Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hcHE5DpPagjx-LBlLEwIJ__Z6W4.roa
File:                     hcHE5DpPagjx-LBlLEwIJ__Z6W4.roa (raw, json)
Hash identifier:          ZFSDSnHRPxK+eqT5cP5jtAvglX1Ke6GJZ/KKXChxk2s=
Subject key identifier:   85:C1:C4:E4:3A:4F:6A:08:F1:F8:B0:65:2C:4C:08:27:FF:D9:E9:6E
Certificate issuer:       /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial:       345902FF
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hcHE5DpPagjx-LBlLEwIJ__Z6W4.roa
Signing time:             Thu 17 Feb 2022 07:13:28 +0000
ROA not before:           Thu 17 Feb 2022 07:13:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8517
IP address blocks:        193.140.244.0/22 maxlen: 22
                          193.140.248.0/22 maxlen: 22
                          193.140.252.0/23 maxlen: 23
                          193.255.58.0/24 maxlen: 24
                          193.140.183.0/24 maxlen: 24
                          193.140.4.0/22 maxlen: 22
                          193.140.1.0/24 maxlen: 24
                          193.140.2.0/23 maxlen: 23
                          193.140.0.0/16 maxlen: 24
                          193.140.24.0/22 maxlen: 22
                          193.140.35.0/24 maxlen: 24
                          193.255.0.0/16 maxlen: 24
                          193.140.134.0/24 maxlen: 24
                          193.140.152.0/22 maxlen: 22
                          193.140.159.0/24 maxlen: 24
                          193.140.68.0/23 maxlen: 23
                          193.140.83.0/24 maxlen: 24
                          79.123.128.0/17 maxlen: 24
                          193.140.88.0/24 maxlen: 24
                          193.140.98.0/23 maxlen: 23
                          194.27.232.0/22 maxlen: 22
                          194.27.236.0/23 maxlen: 23
                          95.183.128.0/17 maxlen: 24
                          194.27.43.0/24 maxlen: 24
                          185.7.0.0/22 maxlen: 22
                          194.27.0.0/16 maxlen: 24
                          2001:a98:1b0::/48 maxlen: 48
                          2001:a98:170::/48 maxlen: 48
                          2001:a98:230::/48 maxlen: 48
                          2001:a98:1f0::/48 maxlen: 48
                          2001:a98:130::/48 maxlen: 48
                          2001:a98:240::/48 maxlen: 48
                          2001:a98:1c0::/48 maxlen: 48
                          2001:a98:280::/48 maxlen: 48
                          2001:a98:180::/48 maxlen: 48
                          2001:a98:200::/48 maxlen: 48
                          2001:a98:600::/48 maxlen: 48
                          2001:a98:1e::/48 maxlen: 48
                          2001:a98:1050::/48 maxlen: 48
                          2001:a98:150::/48 maxlen: 48
                          2001:a98:1d0::/48 maxlen: 48
                          2001:a98:250::/48 maxlen: 48
                          2001:a98:290::/48 maxlen: 48
                          2001:a98:210::/48 maxlen: 48
                          2001:a98:190::/48 maxlen: 48
                          2001:a98::/32 maxlen: 32
                          2001:a98:20::/48 maxlen: 48
                          2001:a98:120::/48 maxlen: 48
                          2001:a98:220::/48 maxlen: 48
                          2001:a98:1a0::/48 maxlen: 48
                          2001:a98:1e0::/48 maxlen: 48
                          2001:a98:260::/48 maxlen: 48
                          2001:a98:160::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878248703 (0x345902ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
        Validity
            Not Before: Feb 17 07:13:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=85c1c4e43a4f6a08f1f8b0652c4c0827ffd9e96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:c1:50:ad:3e:bc:5a:8d:74:98:18:75:9c:
                    ef:fb:e8:0e:f3:20:ad:52:ce:aa:8d:f5:3e:b9:ae:
                    ad:77:41:e9:2e:ea:f6:e6:06:6f:0c:86:c6:9c:94:
                    df:9b:7b:d3:8f:df:35:0b:64:ce:e7:b9:13:9d:fa:
                    77:94:51:7c:0a:99:f7:e8:70:39:a2:e7:52:8f:01:
                    15:1d:0c:3f:aa:86:ba:87:57:ef:78:9f:63:91:a5:
                    77:91:9b:a7:ea:64:75:2d:36:32:2d:cb:94:50:84:
                    a4:f4:2c:61:9b:9e:56:28:92:1a:c5:72:c2:29:6e:
                    54:03:48:e3:e5:56:a8:7f:a3:33:cc:29:61:c7:6a:
                    48:43:e0:02:02:1f:ee:08:2f:df:3a:69:e0:d5:3e:
                    e5:0d:15:2e:a1:37:76:44:a7:fc:4c:26:4e:ae:b3:
                    1c:69:61:3a:44:33:9f:84:11:f3:91:7a:3c:0c:32:
                    b0:f5:29:2c:93:8d:f7:c7:f0:8f:b8:38:5f:a4:c7:
                    34:33:34:53:55:46:61:de:e9:48:16:55:b3:18:ad:
                    63:3e:d8:1d:94:ea:d1:ec:c2:9e:d5:95:ed:66:9d:
                    7a:cf:25:28:a0:b2:b7:14:cc:ab:bc:8a:fb:a2:6f:
                    c0:4b:d2:c9:a5:97:de:47:c7:cf:7a:21:2c:53:83:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C1:C4:E4:3A:4F:6A:08:F1:F8:B0:65:2C:4C:08:27:FF:D9:E9:6E
            X509v3 Authority Key Identifier:
                keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hcHE5DpPagjx-LBlLEwIJ__Z6W4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.123.128.0/17
                  95.183.128.0/17
                  185.7.0.0/22
                  193.140.0.0/16
                  193.255.0.0/16
                  194.27.0.0/16
                IPv6:
                  2001:a98::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:99:0c:ed:fc:fe:58:7a:06:17:c1:d0:4a:dd:49:3e:cb:25:
         77:b3:b8:94:09:ad:a9:fd:b7:d3:05:55:da:46:bc:c3:00:bc:
         ee:87:e5:d5:94:d7:5c:78:17:ac:08:39:35:70:39:0e:d2:c7:
         db:6f:9f:be:65:6c:e3:82:c8:50:3f:d5:ec:51:12:87:e9:85:
         f4:bd:38:df:8f:cc:bf:6c:2d:1d:57:88:c5:19:db:bb:a5:ab:
         4f:ec:ed:09:ae:85:f7:b7:cd:44:54:9e:b6:a8:ba:52:9e:f8:
         0f:66:89:f8:cc:d0:d8:0e:43:dc:25:07:fb:ba:d7:e4:67:b5:
         15:68:eb:86:d6:32:d4:38:d6:0c:e6:cc:12:1d:4f:17:f3:d8:
         1e:99:33:26:2c:4b:9c:7d:6d:9b:1a:ef:e4:41:b5:df:45:2d:
         36:62:10:2a:de:16:99:74:fe:c2:81:ab:65:a1:87:75:b6:9b:
         02:49:64:37:56:19:fd:a4:1d:b0:2e:1f:0d:96:07:8f:4f:3a:
         63:81:36:23:45:c9:e4:b7:ca:4b:cf:4f:3c:80:70:86:ba:6d:
         cf:23:ed:a9:70:8f:77:1c:64:d5:68:c5:23:00:bf:31:04:f4:
         f9:84:0e:d9:ff:a6:42:fd:f0:b5:47:7e:4b:3d:26:8b:fb:d2:
         72:cd:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org