Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3cWJ-YGTyFE-OUcOlu_99i7uTIU.roa
File:                     3cWJ-YGTyFE-OUcOlu_99i7uTIU.roa (raw, json)
Hash identifier:          ATHWYIiMQu2LPF/nO8BQ29eRuKi1nHIK91zXWx1REoQ=
Subject key identifier:   DD:C5:89:F9:81:93:C8:51:3E:39:47:0E:96:EF:FD:F6:2E:EE:4C:85
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0A7541B1
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3cWJ-YGTyFE-OUcOlu_99i7uTIU.roa
Signing time:             Sat 19 Feb 2022 11:41:59 +0000
ROA not before:           Sat 19 Feb 2022 11:41:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15611
IP address blocks:        62.60.136.0/24 maxlen: 24
                          62.60.137.0/24 maxlen: 24
                          62.60.139.0/24 maxlen: 24
                          62.60.140.0/24 maxlen: 24
                          62.60.143.0/24 maxlen: 24
                          62.60.141.0/24 maxlen: 24
                          62.60.142.0/24 maxlen: 24
                          62.60.145.0/24 maxlen: 24
                          62.60.146.0/24 maxlen: 24
                          213.176.96.0/24 maxlen: 24
                          213.176.1.0/24 maxlen: 24
                          213.176.4.0/24 maxlen: 24
                          213.176.5.0/24 maxlen: 24
                          213.176.124.0/24 maxlen: 24
                          213.176.125.0/24 maxlen: 24
                          213.176.122.0/24 maxlen: 24
                          213.176.123.0/24 maxlen: 24
                          62.60.224.0/19 maxlen: 19
                          62.60.161.0/24 maxlen: 24
                          62.60.164.0/24 maxlen: 24
                          62.60.165.0/24 maxlen: 24
                          62.60.162.0/24 maxlen: 24
                          62.60.163.0/24 maxlen: 24
                          62.60.166.0/24 maxlen: 24
                          62.60.167.0/24 maxlen: 24
                          62.60.168.0/24 maxlen: 24
                          62.60.171.0/24 maxlen: 24
                          62.60.172.0/24 maxlen: 24
                          62.60.169.0/24 maxlen: 24
                          62.60.170.0/24 maxlen: 24
                          62.60.179.0/24 maxlen: 24
                          62.60.174.0/24 maxlen: 24
                          62.60.175.0/24 maxlen: 24
                          62.60.173.0/24 maxlen: 24
                          62.60.178.0/24 maxlen: 24
                          62.60.176.0/24 maxlen: 24
                          62.60.177.0/24 maxlen: 24
                          62.60.181.0/24 maxlen: 24
                          62.60.182.0/24 maxlen: 24
                          62.60.180.0/24 maxlen: 24
                          62.60.185.0/24 maxlen: 24
                          62.60.183.0/24 maxlen: 24
                          62.60.184.0/24 maxlen: 24
                          62.60.186.0/24 maxlen: 24
                          62.60.188.0/24 maxlen: 24
                          62.60.189.0/24 maxlen: 24
                          62.60.187.0/24 maxlen: 24
                          62.60.190.0/24 maxlen: 24
                          62.60.191.0/24 maxlen: 24
                          62.60.208.0/20 maxlen: 20
                          62.60.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175456689 (0xa7541b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Feb 19 11:41:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ddc589f98193c8513e39470e96effdf62eee4c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:c3:67:04:54:32:7a:19:72:2d:8f:e9:70:
                    7f:c9:4b:33:c5:16:f6:88:8d:e5:1d:3b:04:a0:1d:
                    5c:80:1f:a3:10:37:bf:bb:62:07:3a:03:b0:c3:dc:
                    37:77:6a:bf:b8:1e:ca:74:b7:1b:29:60:4c:e3:bc:
                    e3:fe:c0:c9:b0:cd:ab:45:96:f1:b0:0a:7f:3c:46:
                    1f:0f:44:15:56:41:56:f9:dc:06:a1:13:63:a1:d1:
                    e8:6b:b1:72:7a:95:b6:f3:c2:5a:34:d0:41:86:a2:
                    de:0e:a7:41:8e:24:48:e4:83:be:d2:16:b7:53:17:
                    0e:91:94:9e:b9:43:be:f5:07:d1:3c:05:23:a4:a8:
                    cd:eb:60:6b:ac:74:be:cc:4f:e3:0d:c9:e4:5f:94:
                    45:9e:ff:ca:d4:5e:a5:19:86:07:20:1e:6e:ac:49:
                    fe:62:a0:59:91:88:bb:9f:0d:ac:ad:1d:a0:a5:81:
                    66:35:82:84:53:fd:3e:43:13:aa:31:d4:9f:ee:29:
                    17:3f:e9:0c:1d:d5:dc:e5:ef:65:aa:0d:fa:57:62:
                    99:aa:ae:20:2c:34:56:54:1e:7b:f7:a6:8b:41:73:
                    3b:ba:45:8a:bc:17:aa:bd:6d:8c:14:58:9f:54:c5:
                    4b:e7:e8:e8:70:ad:c5:db:93:5d:9a:d9:e8:a1:ed:
                    3a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C5:89:F9:81:93:C8:51:3E:39:47:0E:96:EF:FD:F6:2E:EE:4C:85
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3cWJ-YGTyFE-OUcOlu_99i7uTIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.136.0/23
                  62.60.139.0-62.60.143.255
                  62.60.145.0-62.60.146.255
                  62.60.161.0-62.60.191.255
                  62.60.208.0-62.60.255.255
                  213.176.1.0/24
                  213.176.4.0/23
                  213.176.96.0/24
                  213.176.122.0-213.176.125.255

    Signature Algorithm: sha256WithRSAEncryption
         71:12:e9:f4:ce:9d:ff:72:a4:2c:a6:3f:07:87:f6:81:8d:09:
         76:1d:e9:e2:9e:53:ff:16:60:23:2f:aa:4a:fa:88:f0:c4:d1:
         bd:6f:dc:4e:02:6a:2d:ea:70:72:3f:5f:29:86:48:ff:0d:ea:
         ff:fb:f8:9e:d6:48:ac:57:4c:d2:b2:67:1a:70:d8:42:e8:98:
         e4:29:14:2e:f8:12:5e:3a:61:eb:07:58:ef:8b:10:f0:6e:5b:
         9e:df:8e:8b:0b:bf:ba:c6:85:ed:b8:a9:59:3d:32:82:66:f1:
         40:93:8d:1e:d9:68:aa:97:f1:31:8d:55:9b:15:92:5c:1a:81:
         54:eb:50:9d:a5:a2:01:27:29:06:e0:ec:62:5c:8b:dc:6e:e2:
         3d:d5:37:2e:a8:0f:a8:56:fe:da:c3:bc:be:ef:8d:f4:84:a1:
         7b:80:ba:dc:39:d7:d9:a9:cc:97:6a:21:fe:a8:95:92:22:a2:
         93:06:4b:e6:b2:79:7d:08:13:e0:3d:27:08:8a:bb:10:ba:34:
         26:31:d5:8a:b6:c3:74:5c:63:00:94:fe:bf:e6:d3:a0:10:14:
         91:ab:bb:d8:b4:d1:50:bc:d1:ca:67:75:ac:b4:46:e4:1f:39:
         4d:de:f0:7e:81:02:e3:51:bd:53:19:1d:dc:38:bb:f2:03:fd:
         ae:36:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org