Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Vu2L5cjR5i6AfXI7KDluNkfVYkM.roa
File:                     Vu2L5cjR5i6AfXI7KDluNkfVYkM.roa (raw, json)
Hash identifier:          7RUvbNirFcrsj2/tnlgv4PXgh+Snh6yBgwatQNmJ5H8=
Subject key identifier:   56:ED:8B:E5:C8:D1:E6:2E:80:7D:72:3B:28:39:6E:36:47:D5:62:43
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0B5ABB07
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Vu2L5cjR5i6AfXI7KDluNkfVYkM.roa
Signing time:             Sun 22 May 2022 07:35:29 +0000
ROA not before:           Sun 22 May 2022 07:35:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15611
IP address blocks:        213.176.96.0/24 maxlen: 24
                          213.176.1.0/24 maxlen: 24
                          213.176.4.0/24 maxlen: 24
                          213.176.5.0/24 maxlen: 24
                          62.60.136.0/24 maxlen: 24
                          62.60.137.0/24 maxlen: 24
                          62.60.139.0/24 maxlen: 24
                          62.60.140.0/24 maxlen: 24
                          62.60.143.0/24 maxlen: 24
                          62.60.141.0/24 maxlen: 24
                          62.60.142.0/24 maxlen: 24
                          62.60.145.0/24 maxlen: 24
                          213.176.124.0/24 maxlen: 24
                          213.176.125.0/24 maxlen: 24
                          213.176.122.0/24 maxlen: 24
                          213.176.123.0/24 maxlen: 24
                          62.60.164.0/24 maxlen: 24
                          62.60.165.0/24 maxlen: 24
                          62.60.166.0/24 maxlen: 24
                          62.60.167.0/24 maxlen: 24
                          62.60.168.0/24 maxlen: 24
                          62.60.171.0/24 maxlen: 24
                          62.60.172.0/24 maxlen: 24
                          62.60.169.0/24 maxlen: 24
                          62.60.170.0/24 maxlen: 24
                          62.60.179.0/24 maxlen: 24
                          62.60.174.0/24 maxlen: 24
                          62.60.175.0/24 maxlen: 24
                          62.60.173.0/24 maxlen: 24
                          62.60.178.0/24 maxlen: 24
                          62.60.176.0/24 maxlen: 24
                          62.60.177.0/24 maxlen: 24
                          62.60.181.0/24 maxlen: 24
                          62.60.182.0/24 maxlen: 24
                          62.60.180.0/24 maxlen: 24
                          62.60.185.0/24 maxlen: 24
                          62.60.183.0/24 maxlen: 24
                          62.60.184.0/24 maxlen: 24
                          62.60.186.0/24 maxlen: 24
                          62.60.188.0/24 maxlen: 24
                          62.60.189.0/24 maxlen: 24
                          62.60.187.0/24 maxlen: 24
                          62.60.190.0/24 maxlen: 24
                          62.60.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190495495 (0xb5abb07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: May 22 07:35:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56ed8be5c8d1e62e807d723b28396e3647d56243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:a0:6a:30:a6:d9:89:c4:ef:99:47:9e:52:
                    57:b1:be:a8:c0:06:a1:a5:94:b6:f4:aa:fb:b1:a9:
                    33:f6:d7:8f:0b:05:ab:bb:9d:1a:f2:c6:c4:b3:5b:
                    6d:12:79:fd:e6:b3:66:6b:9c:af:77:ab:93:61:64:
                    69:fa:45:12:30:85:71:cd:82:58:2f:16:e8:00:38:
                    36:4f:27:fe:82:63:03:9f:87:a8:93:02:1c:1c:47:
                    d0:f5:43:c6:66:e4:7c:b2:fb:c3:04:8c:01:a0:bb:
                    44:a7:ed:36:0b:36:0d:d4:32:3b:b3:f8:54:90:00:
                    74:a0:fa:c8:ef:a8:15:58:11:9b:3a:d0:e0:ea:df:
                    32:08:69:00:c1:a6:8f:9e:82:a1:cc:fa:90:c8:e1:
                    39:40:c8:ea:9d:01:a3:84:44:83:b7:b4:b4:7e:a6:
                    08:aa:6f:e9:7d:09:37:29:65:88:57:74:16:89:c3:
                    9e:d9:1a:70:9a:51:48:fd:20:4a:6d:cd:4b:67:bb:
                    8a:a2:09:3c:08:90:c3:b9:9f:e3:51:0c:9a:27:b0:
                    a3:ef:4a:53:9e:a7:33:0f:31:c3:f2:b5:30:a2:35:
                    d5:48:18:8b:b4:41:d3:c4:39:df:63:74:61:05:72:
                    51:59:4b:0e:c0:07:7d:4c:ac:ea:0a:79:48:ff:ba:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:ED:8B:E5:C8:D1:E6:2E:80:7D:72:3B:28:39:6E:36:47:D5:62:43
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Vu2L5cjR5i6AfXI7KDluNkfVYkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.136.0/23
                  62.60.139.0-62.60.143.255
                  62.60.145.0/24
                  62.60.164.0-62.60.191.255
                  213.176.1.0/24
                  213.176.4.0/23
                  213.176.96.0/24
                  213.176.122.0-213.176.125.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:02:b2:51:a6:5a:6e:99:5f:ae:53:66:6b:7a:5b:7a:8f:15:
         24:3c:c1:16:f3:c5:78:35:5f:d8:fe:4c:23:2f:10:7b:c1:98:
         44:ef:76:90:78:1f:95:e8:03:99:87:98:f2:93:dc:ea:17:8a:
         ec:8e:f0:27:74:54:2a:ea:f6:0d:b8:4c:47:8b:60:46:a5:8c:
         c7:11:cf:d5:50:96:fd:68:f3:53:07:b2:b7:36:c2:2e:53:83:
         b7:ce:f8:59:e0:be:98:d7:9c:3e:09:88:c6:02:66:9e:d1:80:
         c9:9c:45:b7:ac:c8:29:b0:06:24:c4:c2:28:19:9c:6f:92:76:
         aa:e5:ee:39:2f:df:f3:62:96:cc:8b:c7:a6:9b:8f:c0:07:04:
         b1:04:32:9d:47:ec:a2:23:96:16:a1:b5:19:1e:d2:1c:52:1b:
         50:53:89:12:d6:d4:14:1a:7b:9a:13:18:48:b3:7e:ca:45:49:
         9f:a2:d7:8b:a3:4e:8b:fd:59:2c:09:f5:3b:be:87:56:76:16:
         c7:ae:ab:79:a6:1e:62:5a:24:a4:70:08:45:4a:a3:35:ae:53:
         85:ea:9d:65:92:20:50:37:12:8d:6d:a8:e5:8e:1a:3c:19:eb:
         ce:c3:63:ee:ae:12:01:23:fb:0d:f1:e8:fb:b3:19:a4:d5:22:
         78:dc:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org