Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/wyn1x1Viy0aqjwxXVMaHyEpaylA.roa
File:                     wyn1x1Viy0aqjwxXVMaHyEpaylA.roa (raw, json)
Hash identifier:          8suaHLjazD//wOqcEwhO3DmcNK9Xrzu2iTbcF34lIUc=
Subject key identifier:   C3:29:F5:C7:55:62:CB:46:AA:8F:0C:57:54:C6:87:C8:4A:5A:CA:50
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       07FF73CC
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/wyn1x1Viy0aqjwxXVMaHyEpaylA.roa
Signing time:             Sat 01 Jan 2022 06:55:43 +0000
ROA not before:           Sat 01 Jan 2022 06:55:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34924
IP address blocks:        2a0f:5707:aa00::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134181836 (0x7ff73cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan  1 06:55:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c329f5c75562cb46aa8f0c5754c687c84a5aca50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:43:7f:47:84:5c:69:97:f2:dd:88:18:92:
                    d2:05:54:65:ee:cb:ad:e4:4c:d8:81:79:74:c0:05:
                    a8:69:7d:6d:ff:fc:73:e5:30:b5:9a:b3:4e:62:95:
                    c7:16:28:91:db:61:27:1e:c4:89:53:87:4d:75:85:
                    2a:f7:15:50:45:e9:fc:03:27:40:e5:37:12:38:b2:
                    cc:24:5e:3d:50:18:bb:b2:db:4b:2a:8b:60:87:60:
                    13:17:24:cc:f1:94:0b:99:06:0c:30:2d:3d:2f:cd:
                    a5:cc:02:c0:c1:87:33:43:87:3a:cd:8d:5e:24:b9:
                    14:87:99:11:53:19:8b:79:40:60:6f:cf:74:c9:bd:
                    77:28:3d:aa:5c:47:92:2a:ee:cb:75:46:39:b9:42:
                    da:0b:79:43:7b:70:96:6d:a9:a1:9c:a1:42:3d:c4:
                    ef:71:3f:8d:c0:8d:78:52:62:d0:1c:ae:24:96:98:
                    f9:e5:b9:8a:55:e2:37:02:19:b7:fa:89:f6:f5:54:
                    b0:90:f3:80:84:29:db:ab:03:1f:31:41:6a:2d:dd:
                    2d:62:61:ad:fc:cb:f5:d4:35:74:d4:c3:63:f0:c4:
                    f1:96:c6:4e:54:a8:76:e6:3d:67:8b:39:a9:15:d4:
                    80:a1:81:b3:b6:f7:42:3e:df:cd:33:11:50:a0:93:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:29:F5:C7:55:62:CB:46:AA:8F:0C:57:54:C6:87:C8:4A:5A:CA:50
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/wyn1x1Viy0aqjwxXVMaHyEpaylA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:aa00::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:f8:87:53:8f:9e:e8:3a:92:bc:44:96:00:d7:74:32:d2:0d:
         78:43:89:87:d6:31:27:09:db:ac:70:30:c3:56:24:cc:01:ee:
         5d:9e:98:6d:61:38:a7:3a:a2:63:29:1b:c0:b1:9e:a8:f2:64:
         9d:02:cc:ab:cd:0b:a2:c6:f8:5f:23:69:02:65:b5:9c:3e:87:
         2c:e1:d3:ba:1b:67:7f:48:b7:87:d0:a5:16:4c:15:fa:5d:53:
         26:27:82:22:f0:72:55:4c:32:22:31:52:ab:44:43:78:29:45:
         ea:d8:35:88:53:bd:35:38:6f:ec:fd:6a:c1:da:07:73:b9:05:
         4f:98:d1:38:1f:6f:6f:12:68:11:4d:21:9d:1b:af:f9:4a:55:
         4a:bc:85:bf:95:19:e8:08:10:82:43:dc:cf:c7:de:55:42:26:
         78:76:8a:bd:68:dd:70:8b:e7:44:43:07:e5:c8:b5:f3:f2:51:
         50:2e:54:0b:1a:82:55:63:64:2b:9a:48:e4:fa:47:8c:ce:fb:
         d1:84:21:fd:36:3e:d4:c3:3f:9f:ef:8f:5e:9f:03:32:75:7f:
         68:cf:f1:e9:1a:de:a4:26:e7:f0:39:0d:8b:b7:45:2a:af:0b:
         42:3d:cc:24:0f:b9:b6:b5:ae:ce:51:3e:89:e2:21:85:37:0e:
         bc:fe:19:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org