Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/wiBE5vQGqnejGwvFSjGAd2agH7I.roa
File:                     wiBE5vQGqnejGwvFSjGAd2agH7I.roa (raw, json)
Hash identifier:          UWSYhrcVjSnQKMpi4K/3zcFRm1f7QQpBk3qzAj3WEQA=
Subject key identifier:   C2:20:44:E6:F4:06:AA:77:A3:1B:0B:C5:4A:31:80:77:66:A0:1F:B2
Certificate issuer:       /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial:       04DE1D17
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/wiBE5vQGqnejGwvFSjGAd2agH7I.roa
Signing time:             Sat 01 Jan 2022 02:53:03 +0000
ROA not before:           Sat 01 Jan 2022 02:53:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206674
IP address blocks:        185.179.56.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81665303 (0x4de1d17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
        Validity
            Not Before: Jan  1 02:53:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c22044e6f406aa77a31b0bc54a31807766a01fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e6:c3:65:47:f5:ce:3a:04:c9:1f:d5:a8:40:
                    eb:8d:0a:bc:17:6c:72:be:c7:cf:98:6c:c6:24:0f:
                    81:39:05:2a:aa:fa:02:ac:65:96:b4:be:5f:83:ff:
                    dd:63:8d:8d:b4:66:ed:9b:2a:3e:30:d5:df:1b:8f:
                    f3:ef:29:8c:27:8b:6e:bd:f3:f9:84:10:10:55:c0:
                    82:94:28:32:c1:d9:11:a4:a6:48:b1:f2:7d:35:7a:
                    fa:b2:94:e6:eb:ec:f6:1f:60:20:10:29:fd:7e:f5:
                    14:b4:f2:0d:3d:91:a1:34:7b:18:d0:81:62:56:f5:
                    20:06:73:a4:ad:b8:c3:fd:43:bf:83:48:fc:a0:25:
                    bc:cf:84:59:4a:63:30:11:06:b7:aa:28:08:10:73:
                    1f:43:be:3e:cb:85:82:29:1c:36:a9:e1:96:84:9d:
                    92:55:31:90:f5:e7:9a:2e:11:2c:94:7b:fc:e7:e4:
                    83:ee:21:96:9b:84:1a:01:34:03:14:e1:55:9b:d5:
                    18:54:41:34:12:88:01:6b:e9:41:a5:1b:54:93:7e:
                    3f:7c:17:03:bd:d2:ca:d5:c9:c7:2e:21:48:8e:73:
                    bc:d8:6d:cd:15:bd:91:d0:12:1a:4a:13:b5:03:84:
                    7b:27:a3:de:fb:82:91:0a:64:f5:76:58:08:f8:ef:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:20:44:E6:F4:06:AA:77:A3:1B:0B:C5:4A:31:80:77:66:A0:1F:B2
            X509v3 Authority Key Identifier:
                keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/wiBE5vQGqnejGwvFSjGAd2agH7I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:24:7e:02:80:1a:21:e8:d5:cc:47:d1:82:37:35:cf:76:fc:
         3f:d6:d7:9b:8c:48:65:4e:bb:ff:91:f6:ec:6c:f2:d1:3d:1e:
         dd:49:7e:76:31:cf:65:8c:8d:1e:04:ba:8d:1f:34:bc:b0:7d:
         06:f9:60:aa:ee:b5:d2:5f:1a:e0:8c:5e:ce:e2:dd:6a:63:43:
         ca:50:09:4f:2a:7d:50:e1:26:cd:97:37:4d:40:55:37:31:9d:
         e0:db:5a:6a:23:56:f6:85:df:5b:14:c3:a0:da:b8:04:32:2e:
         97:d9:9e:b5:5d:0d:b0:78:52:e3:42:2c:77:d2:39:f4:7a:1b:
         f7:22:da:cf:56:a3:49:a5:43:26:19:6f:19:e8:97:0e:1e:68:
         65:95:d4:eb:79:41:1a:ce:86:77:8d:13:fa:d4:4c:53:87:79:
         16:51:bc:31:61:33:f7:f8:5a:12:cd:c8:c0:2d:bf:36:b3:db:
         bf:3d:40:93:df:77:a6:30:45:64:60:cf:de:cb:5b:ce:7c:17:
         66:c6:c6:be:df:9c:c5:86:f7:bc:e7:0c:ba:3f:62:1f:8a:dc:
         d8:7c:e0:df:66:7c:46:d2:85:5d:87:7a:c1:44:7a:31:67:81:
         5e:c1:4a:9d:5d:df:44:ff:8a:29:20:62:df:4f:56:44:80:4c:
         16:9d:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:12 2024 by rpki-client on console-fra.rpki-client.org