b:86:e7:69:87:44:3c:f7:
         c4:fb:76:b0:be:bd:b9:be:4e:92:69:d2:c2:1d:91:27:25:5d:
         2c:d0:25:8a:dc:0f:a2:17:5b:43:9a:b2:48:7d:f6:40:37:7f:
         f6:37:59:74:ff:74:6b:16:63:63:a0:9d:07:b1:2d:40:0e:4e:
         fa:c4:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:51 2024 by rpki-client on console-fra.rpki-client.org