Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/Wu1ODMEaOSeCEOnr2iyyJGwB92g.roa
File:                     Wu1ODMEaOSeCEOnr2iyyJGwB92g.roa (raw, json)
Hash identifier:          zOUAAlz+oDRzbMKkWqyUhVhVofXl1TLDUz46wgtdfG0=
Subject key identifier:   5A:ED:4E:0C:C1:1A:39:27:82:10:E9:EB:DA:2C:B2:24:6C:01:F7:68
Certificate issuer:       /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial:       0358C205
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/Wu1ODMEaOSeCEOnr2iyyJGwB92g.roa
Signing time:             Sat 01 Jan 2022 11:57:54 +0000
ROA not before:           Sat 01 Jan 2022 11:57:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39535
IP address blocks:        185.183.244.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56148485 (0x358c205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
        Validity
            Not Before: Jan  1 11:57:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5aed4e0cc11a39278210e9ebda2cb2246c01f768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:52:ac:97:0e:95:a4:a6:d6:ab:a6:dd:34:d7:
                    ee:f3:a5:af:e8:ff:6c:c7:40:e2:16:b3:16:e9:31:
                    6c:7d:ec:9f:6d:25:8a:57:e6:ad:6b:d2:4b:2e:79:
                    c4:04:37:5f:d6:db:9f:db:92:51:53:82:79:8b:f8:
                    e6:f7:ed:91:6c:30:c8:8a:10:ff:42:f6:ab:84:6a:
                    1f:3e:cd:54:95:d9:ce:5f:29:54:e5:8b:08:ab:06:
                    5c:d3:f1:59:01:5b:52:ee:e9:17:5b:47:fc:e8:d2:
                    57:33:24:0c:73:75:7f:62:2e:65:7d:e3:33:74:02:
                    79:20:7f:03:a7:2d:8e:dc:dc:36:b5:7b:84:ee:f5:
                    64:78:94:53:e6:4c:54:17:4a:46:49:fb:ab:80:77:
                    05:fa:4b:79:35:bd:4b:b5:10:08:b3:8b:b7:ad:cd:
                    89:d2:db:ac:13:be:f8:18:40:52:c1:8a:c6:50:13:
                    de:e5:ec:b0:d0:9b:0f:8b:88:2f:4e:53:1e:83:5f:
                    11:03:35:c0:63:28:79:67:0a:d1:43:1e:6e:61:7e:
                    cd:1a:b0:f3:83:c3:aa:6d:a7:62:d2:1c:fa:fa:0e:
                    c3:71:12:57:24:e8:93:9d:c4:6d:29:03:10:d9:06:
                    27:30:9d:56:5b:5b:ff:b8:af:82:6e:fa:43:b5:22:
                    a5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:ED:4E:0C:C1:1A:39:27:82:10:E9:EB:DA:2C:B2:24:6C:01:F7:68
            X509v3 Authority Key Identifier:
                keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/Wu1ODMEaOSeCEOnr2iyyJGwB92g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:34:da:d2:cc:ce:b1:01:12:f2:24:fb:26:37:04:a3:4b:ef:
         4f:28:90:a8:fd:ab:84:3b:a1:30:6c:bd:16:4c:43:8a:1d:4f:
         41:86:94:fc:2f:20:f0:86:52:d0:79:65:f4:ba:07:60:1f:44:
         39:bc:c5:c7:42:01:81:06:92:3d:91:be:6e:4f:7b:fc:03:0e:
         59:b6:3f:a6:f3:17:dc:0c:4e:fc:95:75:d7:dd:68:c8:53:83:
         71:7f:26:57:d2:78:55:f3:94:7a:ac:35:c0:aa:af:be:41:e1:
         01:1c:d5:bd:1b:e4:37:2d:94:a2:02:f5:22:44:54:d8:19:7b:
         0e:03:e1:20:c1:0b:4a:78:15:ad:30:13:5c:81:38:2d:63:47:
         36:a9:90:8b:76:ca:59:a0:2e:e2:64:1e:8e:eb:42:64:60:63:
         69:dd:3f:19:b5:b6:55:ed:e5:27:ad:f9:43:3f:6e:6d:0e:0a:
         22:50:c6:bd:a4:cb:0c:32:ad:77:1f:41:2f:7b:50:be:a9:16:
         d1:c5:e7:ea:be:2f:98:70:d4:b0:f8:4e:86:a9:5f:68:45:4f:
         a3:44:9b:85:1f:94:31:a9:ec:d7:a8:f8:bb:a8:2a:c8:36:8a:
         ea:dd:b6:0c:95:d8:77:50:05:fc:95:78:a8:da:84:c5:4c:64:
         3d:ca:65:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:54 2024 by rpki-client on console-ams.rpki-client.org