Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LEdwii9hPfMZIeZaioZh864J4JU.roa
File:                     LEdwii9hPfMZIeZaioZh864J4JU.roa (raw, json)
Hash identifier:          diMgKm7fPpy7+/Ypp+ifi70LAY4m4C0kwb5q0UCJT0E=
Subject key identifier:   2C:47:70:8A:2F:61:3D:F3:19:21:E6:5A:8A:86:61:F3:AE:09:E0:95
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0B30A385
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LEdwii9hPfMZIeZaioZh864J4JU.roa
Signing time:             Sat 07 May 2022 05:36:31 +0000
ROA not before:           Sat 07 May 2022 05:36:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15611
IP address blocks:        213.176.96.0/24 maxlen: 24
                          213.176.1.0/24 maxlen: 24
                          213.176.4.0/24 maxlen: 24
                          213.176.5.0/24 maxlen: 24
                          62.60.136.0/24 maxlen: 24
                          62.60.137.0/24 maxlen: 24
                          62.60.139.0/24 maxlen: 24
                          62.60.140.0/24 maxlen: 24
                          62.60.143.0/24 maxlen: 24
                          62.60.141.0/24 maxlen: 24
                          62.60.142.0/24 maxlen: 24
                          62.60.145.0/24 maxlen: 24
                          62.60.146.0/24 maxlen: 24
                          213.176.124.0/24 maxlen: 24
                          213.176.125.0/24 maxlen: 24
                          213.176.122.0/24 maxlen: 24
                          213.176.123.0/24 maxlen: 24
                          62.60.164.0/24 maxlen: 24
                          62.60.165.0/24 maxlen: 24
                          62.60.166.0/24 maxlen: 24
                          62.60.167.0/24 maxlen: 24
                          62.60.168.0/24 maxlen: 24
                          62.60.171.0/24 maxlen: 24
                          62.60.172.0/24 maxlen: 24
                          62.60.169.0/24 maxlen: 24
                          62.60.170.0/24 maxlen: 24
                          62.60.179.0/24 maxlen: 24
                          62.60.174.0/24 maxlen: 24
                          62.60.175.0/24 maxlen: 24
                          62.60.173.0/24 maxlen: 24
                          62.60.178.0/24 maxlen: 24
                          62.60.176.0/24 maxlen: 24
                          62.60.177.0/24 maxlen: 24
                          62.60.181.0/24 maxlen: 24
                          62.60.182.0/24 maxlen: 24
                          62.60.180.0/24 maxlen: 24
                          62.60.185.0/24 maxlen: 24
                          62.60.183.0/24 maxlen: 24
                          62.60.184.0/24 maxlen: 24
                          62.60.186.0/24 maxlen: 24
                          62.60.188.0/24 maxlen: 24
                          62.60.189.0/24 maxlen: 24
                          62.60.187.0/24 maxlen: 24
                          62.60.190.0/24 maxlen: 24
                          62.60.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187736965 (0xb30a385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: May  7 05:36:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c47708a2f613df31921e65a8a8661f3ae09e095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:70:86:55:e0:12:68:75:ed:30:c7:15:3f:
                    b5:d5:1d:3b:42:65:3a:df:67:1d:cd:28:91:6c:22:
                    43:0d:12:a8:17:73:44:f1:9e:c1:95:97:30:ee:d8:
                    c3:c5:2c:9d:04:ff:5d:0c:a2:ce:5b:40:cc:d2:fd:
                    fc:bb:94:2e:cb:c7:b0:c6:7f:40:26:79:b7:21:1c:
                    8e:5d:01:ff:fa:b3:c2:f1:af:2d:5f:88:d1:4b:93:
                    e3:d5:4e:36:37:ae:27:3b:97:4c:1b:75:97:c6:4b:
                    de:ca:13:61:08:a0:98:65:36:87:55:50:2b:36:d7:
                    56:e8:25:25:d2:65:53:80:ce:33:84:fc:69:c4:a8:
                    e4:1c:c0:1a:ea:bd:72:28:09:29:22:32:54:ea:e3:
                    d2:9f:14:12:a6:01:23:84:5d:6a:2a:82:30:17:8e:
                    f6:56:58:cf:59:c2:9a:63:cb:c2:a3:4a:9c:21:10:
                    f5:12:6d:cf:71:ee:c9:8c:32:a1:cc:26:be:2a:e9:
                    69:97:90:60:2d:40:f8:d8:d3:42:3b:d3:d1:0f:df:
                    ae:08:c2:84:6b:3b:7d:94:db:7a:58:d1:35:9e:57:
                    2c:81:82:32:58:56:3b:dd:76:e4:69:3d:47:53:24:
                    3d:f2:83:93:ec:28:39:e5:5c:dc:98:6c:ec:98:8b:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:47:70:8A:2F:61:3D:F3:19:21:E6:5A:8A:86:61:F3:AE:09:E0:95
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LEdwii9hPfMZIeZaioZh864J4JU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.136.0/23
                  62.60.139.0-62.60.143.255
                  62.60.145.0-62.60.146.255
                  62.60.164.0-62.60.191.255
                  213.176.1.0/24
                  213.176.4.0/23
                  213.176.96.0/24
                  213.176.122.0-213.176.125.255

    Signature Algorithm: sha256WithRSAEncryption
         ca:58:b0:45:f6:25:5d:2f:86:af:d1:88:6b:fd:9b:f2:de:8c:
         6f:a1:11:08:32:4c:f1:b8:fb:30:09:32:88:33:ff:1a:7c:ad:
         ec:9b:68:a0:70:a1:08:0c:f4:0f:fc:c4:97:04:c7:46:30:1e:
         3a:25:e7:67:45:75:92:42:20:2a:27:ed:26:48:c3:a7:1e:86:
         a0:08:00:c5:43:8d:bf:e6:4a:d4:49:1a:1b:46:bf:fb:77:47:
         11:7d:3d:41:34:45:4d:8a:92:7c:98:c1:de:65:58:99:6d:b0:
         e9:60:86:9e:c5:41:54:d8:81:36:4a:e7:c2:ab:b6:bd:29:f4:
         bb:23:c3:af:53:5f:f6:c3:01:4c:f9:f3:d4:7d:cb:ff:13:5a:
         dd:4e:33:c3:32:ae:11:52:d8:c6:8c:c6:ce:bc:27:bc:67:56:
         8a:da:01:ea:6d:86:97:bc:d3:35:66:0c:68:bc:2d:21:d9:98:
         cb:c0:b5:0f:2f:4b:a0:55:b8:45:d2:3e:63:7c:ef:f7:36:68:
         3c:90:5e:c1:35:4e:08:9d:6e:f9:06:eb:19:dd:f2:cf:ba:68:
         96:15:b6:8c:a2:6d:a4:32:30:15:d6:ed:42:8b:b4:f0:96:45:
         d3:2d:e4:31:00:bc:76:33:64:98:48:a1:0d:b4:05:47:20:c5:
         35:5c:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org