Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5jwr_aHMzN3Q9OYL7kK6oV1wXQQ.roa
File:                     5jwr_aHMzN3Q9OYL7kK6oV1wXQQ.roa (raw, json)
Hash identifier:          eX9f/4mPu1Ap8qJ0jx8DWKyvCvQVYZTPtzUeTE/Ug3U=
Subject key identifier:   E6:3C:2B:FD:A1:CC:CC:DD:D0:F4:E6:0B:EE:42:BA:A1:5D:70:5D:04
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0A3A3BCD
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5jwr_aHMzN3Q9OYL7kK6oV1wXQQ.roa
Signing time:             Wed 26 Jan 2022 15:05:21 +0000
ROA not before:           Wed 26 Jan 2022 15:05:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15611
IP address blocks:        213.176.96.0/24 maxlen: 24
                          213.176.1.0/24 maxlen: 24
                          213.176.4.0/24 maxlen: 24
                          213.176.5.0/24 maxlen: 24
                          62.60.136.0/24 maxlen: 24
                          62.60.137.0/24 maxlen: 24
                          62.60.139.0/24 maxlen: 24
                          62.60.140.0/24 maxlen: 24
                          62.60.141.0/24 maxlen: 24
                          62.60.142.0/24 maxlen: 24
                          62.60.145.0/24 maxlen: 24
                          62.60.146.0/24 maxlen: 24
                          213.176.124.0/24 maxlen: 24
                          213.176.125.0/24 maxlen: 24
                          213.176.122.0/24 maxlen: 24
                          213.176.123.0/24 maxlen: 24
                          62.60.161.0/24 maxlen: 24
                          62.60.164.0/24 maxlen: 24
                          62.60.165.0/24 maxlen: 24
                          62.60.162.0/24 maxlen: 24
                          62.60.163.0/24 maxlen: 24
                          62.60.166.0/24 maxlen: 24
                          62.60.167.0/24 maxlen: 24
                          62.60.168.0/24 maxlen: 24
                          62.60.171.0/24 maxlen: 24
                          62.60.172.0/24 maxlen: 24
                          62.60.169.0/24 maxlen: 24
                          62.60.170.0/24 maxlen: 24
                          62.60.179.0/24 maxlen: 24
                          62.60.174.0/24 maxlen: 24
                          62.60.175.0/24 maxlen: 24
                          62.60.173.0/24 maxlen: 24
                          62.60.178.0/24 maxlen: 24
                          62.60.176.0/24 maxlen: 24
                          62.60.177.0/24 maxlen: 24
                          62.60.181.0/24 maxlen: 24
                          62.60.182.0/24 maxlen: 24
                          62.60.180.0/24 maxlen: 24
                          62.60.185.0/24 maxlen: 24
                          62.60.183.0/24 maxlen: 24
                          62.60.184.0/24 maxlen: 24
                          62.60.186.0/24 maxlen: 24
                          62.60.188.0/24 maxlen: 24
                          62.60.189.0/24 maxlen: 24
                          62.60.187.0/24 maxlen: 24
                          62.60.190.0/24 maxlen: 24
                          62.60.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171588557 (0xa3a3bcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan 26 15:05:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e63c2bfda1ccccddd0f4e60bee42baa15d705d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:93:9c:5a:a4:3f:41:0f:8c:df:b9:0a:68:
                    0f:50:69:37:cc:03:1b:d1:e0:a1:a2:8c:f3:3a:2c:
                    a2:be:8e:e5:11:1c:57:89:39:15:18:46:ef:8b:4d:
                    9a:21:55:64:c8:ac:d1:ee:08:1f:9d:fb:53:82:68:
                    29:ae:d7:02:9b:a8:cc:38:1e:2d:25:ed:86:d1:24:
                    60:6d:3e:5e:77:cd:69:74:9f:f0:d5:e7:28:c3:95:
                    91:af:a7:6e:c5:92:b6:de:60:3a:e6:c9:bf:d4:15:
                    28:af:d0:1f:2a:1d:59:2a:76:c4:eb:bd:de:28:80:
                    ef:cc:cb:3e:a8:eb:dc:9d:db:9f:12:c5:59:68:fa:
                    31:78:28:54:81:91:bd:37:a0:5f:69:05:f5:38:ca:
                    ca:89:9c:58:27:9a:d1:4b:3e:93:f8:0d:e5:f3:ad:
                    7d:e2:6a:df:02:f8:b1:68:6b:46:29:b1:e7:3d:7b:
                    31:ed:4d:2c:f9:69:08:00:16:e9:aa:f7:7b:74:62:
                    b9:40:e0:ea:0d:de:4c:6f:bf:cb:e1:ad:b8:4a:4e:
                    16:01:ba:04:05:db:cf:e3:f8:c3:e4:e5:32:85:97:
                    36:46:5c:82:3f:bb:31:3c:7d:95:7d:b1:27:88:0f:
                    f2:f5:36:e7:f6:e8:01:cb:53:83:ea:be:ad:df:2c:
                    18:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:2B:FD:A1:CC:CC:DD:D0:F4:E6:0B:EE:42:BA:A1:5D:70:5D:04
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5jwr_aHMzN3Q9OYL7kK6oV1wXQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.136.0/23
                  62.60.139.0-62.60.142.255
                  62.60.145.0-62.60.146.255
                  62.60.161.0-62.60.191.255
                  213.176.1.0/24
                  213.176.4.0/23
                  213.176.96.0/24
                  213.176.122.0-213.176.125.255

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:47:fe:da:fc:e0:26:0c:05:f2:a2:82:ad:0c:f0:e0:27:
         54:c2:d1:9a:f3:60:b4:95:e8:1a:bb:f0:85:33:42:65:db:9b:
         85:d1:5e:e0:4b:ad:80:5d:3d:19:99:9d:b1:0a:e7:57:60:52:
         79:d1:59:d6:4f:ea:a4:5c:54:65:3b:c9:19:0c:54:ef:28:a6:
         9f:1b:cf:79:f0:30:49:13:ca:c0:98:38:87:92:8f:5a:0e:2f:
         53:43:bf:57:a8:7d:d6:a5:7d:0b:8b:bd:2d:51:b3:80:32:16:
         d3:0b:b8:c5:7d:cb:b7:42:ef:05:53:95:76:f2:ee:75:d5:d6:
         45:69:67:db:50:22:82:6d:f2:ff:1a:65:87:c0:b7:93:b7:38:
         f8:c3:fc:c6:e4:e6:57:86:ab:b7:39:91:2c:8d:71:a8:01:af:
         1d:3f:0e:f8:d2:21:28:ef:2c:2e:c6:26:e0:08:2f:3e:81:25:
         14:a3:73:77:11:ff:f3:3e:10:b9:bf:8e:c4:79:37:8f:ee:5b:
         9d:02:df:d8:10:87:17:9a:02:d8:26:86:53:92:76:46:05:dc:
         b7:eb:9b:57:f5:1a:83:bf:5d:c5:a1:5e:1a:db:9d:9c:ca:c4:
         cc:66:23:1f:50:b3:1e:bc:62:a2:1e:b2:a9:d2:52:d7:b0:09:
         0f:7b:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org