Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/Ww6vy7pFSfVFlTQwrzuvvJj1tdY.roa
File:                     Ww6vy7pFSfVFlTQwrzuvvJj1tdY.roa (raw, json)
Hash identifier:          JYLje+RBlRUmQQx8fOQZjzi+raELDP34ES+WfozPlW8=
Subject key identifier:   5B:0E:AF:CB:BA:45:49:F5:45:95:34:30:AF:3B:AF:BC:98:F5:B5:D6
Certificate issuer:       /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial:       018476ADFBADA754338B7B074C0CFEF383E6
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/Ww6vy7pFSfVFlTQwrzuvvJj1tdY.roa
Signing time:             Mon 14 Nov 2022 15:07:04 +0000
ROA not before:           Mon 14 Nov 2022 15:07:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212669
IP address blocks:        147.189.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:76:ad:fb:ad:a7:54:33:8b:7b:07:4c:0c:fe:f3:83:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
        Validity
            Not Before: Nov 14 15:07:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b0eafcbba4549f545953430af3bafbc98f5b5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:f8:67:57:08:6a:99:6d:85:8c:10:df:1c:
                    41:67:ad:46:02:a3:a8:d8:6b:f3:aa:2f:c8:5b:ed:
                    de:1a:6b:e5:3e:c7:a9:07:b8:e9:66:7b:20:87:47:
                    49:09:f5:dc:95:fe:83:d7:96:ba:bb:95:51:f1:08:
                    df:a9:23:58:c9:38:5a:46:d0:f7:2c:cb:cf:d6:51:
                    47:87:32:d5:68:ea:11:50:8d:d8:95:9c:6f:7f:ed:
                    3d:13:5c:3a:84:4c:85:8a:21:70:3e:af:d0:05:5e:
                    e4:b7:01:f7:87:36:1d:b6:aa:22:8a:d6:58:09:9b:
                    ca:63:75:33:73:69:44:70:52:4c:a8:24:d1:bd:29:
                    34:d7:c5:e7:ef:5d:c3:1a:f4:66:9f:e3:05:bc:e9:
                    d2:50:8e:c6:2c:75:dc:cf:ab:74:59:40:4a:d3:a8:
                    2c:b1:b3:dd:f1:67:4d:11:f9:d3:90:56:47:72:db:
                    58:8c:50:ab:1b:31:06:e1:4b:13:ae:00:91:d3:59:
                    a4:50:4f:58:86:54:f0:f9:5e:89:1e:61:27:f5:86:
                    24:38:4f:3e:01:82:49:23:d1:87:f2:74:03:14:c7:
                    65:91:08:bc:13:95:70:62:a4:3a:69:17:59:65:8c:
                    5e:58:98:e0:0c:4b:da:d3:b7:23:f1:f3:ef:23:51:
                    90:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0E:AF:CB:BA:45:49:F5:45:95:34:30:AF:3B:AF:BC:98:F5:B5:D6
            X509v3 Authority Key Identifier:
                keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/Ww6vy7pFSfVFlTQwrzuvvJj1tdY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.189.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b4:44:6f:93:45:4b:e1:0c:bd:8e:91:18:df:30:c8:76:a7:
         d2:e4:0e:86:78:e3:e9:fe:45:a6:81:18:81:9e:1a:e9:4b:bc:
         04:a9:30:0f:be:a7:95:99:0e:66:e0:29:9e:45:1d:77:84:bb:
         e4:4d:54:e7:1d:53:f3:04:8b:55:ff:95:21:28:e4:48:aa:e4:
         35:9f:7e:0d:c6:33:11:c5:79:c2:c0:f6:53:5b:b9:e0:78:f8:
         ba:0b:3a:93:df:68:d6:f5:30:cd:d1:97:57:a8:93:77:2b:fc:
         38:bc:b2:92:46:07:2d:91:b2:2d:14:46:96:62:04:f0:58:69:
         de:d7:81:1d:f2:9a:7c:07:25:e6:a5:5d:92:d9:12:ab:db:66:
         ac:ba:b8:c9:d1:1e:ea:ba:f9:9b:f4:4c:d8:f0:84:aa:0e:9c:
         57:05:f9:d4:19:5c:33:99:eb:a4:6d:53:05:5f:d1:8e:3f:9b:
         3e:62:fb:6f:d6:5a:96:04:64:8a:23:88:31:8e:c4:cc:8f:61:
         6f:59:f9:c1:ea:77:8d:3f:2d:3f:8d:94:3d:f1:8f:6f:6f:46:
         20:72:64:75:92:e1:19:09:b1:47:50:ec:b6:d8:3b:8f:6b:3b:
         ac:0d:36:5e:bc:49:9a:f8:7c:b2:7a:4e:80:f2:42:42:52:bb:
         61:e1:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:37 2024 by rpki-client on console-fra.rpki-client.org