Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/NmUjAUAm55hGw7pTWpdRgK7ez64.roa
File:                     NmUjAUAm55hGw7pTWpdRgK7ez64.roa (raw, json)
Hash identifier:          PZri+1wvEaVo0L1lf8dy4qU3wWaWjWRDVCuG8sYqgZs=
Subject key identifier:   36:65:23:01:40:26:E7:98:46:C3:BA:53:5A:97:51:80:AE:DE:CF:AE
Certificate issuer:       /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial:       1D7FE892
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/NmUjAUAm55hGw7pTWpdRgK7ez64.roa
Signing time:             Mon 20 Jun 2022 15:17:44 +0000
ROA not before:           Mon 20 Jun 2022 15:17:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57033
IP address blocks:        89.185.16.0/21 maxlen: 21
                          89.185.16.0/22 maxlen: 22
                          89.185.20.0/23 maxlen: 23
                          185.30.203.0/24 maxlen: 24
                          5.56.24.0/23 maxlen: 23
                          5.56.28.0/23 maxlen: 23
                          5.56.30.0/23 maxlen: 23
                          5.56.26.0/23 maxlen: 23
                          93.185.208.0/21 maxlen: 21
                          93.185.218.0/23 maxlen: 23
                          93.185.216.0/23 maxlen: 23
                          89.185.4.0/22 maxlen: 22
                          93.185.222.0/23 maxlen: 23
                          93.185.220.0/23 maxlen: 23
                          89.185.8.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494921874 (0x1d7fe892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
        Validity
            Not Before: Jun 20 15:17:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=366523014026e79846c3ba535a975180aedecfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d1:45:6c:f7:a2:f7:2a:65:0f:63:cf:7d:54:
                    92:15:e6:46:36:13:73:b0:13:57:fa:3c:9e:2d:7b:
                    98:58:f2:de:b0:e4:3a:b9:85:93:ce:1f:d9:9c:2a:
                    74:c1:57:20:cd:9d:da:b5:13:a0:6e:3e:f9:cd:cb:
                    cd:27:e2:03:61:1f:54:06:58:a9:08:2c:c5:80:34:
                    a5:bd:9f:bd:f9:5d:f3:c1:18:2d:e3:f9:12:ea:dd:
                    9f:74:d7:49:da:b3:54:1d:3e:c0:5b:5f:f9:bf:ca:
                    3e:68:3c:dd:95:06:7d:6c:14:4a:84:26:39:a5:25:
                    6f:a1:03:21:ca:b8:de:9a:6e:e2:66:4f:2f:25:98:
                    02:1e:4c:38:e5:08:36:5e:db:ad:62:fb:64:37:6e:
                    4c:5e:9f:56:67:56:5c:c6:91:82:62:16:d9:49:10:
                    7f:ca:ff:14:8a:e9:23:6f:f0:b7:96:39:ea:cc:c9:
                    b3:27:de:a1:b2:41:9c:f6:50:20:58:4a:69:2f:7f:
                    27:de:37:b2:e7:9d:ca:19:5a:8a:11:03:89:34:7f:
                    2e:9b:2b:6f:ca:cc:96:e0:20:2b:b7:36:02:1c:7d:
                    ab:d2:33:58:bf:e1:70:57:e2:0d:20:4a:a0:9d:eb:
                    62:c4:24:69:81:03:9d:bf:5b:a2:63:85:b6:ee:04:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:65:23:01:40:26:E7:98:46:C3:BA:53:5A:97:51:80:AE:DE:CF:AE
            X509v3 Authority Key Identifier:
                keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/NmUjAUAm55hGw7pTWpdRgK7ez64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.24.0/21
                  89.185.4.0-89.185.23.255
                  93.185.208.0/20
                  185.30.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:27:da:95:3f:2e:39:29:c1:ba:ff:6b:a7:14:71:fc:45:76:
         af:2d:c5:66:0f:db:6c:c9:66:91:64:8b:ad:39:fb:57:60:09:
         ab:20:4b:af:86:b6:3b:4e:48:a8:f0:ba:3d:3b:01:56:df:f3:
         21:8e:a6:da:28:90:27:c9:97:d1:1f:be:6f:2f:20:60:55:38:
         a6:a3:51:e7:36:39:e4:30:25:f1:7a:ab:b4:dd:bc:8c:81:8e:
         ad:91:fc:f1:80:e7:18:61:99:35:6a:9c:be:1f:e3:65:11:91:
         2d:05:03:d2:ef:ac:b0:a6:23:62:1c:41:99:63:0e:06:af:f2:
         21:86:e3:37:6d:1f:d2:83:e5:cc:ac:b7:59:ff:61:b0:0e:b8:
         0b:00:cf:2c:94:ca:47:16:e3:45:68:60:56:8a:22:05:77:58:
         b6:2c:e3:04:bc:e2:3c:89:71:20:8b:f4:2f:cf:de:5a:17:f7:
         d5:32:38:ac:8a:ef:9d:41:e5:79:9f:b9:23:5d:d7:a4:9c:48:
         90:97:80:76:1f:6e:cf:41:cc:6a:3a:cc:e8:f1:34:a0:0b:cb:
         fa:0e:c5:12:09:ec:7a:19:8c:84:de:04:b2:ea:8e:a6:c2:24:
         98:02:50:aa:1f:ea:ca:1f:9e:dc:41:76:fc:12:e0:fb:9c:84:
         fb:64:77:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org