Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uVIuD0Yyoi3h32GGsrQ9mJxD4iI.roa
File:                     uVIuD0Yyoi3h32GGsrQ9mJxD4iI.roa (raw, json)
Hash identifier:          /6JGtTRL1uIi0jh3qiT9ZVnxpZL+O6JcInH11d2e/jo=
Subject key identifier:   B9:52:2E:0F:46:32:A2:2D:E1:DF:61:86:B2:B4:3D:98:9C:43:E2:22
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0AA62175
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uVIuD0Yyoi3h32GGsrQ9mJxD4iI.roa
Signing time:             Sat 12 Mar 2022 08:34:47 +0000
ROA not before:           Sat 12 Mar 2022 08:34:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15611
IP address blocks:        213.176.96.0/24 maxlen: 24
                          213.176.1.0/24 maxlen: 24
                          213.176.4.0/24 maxlen: 24
                          213.176.5.0/24 maxlen: 24
                          62.60.136.0/24 maxlen: 24
                          62.60.137.0/24 maxlen: 24
                          62.60.139.0/24 maxlen: 24
                          62.60.140.0/24 maxlen: 24
                          62.60.143.0/24 maxlen: 24
                          62.60.141.0/24 maxlen: 24
                          62.60.142.0/24 maxlen: 24
                          62.60.145.0/24 maxlen: 24
                          62.60.146.0/24 maxlen: 24
                          213.176.124.0/24 maxlen: 24
                          213.176.125.0/24 maxlen: 24
                          213.176.122.0/24 maxlen: 24
                          213.176.123.0/24 maxlen: 24
                          62.60.224.0/19 maxlen: 19
                          62.60.164.0/24 maxlen: 24
                          62.60.165.0/24 maxlen: 24
                          62.60.166.0/24 maxlen: 24
                          62.60.167.0/24 maxlen: 24
                          62.60.168.0/24 maxlen: 24
                          62.60.171.0/24 maxlen: 24
                          62.60.172.0/24 maxlen: 24
                          62.60.169.0/24 maxlen: 24
                          62.60.170.0/24 maxlen: 24
                          62.60.179.0/24 maxlen: 24
                          62.60.174.0/24 maxlen: 24
                          62.60.175.0/24 maxlen: 24
                          62.60.173.0/24 maxlen: 24
                          62.60.178.0/24 maxlen: 24
                          62.60.176.0/24 maxlen: 24
                          62.60.177.0/24 maxlen: 24
                          62.60.181.0/24 maxlen: 24
                          62.60.182.0/24 maxlen: 24
                          62.60.180.0/24 maxlen: 24
                          62.60.185.0/24 maxlen: 24
                          62.60.183.0/24 maxlen: 24
                          62.60.184.0/24 maxlen: 24
                          62.60.186.0/24 maxlen: 24
                          62.60.188.0/24 maxlen: 24
                          62.60.189.0/24 maxlen: 24
                          62.60.187.0/24 maxlen: 24
                          62.60.190.0/24 maxlen: 24
                          62.60.191.0/24 maxlen: 24
                          62.60.208.0/20 maxlen: 20
                          62.60.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178659701 (0xaa62175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Mar 12 08:34:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9522e0f4632a22de1df6186b2b43d989c43e222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:14:59:87:0f:2d:2b:71:38:f9:7e:0a:1d:
                    ee:79:79:eb:1b:94:d3:8a:19:2f:1c:86:24:49:fc:
                    26:cd:c1:84:8c:e7:32:89:f3:0c:d0:cb:d9:36:03:
                    f4:83:d4:a7:ca:a5:59:1c:f6:5b:15:ed:ab:83:38:
                    3e:a5:65:6a:bc:42:2d:38:ec:16:47:97:a2:dd:ed:
                    94:98:a6:28:ff:3e:3a:0a:c1:f6:07:ba:87:05:94:
                    f9:13:be:db:c9:c6:9b:5d:2b:17:1b:cf:ca:46:42:
                    ff:aa:eb:98:72:b1:98:4e:2d:db:51:3a:46:29:fe:
                    25:b7:d1:fc:36:a1:c4:15:7a:f3:38:4c:f4:c1:0b:
                    c5:9b:8a:ef:fc:0c:fb:60:85:a4:4b:e4:f8:13:2f:
                    ed:10:45:4e:79:b0:03:88:a2:22:e9:e9:c0:bd:d6:
                    f6:89:4f:d8:61:41:6d:16:ae:b1:09:05:e9:8b:c7:
                    b1:e8:33:44:93:c5:5d:ab:9d:32:c7:7d:bb:f3:15:
                    70:7e:35:a7:8c:52:99:de:05:e0:8f:6e:f0:1c:a4:
                    9e:77:d9:10:40:be:be:b5:36:a2:8c:24:f0:19:e0:
                    96:cc:fb:e0:99:ab:02:6a:d8:2a:6c:6d:c7:2f:cb:
                    9e:33:20:08:b5:46:c8:a9:13:88:46:41:10:b4:dd:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:52:2E:0F:46:32:A2:2D:E1:DF:61:86:B2:B4:3D:98:9C:43:E2:22
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uVIuD0Yyoi3h32GGsrQ9mJxD4iI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.136.0/23
                  62.60.139.0-62.60.143.255
                  62.60.145.0-62.60.146.255
                  62.60.164.0-62.60.191.255
                  62.60.208.0-62.60.255.255
                  213.176.1.0/24
                  213.176.4.0/23
                  213.176.96.0/24
                  213.176.122.0-213.176.125.255

    Signature Algorithm: sha256WithRSAEncryption
         35:20:f1:38:4f:59:5a:d2:d3:5a:60:7e:99:e0:d8:c0:02:9d:
         42:3a:58:27:9a:e3:f0:78:1c:fb:06:d2:c8:a9:f1:51:da:fe:
         28:78:07:dc:96:6e:a4:75:a2:c4:a6:51:b0:be:ad:1a:25:5c:
         3e:41:25:87:bd:1c:03:7d:8a:c3:75:66:dc:1e:d7:53:97:fa:
         62:b1:e4:84:4c:d5:70:fa:c2:65:5e:0c:38:c6:bf:f2:3e:1c:
         5e:5c:45:34:73:96:c7:f4:ed:a5:69:b0:f0:df:fd:d0:3f:86:
         64:89:88:42:58:87:82:6b:04:a8:c6:0f:15:88:27:8e:ab:e0:
         35:45:10:08:37:62:38:6f:07:c7:05:46:b2:8c:bd:35:4a:56:
         11:59:3a:ee:0c:8a:60:78:c9:d4:0a:b5:94:4c:68:a8:a7:0b:
         dd:fa:45:a3:ed:ee:1f:34:e5:71:48:3e:59:07:5d:9f:92:be:
         5c:95:6f:bb:45:16:9b:04:49:5d:41:ba:75:70:27:d6:c5:30:
         34:5c:5c:7a:3f:fe:ea:1b:41:44:ab:c4:68:2a:5a:60:06:91:
         e1:e5:f1:2d:2b:82:8d:9a:29:97:1d:66:e4:c6:11:e2:9d:2c:
         55:45:50:6d:1d:37:ae:6f:88:10:20:d9:c3:ef:e3:41:3c:df:
         db:a0:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org