Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/W-tVIrkioAL8EAcvwqxNMPDrwCw.roa
File:                     W-tVIrkioAL8EAcvwqxNMPDrwCw.roa (raw, json)
Hash identifier:          voYgW/u9ShPQ2yJKHaP1I2PEqn1ZXVW0qDMj6CRg4OE=
Subject key identifier:   5B:EB:55:22:B9:22:A0:02:FC:10:07:2F:C2:AC:4D:30:F0:EB:C0:2C
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       03E0F353
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/W-tVIrkioAL8EAcvwqxNMPDrwCw.roa
Signing time:             Sat 01 Jan 2022 13:04:09 +0000
ROA not before:           Sat 01 Jan 2022 13:04:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205775
IP address blocks:        178.19.46.0/24 maxlen: 24
                          178.19.45.0/24 maxlen: 24
                          178.19.34.0/24 maxlen: 24
                          178.19.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65074003 (0x3e0f353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  1 13:04:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5beb5522b922a002fc10072fc2ac4d30f0ebc02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:63:ae:04:03:aa:8b:4b:c7:d7:2c:c3:72:
                    dd:f4:e8:90:24:78:de:9c:84:92:45:68:ef:6d:f6:
                    d7:b7:4b:a1:a6:80:69:e7:1a:b3:7f:4b:d2:e7:c6:
                    2e:d8:30:6c:c4:f4:52:f0:89:ab:4b:36:46:55:f0:
                    5a:c7:85:b7:04:41:00:70:e7:8a:1a:f6:f3:83:56:
                    88:5b:f5:25:9d:37:d2:94:35:0a:f3:da:92:3c:7c:
                    f5:70:f7:4b:16:47:b1:fd:4c:ab:bd:e3:89:4d:6f:
                    73:4e:b4:a1:08:7c:b0:53:8e:1b:1e:49:18:bf:be:
                    c5:fa:4e:ab:a4:6a:2f:ce:69:f5:94:49:16:cf:66:
                    99:c5:32:90:e8:f2:18:39:81:f9:00:11:c8:66:1f:
                    ee:57:2b:b4:82:90:da:83:6e:7e:43:70:ba:a2:49:
                    47:3b:d6:ce:20:3e:e3:93:a5:14:f7:8b:0b:1b:59:
                    a9:46:93:59:05:e5:e4:d5:e8:00:af:9a:54:ff:87:
                    88:2f:fb:50:cc:57:b8:e5:f9:72:d0:97:72:52:be:
                    ce:13:24:33:50:fa:af:04:06:1e:34:b4:69:73:ef:
                    71:77:f9:4f:b3:f3:ab:f9:e2:36:1d:26:63:e7:3b:
                    6e:af:7e:f6:84:6b:ce:c1:bd:b8:89:4f:d7:ea:66:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EB:55:22:B9:22:A0:02:FC:10:07:2F:C2:AC:4D:30:F0:EB:C0:2C
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/W-tVIrkioAL8EAcvwqxNMPDrwCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.19.34.0/23
                  178.19.45.0-178.19.46.255

    Signature Algorithm: sha256WithRSAEncryption
         9e:87:b9:c9:4e:74:c7:0f:07:85:d4:4d:95:4a:4b:a8:7b:34:
         52:21:c1:f0:58:be:3d:16:e6:8c:66:27:69:2e:59:91:78:1b:
         9a:4b:0f:f9:3e:67:c9:5e:41:cc:85:ab:59:f4:49:ea:58:88:
         bb:50:51:87:da:dd:c6:c5:ae:35:7c:43:70:d2:3e:36:3e:08:
         4b:6d:ea:b1:90:52:32:a6:1d:61:07:bf:a0:1f:ee:b1:78:fb:
         dd:44:74:e2:ac:08:5f:84:aa:af:8f:19:58:0d:be:84:d6:d0:
         5d:4d:21:48:d2:8d:5e:49:82:a7:88:be:b2:9a:a0:51:ed:9c:
         7c:5c:bb:83:ed:62:68:a2:4d:c3:a9:40:49:5f:3b:bb:9f:24:
         15:26:b4:44:91:15:11:ee:bf:ab:12:d7:7b:dd:70:f5:5e:a0:
         2b:c1:f0:6c:28:15:86:64:1d:ba:b6:4e:43:2a:3f:c7:f3:01:
         e3:0c:08:0a:f0:e4:45:d8:2d:cc:ba:13:fa:2e:18:84:7b:fe:
         84:bb:c3:1f:6b:96:af:a9:66:5a:24:eb:23:5f:67:80:8a:40:
         c0:94:d3:9e:ee:a4:63:32:22:1f:c9:54:75:63:2b:db:05:fb:
         2d:6a:f0:98:a4:12:7e:d2:97:f8:77:00:5b:8f:db:71:af:5f:
         37:14:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org