Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Eh17u7rXltWufB91W0GbYKdfrok.roa
File:                     Eh17u7rXltWufB91W0GbYKdfrok.roa (raw, json)
Hash identifier:          Ilaw0v4CzLPg7Hvn7lsS8j6krjcjqDrjaC+1KS3oWeY=
Subject key identifier:   12:1D:7B:BB:BA:D7:96:D5:AE:7C:1F:75:5B:41:9B:60:A7:5F:AE:89
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       0184810D5BB0CD9CE8905349F6733A8E29DB
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Eh17u7rXltWufB91W0GbYKdfrok.roa
Signing time:             Wed 16 Nov 2022 15:27:27 +0000
ROA not before:           Wed 16 Nov 2022 15:27:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        88.218.101.0/24 maxlen: 24
                          88.218.102.0/23 maxlen: 23
                          88.218.100.0/24 maxlen: 24
                          141.98.240.0/24 maxlen: 24
                          195.206.108.0/24 maxlen: 24
                          195.206.109.0/24 maxlen: 24
                          193.31.72.0/24 maxlen: 24
                          193.31.73.0/24 maxlen: 24
                          193.31.74.0/24 maxlen: 24
                          193.31.75.0/24 maxlen: 24
                          85.209.218.0/23 maxlen: 23
                          85.209.216.0/24 maxlen: 24
                          139.28.138.0/23 maxlen: 23
                          139.28.137.0/24 maxlen: 24
                          45.84.44.0/24 maxlen: 24
                          194.5.0.0/22 maxlen: 22
                          45.84.45.0/24 maxlen: 24
                          45.84.47.0/24 maxlen: 24
                          141.98.241.0/24 maxlen: 24
                          141.98.242.0/23 maxlen: 23
                          194.124.52.0/22 maxlen: 22
                          85.8.188.0/24 maxlen: 24
                          85.8.189.0/24 maxlen: 24
                          85.8.190.0/23 maxlen: 23
                          45.11.236.0/22 maxlen: 22
                          92.119.180.0/24 maxlen: 24
                          45.157.74.0/23 maxlen: 23
                          45.14.72.0/24 maxlen: 24
                          5.182.100.0/24 maxlen: 24
                          5.182.103.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:81:0d:5b:b0:cd:9c:e8:90:53:49:f6:73:3a:8e:29:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Nov 16 15:27:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=121d7bbbbad796d5ae7c1f755b419b60a75fae89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:b3:52:35:c4:e5:96:c7:ba:4a:5c:66:26:
                    4e:b7:98:ae:17:0f:f0:de:55:00:f5:31:78:ec:a0:
                    77:8f:c7:22:b2:00:98:ce:b3:1c:79:99:b5:12:9c:
                    57:c3:db:c6:9c:33:fe:20:69:c0:b2:06:0b:ca:3e:
                    12:c0:55:c0:b7:20:5f:80:53:5a:98:6e:72:5f:bc:
                    7b:51:08:09:49:c3:15:7c:08:1c:a2:af:c4:92:2f:
                    d7:d2:5e:a9:5c:92:4b:57:7d:1a:0a:66:bc:f2:76:
                    4b:46:c9:43:e7:f5:26:c1:2f:53:da:99:ef:c6:24:
                    10:5d:cd:44:82:15:cf:26:86:ac:e8:91:d0:98:8d:
                    b0:97:c1:6d:5c:79:bd:86:48:09:34:f9:90:67:98:
                    8d:db:a2:55:a6:ef:f5:da:a0:93:69:8c:08:3c:75:
                    8d:50:70:9f:33:55:54:e5:4a:eb:fd:9e:c4:1f:cd:
                    ac:b9:a5:a3:0d:d8:fe:de:09:80:e2:77:a3:14:19:
                    a9:84:fa:24:1a:13:d0:fb:12:8f:0c:f3:00:e2:c9:
                    e3:de:bc:e1:75:52:9b:b1:56:6e:e8:e7:9a:b0:d0:
                    91:0e:3e:4b:b6:f2:79:0d:a5:21:e1:b2:42:76:a3:
                    6e:d8:2d:de:a9:be:cb:2f:a2:88:cb:12:7b:6d:33:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1D:7B:BB:BA:D7:96:D5:AE:7C:1F:75:5B:41:9B:60:A7:5F:AE:89
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Eh17u7rXltWufB91W0GbYKdfrok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.100.0/24
                  5.182.103.0/24
                  45.11.236.0/22
                  45.14.72.0/24
                  45.84.44.0/23
                  45.84.47.0/24
                  45.157.74.0/23
                  85.8.188.0/22
                  85.209.216.0/24
                  85.209.218.0/23
                  88.218.100.0/22
                  92.119.180.0/24
                  139.28.137.0-139.28.139.255
                  141.98.240.0/22
                  193.31.72.0/22
                  194.5.0.0/22
                  194.124.52.0/22
                  195.206.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:2f:f6:28:5f:88:ca:89:06:99:ea:4a:3e:df:6b:3c:d9:01:
         35:0c:b1:08:a5:fa:d8:22:d8:db:00:c9:f2:71:5d:e6:7b:ec:
         b3:94:e9:91:98:2a:8f:b1:29:75:0b:94:7d:31:f0:8c:5e:75:
         65:f6:48:c1:37:d8:ab:77:cb:6e:dd:4f:b1:21:fd:61:c9:17:
         2f:9e:3d:b4:21:26:82:0a:f6:ca:57:29:a4:d4:99:20:ea:03:
         79:0e:99:9f:36:4f:e7:57:d0:5a:09:ed:6f:1a:fd:97:f2:e6:
         1c:8c:3f:14:13:22:22:0a:81:2b:28:c9:18:ec:8a:f5:fa:96:
         e0:06:2c:27:24:f2:f4:9d:2c:86:dd:61:de:30:f4:f0:06:d6:
         06:00:04:a9:fa:c7:58:a7:b8:1e:ed:f2:13:ef:bc:3b:e7:c2:
         42:5b:ae:48:24:76:04:2c:00:b7:dc:5e:49:3d:ca:81:51:a4:
         7a:c4:d6:60:da:e0:cd:d2:a4:1e:22:e2:38:e9:3e:5f:23:cd:
         5d:7d:a0:62:c7:12:23:dc:b9:53:b4:71:58:66:6b:4a:c1:23:
         f0:0f:63:f4:fe:b1:0b:81:dc:7d:fc:12:54:97:12:0d:15:6f:
         1f:2f:19:e0:1d:aa:aa:03:dc:23:e6:4e:76:65:3d:8c:81:a3:
         0e:7a:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org