Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/d-KN4Sy0AcvUjHZY-Z_RQ58Iv6o.roa
File:                     d-KN4Sy0AcvUjHZY-Z_RQ58Iv6o.roa (raw, json)
Hash identifier:          L7YgpbFD4o2QzisOwlvkUYPKGTEFbZFGUMUfwSw1nQA=
Subject key identifier:   77:E2:8D:E1:2C:B4:01:CB:D4:8C:76:58:F9:9F:D1:43:9F:08:BF:AA
Certificate issuer:       /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial:       4205BB7A
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/d-KN4Sy0AcvUjHZY-Z_RQ58Iv6o.roa
Signing time:             Sat 01 Jan 2022 16:11:22 +0000
ROA not before:           Sat 01 Jan 2022 16:11:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45031
IP address blocks:        91.206.142.0/23 maxlen: 23
                          185.80.92.0/22 maxlen: 24
                          91.220.49.0/24 maxlen: 24
                          128.127.64.0/21 maxlen: 24
                          195.225.133.0/24 maxlen: 24
                          178.250.168.0/21 maxlen: 24
                          93.90.176.0/20 maxlen: 24
                          195.42.120.0/23 maxlen: 24
                          37.218.248.0/21 maxlen: 24
                          84.254.120.0/24 maxlen: 24
                          188.64.42.0/24 maxlen: 24
                          188.64.44.0/23 maxlen: 23
                          188.64.40.0/22 maxlen: 22
                          193.25.114.0/23 maxlen: 23
                          192.162.84.0/22 maxlen: 24
                          195.34.82.0/23 maxlen: 24
                          5.44.108.0/22 maxlen: 22
                          91.226.88.0/22 maxlen: 22
                          195.110.42.0/23 maxlen: 24
                          89.22.96.0/19 maxlen: 19
                          81.88.16.0/21 maxlen: 21
                          194.116.186.0/23 maxlen: 24
                          81.88.24.0/22 maxlen: 22
                          5.44.96.0/22 maxlen: 22
                          2a00:fa40::/32 maxlen: 32
                          2a02:a60::/32 maxlen: 64
                          2a00:5300::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107671930 (0x4205bb7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
        Validity
            Not Before: Jan  1 16:11:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77e28de12cb401cbd48c7658f99fd1439f08bfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:0d:75:bc:b5:cc:1f:2e:c2:56:6c:8e:db:
                    90:f1:cf:95:7a:c6:1c:7c:38:ce:40:c1:b3:2a:1a:
                    c9:48:ea:0e:8e:44:9e:04:ab:27:37:0f:e1:fa:e9:
                    f7:e3:f0:7b:70:1f:b5:0a:7f:51:59:2a:16:4b:86:
                    22:72:4a:45:7c:82:b2:58:f4:56:27:09:f1:27:03:
                    4a:fd:ce:13:bc:94:e7:6d:c3:fa:b6:02:e0:5b:69:
                    4f:c5:f3:e8:08:e6:d3:84:41:00:e8:f0:b7:d4:d1:
                    06:71:3a:18:e5:dc:32:f2:10:a6:64:f9:13:da:07:
                    77:cc:8e:7d:12:c0:c2:8a:5c:d1:17:5e:4f:17:45:
                    37:46:d5:8d:85:17:7a:9f:26:d3:68:6a:e6:bc:85:
                    f9:9c:30:ef:e4:2d:a9:8f:33:74:c7:33:16:7c:82:
                    27:27:9e:bc:1f:dd:12:bc:8a:d7:ec:26:f4:44:82:
                    d2:2f:2a:f2:b0:7b:20:ee:40:44:f2:9e:1b:6b:6d:
                    ae:48:db:85:b3:52:8c:e0:91:97:96:41:0c:dd:34:
                    69:4e:ee:72:66:dc:4d:6a:23:12:6d:ed:e5:2e:1a:
                    5e:78:76:e6:b0:a9:e0:3f:51:37:2b:1b:79:fe:8b:
                    19:5f:71:82:a4:90:58:2b:2c:3a:06:a2:d8:de:7f:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E2:8D:E1:2C:B4:01:CB:D4:8C:76:58:F9:9F:D1:43:9F:08:BF:AA
            X509v3 Authority Key Identifier:
                keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/d-KN4Sy0AcvUjHZY-Z_RQ58Iv6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.44.96.0/22
                  5.44.108.0/22
                  37.218.248.0/21
                  81.88.16.0-81.88.27.255
                  84.254.120.0/24
                  89.22.96.0/19
                  91.206.142.0/23
                  91.220.49.0/24
                  91.226.88.0/22
                  93.90.176.0/20
                  128.127.64.0/21
                  178.250.168.0/21
                  185.80.92.0/22
                  188.64.40.0-188.64.45.255
                  192.162.84.0/22
                  193.25.114.0/23
                  194.116.186.0/23
                  195.34.82.0/23
                  195.42.120.0/23
                  195.110.42.0/23
                  195.225.133.0/24
                IPv6:
                  2a00:5300::/32
                  2a00:fa40::/32
                  2a02:a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:b4:2a:99:87:7c:07:04:5d:53:d0:02:27:d7:9a:4e:e2:
         d6:a8:df:aa:27:f2:47:41:89:59:7e:de:c9:bc:4e:2e:dc:09:
         f9:d6:46:a2:bd:7a:c3:c7:45:10:b9:a0:cb:b6:53:34:d4:5e:
         7d:e0:f3:43:2a:1d:8c:66:d9:56:43:35:30:54:6f:16:4e:43:
         72:1e:84:79:95:ca:91:33:a0:38:c0:43:cc:04:cf:f5:cf:5e:
         d7:e3:43:5a:c7:a0:ac:09:75:ca:43:3b:71:d9:36:c3:2c:e3:
         7b:20:f0:7f:28:95:ab:b1:a1:b1:58:38:03:ec:dd:9c:4c:e1:
         d7:76:2c:1e:47:d2:a2:89:ba:fa:6b:8f:6a:91:57:0a:24:25:
         4b:12:5f:ec:e1:76:70:78:6a:a5:74:12:a9:df:97:9d:38:5f:
         41:2e:31:33:0b:4b:d0:8a:c3:27:94:b5:70:aa:54:b4:40:03:
         06:ff:05:56:52:2e:9d:30:50:e9:25:e3:31:b9:b4:4b:55:67:
         18:06:60:0b:e1:47:28:90:7e:1b:35:de:7e:85:e2:88:1c:3f:
         26:92:50:20:36:15:4b:31:31:bd:32:c7:82:19:0d:d1:de:95:
         5b:85:14:f8:56:f5:fb:d5:0c:11:8c:cb:e7:f1:4d:2a:44:53:
         25:cc:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:44 2024 by rpki-client on console-fra.rpki-client.org