Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/WWGvlBO1UZZXBYDZvC-b1XMec4g.roa
File:                     WWGvlBO1UZZXBYDZvC-b1XMec4g.roa (raw, json)
Hash identifier:          lEBomhIywCdZnAIAiCq7ReajpzQz2CSyuuGDiZyBFhM=
Subject key identifier:   59:61:AF:94:13:B5:51:96:57:05:80:D9:BC:2F:9B:D5:73:1E:73:88
Certificate issuer:       /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial:       01F30E
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/WWGvlBO1UZZXBYDZvC-b1XMec4g.roa
Signing time:             Wed 04 May 2022 09:18:40 +0000
ROA not before:           Wed 04 May 2022 09:18:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39383
IP address blocks:        193.84.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127758 (0x1f30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
        Validity
            Not Before: May  4 09:18:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5961af9413b55196570580d9bc2f9bd5731e7388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:e0:2e:d1:f7:c4:71:72:da:62:23:8b:a2:
                    ac:60:79:eb:7c:52:10:8f:f5:11:43:19:cf:a9:a9:
                    4b:2d:9b:58:3a:c8:5b:b2:ac:a8:ab:07:6f:af:25:
                    4b:ec:d0:97:7b:00:b2:ea:c4:03:2e:14:3d:fc:19:
                    11:5b:2b:7f:bc:a3:23:40:9f:3d:3d:c2:ba:53:7e:
                    f1:d7:c3:36:98:05:b4:e0:d4:53:6b:a7:d5:83:ab:
                    d8:94:d9:05:1d:57:98:60:1f:cf:12:d8:98:d6:43:
                    56:96:38:6c:2c:7f:57:44:73:b4:fa:02:61:fe:e0:
                    87:bc:42:8c:6f:45:2c:36:0f:ff:dd:fb:71:0b:43:
                    ae:30:55:24:a3:3d:b6:ee:cc:24:af:96:87:33:65:
                    2d:32:1f:8a:7c:0f:77:a1:29:75:74:ce:e6:ac:24:
                    e9:1f:ff:31:2c:81:c6:70:22:f1:32:85:7b:60:7f:
                    fb:6f:12:9c:d8:91:39:05:53:95:0f:2c:21:fb:86:
                    96:e4:83:9a:f5:99:c5:cc:9c:bd:53:75:59:99:69:
                    6c:3a:97:d8:34:06:b5:cd:f9:9e:12:55:65:cb:32:
                    c1:c5:d1:18:8c:48:88:d0:24:47:f7:bb:01:df:1d:
                    96:39:b8:fc:23:16:0f:dc:f9:82:6a:18:7d:b7:80:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:61:AF:94:13:B5:51:96:57:05:80:D9:BC:2F:9B:D5:73:1E:73:88
            X509v3 Authority Key Identifier:
                keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/WWGvlBO1UZZXBYDZvC-b1XMec4g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:26:90:1f:c2:ca:ec:df:56:e9:b6:62:2f:5d:d9:3f:ae:cb:
         b6:5a:88:80:c3:be:55:5d:2f:f4:67:29:2f:75:0a:df:86:b8:
         2f:a8:8a:e2:31:f3:63:26:75:5e:6a:21:6b:b2:bb:c9:10:4f:
         ef:80:70:8f:4b:26:56:75:ca:3b:fb:6e:bb:cd:0b:ed:fb:f2:
         16:a8:4b:18:b6:da:3e:c1:69:a3:6c:90:6b:60:2e:32:0e:06:
         73:36:ef:46:b2:e9:29:7d:2e:75:21:01:e9:cc:03:c2:94:22:
         e2:61:f3:c5:15:af:bf:ce:11:4b:86:b0:f9:63:db:ae:5e:d8:
         25:c6:a9:7c:5b:92:01:8e:21:b5:28:e6:4d:10:29:f3:1a:08:
         0b:59:94:ec:37:d4:0c:75:29:08:4b:0d:32:03:f3:5a:bc:28:
         f8:20:a3:22:14:ab:59:83:d4:85:aa:c7:18:8c:14:44:3e:bc:
         ef:68:68:2d:b0:d7:5d:fb:d4:1d:43:63:4b:e5:ec:93:d2:cb:
         9d:54:f0:48:bd:b4:ad:c8:80:e0:97:b2:81:7a:84:1f:9f:51:
         0f:d5:c1:bf:b9:50:96:90:84:4c:89:15:ec:93:29:1b:0b:a5:
         eb:06:41:ca:87:7d:d2:76:83:25:2c:e1:3c:93:fb:3c:f9:43:
         ed:ae:ee:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org