Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WBEtzpJUG_wY1RyG3Er6dLM9Lec.roa
File:                     WBEtzpJUG_wY1RyG3Er6dLM9Lec.roa (raw, json)
Hash identifier:          dz6VWSTFoSQ6S4bFLp2/C2yWhnuhhuZSj0qIEqlK5UM=
Subject key identifier:   58:11:2D:CE:92:54:1B:FC:18:D5:1C:86:DC:4A:FA:74:B3:3D:2D:E7
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       03B94D66
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WBEtzpJUG_wY1RyG3Er6dLM9Lec.roa
Signing time:             Tue 15 Feb 2022 10:24:11 +0000
ROA not before:           Tue 15 Feb 2022 10:24:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.92.44.0/24 maxlen: 24
                          46.37.114.0/24 maxlen: 24
                          46.37.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62475622 (0x3b94d66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Feb 15 10:24:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58112dce92541bfc18d51c86dc4afa74b33d2de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:63:3c:d0:4c:72:ea:e9:e9:09:a3:8b:47:ba:
                    5a:fc:2d:24:f3:a1:58:77:ea:81:23:40:ec:be:54:
                    b3:66:f1:53:72:d8:4a:e2:02:9a:3e:5c:3d:28:f8:
                    2f:ba:2e:d9:8e:ab:74:fb:87:bb:9c:a7:8e:6c:43:
                    9c:ff:3d:e9:a2:a3:ff:2f:f7:a3:6c:2b:f4:44:fa:
                    5c:3c:89:66:a2:d5:21:02:5f:eb:ca:61:a3:b9:84:
                    fb:7a:f2:77:9c:21:98:f9:3e:f5:10:e0:f3:23:c2:
                    4c:3a:29:35:1d:66:2c:62:27:4a:42:80:95:28:73:
                    5e:e9:6e:ae:30:28:37:19:8d:63:77:4a:ae:6f:53:
                    2e:b7:ec:8d:b9:13:e2:4d:99:60:82:4b:af:e9:9b:
                    2c:7c:ce:f4:45:9f:b5:5e:f5:a3:7c:22:da:83:6c:
                    6e:df:b2:8c:49:c4:a1:74:fa:5d:75:53:d1:38:33:
                    7a:d4:28:07:25:6e:71:3c:1c:ef:7e:94:28:e8:6b:
                    09:c0:ae:75:0d:24:1f:75:68:11:e3:90:84:e6:3f:
                    48:e6:25:34:7d:6b:6f:f9:88:9f:97:2a:27:a3:5f:
                    7c:62:82:ca:24:fe:e0:a0:55:50:85:76:d9:bb:d4:
                    ff:cf:fb:10:d7:82:f3:a5:68:50:6d:87:88:ed:77:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:2D:CE:92:54:1B:FC:18:D5:1C:86:DC:4A:FA:74:B3:3D:2D:E7
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WBEtzpJUG_wY1RyG3Er6dLM9Lec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.114.0/24
                  46.37.119.0/24
                  185.92.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:f5:87:58:39:be:95:d5:b0:2a:a6:1d:4a:b1:cd:52:66:
         d5:90:da:e7:f3:e0:92:8a:60:f1:6a:e7:e0:df:97:bc:57:15:
         a1:e7:cf:0e:0b:3e:73:5b:92:0d:b6:7b:49:2d:0b:0c:72:3d:
         88:f0:40:3d:4d:5f:ef:8a:b1:46:be:f7:ef:87:95:34:c4:ea:
         ff:4d:0b:14:3b:00:c8:c3:be:ae:0d:ad:db:b2:66:24:f2:68:
         22:58:21:c9:2f:d0:b7:fb:8e:50:08:6d:9e:aa:aa:f4:92:1c:
         9b:30:a2:1c:7e:33:29:7a:4d:67:99:65:23:47:4e:a3:5e:28:
         af:c2:e2:67:4a:99:b1:58:d4:c0:0f:1f:e2:20:4a:cc:54:79:
         47:21:d2:6d:5e:45:1f:a0:86:5e:cb:ff:61:27:44:3f:d3:b6:
         26:00:74:51:4f:8b:be:a4:17:05:e4:94:a8:25:72:72:47:fd:
         ad:68:3e:bf:b1:cd:85:a8:3d:30:bc:a6:c6:07:d3:c4:ea:ea:
         7d:d3:9f:b0:99:04:7f:bb:f2:0b:23:e0:e2:76:eb:7e:01:bf:
         67:98:29:df:b3:6a:da:06:5a:ed:cc:11:39:03:13:3e:d2:09:
         d0:75:cb:a2:54:5a:b0:0f:25:a0:8b:fd:d3:2f:3c:c1:81:65:
         b3:74:64:ba
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA7lNZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2NmMDg4NDkxOGE1MDIzOWVmNzA1MThlZTlmYzA0ZjFhYWUxOTI5MB4XDTIyMDIx
NTEwMjQxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTgxMTJkY2U5MjU0
MWJmYzE4ZDUxYzg2ZGM0YWZhNzRiMzNkMmRlNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1jPNBMcurp6Qmji0e6WvwtJPOhWHfqgSNA7L5Us2bxU3LY
SuICmj5cPSj4L7ou2Y6rdPuHu5ynjmxDnP896aKj/y/3o2wr9ET6XDyJZqLVIQJf
68pho7mE+3ryd5whmPk+9RDg8yPCTDopNR1mLGInSkKAlShzXulurjAoNxmNY3dK
rm9TLrfsjbkT4k2ZYIJLr+mbLHzO9EWftV71o3wi2oNsbt+yjEnEoXT6XXVT0Tgz
etQoByVucTwc736UKOhrCcCudQ0kH3VoEeOQhOY/SOYlNH1rb/mIn5cqJ6NffGKC
yiT+4KBVUIV22bvU/8/7ENeC86VoUG2HiO1364kCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRYES3OklQb/BjVHIbcSvp0sz0t5zAfBgNVHSMEGDAWgBTTzwiEkYpQI573
BRjun8BPGq4ZKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8x
L1dCRXR6cEpVR193WTFSeUczRXI2ZExNOUxlYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
Y2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8xLzA4OEloSkdLVUNP
ZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC4lcgMEAC4ldwMEALlcLDANBgkq
hkiG9w0BAQsFAAOCAQEAd331h1g5vpXVsCqmHUqxzVJm1ZDa5/Pgkopg8Wrn4N+X
vFcVoefPDgs+c1uSDbZ7SS0LDHI9iPBAPU1f74qxRr7374eVNMTq/00LFDsAyMO+
rg2t27JmJPJoIlghyS/Qt/uOUAhtnqqq9JIcmzCiHH4zKXpNZ5llI0dOo14or8Li
Z0qZsVjUwA8f4iBKzFR5RyHSbV5FH6CGXsv/YSdEP9O2JgB0UU+LvqQXBeSUqCVy
ckf9rWg+v7HNhag9MLymxgfTxOrqfdOfsJkEf7vyCyPg4nbrfgG/Z5gp37Nq2gZa
7cwROQMTPtIJ0HXLolRasA8loIv90y88wYFls3Rkug==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-fra.rpki-client.org