Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/3tHub_WKZ51anTYYPoPkDrSMHgs.roa
File:                     3tHub_WKZ51anTYYPoPkDrSMHgs.roa (raw, json)
Hash identifier:          kRMVRH1xUpdHX7lWMDXBUoxbR+tFYfxKeHLC6KTSd0s=
Subject key identifier:   DE:D1:EE:6F:F5:8A:67:9D:5A:9D:36:18:3E:83:E4:0E:B4:8C:1E:0B
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       181F2FD9
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/3tHub_WKZ51anTYYPoPkDrSMHgs.roa
Signing time:             Mon 16 May 2022 12:08:26 +0000
ROA not before:           Mon 16 May 2022 12:08:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     36692
IP address blocks:        185.60.84.0/23 maxlen: 24
                          185.60.86.0/24 maxlen: 24
                          185.60.87.0/24 maxlen: 24
                          146.112.60.0/24 maxlen: 24
                          146.112.41.0/24 maxlen: 24
                          146.112.170.0/24 maxlen: 24
                          146.112.174.0/24 maxlen: 24
                          146.112.131.0/24 maxlen: 24
                          146.112.132.0/24 maxlen: 24
                          146.112.128.0/24 maxlen: 24
                          146.112.129.0/24 maxlen: 24
                          146.112.130.0/24 maxlen: 24
                          146.112.134.0/24 maxlen: 24
                          146.112.133.0/24 maxlen: 24
                          146.112.138.0/24 maxlen: 24
                          146.112.139.0/24 maxlen: 24
                          146.112.135.0/24 maxlen: 24
                          146.112.136.0/24 maxlen: 24
                          146.112.137.0/24 maxlen: 24
                          155.190.192.0/24 maxlen: 24
                          155.190.193.0/24 maxlen: 24
                          155.190.194.0/24 maxlen: 24
                          155.190.195.0/24 maxlen: 24
                          155.190.196.0/24 maxlen: 24
                          155.190.197.0/24 maxlen: 24
                          155.190.201.0/24 maxlen: 24
                          155.190.202.0/24 maxlen: 24
                          155.190.203.0/24 maxlen: 24
                          155.190.28.0/24 maxlen: 24
                          155.190.29.0/24 maxlen: 24
                          155.190.38.0/24 maxlen: 24
                          155.190.32.0/24 maxlen: 24
                          155.190.33.0/24 maxlen: 24
                          155.190.34.0/24 maxlen: 24
                          155.190.35.0/24 maxlen: 24
                          155.190.36.0/24 maxlen: 24
                          155.190.37.0/24 maxlen: 24
                          155.190.39.0/24 maxlen: 24
                          155.190.40.0/24 maxlen: 24
                          155.190.41.0/24 maxlen: 24
                          155.190.42.0/24 maxlen: 24
                          155.190.43.0/24 maxlen: 24
                          155.190.44.0/24 maxlen: 24
                          155.190.45.0/24 maxlen: 24
                          155.190.46.0/24 maxlen: 24
                          155.190.47.0/24 maxlen: 24
                          155.190.48.0/24 maxlen: 24
                          155.190.49.0/24 maxlen: 24
                          155.190.50.0/24 maxlen: 24
                          155.190.51.0/24 maxlen: 24
                          155.190.53.0/24 maxlen: 24
                          155.190.54.0/24 maxlen: 24
                          155.190.55.0/24 maxlen: 24
                          155.190.0.0/24 maxlen: 24
                          155.190.4.0/24 maxlen: 24
                          155.190.3.0/24 maxlen: 24
                          155.190.1.0/24 maxlen: 24
                          155.190.2.0/24 maxlen: 24
                          155.190.8.0/24 maxlen: 24
                          155.190.9.0/24 maxlen: 24
                          155.190.15.0/24 maxlen: 24
                          155.190.17.0/24 maxlen: 24
                          155.190.18.0/24 maxlen: 24
                          155.190.19.0/24 maxlen: 24
                          155.190.20.0/24 maxlen: 24
                          155.190.21.0/24 maxlen: 24
                          155.190.22.0/24 maxlen: 24
                          2a04:e4c0:25::/48 maxlen: 48
                          2a04:e4c0:14::/48 maxlen: 48
                          2a04:e4c0:22::/48 maxlen: 48
                          2a04:e4c0:11::/48 maxlen: 48
                          2a04:e4c0:47::/48 maxlen: 48
                          2a04:e4c0:55::/48 maxlen: 48
                          2a04:e4c0:30::/48 maxlen: 48
                          2a04:e4c0:44::/48 maxlen: 48
                          2a04:e4c7:fffd::/48 maxlen: 48
                          2a04:e4c0:52::/48 maxlen: 48
                          2a04:e4c4:3::/48 maxlen: 48
                          2a04:e4c0:41::/48 maxlen: 48
                          2a04:e4c0:60::/48 maxlen: 48
                          2a04:e4c0:13::/48 maxlen: 48
                          2a04:e4c0:16::/48 maxlen: 48
                          2a04:e4c7:ffff::/48 maxlen: 48
                          2a04:e4c0:10::/48 maxlen: 48
