Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Ww34zYs6-vEAOrmLoD6rQyGC3Zs.roa
File:                     Ww34zYs6-vEAOrmLoD6rQyGC3Zs.roa (raw, json)
Hash identifier:          f44yvmxr9DStMf8z4ikIssep6Ku49NWh6E+IbYuOdkw=
Subject key identifier:   5B:0D:F8:CD:8B:3A:FA:F1:00:3A:B9:8B:A0:3E:AB:43:21:82:DD:9B
Certificate issuer:       /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial:       0184CCB0F75BB8715CC33952BFC9BB69425C
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Ww34zYs6-vEAOrmLoD6rQyGC3Zs.roa
Signing time:             Thu 01 Dec 2022 07:57:40 +0000
ROA not before:           Thu 01 Dec 2022 07:57:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48763
IP address blocks:        194.28.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:cc:b0:f7:5b:b8:71:5c:c3:39:52:bf:c9:bb:69:42:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
        Validity
            Not Before: Dec  1 07:57:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b0df8cd8b3afaf1003ab98ba03eab432182dd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:23:00:2a:2a:50:f2:5e:e3:45:aa:69:60:
                    bb:97:b5:4d:2d:cf:63:33:69:61:87:24:40:d4:57:
                    48:48:10:ae:58:b0:1a:a4:78:95:4e:cf:18:3d:d5:
                    1c:c6:ab:52:2a:a8:c1:ed:ae:ce:19:e6:77:1e:5a:
                    ef:54:0c:88:6e:52:c1:7a:93:a9:33:ec:86:fe:9d:
                    ed:94:8d:05:11:d0:f7:3d:aa:ac:7a:6a:93:03:3f:
                    29:e6:9e:c7:5e:59:01:fb:ea:90:52:d4:70:33:58:
                    ab:ff:6b:7d:1c:72:23:68:41:00:52:24:0a:70:90:
                    32:26:59:62:4e:82:a3:aa:a3:a7:10:15:e5:96:97:
                    90:62:ee:b9:30:26:3b:77:a3:ef:c8:3a:09:b8:a8:
                    88:b5:66:27:65:fb:0f:d8:25:8a:81:2a:22:50:2c:
                    f3:65:85:cf:a9:fa:24:f1:ba:f4:51:3c:b5:e9:77:
                    01:28:3e:81:5f:0b:22:b7:ec:87:07:c0:37:33:0c:
                    6c:a0:ff:17:1a:75:f9:a3:10:8f:67:cd:60:ad:df:
                    bf:d0:3c:81:69:b7:56:c5:85:a2:dd:ed:30:85:93:
                    b1:f2:cd:b2:3b:4a:14:82:0e:92:32:d4:e4:d8:27:
                    16:ee:2d:94:d4:51:b1:10:dc:87:57:16:6d:cb:1f:
                    e8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0D:F8:CD:8B:3A:FA:F1:00:3A:B9:8B:A0:3E:AB:43:21:82:DD:9B
            X509v3 Authority Key Identifier:
                keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Ww34zYs6-vEAOrmLoD6rQyGC3Zs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.28.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:a7:b4:b7:9b:b7:83:21:a3:23:8f:57:6d:39:c3:13:71:0f:
         75:cf:ff:4f:34:02:6f:f0:09:ad:1d:78:b3:c0:c2:db:02:77:
         2c:b4:b1:d3:49:f7:7e:d1:d8:46:25:f8:0c:6f:ec:6a:fe:dd:
         79:45:4e:19:c3:bb:0c:7f:9b:df:bf:2d:af:68:e6:9e:4d:09:
         00:f6:86:56:44:b8:28:88:9a:ca:2d:7b:27:06:fc:fd:05:76:
         2e:33:79:a9:b9:e9:aa:8d:e0:9f:94:d9:96:08:91:aa:0c:d4:
         01:51:16:55:fe:cc:f6:e7:d3:a1:46:e2:7e:14:a9:f6:66:07:
         d8:b5:6d:94:08:c6:9c:d8:77:5f:c4:49:06:44:64:a8:e3:49:
         66:be:61:79:e5:08:4d:01:4f:1c:75:a3:1d:28:82:d2:19:be:
         34:3f:a0:5a:94:23:12:b0:fc:b6:80:0f:70:1a:8a:20:5a:2c:
         6c:76:c2:26:3c:85:fe:21:62:eb:9a:ff:08:9a:53:6b:8b:38:
         3d:f0:e0:b4:d2:13:ea:1f:0f:87:f6:fb:95:e1:c0:18:5f:58:
         a0:7b:d9:f3:3b:de:0c:5a:1d:7a:c1:bb:21:57:ff:4f:1f:f1:
         16:b5:b2:0f:ab:bb:95:98:31:53:9f:87:b9:4f:c0:81:b4:5c:
         2f:8a:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:54 2024 by rpki-client on console-fra.rpki-client.org