Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/WHSV-chBy0uNrub-EU6enEUfUPE.roa
File:                     WHSV-chBy0uNrub-EU6enEUfUPE.roa (raw, json)
Hash identifier:          b9WiuDhKPlPtox3EMjiQ3+G4azvOf418fjgBhKJVgvo=
Subject key identifier:   58:74:95:F9:C8:41:CB:4B:8D:AE:E6:FE:11:4E:9E:9C:45:1F:50:F1
Certificate issuer:       /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Certificate serial:       0A5C8676
Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/WHSV-chBy0uNrub-EU6enEUfUPE.roa
Signing time:             Thu 14 Apr 2022 06:35:39 +0000
ROA not before:           Thu 14 Apr 2022 06:35:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20546
IP address blocks:        185.192.169.0/24 maxlen: 24
                          93.191.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173835894 (0xa5c8676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
        Validity
            Not Before: Apr 14 06:35:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=587495f9c841cb4b8daee6fe114e9e9c451f50f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:71:2f:68:8f:8d:82:3c:03:b8:19:08:e4:
                    b6:29:a6:55:bd:14:ea:20:06:a8:3e:e9:0d:20:df:
                    14:f6:d7:de:d6:06:47:2e:c9:3a:fe:92:6a:53:c1:
                    f6:7a:86:24:96:15:14:63:90:f8:ea:76:ca:28:17:
                    ce:dc:59:c0:23:e7:a9:ee:cc:0f:ee:5f:b7:38:ab:
                    33:99:60:9b:ba:eb:eb:1e:92:7b:ef:83:13:f9:96:
                    0c:d5:1e:c5:62:e4:9a:2b:18:08:06:8b:1a:04:fb:
                    8d:07:e6:7f:6d:f7:1e:28:94:62:a8:21:cb:53:43:
                    32:83:9b:9a:63:08:87:39:8d:55:58:d7:97:90:7a:
                    c5:bc:60:3e:6b:e1:ca:26:c0:6e:1d:30:7b:72:f0:
                    fc:01:00:12:13:6b:b5:7b:bf:7c:2c:ea:7e:ba:09:
                    00:b6:c1:47:e3:66:84:39:7f:20:36:ce:2c:b8:8e:
                    3c:2e:2f:0d:2c:fa:47:94:10:c3:2b:36:79:8e:8d:
                    59:c2:60:53:8c:7d:27:37:25:57:dd:1e:20:99:b8:
                    03:e3:45:d5:52:cd:75:d7:92:75:bc:f3:4d:50:db:
                    97:bd:dd:bc:70:ed:d5:54:db:e5:d5:09:44:41:49:
                    d9:bf:5b:78:60:fb:4c:11:de:e8:c8:d5:2d:9c:da:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:74:95:F9:C8:41:CB:4B:8D:AE:E6:FE:11:4E:9E:9C:45:1F:50:F1
            X509v3 Authority Key Identifier:
                keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/WHSV-chBy0uNrub-EU6enEUfUPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.167.0/24
                  185.192.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:6f:a8:d9:eb:97:e0:9a:68:ee:59:ea:42:4c:3c:61:7d:44:
         b6:eb:c3:ae:42:37:d7:65:c3:72:ba:df:6d:14:22:42:16:95:
         48:fa:45:6d:04:17:e2:88:b8:6f:e9:bd:fd:61:6f:71:67:4c:
         58:c3:f9:29:52:b1:f1:ef:8c:d0:c7:8e:db:14:90:ac:f3:0f:
         27:10:01:d9:48:e7:6b:23:dd:0a:f3:63:d2:2b:15:31:f6:6e:
         17:7d:d9:1a:0b:58:d0:9f:5c:90:b4:7a:60:01:b6:cc:d0:30:
         c9:bd:d7:df:25:51:4c:b1:bd:16:37:56:61:f6:5e:8c:34:35:
         fa:10:c5:37:2c:9c:cb:74:d6:4f:32:03:3a:52:66:ef:49:8e:
         5c:da:29:1f:54:0f:eb:e4:6d:de:ec:52:f0:84:71:12:f8:bc:
         53:4d:51:41:2c:77:15:45:5a:13:ff:e0:a1:8a:68:45:32:74:
         ea:f1:3a:e6:58:2e:0e:f9:79:2e:5d:aa:03:2c:fd:e6:0d:6c:
         94:be:38:61:8d:50:ec:3c:25:a2:a2:76:68:2d:81:dd:99:5f:
         62:2e:33:6e:0a:b0:8a:88:a7:3a:45:c2:96:d7:9d:cc:8a:c8:
         3a:0a:04:40:ce:8d:58:7c:c8:a0:64:67:ee:eb:43:df:35:d9:
         a8:23:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:52 2024 by rpki-client on console-fra.rpki-client.org