Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/WryTlFPMaI2Uarrn5o-DJ5u7kdw.roa
File:                     WryTlFPMaI2Uarrn5o-DJ5u7kdw.roa (raw, json)
Hash identifier:          tAmO5ofdJAQ72UQkTbFR6oilraHXYDxVop0RrR34M24=
Subject key identifier:   5A:BC:93:94:53:CC:68:8D:94:6A:BA:E7:E6:8F:83:27:9B:BB:91:DC
Certificate issuer:       /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial:       07760AC7
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/WryTlFPMaI2Uarrn5o-DJ5u7kdw.roa
Signing time:             Fri 11 Mar 2022 07:57:06 +0000
ROA not before:           Fri 11 Mar 2022 07:57:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1299
IP address blocks:        79.132.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125176519 (0x7760ac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
        Validity
            Not Before: Mar 11 07:57:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5abc939453cc688d946abae7e68f83279bbb91dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:fd:7a:32:c1:64:68:da:f7:fc:7e:38:f3:
                    c4:e8:61:29:0e:21:37:68:8c:e1:7e:1d:e5:72:be:
                    8b:81:d5:86:1b:07:ab:15:97:32:d6:da:01:b3:77:
                    56:f0:69:62:f2:c7:2e:6e:13:33:26:3f:ea:14:14:
                    07:8b:79:c4:cf:70:73:63:51:e0:65:52:b6:55:00:
                    f2:b0:ad:34:2c:22:98:ab:84:d1:12:d9:40:ae:df:
                    5d:58:68:6b:9b:9d:f1:1d:4a:9b:b9:16:a2:e1:c4:
                    7f:9e:13:23:eb:23:57:d1:aa:e4:c2:74:13:12:05:
                    ee:73:93:2b:47:39:64:31:6a:03:c4:d1:36:20:3d:
                    74:f8:b2:0c:27:7a:8f:2d:11:d4:c9:95:db:ce:77:
                    2f:f6:d0:a9:1e:77:f4:57:de:70:33:3e:a6:51:1b:
                    96:45:3b:49:c7:fb:29:78:11:dd:5b:85:a8:9b:e8:
                    54:e4:0e:f9:6a:d5:e9:79:53:fe:a7:49:83:71:9a:
                    ed:ae:bd:89:29:f1:7a:c0:cc:50:5c:6b:54:a3:dc:
                    80:64:00:04:63:43:ac:13:f1:d1:ba:d8:39:c8:fd:
                    0d:9e:b7:02:78:ed:be:20:fe:10:8f:b8:8e:f5:f7:
                    7f:ae:99:5e:1b:aa:6e:47:36:0c:54:1c:20:d4:63:
                    3e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:93:94:53:CC:68:8D:94:6A:BA:E7:E6:8F:83:27:9B:BB:91:DC
            X509v3 Authority Key Identifier:
                keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/WryTlFPMaI2Uarrn5o-DJ5u7kdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.132.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:23:7a:f5:59:f4:4e:ca:f8:d2:aa:e2:95:81:dc:7d:f9:61:
         ce:72:b4:38:04:cc:16:43:d6:1d:2c:76:af:55:16:93:e6:bc:
         e9:53:8c:06:73:11:fe:a8:e6:55:0d:c1:53:df:b3:77:f0:38:
         dc:80:92:0b:a9:e2:11:d4:1e:2d:9f:7d:a7:ff:6e:f6:cc:f4:
         91:a1:f7:50:b9:f9:0b:eb:d3:0e:d3:aa:8c:0a:4f:3f:51:a7:
         d7:db:69:32:75:ca:1d:7b:91:5d:4f:46:7b:62:aa:5d:1d:ea:
         9b:be:69:8c:58:6b:84:aa:49:2a:d9:2f:e4:c9:03:18:ae:11:
         63:57:f3:8a:ea:48:4d:b1:04:e4:5f:51:4a:98:0c:40:40:11:
         86:20:67:72:7b:80:8a:42:7f:fc:98:f8:4b:3f:e1:0e:8c:3b:
         32:d4:8a:2f:53:be:04:fd:93:5f:20:85:d0:b8:1f:08:f4:a6:
         ab:fb:2c:77:03:f6:18:1a:d4:30:56:57:0d:68:0f:e4:ed:46:
         1c:6e:e4:42:ef:6a:9a:8a:46:8c:64:1d:5e:39:78:f7:bf:ca:
         5f:b8:bc:ff:c0:41:ff:0b:cc:12:ee:8b:4e:e2:fd:95:2b:1a:
         7c:58:28:a9:9a:6f:65:e7:d7:68:40:89:de:57:61:a0:c2:db:
         62:cf:25:c5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB3YKxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OTY3MjE4MzFhZmI4YjM4MzA3YjQ5ZjViOWVlNjI5MmFkMWU1ODUwMB4XDTIyMDMx
MTA3NTcwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWFiYzkzOTQ1M2Nj
Njg4ZDk0NmFiYWU3ZTY4ZjgzMjc5YmJiOTFkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK7a/XoywWRo2vf8fjjzxOhhKQ4hN2iM4X4d5XK+i4HVhhsH
qxWXMtbaAbN3VvBpYvLHLm4TMyY/6hQUB4t5xM9wc2NR4GVStlUA8rCtNCwimKuE
0RLZQK7fXVhoa5ud8R1Km7kWouHEf54TI+sjV9Gq5MJ0ExIF7nOTK0c5ZDFqA8TR
NiA9dPiyDCd6jy0R1MmV2853L/bQqR539FfecDM+plEblkU7Scf7KXgR3VuFqJvo
VOQO+WrV6XlT/qdJg3Ga7a69iSnxesDMUFxrVKPcgGQABGNDrBPx0brYOcj9DZ63
AnjtviD+EI+4jvX3f66ZXhuqbkc2DFQcINRjPmkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRavJOUU8xojZRquufmj4Mnm7uR3DAfBgNVHSMEGDAWgBSZZyGDGvuLODB7
SfW57mKSrR5YUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21XY2hneHI3aXpnd2UwbjF1ZTVpa3EwZVdGQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvMWMxZWIyLTFmNjUtNGY3MS04YjMyLWI0YmZlNDU2ZGRlMC8x
L1dyeVRsRlBNYUkyVWFycm41by1ESjV1N2tkdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
MWMxZWIyLTFmNjUtNGY3MS04YjMyLWI0YmZlNDU2ZGRlMC8xL21XY2hneHI3aXpn
d2UwbjF1ZTVpa3EwZVdGQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE+EkTANBgkqhkiG9w0BAQsFAAOC
AQEAgiN69Vn0Tsr40qrilYHcfflhznK0OATMFkPWHSx2r1UWk+a86VOMBnMR/qjm
VQ3BU9+zd/A43ICSC6niEdQeLZ99p/9u9sz0kaH3ULn5C+vTDtOqjApPP1Gn19tp
MnXKHXuRXU9Ge2KqXR3qm75pjFhrhKpJKtkv5MkDGK4RY1fziupITbEE5F9RSpgM
QEARhiBncnuAikJ//Jj4Sz/hDow7MtSKL1O+BP2TXyCF0LgfCPSmq/ssdwP2GBrU
MFZXDWgP5O1GHG7kQu9qmopGjGQdXjl497/KX7i8/8BB/wvMEu6LTuL9lSsafFgo
qZpvZefXaECJ3ldhoMLbYs8lxQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:46 2024 by rpki-client on console-ams.rpki-client.org