Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YWsywX_o6r67XP4s8OTGWWQE21c.roa
File:                     YWsywX_o6r67XP4s8OTGWWQE21c.roa (raw, json)
Hash identifier:          DP5t7K5cBaphT1qa7y4n9aW3+kfph7MN+WM6i+Tomws=
Subject key identifier:   61:6B:32:C1:7F:E8:EA:BE:BB:5C:FE:2C:F0:E4:C6:59:64:04:DB:57
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       07AFEFFC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YWsywX_o6r67XP4s8OTGWWQE21c.roa
Signing time:             Sun 27 Feb 2022 14:12:49 +0000
ROA not before:           Sun 27 Feb 2022 14:12:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62206
IP address blocks:        195.211.190.0/24 maxlen: 24
                          45.88.139.0/24 maxlen: 24
                          45.88.138.0/24 maxlen: 24
                          45.88.137.0/24 maxlen: 24
                          185.200.62.0/24 maxlen: 24
                          194.242.96.0/22 maxlen: 22
                          193.57.43.0/24 maxlen: 24
                          193.57.41.0/24 maxlen: 24
                          45.144.213.0/24 maxlen: 24
                          45.144.212.0/24 maxlen: 24
                          195.62.24.0/24 maxlen: 24
                          45.13.191.0/24 maxlen: 24
                          194.15.52.0/23 maxlen: 24
                          185.43.248.0/24 maxlen: 24
                          185.43.251.0/24 maxlen: 24
                          185.43.249.0/24 maxlen: 24
                          85.209.123.0/24 maxlen: 24
                          193.30.243.0/24 maxlen: 24
                          85.209.122.0/24 maxlen: 24
                          193.30.242.0/24 maxlen: 24
                          85.209.121.0/24 maxlen: 24
                          85.209.120.0/24 maxlen: 24
                          193.30.241.0/24 maxlen: 24
                          45.9.29.0/24 maxlen: 24
                          195.177.95.0/24 maxlen: 24
                          195.177.93.0/24 maxlen: 24
                          77.83.37.0/24 maxlen: 24
                          193.30.240.0/24 maxlen: 24
                          2a10:dfc0::/29 maxlen: 29
                          2a07:9200::/29 maxlen: 29
                          2a11:580::/29 maxlen: 29
                          2a0c:a580::/29 maxlen: 29
                          2a01:7120::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128970748 (0x7afeffc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: Feb 27 14:12:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=616b32c17fe8eabebb5cfe2cf0e4c6596404db57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:86:e1:bc:a5:f1:17:37:aa:fc:10:38:7b:
                    42:07:fa:c2:c4:a2:86:10:3e:25:f7:ea:01:fc:be:
                    c0:42:0f:b1:31:da:a7:26:04:bc:34:19:d7:83:46:
                    c2:b4:34:a7:46:75:4e:2e:75:55:16:68:67:3c:6d:
                    a9:26:16:43:e3:b7:38:db:0c:75:c2:4b:18:20:9d:
                    b5:8c:3b:0c:22:19:64:38:74:4f:ef:9d:73:14:9e:
                    ac:f4:b3:fa:ad:ec:b6:98:94:d6:9c:27:76:5f:2d:
                    bb:f9:96:79:60:4b:fc:aa:32:57:4b:b4:8d:9c:36:
                    ec:77:ec:3f:54:f6:04:b0:44:33:9c:7e:56:a9:7c:
                    4f:25:d0:60:7d:67:11:8b:a6:e0:c0:41:56:2b:0b:
                    3a:f2:ac:e9:39:99:5c:1a:c8:33:a5:93:31:23:8b:
                    ce:e8:cf:2f:f1:1e:35:7d:ff:a7:91:5f:8e:b4:c8:
                    ba:9d:0b:1f:3a:6c:a2:b0:96:b4:52:b0:3e:be:27:
                    80:23:bc:cc:9c:fa:75:60:2a:07:15:bf:09:27:d2:
                    ab:22:8b:29:9d:48:5e:b1:fd:93:1f:25:d6:06:f3:
                    99:f5:f5:dc:df:aa:cb:e4:52:e6:12:08:9b:f2:58:
                    64:49:52:99:19:0a:6b:43:6d:93:21:af:69:2f:e8:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6B:32:C1:7F:E8:EA:BE:BB:5C:FE:2C:F0:E4:C6:59:64:04:DB:57
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YWsywX_o6r67XP4s8OTGWWQE21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.29.0/24
                  45.13.191.0/24
                  45.88.137.0-45.88.139.255
                  45.144.212.0/23
                  77.83.37.0/24
                  85.209.120.0/22
                  185.43.248.0/23
                  185.43.251.0/24
                  185.200.62.0/24
                  193.30.240.0/22
                  193.57.41.0/24
                  193.57.43.0/24
                  194.15.52.0/23
                  194.242.96.0/22
                  195.62.24.0/24
                  195.177.93.0/24
                  195.177.95.0/24
                  195.211.190.0/24
                IPv6:
                  2a01:7120::/32
                  2a07:9200::/29
                  2a0c:a580::/29
                  2a10:dfc0::/29
                  2a11:580::/29

    Signature Algorithm: sha256WithRSAEncryption
         b4:22:8f:4e:b6:6a:1c:b9:9f:02:f8:e9:0d:e1:0d:83:34:58:
         8a:26:59:5f:5d:24:a8:f9:5c:e6:9f:ec:4d:0f:e6:1e:5c:d6:
         3b:f7:1b:1b:4e:77:a4:30:9c:b9:7e:f9:57:08:63:3e:b6:fe:
         e4:61:2a:b3:f6:5c:79:72:da:5a:f0:0b:cb:0a:63:3c:94:cf:
         56:c0:92:40:51:41:7f:af:7b:20:34:27:c1:15:a1:23:e3:b5:
         3c:77:89:82:0c:8e:eb:32:d0:e6:05:20:25:41:fa:e8:16:f4:
         5f:2e:97:75:d8:3f:ef:b6:9d:61:01:d2:e9:b4:c2:b4:9f:6e:
         0f:6a:93:8a:66:5a:9b:b5:98:3d:48:8a:0b:61:01:b2:f2:58:
         ed:39:6a:aa:55:90:71:61:15:24:a8:7e:2d:65:8c:0f:70:cd:
         17:e5:9e:8a:79:4b:b2:c2:3d:12:9a:53:86:e8:73:99:a8:8b:
         e6:5d:b1:69:3e:3f:54:a2:d9:65:95:6a:9f:6f:49:ef:a9:ac:
         ea:55:f9:88:c7:d8:6d:e4:8b:15:9c:87:56:83:5b:8f:00:3e:
         98:da:7b:41:0c:8c:e9:ae:2c:d5:a2:cf:65:5f:9c:01:3d:69:
         85:46:7f:ec:e0:cd:69:f3:d1:f4:b5:88:02:f4:5e:f6:d4:0a:
         ee:a8:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org