Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/eIaiGdz1mlHAXsKtZTEUFYwcjKU.roa
File:                     eIaiGdz1mlHAXsKtZTEUFYwcjKU.roa (raw, json)
Hash identifier:          Fcu8FXxXCP679NccsXaXWQ/WW1vrWScX1OUcXzILbN4=
Subject key identifier:   78:86:A2:19:DC:F5:9A:51:C0:5E:C2:AD:65:31:14:15:8C:1C:8C:A5
Certificate issuer:       /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial:       04AE11C1
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/eIaiGdz1mlHAXsKtZTEUFYwcjKU.roa
Signing time:             Sat 01 Jan 2022 05:52:44 +0000
ROA not before:           Sat 01 Jan 2022 05:52:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51173
IP address blocks:        37.203.48.0/24 maxlen: 24
                          37.203.50.0/24 maxlen: 24
                          37.203.49.0/24 maxlen: 24
                          37.203.51.0/24 maxlen: 24
                          37.203.54.0/24 maxlen: 24
                          37.203.52.0/24 maxlen: 24
                          37.203.53.0/24 maxlen: 24
                          185.94.47.0/24 maxlen: 24
                          185.94.46.0/24 maxlen: 24
                          89.106.137.0/24 maxlen: 24
                          89.106.139.0/24 maxlen: 24
                          89.106.138.0/24 maxlen: 24
                          89.106.136.0/24 maxlen: 24
                          89.106.141.0/24 maxlen: 24
                          89.106.140.0/24 maxlen: 24
                          89.106.143.0/24 maxlen: 24
                          89.106.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78516673 (0x4ae11c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
        Validity
            Not Before: Jan  1 05:52:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7886a219dcf59a51c05ec2ad653114158c1c8ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:ce:60:4a:33:e3:10:48:b4:ee:90:70:46:
                    49:c9:1d:94:44:5b:69:82:ac:e6:57:52:07:7f:e8:
                    61:56:6d:5b:3a:b4:52:03:38:10:36:df:06:f5:bb:
                    db:54:e2:38:18:a5:29:f9:03:0f:9d:82:44:d5:e0:
                    94:50:ab:aa:a6:6e:a2:d6:0d:b8:44:45:5a:15:bf:
                    49:cf:34:be:7b:c6:64:39:7d:e8:88:da:b9:5a:99:
                    bd:7b:c6:bc:14:7d:59:3c:fd:52:a9:3b:dd:41:05:
                    f4:c6:38:d6:29:16:69:a1:40:27:57:be:e7:cc:e3:
                    20:ec:c3:e1:2f:5f:6f:82:a9:d5:b7:66:e0:04:a8:
                    40:7e:9f:df:74:33:33:95:2b:15:f9:68:fa:39:72:
                    1b:b5:55:1f:0b:38:7e:f3:f0:4d:69:dd:ee:16:d0:
                    32:33:38:fa:58:b2:54:4e:c1:4e:86:59:56:78:28:
                    94:63:de:c6:77:47:85:93:a5:11:72:56:c6:35:8b:
                    a9:9a:f7:17:a2:ac:92:3f:76:f0:b1:b3:c9:3e:2d:
                    88:7b:b7:e3:0f:0b:89:f2:bc:0c:d1:27:ec:f1:b8:
                    6e:68:c4:55:17:a0:3c:2b:94:e2:05:83:87:31:db:
                    6a:1c:3c:a5:23:b4:c0:da:4a:8a:64:c5:03:a8:b0:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:86:A2:19:DC:F5:9A:51:C0:5E:C2:AD:65:31:14:15:8C:1C:8C:A5
            X509v3 Authority Key Identifier:
                keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/eIaiGdz1mlHAXsKtZTEUFYwcjKU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.203.48.0-37.203.54.255
                  89.106.136.0/21
                  185.94.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:10:6e:da:41:89:2b:a8:b2:b3:47:1e:fa:ee:f8:30:41:34:
         e8:ca:54:c1:3d:f1:47:6d:bc:52:73:f1:9a:0c:5a:82:48:58:
         6b:bd:43:aa:c1:c1:b4:91:7c:68:e1:1a:d1:65:d0:83:1a:bc:
         3e:25:95:82:56:87:c0:6d:b9:31:43:60:db:ea:75:17:a9:c7:
         da:fd:93:9d:67:63:3f:63:eb:97:92:51:67:23:7f:12:ad:13:
         61:fa:f2:f0:f2:c2:23:56:26:a1:93:99:fd:ae:48:e4:6f:81:
         d6:b4:b3:ce:58:c8:68:b2:59:3c:bd:b4:47:8f:44:5e:03:d3:
         15:f8:76:2b:f1:63:ac:59:6b:4a:fd:55:88:9d:37:f8:59:e4:
         9e:98:56:da:43:e8:4d:ff:af:78:86:67:05:78:39:24:93:f1:
         42:71:e2:f3:e3:6e:e0:d2:b1:34:c4:2a:73:0d:a2:99:c8:ba:
         ca:19:19:64:7d:fb:2b:71:6e:4f:17:9d:0b:c2:ad:1c:59:34:
         28:44:e5:ac:53:6d:3f:72:17:93:6a:58:3a:0f:ae:88:be:2a:
         a1:52:a5:dd:c1:d2:87:af:b6:ea:db:1c:c8:b5:3d:2d:a3:c8:
         bc:a4:ba:92:e6:00:da:32:2d:41:31:36:6c:be:1d:26:c3:aa:
         08:54:23:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:47 2024 by rpki-client on console-ams.rpki-client.org