Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WBhqWWpcxA3objQzUrGm3OV9YFs.roa
File:                     WBhqWWpcxA3objQzUrGm3OV9YFs.roa (raw, json)
Hash identifier:          iI1zmcIMIVF8Rjiw21Rhmda/F3ejkcdHZ3Liuk6wKUA=
Subject key identifier:   58:18:6A:59:6A:5C:C4:0D:E8:6E:34:33:52:B1:A6:DC:E5:7D:60:5B
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       0182B69554803AD00FA5F436EABCC546E3EA
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WBhqWWpcxA3objQzUrGm3OV9YFs.roa
Signing time:             Fri 19 Aug 2022 14:50:16 +0000
ROA not before:           Fri 19 Aug 2022 14:50:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399471
IP address blocks:        80.71.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b6:95:54:80:3a:d0:0f:a5:f4:36:ea:bc:c5:46:e3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Aug 19 14:50:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58186a596a5cc40de86e343352b1a6dce57d605b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:70:7b:70:dc:20:ee:52:cc:fd:6e:88:34:
                    a3:f0:f6:98:a9:30:b8:77:fd:da:c1:38:a8:77:21:
                    94:43:d1:5b:dc:41:85:e4:5a:97:b8:b2:87:9a:dd:
                    b6:00:91:ae:42:f8:95:5d:26:12:f9:cf:01:5a:99:
                    87:93:b3:f3:78:8d:2d:e9:b4:21:a2:9d:f4:17:cc:
                    46:4b:58:a5:c1:03:f7:ea:bd:ff:60:cf:08:cb:1f:
                    c9:b0:32:c1:2a:2d:6e:b0:96:2a:fd:5d:e1:9d:80:
                    4a:25:d2:d6:5f:54:81:c6:03:d6:53:6d:65:f2:43:
                    6b:ed:9b:1a:06:42:20:2c:c3:51:42:50:8b:bc:6b:
                    75:51:b9:b7:74:05:0e:20:cc:cd:d6:7c:1e:5b:8c:
                    66:cf:1d:7d:d3:48:a2:9f:a7:dc:c5:c1:39:a9:6a:
                    18:a2:32:4c:52:8a:0f:94:ce:50:f8:70:11:d3:04:
                    21:cb:05:53:b9:e4:a1:d8:83:f7:65:aa:72:80:bf:
                    8e:73:96:5d:a4:d1:e6:d4:82:7f:03:c1:83:c2:21:
                    84:75:7d:d0:70:9f:4e:2c:d9:04:5d:64:e4:60:c1:
                    ed:6d:6f:bf:4f:2e:e3:39:02:01:0d:1e:21:45:1d:
                    50:10:81:1e:78:6a:5f:fb:3c:c1:60:76:66:35:d3:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:18:6A:59:6A:5C:C4:0D:E8:6E:34:33:52:B1:A6:DC:E5:7D:60:5B
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WBhqWWpcxA3objQzUrGm3OV9YFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a8:8a:26:da:b4:a0:17:5e:0d:b7:e9:28:35:f0:74:da:52:
         08:27:07:e4:88:57:37:15:c6:4a:56:54:3d:d5:d9:97:f9:df:
         7f:15:45:cf:be:4f:8b:75:fd:64:6a:cf:9a:ee:97:6f:23:d6:
         e9:f4:90:ed:ec:ec:db:b6:95:d7:50:c0:ad:ce:e5:1d:3b:be:
         04:08:41:7f:b6:0d:00:84:d1:8d:9d:b2:ca:06:19:d7:e1:63:
         ed:1d:17:15:14:d0:12:9e:af:6b:b0:aa:7a:94:af:58:76:d7:
         6c:91:52:ce:82:e9:c6:1d:01:3d:08:45:58:79:f2:dc:e2:13:
         b1:2e:87:48:1a:42:46:e8:a5:3f:5f:5e:e3:83:e8:68:85:61:
         ce:1a:04:d2:c8:3d:4a:78:a9:81:a0:c3:41:e6:55:79:b1:8d:
         99:e0:21:6e:2d:65:53:e2:da:f1:aa:61:4e:d8:26:41:92:ca:
         a1:b0:bc:64:35:e7:f1:0f:2d:88:54:c3:c4:00:ff:8e:e0:55:
         ba:71:37:0b:8f:69:bc:b7:64:e3:dc:f6:08:f0:d3:c0:c2:72:
         f9:28:8c:e6:00:27:20:f5:57:dc:a3:c7:a9:05:35:a3:98:bb:
         43:45:2e:d1:6c:bc:73:34:85:4b:5c:24:67:51:cd:a6:3e:7f:
         56:9c:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:40 2024 by rpki-client on console-fra.rpki-client.org