Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/wnl99uixRx_6cOMCiB7xZ4mSZSk.roa
File:                     wnl99uixRx_6cOMCiB7xZ4mSZSk.roa (raw, json)
Hash identifier:          I+ccbi7yXXc4XsmvhnMZO6e9jYowUJXqV80DJ837tJg=
Subject key identifier:   C2:79:7D:F6:E8:B1:47:1F:FA:70:E3:02:88:1E:F1:67:89:92:65:29
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       05817A7D
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/wnl99uixRx_6cOMCiB7xZ4mSZSk.roa
Signing time:             Sat 01 Jan 2022 05:01:19 +0000
ROA not before:           Sat 01 Jan 2022 05:01:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61004
IP address blocks:        2a05:1080::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92371581 (0x5817a7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2797df6e8b1471ffa70e302881ef16789926529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:68:2a:70:44:f4:84:86:2e:0a:ed:4b:9e:
                    87:e7:5d:da:63:8b:a0:2b:b7:80:4d:69:e7:21:e4:
                    56:f2:c4:c7:6e:75:09:e3:49:a5:c1:8c:fd:cf:fb:
                    40:01:31:72:7d:c9:f1:ee:80:1a:75:a5:33:b9:54:
                    ed:79:63:50:22:8a:f1:7b:ea:66:08:6a:29:a2:b3:
                    e0:15:7d:5f:96:52:62:23:a5:e2:ad:2d:63:ea:c9:
                    3c:bc:de:73:d1:22:63:e1:11:5a:af:8f:4c:73:db:
                    02:53:7a:4e:63:e8:9d:0a:39:60:e0:5e:43:30:b0:
                    bd:e0:d5:58:e0:f6:f8:15:8c:b5:89:8f:cc:2d:0a:
                    22:af:28:14:78:d5:f6:36:21:d3:9d:50:ed:22:00:
                    d1:d9:b2:9b:95:39:7e:2c:83:ca:4c:45:14:89:f2:
                    97:b1:52:0f:3b:8c:27:48:92:af:d1:4d:31:70:04:
                    82:3c:b4:49:df:d4:f5:6f:9a:75:c2:ef:97:fa:95:
                    8e:07:3a:dc:f2:cd:57:a9:84:50:52:66:3a:ce:7a:
                    91:4f:a9:3d:9a:93:cd:8d:29:84:61:77:0f:d7:6f:
                    b0:5c:49:a8:11:d4:14:ac:27:1a:9b:18:37:3f:6f:
                    9a:d3:49:6a:55:bd:19:46:22:15:cb:17:31:65:4e:
                    78:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:79:7D:F6:E8:B1:47:1F:FA:70:E3:02:88:1E:F1:67:89:92:65:29
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/wnl99uixRx_6cOMCiB7xZ4mSZSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:1a:94:27:8f:5c:46:8a:1d:56:bd:28:1f:dc:51:a8:32:d0:
         b2:c2:cf:3e:ec:7d:e4:48:4e:e6:e8:a8:6a:72:af:be:51:1e:
         52:5c:43:6a:08:47:fa:2c:5a:2d:15:96:55:c5:b4:91:4b:7f:
         38:e1:18:49:6c:62:f8:38:12:2c:69:f8:45:6d:86:46:8f:88:
         4c:e6:cd:74:66:b4:98:9c:ef:83:c4:2b:4e:f1:6c:ea:af:90:
         8e:fe:6a:ea:64:c1:4b:df:15:16:fb:c1:43:68:d9:b9:c4:cf:
         68:14:df:cb:aa:0c:cc:78:ce:bf:22:2b:7b:85:3b:94:cf:b8:
         b9:9f:b5:f6:83:ae:1b:13:2b:07:10:91:ef:2a:cb:85:9d:62:
         8a:a6:eb:18:ba:5e:7b:55:d0:1a:63:2c:38:8a:d7:74:ca:fd:
         cd:55:f0:16:73:c1:c1:d9:7e:06:6c:e6:37:60:fc:cd:31:d5:
         34:a5:7e:03:5e:f0:2e:0d:fa:af:40:7f:b6:d0:d4:70:b0:e4:
         41:9f:55:fd:a2:9f:bf:10:bd:aa:dc:e6:0f:d3:bf:52:4c:85:
         b7:f6:da:cc:98:63:66:3d:d3:94:22:41:e9:77:83:c9:a4:72:
         f4:c2:cc:23:41:6c:8a:c7:ab:1c:6f:c6:d8:f5:32:00:54:a8:
         21:50:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org