Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/JtcNoRWODHkxznX071FbKsJssi4.roa
File:                     JtcNoRWODHkxznX071FbKsJssi4.roa (raw, json)
Hash identifier:          LZmyybyWG9JgB5EjbAyEa1qwjco4dUyF24vtIXX9OIg=
Subject key identifier:   26:D7:0D:A1:15:8E:0C:79:31:CE:75:F4:EF:51:5B:2A:C2:6C:B2:2E
Certificate issuer:       /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial:       330DC5F2
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/JtcNoRWODHkxznX071FbKsJssi4.roa
Signing time:             Fri 04 Feb 2022 12:36:30 +0000
ROA not before:           Fri 04 Feb 2022 12:36:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31638
IP address blocks:        93.115.170.0/23 maxlen: 23
                          89.39.224.0/20 maxlen: 21
                          188.241.190.0/23 maxlen: 24
                          46.255.80.0/21 maxlen: 24
                          89.44.206.0/24 maxlen: 24
                          5.144.184.0/21 maxlen: 24
                          89.45.95.0/24 maxlen: 24
                          37.156.148.0/22 maxlen: 23
                          89.47.32.0/23 maxlen: 24
                          188.215.44.0/22 maxlen: 23
                          86.105.179.0/24 maxlen: 24
                          89.45.24.0/24 maxlen: 24
                          89.45.24.0/21 maxlen: 21
                          89.45.26.0/24 maxlen: 24
                          89.45.25.0/24 maxlen: 24
                          89.45.27.0/24 maxlen: 24
                          176.223.164.0/24 maxlen: 24
                          188.215.65.0/24 maxlen: 24
                          37.156.96.0/22 maxlen: 23
                          89.33.232.0/24 maxlen: 24
                          94.177.18.0/23 maxlen: 23
                          93.118.37.0/24 maxlen: 24
                          195.62.160.0/19 maxlen: 20
                          89.34.6.0/24 maxlen: 24
                          89.45.216.0/22 maxlen: 23
                          188.215.248.0/24 maxlen: 24
                          188.212.153.0/24 maxlen: 24
                          188.215.247.0/24 maxlen: 24
                          188.210.239.0/24 maxlen: 24
                          37.156.168.0/22 maxlen: 23
                          185.82.168.0/22 maxlen: 23
                          185.82.170.0/24 maxlen: 24
                          185.82.169.0/24 maxlen: 24
                          185.82.171.0/24 maxlen: 24
                          188.241.4.0/23 maxlen: 24
                          37.156.208.0/22 maxlen: 23
                          94.177.151.0/24 maxlen: 24
                          89.42.230.0/24 maxlen: 24
                          188.209.80.0/20 maxlen: 24
                          86.104.229.0/24 maxlen: 24
                          188.209.88.0/21 maxlen: 21
                          93.113.89.0/24 maxlen: 24
                          86.105.8.0/24 maxlen: 24
                          2a02:20d8::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856540658 (0x330dc5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
        Validity
            Not Before: Feb  4 12:36:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26d70da1158e0c7931ce75f4ef515b2ac26cb22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:14:26:82:2e:0f:80:eb:e7:d6:28:b1:e6:
                    03:60:9c:b2:d6:4a:8c:bc:20:0d:16:cc:80:d7:1e:
                    d6:b6:c8:77:f9:55:54:e9:4c:0a:8e:0a:c2:d9:3e:
