Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/JWUYTDbDRHjNdepKo45FMV-Vs0Y.roa
File:                     JWUYTDbDRHjNdepKo45FMV-Vs0Y.roa (raw, json)
Hash identifier:          tCtFSoGGgLMMRwpHhxEiF2ZmMAEU31/tAx9R9txTAcA=
Subject key identifier:   25:65:18:4C:36:C3:44:78:CD:75:EA:4A:A3:8E:45:31:5F:95:B3:46
Certificate issuer:       /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial:       16B58D96
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/JWUYTDbDRHjNdepKo45FMV-Vs0Y.roa
Signing time:             Fri 28 Jan 2022 07:45:49 +0000
ROA not before:           Fri 28 Jan 2022 07:45:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50926
IP address blocks:        185.70.92.0/22 maxlen: 22
                          188.164.192.0/21 maxlen: 21
                          188.164.192.0/24 maxlen: 24
                          188.164.197.0/24 maxlen: 24
                          188.164.199.0/24 maxlen: 24
                          94.127.186.0/24 maxlen: 24
                          188.164.198.0/24 maxlen: 24
                          94.127.185.0/24 maxlen: 24
                          94.127.184.0/24 maxlen: 24
                          188.164.196.0/24 maxlen: 24
                          188.164.195.0/24 maxlen: 24
                          188.164.194.0/24 maxlen: 24
                          188.164.193.0/24 maxlen: 24
                          94.127.191.0/24 maxlen: 24
                          94.127.190.0/24 maxlen: 24
                          94.127.188.0/24 maxlen: 24
                          149.62.172.0/22 maxlen: 22
                          149.62.168.0/21 maxlen: 21
                          149.62.168.0/22 maxlen: 22
                          195.5.116.0/23 maxlen: 23
                          91.200.140.0/22 maxlen: 22
                          188.95.112.0/21 maxlen: 21
                          185.176.9.0/24 maxlen: 24
                          185.176.8.0/24 maxlen: 24
                          185.176.11.0/24 maxlen: 24
                          185.176.10.0/24 maxlen: 24
                          84.246.213.0/24 maxlen: 24
                          84.246.212.0/24 maxlen: 24
                          84.246.211.0/24 maxlen: 24
                          84.246.210.0/24 maxlen: 24
                          84.246.209.0/24 maxlen: 24
                          84.246.208.0/21 maxlen: 21
                          84.246.208.0/24 maxlen: 24
                          109.68.84.0/24 maxlen: 24
                          109.68.82.0/24 maxlen: 24
                          84.246.215.0/24 maxlen: 24
                          109.68.80.0/24 maxlen: 24
                          109.68.80.0/21 maxlen: 21
                          84.246.214.0/24 maxlen: 24
                          91.213.46.0/24 maxlen: 24
                          31.24.152.0/21 maxlen: 21
                          31.24.152.0/24 maxlen: 24
                          31.24.159.0/24 maxlen: 24
                          31.24.158.0/24 maxlen: 24
                          31.24.157.0/24 maxlen: 24
                          31.24.156.0/24 maxlen: 24
                          31.24.155.0/24 maxlen: 24
                          31.24.154.0/24 maxlen: 24
                          91.142.208.0/20 maxlen: 20
                          5.175.42.0/24 maxlen: 24
                          5.175.41.0/24 maxlen: 24
                          5.175.40.0/24 maxlen: 24
                          5.175.40.0/21 maxlen: 21
                          5.175.44.0/24 maxlen: 24
                          5.175.43.0/24 maxlen: 24
                          5.175.47.0/24 maxlen: 24
