Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/EcOlopigyoIxWPSZyRFUhTJDEfs.roa
File:                     EcOlopigyoIxWPSZyRFUhTJDEfs.roa (raw, json)
Hash identifier:          P779AC6GsUfnXdkLYT/f+xL5/fLevmkDk6hgmvq6exg=
Subject key identifier:   11:C3:A5:A2:98:A0:CA:82:31:58:F4:99:C9:11:54:85:32:43:11:FB
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       0C61AB2E
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/EcOlopigyoIxWPSZyRFUhTJDEfs.roa
Signing time:             Tue 05 Apr 2022 18:34:24 +0000
ROA not before:           Tue 05 Apr 2022 18:34:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34450
IP address blocks:        89.43.42.0/24 maxlen: 24
                          89.43.43.0/24 maxlen: 24
                          89.43.40.0/24 maxlen: 24
                          89.43.41.0/24 maxlen: 24
                          89.43.45.0/24 maxlen: 24
                          89.43.46.0/24 maxlen: 24
                          89.43.73.0/24 maxlen: 24
                          89.39.252.0/24 maxlen: 24
                          188.213.18.0/24 maxlen: 24
                          188.240.14.0/24 maxlen: 24
                          93.113.202.0/24 maxlen: 24
                          93.113.203.0/24 maxlen: 24
                          89.44.209.0/24 maxlen: 24
                          93.114.99.0/24 maxlen: 24
                          89.33.163.0/24 maxlen: 24
                          89.45.34.0/24 maxlen: 24
                          93.114.55.0/24 maxlen: 24
                          188.215.72.0/23 maxlen: 24
                          86.106.80.0/24 maxlen: 24
                          93.114.187.0/24 maxlen: 24
                          86.106.97.0/24 maxlen: 24
                          86.106.104.0/24 maxlen: 24
                          89.34.8.0/21 maxlen: 21
                          93.114.171.0/24 maxlen: 24
                          85.204.125.0/24 maxlen: 24
                          85.204.127.0/24 maxlen: 24
                          93.113.158.0/24 maxlen: 24
                          89.37.136.0/24 maxlen: 24
                          2a05:b680:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207727406 (0xc61ab2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Apr  5 18:34:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11c3a5a298a0ca823158f499c9115485324311fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:28:d9:0d:87:2e:e7:c7:3e:c2:d6:68:a1:
                    6a:56:c3:da:76:f5:e0:e8:c7:e4:19:10:0b:f4:f9:
                    24:97:37:e8:ec:72:15:81:42:3d:25:1e:70:19:a0:
                    ca:ba:63:6f:58:51:fb:cf:ca:a4:28:22:ef:68:22:
                    df:49:db:a6:24:9c:73:d5:62:e0:05:b6:7c:2c:3d:
                    bd:e9:3f:9d:74:79:aa:f0:53:01:37:6a:92:bf:61:
                    85:bc:35:43:cd:01:f8:65:2e:c6:06:a4:22:44:3d:
                    5f:11:13:b2:24:ab:73:f4:39:ed:30:e3:a0:a2:d6:
                    2f:28:bb:27:87:4e:61:f3:c9:83:6e:fc:ad:78:e2:
                    d0:94:47:83:0c:73:93:5e:a3:89:28:c7:dc:7a:42:
                    ef:ed:fc:e1:49:f0:a6:26:2b:01:70:f8:67:1d:49:
                    0e:42:d8:eb:4d:11:ad:e2:79:39:5c:4b:e3:d5:ad:
                    f5:5f:0a:a4:0a:58:26:e6:97:56:5d:50:6e:cf:56:
                    73:6c:10:2b:04:e2:30:55:a3:9d:cb:dd:21:8e:1d:
                    38:18:e5:b6:6d:e2:f4:b1:6c:01:18:66:c0:b3:8e:
                    cf:a1:36:71:e1:4e:2a:e4:1a:75:6d:e8:eb:5a:cd:
                    fc:2f:2f:82:86:03:45:7c:a1:a6:6b:57:e7:97:86:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C3:A5:A2:98:A0:CA:82:31:58:F4:99:C9:11:54:85:32:43:11:FB
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/EcOlopigyoIxWPSZyRFUhTJDEfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.204.125.0/24
                  85.204.127.0/24
                  86.106.80.0/24
                  86.106.97.0/24
                  86.106.104.0/24
                  89.33.163.0/24
                  89.34.8.0/21
                  89.37.136.0/24
                  89.39.252.0/24
                  89.43.40.0/22
                  89.43.45.0-89.43.46.255
                  89.43.73.0/24
                  89.44.209.0/24
                  89.45.34.0/24
                  93.113.158.0/24
                  93.113.202.0/23
                  93.114.55.0/24
                  93.114.99.0/24
                  93.114.171.0/24
                  93.114.187.0/24
                  188.213.18.0/24
                  188.215.72.0/23
                  188.240.14.0/24
                IPv6:
                  2a05:b680:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:70:80:4a:15:2a:81:3d:ea:2d:33:4c:67:63:28:1a:d3:0e:
         9d:84:3b:8f:e8:3a:d7:d8:1f:a2:87:e9:29:80:db:e3:12:30:
         62:16:fe:97:91:19:71:40:81:8a:fa:fb:87:c7:f2:2a:6a:ae:
         87:d1:b4:d7:fa:55:83:31:a8:5e:cc:b5:a1:dc:02:62:cf:08:
         17:8e:9b:d9:fe:87:82:c0:16:d1:db:b8:f3:19:cd:c1:40:6f:
         93:cb:58:f2:26:58:bb:bc:9e:6f:66:78:09:22:23:8f:d4:f9:
         2e:34:cf:f5:97:fc:5c:3d:e5:b4:e9:cd:c8:af:b1:15:8d:83:
         35:83:df:b4:37:1b:54:40:02:2d:e6:7f:f2:a4:eb:92:cb:f5:
         1e:46:4b:4c:42:03:46:60:19:49:33:35:1d:eb:56:5e:1b:42:
         9c:3a:cf:19:af:bf:92:33:2d:2c:83:f1:9c:3f:87:4e:07:aa:
         8c:36:f7:d2:7a:fb:51:2d:8c:1b:69:06:a2:57:da:81:31:d5:
         42:24:f2:d1:f1:76:d0:52:71:6b:b5:10:49:db:7b:bf:4d:75:
         61:25:ee:c7:88:c5:ef:fa:ef:f2:6f:21:bd:d4:6c:a7:a9:5e:
         f1:44:9a:7e:bf:43:32:19:48:a1:0a:1b:6d:02:0a:74:2f:24:
         55:ce:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org