Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/WD-P7n-M7nc26IpmNRMhFCl9j_E.roa
File:                     WD-P7n-M7nc26IpmNRMhFCl9j_E.roa (raw, json)
Hash identifier:          EHkLWeCV0yeh0mkinuvmMk3u+MvWmveh0v7T2ehkiMM=
Subject key identifier:   58:3F:8F:EE:7F:8C:EE:77:36:E8:8A:66:35:13:21:14:29:7D:8F:F1
Certificate issuer:       /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial:       07EEF9B5
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/WD-P7n-M7nc26IpmNRMhFCl9j_E.roa
Signing time:             Sat 01 Jan 2022 15:04:11 +0000
ROA not before:           Sat 01 Jan 2022 15:04:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        45.93.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133102005 (0x7eef9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
        Validity
            Not Before: Jan  1 15:04:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=583f8fee7f8cee7736e88a6635132114297d8ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:4e:d6:af:23:c6:ea:81:26:7b:39:b6:19:
                    a7:6a:99:5e:b0:95:33:db:78:08:03:23:e4:ba:57:
                    20:65:ff:2e:e4:2b:87:39:12:d1:9c:38:bc:4d:20:
                    0d:3d:6d:b8:6a:00:89:57:d8:ba:d9:72:c7:c0:c0:
                    89:a1:69:fa:09:ec:df:59:8f:12:e3:8a:82:7b:cc:
                    03:21:33:ef:bc:3e:18:e4:6d:49:d6:63:6f:dc:65:
                    d8:a8:d5:b5:ec:30:f5:55:93:d5:fa:4b:c7:e8:d8:
                    bb:20:53:5b:dd:6f:15:35:82:a3:80:27:ae:9a:95:
                    e8:9e:85:c4:65:f6:f8:34:26:54:92:50:e8:e4:23:
                    bc:05:12:39:45:20:b3:81:d1:2e:3e:b4:70:dc:a3:
                    b6:9a:b9:46:23:e0:10:f8:31:a7:28:fc:18:e1:3c:
                    59:b6:ff:45:16:6e:90:57:19:53:b9:4a:c3:7e:34:
                    8d:34:d0:a3:45:cf:ca:bc:b8:d2:10:24:27:01:18:
                    ab:80:e9:8a:34:cb:ad:1e:5c:ea:41:c2:41:2c:92:
                    cd:1d:55:b5:c8:c9:2e:5d:b6:b6:8e:0e:75:2a:42:
                    4a:71:1e:a6:f3:e4:0a:3a:18:1a:94:cb:f2:21:9e:
                    8b:99:fb:94:f0:9d:04:8f:b1:b3:08:97:13:20:21:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3F:8F:EE:7F:8C:EE:77:36:E8:8A:66:35:13:21:14:29:7D:8F:F1
            X509v3 Authority Key Identifier:
                keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/WD-P7n-M7nc26IpmNRMhFCl9j_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:4d:73:9a:9c:76:c7:2f:81:78:19:e9:cd:c4:84:74:7d:e8:
         e0:74:4c:3f:38:2a:44:58:e5:b3:2a:05:82:50:83:38:21:28:
         67:12:a5:88:4b:57:1e:a1:18:3e:27:f3:7d:c6:8a:76:eb:7b:
         55:b5:6e:4e:cd:66:48:e4:6c:4d:9f:5b:70:14:6e:9b:74:e9:
         94:5f:6f:67:d9:20:2e:13:ce:f0:f1:9c:a3:ba:75:fc:79:83:
         33:97:51:2c:f3:ec:5b:ab:d2:97:fb:bd:3c:4d:40:49:03:14:
         a5:db:9b:a5:a6:37:27:b4:39:d1:6c:47:76:af:4d:11:01:dc:
         12:02:7b:f3:9a:6b:b2:ff:b6:6c:75:52:15:7c:81:44:fb:97:
         17:a7:3e:4b:13:47:ed:db:cc:5f:03:32:a4:ce:28:24:80:0c:
         87:26:26:20:d8:47:36:21:4e:d3:de:30:95:59:47:50:fe:85:
         1f:da:c4:85:c1:d0:6a:d1:ce:fb:44:4b:7b:10:06:ee:16:93:
         d7:de:95:9d:1d:3b:3b:1f:36:fb:0e:b6:d0:a9:8b:cc:77:a6:
         6b:82:16:5a:da:67:79:5d:4c:5b:6e:e6:0f:a5:18:fb:4a:ab:
         76:b2:2b:e3:30:f5:3e:cc:0b:c7:3c:65:b6:b6:07:e0:51:6a:
         49:d8:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:13 2024 by rpki-client on console-ams.rpki-client.org