                          2a04:e4c0:49::/48 maxlen: 48
                          2a04:e4c0:24::/48 maxlen: 48
                          2a04:e4c0:43::/48 maxlen: 48
                          2a04:e4c0:46::/48 maxlen: 48
                          2a04:e4c0:21::/48 maxlen: 48
                          2a04:e4c0:40::/48 maxlen: 48
                          2a04:e4c7:fffe::/48 maxlen: 48
                          2a04:e4c4:1::/48 maxlen: 48
                          2a04:e4c0:54::/48 maxlen: 48
                          2a04:e4c0:18::/48 maxlen: 48
                          2a04:e4c4:4::/48 maxlen: 48
                          2a04:e4c0:51::/48 maxlen: 48
                          2a04:e4c0:15::/48 maxlen: 48
                          2a04:e4c0:12::/48 maxlen: 48
                          2a04:e4c0:48::/48 maxlen: 48
                          2a04:e4c0:23::/48 maxlen: 48
                          2a04:e4c0:45::/48 maxlen: 48
                          2a04:e4c0:20::/48 maxlen: 48
                          2a04:e4c0:59::/48 maxlen: 48
                          2a04:e4c0:42::/48 maxlen: 48
                          2a04:e4c0:53::/48 maxlen: 48
                          2a04:e4c0:31::/48 maxlen: 48
                          2a04:e4c4:2::/48 maxlen: 48
                          2a04:e4c0:17::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404697049 (0x181f2fd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: May 16 12:08:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ded1ee6ff58a679d5a9d36183e83e40eb48c1e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:d3:3f:32:a4:18:13:5c:51:c3:32:54:ec:
                    32:3e:96:73:b3:5b:52:0e:9f:1b:cf:bc:08:09:86:
                    07:5b:d2:d8:de:87:a6:48:0d:7b:c8:4b:61:87:06:
                    e5:5b:19:98:cd:d7:69:9a:3e:6e:83:63:8d:1c:54:
                    f8:83:6d:54:32:2c:93:36:1e:db:43:86:d6:ac:8c:
                    9e:ed:94:d2:a6:4c:9d:13:40:cc:94:62:e5:3d:3b:
                    26:7e:cf:b6:f9:cc:63:20:28:09:4c:c1:ca:ae:40:
                    df:c5:71:60:f7:e1:9a:1d:eb:54:7b:52:3f:cc:8d:
                    36:97:bb:77:2d:b2:6e:ac:99:f1:97:80:59:53:1c:
                    ab:56:55:8f:fc:39:d7:65:63:77:8f:1d:3b:cb:7e:
                    9c:67:77:c0:9a:03:18:2c:cb:12:a3:6f:a6:8e:12:
                    37:6e:62:3f:c0:e3:77:12:cd:1d:88:94:50:92:7d:
                    01:f7:c5:39:f4:3d:00:40:7c:fd:99:c7:14:b7:d2:
                    e0:8b:e6:51:14:de:78:ed:36:05:b7:a7:2b:63:e0:
                    8e:33:8f:99:d6:50:4a:f1:49:08:6c:6c:aa:56:33:
                    b9:9f:e0:13:fd:2e:ed:42:65:45:df:21:3d:f9:75:
                    50:74:40:d5:f8:d9:26:9a:12:c7:6b:10:04:f4:6d:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D1:EE:6F:F5:8A:67:9D:5A:9D:36:18:3E:83:E4:0E:B4:8C:1E:0B
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/3tHub_WKZ51anTYYPoPkDrSMHgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.112.41.0/24
                  146.112.60.0/24
                  146.112.128.0-146.112.139.255
                  146.112.170.0/24
                  146.112.174.0/24
                  155.190.0.0-155.190.4.255
                  155.190.8.0/23
                  155.190.15.0/24
                  155.190.17.0-155.190.22.255
                  155.190.28.0/23
                  155.190.32.0-155.190.51.255
                  155.190.53.0-155.190.55.255
                  155.190.192.0-155.190.197.255
                  155.190.201.0-155.190.203.255
                  185.60.84.0/22
                IPv6:
                  2a04:e4c0:10::-2a04:e4c0:18:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:20::-2a04:e4c0:25:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:30::/47
                  2a04:e4c0:40::-2a04:e4c0:49:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:51::-2a04:e4c0:55:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:59::/48
                  2a04:e4c0:60::/48
                  2a04:e4c4:1::-2a04:e4c4:4:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c7:fffd::-2a04:e4c7:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         01:13:f1:4e:aa:33:4b:c8:09:a8:35:7f:e1:aa:ab:e9:de:49:
         ba:34:9e:54:97:f7:fd:ec:c5:b4:44:dd:ab:8f:48:e7:56:fc:
         b8:45:62:99:e4:f5:fc:dd:d3:fb:82:65:ed:44:73:a0:ce:78:
         b7:43:d0:31:70:0d:10:db:d9:78:6c:d0:c8:74:3e:60:d1:70:
         d2:04:0c:e1:c7:e3:16:b5:6f:1b:fd:64:b4:24:b4:de:d1:f9:
         f3:7a:8c:12:4e:10:be:a1:6c:31:dd:ee:ff:58:67:16:36:28:
         bb:22:96:6b:59:43:c9:dd:56:fe:19:a7:06:55:b8:c7:14:19:
         79:e0:ae:c0:ad:21:a9:b8:e4:34:9e:33:4d:6e:19:9e:b1:e1:
         e8:27:01:4f:fb:55:96:ca:85:e2:d3:81:52:a0:23:f4:84:7d:
         78:54:e6:e8:70:ed:9e:c2:35:e1:2c:92:c5:18:78:2f:f1:dd:
         d9:ce:2e:80:0b:66:0c:4a:a7:d2:9a:8d:89:30:f0:43:78:ff:
         38:3d:e9:97:fa:a9:fe:52:d9:87:fc:55:38:c9:1c:74:28:15:
         ca:37:9e:70:4c:2b:1e:71:a4:a9:31:dc:ab:ec:6c:7c:d2:85:
         68:58:4b:94:82:17:12:f8:d2:f8:88:b6:2e:b4:22:17:0c:35:
         90:a6:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:55 2024 by rpki-client on console-ams.rpki-client.org