Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/wOK9Wx08loNoXaBCq7FyYoShsYA.roa
File:                     wOK9Wx08loNoXaBCq7FyYoShsYA.roa (raw, json)
Hash identifier:          yUsmOpg3esyGDydO+sJETo/Cq8QhCTYfnYcUQ524mUA=
Subject key identifier:   C0:E2:BD:5B:1D:3C:96:83:68:5D:A0:42:AB:B1:72:62:84:A1:B1:80
Certificate issuer:       /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial:       01E2A8
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/wOK9Wx08loNoXaBCq7FyYoShsYA.roa
Signing time:             Thu 28 Apr 2022 11:29:59 +0000
ROA not before:           Thu 28 Apr 2022 11:29:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199619
IP address blocks:        185.5.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123560 (0x1e2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
        Validity
            Not Before: Apr 28 11:29:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0e2bd5b1d3c9683685da042abb1726284a1b180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:f7:47:8f:07:78:69:1c:11:82:4c:94:32:
                    8c:45:77:3d:61:2f:eb:5e:8e:b2:53:e1:c0:b3:31:
                    4f:31:6d:37:db:a2:26:d4:20:43:1a:9b:c0:86:be:
                    df:c5:fc:06:14:82:ad:20:2a:e6:31:f4:37:70:e1:
                    25:f0:f5:5d:19:57:34:53:1f:a8:5f:0a:a8:9d:e8:
                    bb:d4:b3:4f:7f:28:75:60:c5:76:b6:f3:24:11:d2:
                    90:8f:87:c5:ec:8b:49:c4:7b:49:aa:07:c4:6d:de:
                    be:0a:07:72:d5:e7:f6:13:f2:3e:01:db:68:1d:4e:
                    b8:68:3f:02:bc:a1:24:96:cd:4e:4e:bf:90:02:22:
                    53:7b:f1:d6:00:b2:49:7f:c2:ae:d8:6a:aa:ed:eb:
                    d3:3f:a6:26:a7:5b:53:c9:b9:d2:fd:ad:91:f3:d8:
                    b1:03:36:3b:23:8e:f1:de:ce:e1:e8:93:1e:77:ca:
                    63:ab:34:7f:40:f0:d4:5d:ec:f0:a8:1b:a7:c6:86:
                    0a:82:1d:ec:3e:80:f3:70:f9:10:8d:20:90:0e:40:
                    38:a6:e4:34:eb:f0:f0:0d:13:1a:57:4c:ca:e7:6c:
                    1e:60:11:2f:7e:1c:1b:1a:38:da:a5:bc:43:8c:7f:
                    fc:94:0b:0f:f7:ca:d5:f6:4a:5b:6c:69:09:b4:12:
                    26:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:BD:5B:1D:3C:96:83:68:5D:A0:42:AB:B1:72:62:84:A1:B1:80
            X509v3 Authority Key Identifier:
                keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/wOK9Wx08loNoXaBCq7FyYoShsYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.5.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:3a:12:40:25:98:e8:82:bf:aa:63:88:96:f8:90:f1:07:2d:
         13:05:08:6a:16:00:be:e6:1d:e2:2d:30:ee:11:82:58:b5:ed:
         aa:67:cb:e7:64:e4:c1:39:cc:f5:5c:a1:d7:22:57:b6:5e:ab:
         7d:51:9b:4c:6e:7a:d2:e2:de:60:86:40:b3:9e:e9:a0:b6:a7:
         3b:19:64:4c:94:63:58:70:50:cf:08:f7:27:2f:cf:72:88:1b:
         91:11:23:ab:24:39:82:d8:75:9a:84:f5:25:66:13:80:d5:cf:
         a3:da:69:f9:b6:7e:1d:fb:93:89:ca:d9:f1:e9:46:3a:92:03:
         8b:56:fb:fc:fb:4e:48:44:79:99:32:f4:08:cc:24:bb:eb:bf:
         ea:eb:43:2e:69:50:fa:15:8d:ad:85:9f:6e:ff:10:ec:f4:99:
         e8:a6:20:3c:58:37:a3:5e:58:37:0f:d3:69:c8:34:df:d7:86:
         73:2f:a2:cc:6b:42:73:aa:90:68:0d:d4:db:ed:3b:55:cc:cf:
         f0:be:f7:d1:9b:6e:f1:ad:e7:58:f0:eb:c7:82:7e:18:72:ee:
         0a:b6:70:32:ce:52:ce:e7:b4:f8:72:9f:ad:2e:f2:ff:36:f5:
         cf:9b:c4:10:97:5a:82:8a:2d:4e:b7:33:bc:aa:75:40:6f:7c:
         e7:09:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:42 2024 by rpki-client on console-ams.rpki-client.org