                          5.175.46.0/24 maxlen: 24
                          31.24.43.0/24 maxlen: 24
                          31.24.40.0/24 maxlen: 24
                          31.24.40.0/21 maxlen: 21
                          31.24.46.0/24 maxlen: 24
                          31.24.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380997014 (0x16b58d96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
        Validity
            Not Before: Jan 28 07:45:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2565184c36c34478cd75ea4aa38e45315f95b346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0e:bc:2b:9e:df:f1:19:05:6d:f5:b8:75:1c:
                    d7:1d:8f:d2:0c:2c:f1:ed:2a:99:b2:1f:0b:9e:d7:
                    f1:ff:79:e1:0d:31:dd:f5:36:1f:99:05:3c:0c:a6:
                    52:04:57:10:9d:fc:f9:53:5a:d0:7a:35:91:f5:ab:
                    41:5d:9e:d9:26:5a:7c:eb:1c:cb:07:4f:31:a1:c0:
                    2c:d0:a3:22:43:bb:b8:33:39:31:95:95:ad:80:ba:
                    dc:1b:8a:78:2b:95:2a:ac:01:47:0c:7e:6b:37:21:
                    7a:31:19:ef:bb:ee:6d:ef:ef:50:2d:1f:bc:1a:af:
                    30:43:fd:a9:4b:b4:e5:fb:3b:03:51:ed:76:8a:37:
                    84:0d:37:e0:53:b4:38:a5:d4:7e:cf:57:3f:1a:35:
                    95:17:22:b1:ea:5a:27:ca:99:10:7c:4d:44:df:ae:
                    db:41:41:39:a7:9b:62:43:d6:f3:13:28:17:64:88:
                    44:c7:78:54:ba:ee:aa:49:c6:50:73:a7:18:a3:26:
                    37:fe:86:90:d5:26:1d:7c:00:90:7d:e0:f8:95:1e:
                    e5:ce:83:f8:f3:86:79:1e:22:3a:c7:c2:33:b5:4a:
                    47:87:d5:0b:be:fa:7b:e4:c3:a1:f0:44:aa:eb:15:
                    8a:2a:ed:08:a4:1f:92:0c:78:ec:23:6a:e3:9a:ae:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:65:18:4C:36:C3:44:78:CD:75:EA:4A:A3:8E:45:31:5F:95:B3:46
            X509v3 Authority Key Identifier:
                keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/JWUYTDbDRHjNdepKo45FMV-Vs0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.175.40.0/21
                  31.24.40.0/21
                  31.24.152.0/21
                  84.246.208.0/21
                  91.142.208.0/20
                  91.200.140.0/22
                  91.213.46.0/24
                  94.127.184.0-94.127.186.255
                  94.127.188.0/24
                  94.127.190.0/23
                  109.68.80.0/21
                  149.62.168.0/21
                  185.70.92.0/22
                  185.176.8.0/22
                  188.95.112.0/21
                  188.164.192.0/21
                  195.5.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:b2:94:e5:da:eb:43:4c:80:94:b1:e2:6a:8a:e3:5c:0b:
         62:c7:a1:7f:c3:4d:08:45:96:68:a3:7a:6a:27:7a:ac:22:a2:
         a8:e5:38:47:ea:a3:08:92:c9:4c:97:a1:c4:de:d2:52:c0:80:
         c5:b2:93:eb:ee:f7:4d:8e:99:7e:2a:41:ad:c5:58:f7:f5:2d:
         55:bf:e7:b8:0b:52:a8:89:4e:7f:a0:14:1d:8b:0e:ec:71:0c:
         6c:f2:78:15:82:74:ca:22:7b:18:ff:f1:d3:fc:e4:66:2c:9f:
         8c:f8:0c:6b:85:d5:1d:12:d1:e6:4b:0a:98:e5:2f:77:0d:97:
         63:98:a7:d0:2b:a8:be:6f:7f:af:21:96:f1:77:a1:8f:49:35:
         df:ec:36:57:00:35:bd:4c:d7:69:9a:7a:3b:c1:16:4a:b2:02:
         86:6a:5c:d9:48:a4:24:89:b8:95:6d:0d:48:1b:cd:ab:75:43:
         84:7f:9e:85:db:ce:c2:95:b5:bc:f2:a4:7d:ce:11:cd:ae:44:
         4d:9d:ed:95:84:93:7b:4a:15:d2:9c:65:a5:48:8c:4f:3c:0d:
         cc:c8:cf:b3:a3:b1:df:b5:57:e4:5b:52:ed:5a:63:3a:cc:6a:
         d6:4d:55:a7:68:56:6e:29:cd:fa:3b:5e:1a:80:8c:ff:1f:61:
         f5:62:cd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:45 2024 by rpki-client on console-ams.rpki-client.org