Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WD-LKTyDnBPNDMZ7dtNmnK0UQpU.roa
File:                     WD-LKTyDnBPNDMZ7dtNmnK0UQpU.roa (raw, json)
Hash identifier:          Hk3oHYMSAdQ3KuwwwKIiM1Fbrntf5kyBdiFZKJlCdZE=
Subject key identifier:   58:3F:8B:29:3C:83:9C:13:CD:0C:C6:7B:76:D3:66:9C:AD:14:42:95
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       2758E296
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WD-LKTyDnBPNDMZ7dtNmnK0UQpU.roa
Signing time:             Sat 01 Jan 2022 16:07:47 +0000
ROA not before:           Sat 01 Jan 2022 16:07:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8381
IP address blocks:        95.46.2.0/23 maxlen: 24
                          95.46.122.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660136598 (0x2758e296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:07:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=583f8b293c839c13cd0cc67b76d3669cad144295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:bb:41:65:a9:07:86:9a:05:56:db:1c:3e:
                    c6:c1:53:f2:87:63:64:4f:96:89:01:c2:0d:66:60:
                    52:9f:c3:d7:0d:ba:99:23:16:24:7a:d2:5e:f2:33:
                    97:64:35:e2:b3:b0:66:a7:b8:a3:46:26:c0:f3:d0:
                    43:35:e2:ce:a9:ab:49:05:72:95:90:ee:67:62:fe:
                    dc:f4:43:c3:a1:23:d2:ae:d9:3a:eb:e8:5c:0c:fb:
                    81:56:ac:5a:2e:48:1b:c6:ce:ce:0b:2b:51:5c:93:
                    40:35:aa:58:61:4c:ac:2d:86:cd:55:a3:01:75:9d:
                    d2:39:b0:a1:5f:6d:90:30:1c:64:9a:39:84:a2:00:
                    f9:70:a5:85:6c:b8:78:ef:d8:22:b0:21:7f:43:20:
                    8d:4a:f3:93:b6:79:57:3a:c1:4a:d5:d0:63:eb:5f:
                    b1:27:0f:e8:56:06:fd:65:15:e3:5d:08:41:84:5d:
                    19:69:84:bb:5e:fc:aa:f4:17:38:27:2f:62:00:b1:
                    04:26:2f:c6:5f:ac:e6:e2:bd:ad:fc:90:79:ed:23:
                    b1:76:f8:ef:d5:e4:19:d4:b0:0d:85:73:84:b7:9b:
                    52:d9:c7:29:55:ed:70:85:31:ef:f7:11:db:65:e9:
                    a5:20:f5:54:ea:8a:fa:3b:02:b0:fd:f3:0e:71:a0:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3F:8B:29:3C:83:9C:13:CD:0C:C6:7B:76:D3:66:9C:AD:14:42:95
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WD-LKTyDnBPNDMZ7dtNmnK0UQpU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.46.2.0/23
                  95.46.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:3e:ab:e8:b6:4c:04:25:04:55:f6:87:0c:a4:26:c4:f6:7e:
         3c:1f:ce:50:64:6d:50:f8:98:b1:30:ec:78:b7:3c:0e:78:21:
         55:a7:c4:a8:b9:c3:ef:0e:82:8e:0b:38:54:74:b5:08:0a:28:
         87:ea:70:37:45:84:36:11:01:2f:08:b4:7d:06:bc:f9:21:8c:
         91:c5:c6:03:62:6a:db:6b:e5:06:c0:83:42:30:dd:57:e1:b0:
         ae:a1:c0:04:2f:09:cf:68:28:a5:6d:f9:43:75:61:1f:db:a3:
         79:b8:e9:f5:92:84:8a:f6:0e:df:47:55:ef:f7:81:98:60:df:
         1e:26:30:47:38:b8:80:cd:64:4a:c4:f5:12:d9:a3:3b:16:0b:
         26:55:0f:98:6b:61:5d:b9:53:1b:8c:91:fc:bd:40:96:57:1b:
         7a:ee:02:73:f5:b9:56:f4:56:02:5d:7c:b0:4e:d7:44:05:c8:
         75:04:23:8c:e5:35:b0:f6:b4:db:38:45:a7:ec:2a:b9:15:ff:
         8a:2f:d6:d8:67:45:69:de:ce:08:ff:42:d9:c1:21:38:2c:41:
         17:67:68:ac:82:f1:e7:f2:79:16:aa:53:08:21:6f:b7:1c:b3:
         13:26:18:75:b7:73:0f:06:84:7f:a8:5d:38:d2:d5:5f:c6:9a:
         a1:4f:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org