Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/WZSy052SStaoEgAbf0hcTMYxrL8.roa
File:                     WZSy052SStaoEgAbf0hcTMYxrL8.roa (raw, json)
Hash identifier:          fxSYnr3jUZ42VqojXS1KxDgpseGi+f/CCu/Vt5EB4xw=
Subject key identifier:   59:94:B2:D3:9D:92:4A:D6:A8:12:00:1B:7F:48:5C:4C:C6:31:AC:BF
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       0183A4442C95AD65B2C75F2BFECBE4F13419
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/WZSy052SStaoEgAbf0hcTMYxrL8.roa
Signing time:             Tue 04 Oct 2022 18:31:14 +0000
ROA not before:           Tue 04 Oct 2022 18:31:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204474
IP address blocks:        2a05:1084:100::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a4:44:2c:95:ad:65:b2:c7:5f:2b:fe:cb:e4:f1:34:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Oct  4 18:31:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5994b2d39d924ad6a812001b7f485c4cc631acbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:e8:b2:d7:15:e8:ae:1d:4e:da:8a:b6:db:
                    34:cc:87:6d:9f:7a:1e:5a:0e:15:ee:04:41:d5:c6:
                    12:fc:18:3a:89:65:65:67:4a:9c:6f:20:77:dd:96:
                    81:e9:f3:da:59:67:6b:e8:ac:2c:15:eb:6c:25:a6:
                    9e:d3:28:81:34:38:ab:be:6c:fc:98:14:e7:54:a9:
                    3c:a7:dd:f2:1e:63:91:45:55:21:37:19:1b:2b:54:
                    0e:bf:7a:f3:45:a2:45:0f:e1:b9:11:dd:67:ee:06:
                    93:00:e7:50:17:e0:66:38:80:44:5a:ed:a1:aa:5e:
                    65:65:40:e4:4c:35:d5:a8:72:a1:aa:a7:2a:49:18:
                    62:d9:57:fe:87:49:b9:a5:50:31:53:b6:62:71:3b:
                    25:09:6a:a9:44:22:e1:a2:b5:b3:25:7d:b4:9d:74:
                    93:26:eb:77:b2:50:4f:ea:fa:74:44:c5:72:f7:6d:
                    8d:13:07:9c:a8:64:ac:e5:e1:6a:90:a5:cb:06:b0:
                    61:2f:c7:e6:56:65:10:74:86:29:f0:c9:90:90:46:
                    e0:cc:1a:ed:d0:5b:2a:1f:f0:bf:a8:2e:64:51:be:
                    47:96:93:e4:2d:24:c5:02:98:87:66:42:5f:d7:da:
                    51:3b:97:d5:26:f8:e1:1e:63:e0:46:7c:2c:71:09:
                    dc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:94:B2:D3:9D:92:4A:D6:A8:12:00:1B:7F:48:5C:4C:C6:31:AC:BF
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/WZSy052SStaoEgAbf0hcTMYxrL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1084:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:c0:ae:15:0f:f5:b5:eb:13:26:bd:6e:19:85:b2:2c:49:05:
         b9:43:df:12:ad:55:77:c7:6a:7c:44:2d:bb:55:2e:86:14:18:
         68:a8:15:e3:38:1d:03:9b:25:49:b3:16:2a:4d:c4:7c:c7:70:
         99:34:5e:27:ff:dc:37:3b:fd:a5:3b:d2:d0:98:5d:30:81:60:
         d2:f2:8b:4a:fd:79:82:87:50:85:35:58:34:fd:15:76:9f:7c:
         a7:4b:5a:b0:fd:7c:56:b6:e0:ed:24:37:f4:98:14:33:aa:e0:
         c0:d6:32:86:d3:cc:c7:c6:d5:ca:f0:72:69:03:9e:40:84:fa:
         fb:1d:23:b4:d7:23:0e:4d:e1:27:f0:0d:4d:20:80:fc:87:3c:
         a9:81:8e:48:c9:73:2d:a1:7a:23:b1:57:70:d6:78:a1:6e:55:
         2b:16:0f:fc:d4:bf:c9:16:74:8e:1a:1f:b3:97:96:1a:c5:07:
         58:eb:bc:86:95:55:df:87:6a:78:29:06:93:28:4a:b5:b2:6f:
         cd:e4:9c:f4:72:9e:00:fa:ed:a6:b1:a0:1f:31:83:22:89:3b:
         59:25:bc:24:b0:c9:9f:25:a1:c2:f3:f6:9e:2a:ed:1a:64:05:
         fd:cc:bc:f0:42:aa:5b:dc:d9:e0:ed:f4:46:ec:03:ba:34:2c:
         df:be:5c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org