Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/WVubXv_3Pvoyd7Dmafzcz8r_CCw.roa
File:                     WVubXv_3Pvoyd7Dmafzcz8r_CCw.roa (raw, json)
Hash identifier:          17UruHcF4Z3z8BrPlZTi51fflt5ixwfJWeNVy+vTki0=
Subject key identifier:   59:5B:9B:5E:FF:F7:3E:FA:32:77:B0:E6:69:FC:DC:CF:CA:FF:08:2C
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       07F4D1C8
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/WVubXv_3Pvoyd7Dmafzcz8r_CCw.roa
Signing time:             Sat 01 Jan 2022 14:01:22 +0000
ROA not before:           Sat 01 Jan 2022 14:01:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50196
IP address blocks:        77.241.8.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133485000 (0x7f4d1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Jan  1 14:01:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=595b9b5efff73efa3277b0e669fcdccfcaff082c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:28:0b:a6:04:d9:1e:27:d0:b8:bd:45:03:
                    03:5b:d6:49:0a:0b:b6:2a:65:8a:dd:b3:54:03:3a:
                    e9:4f:6a:1e:bf:0f:5c:3c:07:38:6a:14:9c:42:9f:
                    15:07:33:a5:22:ae:e1:f4:55:81:e9:c0:20:d0:78:
                    18:e6:de:15:fe:4f:95:25:bb:82:57:f8:01:a2:f5:
                    4c:38:a2:17:5e:80:65:21:2f:62:ca:27:66:d2:cf:
                    c8:dc:bb:3e:d1:cf:0c:bd:8c:6e:31:00:e2:82:26:
                    9f:3b:f2:6b:70:2c:2d:c4:e8:3c:c3:a4:44:1f:42:
                    e7:49:59:cd:2e:2a:99:60:71:20:fb:9f:ee:db:1e:
                    4f:35:f6:7e:c2:8e:7a:79:0b:59:3b:de:5a:77:b1:
                    4d:c7:4e:84:b6:fe:07:46:fa:48:b2:06:4a:dc:e1:
                    9b:a9:ee:0d:93:d4:77:a3:f1:22:a6:de:c7:1e:b1:
                    75:74:81:86:ed:c1:f7:8f:e1:b8:d1:f1:e3:47:f3:
                    58:8b:4b:30:0d:f4:38:85:47:e8:cc:e0:a5:a5:9d:
                    cb:f9:40:68:25:a3:bc:6c:00:6b:f7:ba:08:3e:fe:
                    d3:46:09:d0:c0:79:be:d4:55:7e:8d:a8:66:70:68:
                    24:ea:c9:ec:62:9f:53:4f:26:c4:fc:4c:f6:7c:6a:
                    7d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5B:9B:5E:FF:F7:3E:FA:32:77:B0:E6:69:FC:DC:CF:CA:FF:08:2C
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/WVubXv_3Pvoyd7Dmafzcz8r_CCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.241.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:88:e5:ce:f4:ad:8a:e5:e1:63:1e:d2:b6:bd:3e:c1:56:
         f6:df:00:1d:db:46:5b:77:e6:64:80:c5:2b:a2:98:6b:d3:2c:
         30:76:2a:5c:85:d6:ff:57:65:ce:d5:8d:28:d2:c1:70:c3:90:
         85:40:df:1f:96:8a:cf:84:41:31:1c:78:4b:df:f7:1e:6d:28:
         60:32:0e:ad:89:7e:ce:c5:ab:3a:5f:94:a4:4e:86:5c:5a:27:
         6a:be:8d:83:33:bb:59:20:b3:9f:4a:03:b7:77:8a:54:92:df:
         75:5a:31:4d:d7:cf:d6:de:4f:de:b3:22:4e:be:97:01:80:cd:
         e6:08:96:cd:02:41:59:66:1a:e3:cc:68:e9:87:f0:b6:97:19:
         63:49:1b:c0:20:87:ca:f5:82:7a:10:8a:00:40:68:76:bf:14:
         68:06:10:b8:16:23:2a:d3:96:dc:50:73:b5:21:de:08:7a:2b:
         c9:8e:1d:c3:fd:05:9a:8d:bc:69:b2:6d:4f:80:4b:b7:3a:4b:
         75:be:50:52:e1:00:da:de:f8:5e:ce:93:9f:8f:71:1d:bf:53:
         2a:24:42:ab:4c:d7:a4:e1:61:ea:ff:be:62:bb:d2:e4:e9:f0:
         e6:ee:3e:c8:09:7f:0a:ce:fd:a7:61:f4:2e:3c:df:36:7b:d0:
         80:e8:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:26 2024 by rpki-client on console-ams.rpki-client.org