Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/rt7vy1mZlE7UY27x-y6OKLIOBOg.roa
File:                     rt7vy1mZlE7UY27x-y6OKLIOBOg.roa (raw, json)
Hash identifier:          EsMTeQr4k8MjfqZ7QmRxBV7MLZZ7pkC4zK0h88tIEVg=
Subject key identifier:   AE:DE:EF:CB:59:99:94:4E:D4:63:6E:F1:FB:2E:8E:28:B2:0E:04:E8
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       0182C9ED6981C1AAB25CE1A2570FEA116DDC
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/rt7vy1mZlE7UY27x-y6OKLIOBOg.roa
Signing time:             Tue 23 Aug 2022 08:59:15 +0000
ROA not before:           Tue 23 Aug 2022 08:59:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9145
IP address blocks:        212.95.96.0/19 maxlen: 19
                          92.252.0.0/17 maxlen: 17
                          212.6.64.0/18 maxlen: 18
                          85.16.0.0/16 maxlen: 16
                          95.33.0.0/16 maxlen: 16
                          85.8.64.0/18 maxlen: 18
                          37.138.0.0/16 maxlen: 16
                          82.149.160.0/19 maxlen: 19
                          90.153.0.0/17 maxlen: 17
                          89.166.128.0/17 maxlen: 17
                          80.66.0.0/19 maxlen: 24
                          213.168.192.0/19 maxlen: 19
                          213.183.160.0/19 maxlen: 19
                          91.96.0.0/15 maxlen: 15
                          31.150.0.0/16 maxlen: 16
                          80.228.0.0/16 maxlen: 16
                          87.245.0.0/18 maxlen: 18
                          89.233.64.0/19 maxlen: 19
                          31.184.0.0/18 maxlen: 18
                          91.248.0.0/15 maxlen: 15
                          213.182.96.0/19 maxlen: 19
                          31.187.112.0/20 maxlen: 20
                          213.170.160.0/19 maxlen: 19
                          178.142.0.0/16 maxlen: 16
                          188.118.128.0/18 maxlen: 18
                          2a02:8200::/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c9:ed:69:81:c1:aa:b2:5c:e1:a2:57:0f:ea:11:6d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: Aug 23 08:59:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aedeefcb5999944ed4636ef1fb2e8e28b20e04e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3f:5b:19:a5:11:57:3e:79:e9:34:3e:b4:67:
                    34:7e:f2:cd:2e:ee:6a:88:93:78:d3:33:34:b9:ed:
                    ed:e4:d6:96:b7:14:17:d6:6c:e6:07:4b:78:80:9f:
                    98:9e:69:e0:fe:d4:44:36:58:c0:4f:0e:68:92:9e:
                    39:a0:30:eb:a0:7e:28:fa:1f:0e:dd:b6:92:52:24:
                    fa:4e:8d:58:f3:85:74:ae:13:53:c3:ae:0d:eb:25:
                    4b:a6:b5:c2:ae:b5:29:08:21:f2:de:21:44:ea:79:
                    a5:f5:d0:19:ed:13:c0:62:50:b6:0c:a0:3e:6f:37:
                    8e:af:ba:8b:eb:70:f1:27:91:6f:ca:b5:dc:e4:e1:
                    28:50:c6:ce:de:24:05:f0:65:e1:37:e4:63:09:5b:
                    7e:93:72:4a:83:45:ad:23:7d:a5:f3:e3:0f:ad:ea:
                    b1:29:de:cb:72:bd:0b:2f:3b:ef:c5:ba:2f:0c:4f:
                    14:5c:bc:78:a1:9a:87:2a:d2:55:c9:2f:4b:d6:3b:
                    ec:55:02:05:ed:cb:94:fd:c8:a2:8a:7d:b3:24:82:
                    dd:52:57:b3:48:12:24:c1:c8:e4:d4:78:b0:a2:6e:
                    29:17:d3:22:60:e5:b2:35:b0:a5:06:48:01:95:11:
                    cf:08:6a:b4:d4:67:98:81:69:3b:50:7c:6e:bc:50:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DE:EF:CB:59:99:94:4E:D4:63:6E:F1:FB:2E:8E:28:B2:0E:04:E8
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/rt7vy1mZlE7UY27x-y6OKLIOBOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.150.0.0/16
                  31.184.0.0/18
                  31.187.112.0/20
                  37.138.0.0/16
                  80.66.0.0/19
                  80.228.0.0/16
                  82.149.160.0/19
                  85.8.64.0/18
                  85.16.0.0/16
                  87.245.0.0/18
                  89.166.128.0/17
                  89.233.64.0/19
                  90.153.0.0/17
                  91.96.0.0/15
                  91.248.0.0/15
                  92.252.0.0/17
                  95.33.0.0/16
                  178.142.0.0/16
                  188.118.128.0/18
                  212.6.64.0/18
                  212.95.96.0/19
                  213.168.192.0/19
                  213.170.160.0/19
                  213.182.96.0/19
                  213.183.160.0/19
                IPv6:
                  2a02:8200::/27

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:76:a1:df:a4:9a:0c:79:bd:9e:25:75:61:2a:ea:67:6f:
         c5:15:d6:27:ea:19:72:34:df:3d:15:95:fd:3e:bc:7a:c8:79:
         48:0d:29:06:0d:65:89:f4:92:26:2b:f4:7f:00:bc:e7:df:86:
         80:34:f8:d1:42:02:28:87:ac:ec:e2:cd:f8:7c:7a:e1:61:c5:
         f6:5c:12:8b:23:3f:ff:d0:ea:dc:3a:9b:ad:2f:aa:b1:84:18:
         ec:b6:0f:61:a3:a8:cd:01:8f:02:09:bf:b1:82:d4:5b:f9:d0:
         d4:10:17:df:ec:4a:55:6c:7c:32:d2:d1:1e:bf:f4:af:38:85:
         5a:56:76:56:b2:bc:2d:1e:48:1a:ec:24:ff:bd:85:19:74:00:
         06:f0:6e:cd:17:d2:7a:83:ca:64:25:25:b2:81:c6:9a:f4:22:
         3b:2c:d7:f3:f2:5b:c0:0c:90:b0:0f:2a:41:c9:53:5e:2a:2c:
         fd:2c:c6:7c:ac:c8:5f:c5:c7:60:a2:84:fa:f3:7b:9f:43:45:
         ef:8f:bf:b7:75:59:d2:12:3a:8e:66:c7:00:6a:f1:f6:53:29:
         bd:d9:3d:5a:ed:7c:25:1c:ef:f8:32:ce:a3:f5:0d:b4:61:23:
         36:33:a9:ed:c4:2b:9d:96:8d:d2:d9:59:bf:2f:ce:ff:43:cb:
         a2:e2:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org