Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/W7m-DjRE7tSzP9lK1m1X0C_-uJI.roa
File:                     W7m-DjRE7tSzP9lK1m1X0C_-uJI.roa (raw, json)
Hash identifier:          vnDGJJZzWbIAVvOVeGnHyNoAOOAMF7NV6vAVTv1NpiI=
Subject key identifier:   5B:B9:BE:0E:34:44:EE:D4:B3:3F:D9:4A:D6:6D:57:D0:2F:FE:B8:92
Certificate issuer:       /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial:       03CF32CD
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/W7m-DjRE7tSzP9lK1m1X0C_-uJI.roa
Signing time:             Sat 01 Jan 2022 02:50:45 +0000
ROA not before:           Sat 01 Jan 2022 02:50:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203152
IP address blocks:        185.127.136.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63910605 (0x3cf32cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
        Validity
            Not Before: Jan  1 02:50:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bb9be0e3444eed4b33fd94ad66d57d02ffeb892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:f1:cb:2f:09:c1:6a:c9:42:d0:4c:99:a6:
                    c3:47:bb:e5:04:78:1a:05:a4:20:55:76:9d:91:7a:
                    6f:18:19:8d:e0:25:8a:f7:5a:49:75:a9:4e:b7:b4:
                    79:d8:eb:e1:c6:94:9f:de:15:88:42:66:7d:aa:c4:
                    cd:7b:c0:72:4c:d7:56:50:11:3a:44:d2:b2:85:c8:
                    1f:8a:6d:25:ce:89:ea:96:47:a1:71:b1:0a:49:6b:
                    a8:1f:3b:07:8d:8b:20:08:7f:6e:c6:d4:12:9c:9e:
                    e2:ee:9c:8b:9c:01:66:91:16:49:19:32:25:d6:12:
                    c4:ad:8c:fa:e3:03:fd:2f:45:50:fb:8b:21:33:d2:
                    a0:38:30:99:5e:fb:0a:da:cf:ca:b6:80:20:f0:ea:
                    cc:07:28:67:7b:05:f9:d0:fe:33:2a:71:44:5d:c8:
                    eb:4c:e9:91:f1:8c:ec:f8:57:5e:e2:01:cc:7c:24:
                    ee:d1:80:8a:41:a7:c3:7d:0b:85:5b:d2:2d:20:a6:
                    17:64:3a:64:b2:21:ff:2b:fd:de:86:54:88:c4:ef:
                    c1:f7:66:83:ba:8e:1c:f0:03:0a:a9:a2:13:85:31:
                    8d:b2:be:4c:6d:c9:87:6f:44:44:7d:35:fc:34:30:
                    75:b8:16:15:f5:68:e7:95:e9:21:31:cd:5c:89:a7:
                    f0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:BE:0E:34:44:EE:D4:B3:3F:D9:4A:D6:6D:57:D0:2F:FE:B8:92
            X509v3 Authority Key Identifier:
                keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/W7m-DjRE7tSzP9lK1m1X0C_-uJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:46:49:89:a7:04:bc:4c:eb:35:8b:84:38:2e:f4:96:7c:
         84:b6:28:d4:1e:88:14:a8:7d:85:29:29:41:19:8a:8b:1b:bb:
         71:bc:b1:65:dd:61:5a:df:7a:41:4c:04:a9:05:4e:cd:55:9b:
         0a:1a:ab:e3:f6:49:6d:4c:b9:73:2a:fc:bb:df:bb:ac:42:85:
         6a:4f:53:b1:29:64:1a:9e:84:c4:6e:4d:18:44:4c:de:bf:5e:
         85:97:da:83:76:65:34:ac:ce:c4:d3:1f:78:9c:a3:bf:51:a1:
         23:d7:44:32:54:4d:e4:12:21:21:0b:e2:84:75:b2:0f:68:ca:
         c0:9e:da:70:06:f1:38:17:b5:3c:fb:c2:d2:34:39:1e:ed:73:
         56:9d:19:39:68:aa:11:15:67:28:24:c6:f2:be:5d:18:19:ca:
         06:0c:7d:2c:2c:4b:aa:40:79:8e:35:37:66:b0:c3:f5:cc:5b:
         d1:6f:74:dc:6d:44:ac:f4:9b:16:c9:97:fc:b0:c4:39:59:dd:
         82:99:7e:dd:69:f4:90:68:bf:6d:4d:b8:55:d9:15:1f:5f:96:
         79:41:2d:91:14:71:37:fa:e2:66:ba:bd:41:4c:e7:a8:82:dd:
         37:a8:25:4b:8c:4d:6c:67:fa:85:70:f7:4d:de:5a:90:59:f2:
         97:2a:f1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:05 2024 by rpki-client on console-ams.rpki-client.org