Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/wHVUimrdzj_xfDdRcZKYMEU5ies.roa
File:                     wHVUimrdzj_xfDdRcZKYMEU5ies.roa (raw, json)
Hash identifier:          RtR19OuOB2aE93ZHyJGVuDGXxm2eZOdVEB7FVodNur4=
Subject key identifier:   C0:75:54:8A:6A:DD:CE:3F:F1:7C:37:51:71:92:98:30:45:39:89:EB
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       01839945BECA6566338909E079326647212A
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/wHVUimrdzj_xfDdRcZKYMEU5ies.roa
Signing time:             Sun 02 Oct 2022 15:17:08 +0000
ROA not before:           Sun 02 Oct 2022 15:17:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59432
IP address blocks:        188.214.234.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:99:45:be:ca:65:66:33:89:09:e0:79:32:66:47:21:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Oct  2 15:17:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c075548a6addce3ff17c375171929830453989eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:99:87:e5:93:6d:cc:1c:d4:cb:ac:81:52:
                    89:90:53:b0:3c:95:bd:51:19:b7:0b:36:32:1f:3f:
                    6f:5d:0b:8c:17:23:14:df:72:50:65:52:20:29:57:
                    43:4a:fe:15:b6:75:61:31:28:cf:ef:22:2e:fc:6a:
                    8b:13:a2:6a:3f:bf:ca:2f:c3:7b:97:ad:a3:d7:fd:
                    c8:e9:7a:8f:da:ce:b6:5a:d9:7f:77:4e:e3:f3:59:
                    62:81:9a:06:7a:d3:59:39:7d:14:bf:27:4e:fc:7a:
                    86:93:71:67:7b:81:ba:39:b2:e7:b6:31:e2:87:87:
                    fa:10:1b:cd:26:80:f1:35:dc:05:b2:f8:c1:3d:d6:
                    08:71:ac:44:6d:90:cf:29:8f:9d:51:f9:02:24:51:
                    b6:0d:6e:c0:bc:ce:15:67:65:5c:74:e9:d8:fd:a5:
                    f3:05:ff:86:ca:72:ac:08:72:0a:70:3f:18:1e:ce:
                    26:7a:d6:f5:ef:1e:d3:d3:33:e0:fc:06:9d:5b:8f:
                    5c:89:99:4e:d7:19:e3:c1:94:5d:0b:37:46:d4:5b:
                    61:30:c5:ff:20:7d:cc:f4:01:2e:c1:0d:57:a5:b7:
                    41:92:54:df:c1:e6:33:02:f5:e6:bb:b2:59:81:bd:
                    86:87:8d:5a:80:6f:f9:62:7c:7f:76:48:f5:29:ba:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:75:54:8A:6A:DD:CE:3F:F1:7C:37:51:71:92:98:30:45:39:89:EB
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/wHVUimrdzj_xfDdRcZKYMEU5ies.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.214.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:48:01:51:b8:c9:6b:03:7c:9a:fa:db:9c:ba:12:ed:52:29:
         84:9e:cc:c2:af:25:83:54:f2:d6:4d:d0:5c:e5:29:25:2c:c3:
         bb:94:58:45:9c:b7:b1:84:25:f0:52:92:65:ad:9d:5f:97:00:
         70:ef:f1:bd:97:b0:83:e8:a5:83:5f:08:e8:7d:7d:26:0c:67:
         a9:7b:96:c0:45:32:ca:57:bc:c9:cc:4d:c5:47:bb:81:4c:d4:
         2b:e1:1c:03:3b:2a:b5:1d:10:d7:72:0b:87:41:de:95:02:f3:
         c7:d7:b7:c9:03:c4:c3:95:23:0e:47:1d:0f:83:29:13:a6:0e:
         12:b0:f7:7b:04:de:df:cc:e5:5a:51:1d:f0:1c:6b:5b:1e:69:
         52:be:b8:f4:c6:0f:fb:fb:b4:94:0e:67:56:d7:a8:0c:30:a2:
         61:54:66:cc:a7:9b:8b:67:84:ad:26:8d:6b:2d:55:e3:d1:7f:
         7a:19:50:71:10:84:de:70:f5:86:53:9d:ee:8c:ef:8b:34:1d:
         06:46:6b:c7:a4:db:f4:d6:c1:c3:fb:25:3b:c4:c9:3d:28:0c:
         17:30:c1:8c:7a:ec:3d:36:ab:93:64:2d:cb:12:64:56:e0:73:
         dc:06:1b:43:14:50:46:4c:8a:34:4f:69:88:22:32:19:77:d5:
         08:30:4e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org