Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/WVymreBL1CXOGkb18qge1NiyclA.roa
File:                     WVymreBL1CXOGkb18qge1NiyclA.roa (raw, json)
Hash identifier:          HvzG3Je6h32UJKphJNTvYVRZ4oJdYBIAysQW3/vHK54=
Subject key identifier:   59:5C:A6:AD:E0:4B:D4:25:CE:1A:46:F5:F2:A8:1E:D4:D8:B2:72:50
Certificate issuer:       /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial:       01821A5036C02D1535CCB267C2CB23ADEAC5
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/WVymreBL1CXOGkb18qge1NiyclA.roa
Signing time:             Wed 20 Jul 2022 06:34:00 +0000
ROA not before:           Wed 20 Jul 2022 06:34:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24728
IP address blocks:        193.105.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1a:50:36:c0:2d:15:35:cc:b2:67:c2:cb:23:ad:ea:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
        Validity
            Not Before: Jul 20 06:34:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=595ca6ade04bd425ce1a46f5f2a81ed4d8b27250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:fd:81:e1:b0:41:33:b1:6f:53:79:3c:48:
                    e3:6d:7b:72:34:a6:c8:0d:6c:63:e8:7a:08:f8:c3:
                    67:ec:a7:be:97:45:5d:47:4e:06:b3:5a:53:a3:0f:
                    0a:a1:03:81:f3:b0:b3:1d:df:28:8f:76:09:ef:f6:
                    46:59:48:75:82:9c:3f:83:4d:de:5b:63:e4:e3:21:
                    c3:d8:79:60:5c:c8:68:a4:6f:84:2e:fd:36:24:a3:
                    d0:c8:2a:49:a1:0e:5d:10:13:74:f7:f3:86:1b:e3:
                    92:94:93:16:06:cc:6f:6d:9f:b4:e8:96:83:19:af:
                    b1:d4:02:f0:15:d5:d7:11:13:64:d2:49:85:14:88:
                    21:20:e4:a3:49:f4:a1:bc:fe:dc:48:68:28:d7:d2:
                    c9:f7:8b:75:4a:78:48:da:53:29:ce:62:98:7b:26:
                    64:07:07:90:b3:5e:02:01:8b:a3:9b:6a:35:da:8b:
                    a8:fe:59:60:13:9f:58:0a:7d:58:b8:51:a3:97:e9:
                    85:82:90:a0:f8:d1:da:61:95:46:36:68:65:8a:f3:
                    3c:83:f4:78:bc:50:5f:d8:aa:e6:66:99:6d:ba:c3:
                    c5:e8:aa:dc:da:9a:3c:77:4e:e2:73:9a:c8:1c:1b:
                    28:6b:28:ac:bb:8b:b0:91:41:8a:b5:6d:76:07:01:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5C:A6:AD:E0:4B:D4:25:CE:1A:46:F5:F2:A8:1E:D4:D8:B2:72:50
            X509v3 Authority Key Identifier:
                keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/WVymreBL1CXOGkb18qge1NiyclA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:41:d1:75:1f:f1:aa:ab:41:8f:13:90:68:b9:e1:3a:00:4b:
         f5:4f:c4:4d:4f:e9:71:05:f1:15:6f:6e:d7:ef:8f:1a:e0:1c:
         33:4f:2c:6b:c5:47:c3:48:41:49:7d:e3:42:15:d1:94:f4:86:
         f5:b5:a5:b4:b7:7e:a1:b3:a0:5f:07:46:14:ef:c4:8d:da:53:
         1a:ef:49:7f:b2:0d:ff:a8:99:97:32:85:a3:0d:fb:b3:31:04:
         74:52:ac:92:8c:ff:db:90:46:5e:0f:4d:23:32:a5:99:87:f9:
         43:af:8b:b4:60:7f:23:87:1e:81:7d:6b:ae:6b:7f:4c:30:2e:
         20:9f:2b:80:46:ec:d2:1d:8f:80:70:d9:a7:92:b5:3d:3c:7e:
         97:e9:71:80:94:50:ba:bd:f0:bf:af:cd:71:be:f0:85:ec:6b:
         4e:16:82:a3:6e:90:ca:0b:2a:36:b7:09:32:45:39:fe:80:14:
         82:83:14:7b:59:b6:c6:97:72:f0:31:fd:ef:7f:dc:7b:f3:b4:
         51:5c:a8:b2:ae:33:88:05:23:9d:67:5c:2a:4f:b6:b3:da:93:
         fc:7e:fc:3a:9e:53:a6:1a:9d:c3:32:df:bc:ca:be:07:0d:ba:
         12:40:fe:43:a7:39:32:85:ec:ed:c4:23:96:69:83:6a:c9:97:
         45:12:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:26 2024 by rpki-client on console-ams.rpki-client.org