Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/VOq5w-Jd_zx1gvlBXzOWzBfIgp0.roa
File:                     VOq5w-Jd_zx1gvlBXzOWzBfIgp0.roa (raw, json)
Hash identifier:          6YBetF07EbrSkDdSI4niCJW4x2zE0wh8rBu6NzYEqbg=
Subject key identifier:   54:EA:B9:C3:E2:5D:FF:3C:75:82:F9:41:5F:33:96:CC:17:C8:82:9D
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       0183EC2F6F460271C822C98AA6BD54E1244F
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/VOq5w-Jd_zx1gvlBXzOWzBfIgp0.roa
Signing time:             Tue 18 Oct 2022 17:41:15 +0000
ROA not before:           Tue 18 Oct 2022 17:41:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29286
IP address blocks:        77.222.136.0/24 maxlen: 24
                          194.146.197.0/24 maxlen: 24
                          188.0.66.0/24 maxlen: 24
                          93.183.215.0/24 maxlen: 24
                          88.81.248.0/24 maxlen: 24
                          93.183.229.0/24 maxlen: 24
                          93.183.228.0/24 maxlen: 24
                          46.164.152.0/23 maxlen: 23
                          193.108.50.0/24 maxlen: 24
                          193.108.51.0/24 maxlen: 24
                          93.183.197.0/24 maxlen: 24
                          195.69.176.0/24 maxlen: 24
                          80.91.171.0/24 maxlen: 24
                          80.91.182.0/24 maxlen: 24
                          91.204.95.0/24 maxlen: 24
                          185.8.41.0/24 maxlen: 24
                          185.8.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ec:2f:6f:46:02:71:c8:22:c9:8a:a6:bd:54:e1:24:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Oct 18 17:41:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=54eab9c3e25dff3c7582f9415f3396cc17c8829d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:6c:18:3c:10:99:64:56:7f:c7:32:38:99:
                    cd:75:5e:fa:95:ac:87:2e:2d:5f:d7:d2:44:ee:4b:
                    1d:cf:59:b1:6b:eb:ac:bf:ec:e5:dc:c8:5d:cc:2c:
                    ff:15:ae:36:77:ca:94:61:6d:9d:f1:89:43:e4:98:
                    34:41:24:65:6d:bd:4f:13:c1:c1:65:56:62:c1:bd:
                    16:64:28:41:23:51:8e:56:e9:95:6d:23:c4:56:45:
                    0a:37:2f:43:9e:70:af:36:8f:51:d5:90:bb:17:e8:
                    86:e7:f8:8b:57:e4:75:e8:e4:ec:85:91:45:28:e2:
                    3e:e7:b9:05:4f:6e:02:87:aa:86:da:f9:74:f6:57:
                    d7:47:23:5c:38:cf:a9:4e:38:6c:0c:2d:fa:1f:51:
                    6e:0d:4b:75:35:49:17:df:77:7e:b1:81:7e:3a:46:
                    18:91:c2:26:ec:06:8f:f0:2b:06:f2:bc:69:be:68:
                    6b:be:57:47:49:36:44:47:71:b1:54:4a:32:06:44:
                    39:1e:31:2f:b2:b1:da:93:cf:07:ef:47:48:17:d6:
                    a5:9e:dd:e1:17:1f:37:74:92:7e:e0:87:c9:ba:1e:
                    4d:31:4d:0e:85:f5:e1:36:89:4d:e7:e6:a4:8f:a6:
                    27:5e:30:0e:2e:b3:b3:2a:c8:93:00:90:09:b8:d9:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EA:B9:C3:E2:5D:FF:3C:75:82:F9:41:5F:33:96:CC:17:C8:82:9D
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/VOq5w-Jd_zx1gvlBXzOWzBfIgp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.164.152.0/23
                  77.222.136.0/24
                  80.91.171.0/24
                  80.91.182.0/24
                  88.81.248.0/24
                  91.204.95.0/24
                  93.183.197.0/24
                  93.183.215.0/24
                  93.183.228.0/23
                  185.8.40.0/23
                  188.0.66.0/24
                  193.108.50.0/23
                  194.146.197.0/24
                  195.69.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:44:ea:0f:50:83:b5:e6:d1:77:51:f5:41:cc:a4:ba:9d:5f:
         55:a8:1d:92:96:0f:e6:b8:22:86:5b:95:57:6d:56:60:bd:b7:
         a7:66:35:eb:3c:e3:f5:60:74:ea:c3:15:78:c5:43:5f:1d:34:
         c0:9a:d5:25:b4:be:67:83:79:6f:ad:02:73:b5:27:44:41:c4:
         5a:a6:87:56:db:e2:5d:11:de:07:9f:9e:03:3f:58:17:9f:c8:
         06:c6:d5:42:8b:f6:5c:50:f5:c5:ef:e3:0f:d9:28:01:94:0f:
         79:20:f9:73:db:52:14:1d:99:c8:e0:76:45:26:f4:25:57:3e:
         57:86:aa:2b:b5:3b:4f:ec:43:f4:a6:e6:03:98:08:a0:29:22:
         ad:39:93:50:ef:86:98:2d:39:44:8a:c3:a0:d4:ba:80:7a:69:
         66:dd:41:dd:47:54:63:6a:19:78:5e:3e:07:8d:bb:0c:0d:d0:
         3c:03:ed:40:a2:23:28:4b:68:b2:ce:1c:4e:c3:8e:fd:ce:f6:
         81:7a:3d:fa:de:bd:09:fc:2c:b9:84:c0:ab:74:cd:d7:64:8c:
         99:98:6e:31:4a:91:ce:1c:d9:76:9f:bd:6c:9c:ea:b7:dd:37:
         eb:5c:e2:49:21:6c:df:47:68:ca:a9:29:da:36:6e:f4:8a:dc:
         20:69:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org