Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WWm12nb_k_USV-iQ8kLJoT6es6M.roa
File:                     WWm12nb_k_USV-iQ8kLJoT6es6M.roa (raw, json)
Hash identifier:          GcS7AyuZzr/aNGgwNRc+ygm5RFUF8OJ1sB1etEtqr3A=
Subject key identifier:   59:69:B5:DA:76:FF:93:F5:12:57:E8:90:F2:42:C9:A1:3E:9E:B3:A3
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       03C21470
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WWm12nb_k_USV-iQ8kLJoT6es6M.roa
Signing time:             Wed 18 May 2022 14:02:17 +0000
ROA not before:           Wed 18 May 2022 14:02:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206787
IP address blocks:        185.176.84.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63050864 (0x3c21470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: May 18 14:02:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5969b5da76ff93f51257e890f242c9a13e9eb3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:77:7c:6e:75:9e:1c:f5:f1:b1:f4:0a:d0:
                    3d:71:7a:73:4d:da:53:75:5b:42:a8:3c:f3:c1:b2:
                    b3:24:05:47:16:bf:36:bb:de:5f:14:c4:a7:ce:f7:
                    c6:85:82:7c:ab:a3:e1:86:da:9a:98:2b:b1:14:64:
                    3e:70:32:ff:4f:58:eb:b0:5b:bb:ef:35:3a:4a:cd:
                    90:e7:0e:fe:30:36:aa:0d:da:87:bf:da:46:f9:4f:
                    0a:4e:c5:80:6e:aa:46:48:a6:f2:26:b2:9f:80:79:
                    d1:36:bc:a6:68:a0:4b:d7:78:7a:ef:1c:ae:b8:d0:
                    02:26:28:f8:1a:c0:1d:48:53:c5:66:5d:ef:67:f5:
                    3c:24:09:ab:ba:92:f1:8b:55:f9:da:5b:6a:9a:19:
                    18:59:ef:4b:8b:16:9e:13:b3:ab:75:ea:1c:d3:58:
                    94:04:35:15:1e:66:a6:ca:6e:f2:96:f1:62:2e:13:
                    05:67:9d:4b:91:96:0c:c8:aa:60:eb:29:31:95:33:
                    e6:b7:75:66:da:af:33:88:68:f3:66:02:9d:dc:b8:
                    5b:88:0a:d8:05:22:92:40:21:e2:3a:6a:69:dd:1d:
                    fb:8c:e2:3a:3d:10:cc:0c:27:1c:6f:fb:87:b3:50:
                    a3:c2:2c:fd:5e:b3:42:ba:4f:68:07:9e:d4:3f:50:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:69:B5:DA:76:FF:93:F5:12:57:E8:90:F2:42:C9:A1:3E:9E:B3:A3
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WWm12nb_k_USV-iQ8kLJoT6es6M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:a4:71:12:3b:fa:56:44:52:a2:2c:a0:25:09:4e:36:0f:37:
         b2:e7:8b:2b:d7:74:89:60:4c:f7:8b:78:19:b3:25:47:ba:37:
         4f:dd:57:d5:f7:2b:e7:53:6e:74:6e:36:d2:e3:5a:e7:75:20:
         5a:58:8a:be:25:e6:89:97:ce:81:2f:e9:a9:1d:40:74:32:a0:
         bf:4c:1e:a6:c2:19:b5:43:97:cf:46:2e:ed:fc:5c:c0:41:7a:
         cb:cb:74:32:cf:22:f6:54:41:04:90:e8:a6:81:b1:ea:40:8c:
         06:bb:09:cb:b9:38:af:0b:14:9c:8f:16:d4:42:c4:28:d9:a8:
         0d:8e:bd:5c:2e:40:19:97:a3:40:ed:c8:87:58:2c:70:d6:94:
         e7:91:2c:ae:98:05:26:4a:05:b7:02:04:bc:bf:4f:e5:49:58:
         04:73:5b:93:20:c3:f5:6b:6a:1a:cf:3c:c7:e6:0d:a6:bb:cd:
         eb:43:56:39:83:4d:26:3c:bd:41:d7:60:c3:84:e7:e6:d7:a8:
         35:03:e6:4f:cf:a7:66:1a:73:a2:bd:8f:a1:fd:02:4c:90:c9:
         a7:e9:a5:a3:b4:46:eb:24:30:0c:48:70:e4:5a:b4:fe:c5:40:
         0e:ed:2c:41:cb:31:ca:59:8d:4a:4a:ca:58:84:26:b5:b9:ac:
         0a:59:06:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org