Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/W0PwEuKkwYux0CdJyj5p03wNEss.roa
File:                     W0PwEuKkwYux0CdJyj5p03wNEss.roa (raw, json)
Hash identifier:          F8ROVVKnMoUdjkmhrm+QK7XhEp5xY+OonDDj1bvPQd0=
Subject key identifier:   5B:43:F0:12:E2:A4:C1:8B:B1:D0:27:49:CA:3E:69:D3:7C:0D:12:CB
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       38D70BFC
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/W0PwEuKkwYux0CdJyj5p03wNEss.roa
Signing time:             Sat 01 Jan 2022 07:55:15 +0000
ROA not before:           Sat 01 Jan 2022 07:55:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6905
IP address blocks:        145.30.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 953617404 (0x38d70bfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  1 07:55:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b43f012e2a4c18bb1d02749ca3e69d37c0d12cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:88:2a:60:ec:a8:7d:53:5d:57:2a:67:ff:
                    d8:77:7b:d6:f0:51:da:94:08:0a:62:31:93:4f:0c:
                    ff:bd:a1:2c:d9:8d:bb:37:9d:66:5a:2c:0a:b9:36:
                    90:5b:22:31:0b:27:48:c3:8b:7d:f9:70:15:f1:72:
                    fe:26:bc:49:b9:53:47:e6:88:11:52:5a:98:cb:5f:
                    25:bc:72:89:aa:9f:d7:41:82:63:04:e1:c1:0c:00:
                    93:f4:63:7b:df:ec:92:2d:3d:01:2b:6c:f4:40:1f:
                    f6:86:ac:e0:4b:8e:8e:18:2b:7d:b6:c8:80:7f:1f:
                    f3:49:49:68:96:88:00:3b:11:45:79:d2:f9:d0:12:
                    a1:af:2d:36:39:a2:42:6f:b5:c8:f3:1c:cd:99:f6:
                    52:13:17:da:14:75:03:3e:21:77:e6:3b:e6:3a:11:
                    d4:57:80:db:50:53:7c:85:0a:1f:77:f2:30:ee:59:
                    61:e7:24:20:a6:17:1c:b0:a4:41:ce:60:1c:06:38:
                    69:53:53:e1:31:74:ef:34:75:de:87:13:1d:60:85:
                    36:81:da:75:7e:72:86:57:49:44:ba:b4:64:2c:b1:
                    78:e2:6b:17:3f:a9:fd:be:24:88:0a:82:f4:4e:6f:
                    ff:5b:ff:a2:25:73:98:c2:62:b0:21:d5:c5:57:65:
                    47:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:43:F0:12:E2:A4:C1:8B:B1:D0:27:49:CA:3E:69:D3:7C:0D:12:CB
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/W0PwEuKkwYux0CdJyj5p03wNEss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.30.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:2b:4d:0a:ae:47:50:cd:db:0c:19:23:60:c1:6e:65:dc:52:
         4d:e1:f4:c2:87:c6:da:2c:6c:73:b9:e0:e5:6a:05:07:86:ef:
         c6:94:fb:a3:23:3b:32:27:21:2e:8b:47:c7:45:7d:c6:2b:c3:
         3e:2e:85:be:87:5b:e3:57:1a:bc:07:78:36:3f:d4:28:10:11:
         8f:3d:74:a3:65:f3:b9:93:81:43:ba:dc:15:bb:d4:98:6e:da:
         45:bb:f2:23:e8:fd:52:2a:71:8c:c3:f6:05:2e:e0:67:24:c0:
         88:71:3d:b7:18:24:bf:d3:bc:7e:3a:8d:58:41:8a:06:e3:b8:
         46:29:af:45:6d:c3:ba:45:9a:ee:20:1a:32:09:08:c4:c3:72:
         d6:37:f3:c6:0e:f7:fd:9d:f1:62:3f:63:6b:05:ae:e1:74:14:
         22:c8:32:ba:f9:36:d8:74:3c:58:11:1d:2c:79:38:57:7c:10:
         e4:09:ef:77:8d:3f:aa:76:20:02:3b:19:b5:73:9c:9e:2a:bb:
         f5:28:1f:89:41:69:00:d0:e1:d2:7d:5f:05:d0:2a:62:5f:60:
         62:bd:ac:0c:b9:12:a6:aa:5c:5d:14:a0:50:a3:7a:57:c8:fb:
         1c:85:c6:74:39:2b:fe:44:c4:0f:e1:72:4b:17:62:27:1e:b1:
         e5:8f:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org