Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/WLL1N5gqOli1NxDMM_-gTLRwxjI.roa
File:                     WLL1N5gqOli1NxDMM_-gTLRwxjI.roa (raw, json)
Hash identifier:          D5HqjwHfjbiKagZkF/OoHEPMoeGOVqzW1VAO+u1+abo=
Subject key identifier:   58:B2:F5:37:98:2A:3A:58:B5:37:10:CC:33:FF:A0:4C:B4:70:C6:32
Certificate issuer:       /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial:       0F232F6A
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/WLL1N5gqOli1NxDMM_-gTLRwxjI.roa
Signing time:             Sat 01 Jan 2022 12:03:16 +0000
ROA not before:           Sat 01 Jan 2022 12:03:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206754
IP address blocks:        185.194.112.0/24 maxlen: 24
                          185.194.114.0/24 maxlen: 24
                          2a0a:4a40::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253964138 (0xf232f6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
        Validity
            Not Before: Jan  1 12:03:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58b2f537982a3a58b53710cc33ffa04cb470c632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:de:6d:3a:14:86:c6:6c:05:5d:36:94:fe:
                    76:1b:58:91:88:ef:96:5a:3e:f3:b6:de:c0:e1:06:
                    9e:92:6e:f0:aa:db:de:1d:90:60:ec:16:25:32:7c:
                    92:75:af:72:db:95:11:83:2b:7e:68:ac:54:34:02:
                    97:dc:a9:50:39:15:7e:a4:83:9e:c1:43:4d:ad:a7:
                    f6:9f:2a:b2:fc:f6:86:08:87:65:93:8e:f6:c1:70:
                    01:d2:41:2b:bf:50:6e:b8:87:69:3e:6a:89:77:b4:
                    fb:d3:b9:30:5d:1c:84:63:84:d1:6f:f2:15:d3:1a:
                    d9:38:28:67:7c:b6:2b:6d:dd:a3:75:fd:ec:31:5f:
                    5b:2c:08:71:24:61:6d:af:a9:57:6a:bd:7d:cf:41:
                    76:8d:ca:94:c8:6d:dc:60:8f:83:3b:87:e9:0e:00:
                    7f:5c:b7:7f:f8:67:81:43:21:a4:d7:28:7f:f6:71:
                    fa:5e:ed:ce:d5:6c:1c:8d:6d:aa:77:a0:0b:7d:1b:
                    9b:76:85:80:79:34:60:ac:16:04:9f:43:46:ca:00:
                    a2:87:66:34:2f:bf:b4:2b:a5:5a:c8:a2:72:e2:b8:
                    d6:38:c2:8e:af:23:8d:26:de:64:b3:3a:02:13:bb:
                    ae:e5:d7:9f:50:63:de:7d:d0:a5:ee:c7:b3:39:a2:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B2:F5:37:98:2A:3A:58:B5:37:10:CC:33:FF:A0:4C:B4:70:C6:32
            X509v3 Authority Key Identifier:
                keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/WLL1N5gqOli1NxDMM_-gTLRwxjI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.112.0/24
                  185.194.114.0/24
                IPv6:
                  2a0a:4a40::/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:20:c8:55:a2:78:34:b2:e9:7f:0a:93:e7:04:5f:eb:7e:
         38:0e:57:e7:f2:49:8b:7f:e9:d5:8c:da:d9:d2:fc:fa:61:b2:
         5a:7f:8f:57:89:68:a8:df:e7:de:5a:85:37:a3:b2:b6:5b:53:
         c4:61:da:31:21:87:72:c7:9d:46:6f:fd:87:b2:6a:20:55:07:
         fb:c9:4a:0c:b2:62:db:ac:97:7f:16:b5:4d:81:fd:69:26:bb:
         6f:57:a4:38:3d:5d:37:0f:37:78:97:3a:1c:2d:8d:02:61:1b:
         1d:df:62:56:e5:44:4a:84:e8:34:34:d2:88:a6:6c:74:53:0f:
         6b:7e:ed:63:50:17:00:70:dd:65:eb:4b:41:06:12:94:e9:74:
         78:6f:ad:ca:bf:27:06:a1:52:2a:63:0b:77:df:52:a0:44:88:
         da:1f:b8:26:0b:23:bd:bc:57:ce:34:2e:70:f5:63:58:b8:95:
         16:82:b5:fe:fd:c5:a2:14:e2:8c:cf:73:7c:35:40:af:77:d0:
         91:7f:e1:c7:7c:99:f2:6b:fb:ee:63:a8:f1:13:cd:ec:ce:1f:
         fe:05:24:4e:c8:34:f0:e8:fc:bb:c1:b9:6c:20:7f:8a:45:98:
         d0:de:54:d4:b0:cd:cc:71:c1:07:33:8b:40:66:94:74:92:24:
         33:78:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:37 2023 by rpki-client on console-fra.rpki-client.org