                    dc:10:2b:80:07:2b:40:e4:4e:b4:e2:17:58:38:91:
                    77:3f:85:e1:a8:2e:7e:45:42:b0:95:77:d2:fc:29:
                    3c:fb:cc:f2:fa:9c:e3:13:ee:a4:57:28:92:0e:59:
                    da:d5:aa:84:9a:d9:1c:79:64:ab:6e:3b:ad:c3:a8:
                    5e:40:0f:b0:a3:9d:38:59:45:8b:20:66:0f:d5:ea:
                    9e:95:b8:40:20:c4:88:db:60:98:18:bf:70:cf:7e:
                    67:f3:16:ec:ac:b6:d7:20:95:08:0a:a6:cd:bc:35:
                    57:1e:e4:03:bd:22:0d:d4:07:93:c2:89:3d:5d:f8:
                    01:2f:85:48:e4:90:76:ab:66:fc:86:95:b7:8f:43:
                    f6:16:a2:f6:6a:ce:b5:96:9c:b4:91:24:d1:9a:4a:
                    93:41:69:3c:44:69:e1:4e:6d:b8:0c:67:4a:00:6b:
                    41:ec:72:65:fc:70:db:b4:e6:25:ed:73:4c:11:a4:
                    b8:c3:16:59:61:04:a0:d2:ee:f8:5b:7c:3a:e2:f7:
                    b2:5b:82:42:18:8a:31:80:49:ae:6b:70:24:fc:7b:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D7:0D:A1:15:8E:0C:79:31:CE:75:F4:EF:51:5B:2A:C2:6C:B2:2E
            X509v3 Authority Key Identifier:
                keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/JtcNoRWODHkxznX071FbKsJssi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.144.184.0/21
                  37.156.96.0/22
                  37.156.148.0/22
                  37.156.168.0/22
                  37.156.208.0/22
                  46.255.80.0/21
                  86.104.229.0/24
                  86.105.8.0/24
                  86.105.179.0/24
                  89.33.232.0/24
                  89.34.6.0/24
                  89.39.224.0/20
                  89.42.230.0/24
                  89.44.206.0/24
                  89.45.24.0/21
                  89.45.95.0/24
                  89.45.216.0/22
                  89.47.32.0/23
                  93.113.89.0/24
                  93.115.170.0/23
                  93.118.37.0/24
                  94.177.18.0/23
                  94.177.151.0/24
                  176.223.164.0/24
                  185.82.168.0/22
                  188.209.80.0/20
                  188.210.239.0/24
                  188.212.153.0/24
                  188.215.44.0/22
                  188.215.65.0/24
                  188.215.247.0-188.215.248.255
                  188.241.4.0/23
                  188.241.190.0/23
                  195.62.160.0/19
                IPv6:
                  2a02:20d8::/29

    Signature Algorithm: sha256WithRSAEncryption
         28:72:5c:4c:1c:d5:de:8e:a3:2c:4e:54:25:d6:cf:02:c0:4f:
         30:92:c1:c1:f4:65:c9:e0:cc:d9:0d:cd:e5:7f:36:13:37:83:
         b8:17:4a:1a:f2:03:9f:6d:c2:2f:d8:fd:e7:90:e9:1b:9a:17:
         fb:5b:f4:49:39:4d:d0:68:19:bc:1b:e6:bd:77:1a:af:72:0e:
         35:c8:ad:38:43:8e:d0:f4:13:14:e8:8e:9d:92:a0:00:a4:cd:
         15:1f:2b:9f:71:83:a6:a4:8e:c0:c3:40:11:40:b7:3f:ba:d3:
         dd:80:0d:b3:f2:7f:55:a5:20:13:8f:46:6e:4b:84:6c:fe:51:
         7b:15:07:a3:6e:bc:ea:e6:8d:6c:72:c5:5a:96:32:32:4f:9d:
         29:70:d0:1d:ec:ac:1f:ff:cc:67:45:0d:ed:96:5f:9d:08:09:
         84:fd:d3:57:9b:b4:9b:e1:15:e3:13:0d:44:a7:2a:0c:18:dc:
         70:c8:66:78:a1:e9:6c:73:ae:30:73:a4:ae:2c:d6:47:b0:33:
         77:42:81:f5:e7:f9:1c:15:03:30:95:ee:b2:8c:77:26:43:3f:
         e8:6c:3f:08:79:f0:3c:15:e0:ca:94:09:7d:4f:f3:38:84:ba:
         35:3e:59:fa:77:e2:82:6c:da:a4:55:97:c3:e6:c6:31:3c:29:
         26:dc:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org