Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/eRjR9Vdhk1-VELgPf7uIQA1K2Kg.roa
File:                     eRjR9Vdhk1-VELgPf7uIQA1K2Kg.roa (raw, json)
Hash identifier:          epyGNjV6cWiDOW2HIvF6FUHOCVF/u8AJtiGxd5yOqLk=
Subject key identifier:   79:18:D1:F5:57:61:93:5F:95:10:B8:0F:7F:BB:88:40:0D:4A:D8:A8
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       0ABE160B
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/eRjR9Vdhk1-VELgPf7uIQA1K2Kg.roa
Signing time:             Mon 14 Feb 2022 18:27:25 +0000
ROA not before:           Mon 14 Feb 2022 18:27:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8781
IP address blocks:        78.100.112.0/20 maxlen: 24
                          78.100.128.0/19 maxlen: 24
                          37.211.192.0/20 maxlen: 24
                          78.100.155.0/24 maxlen: 24
                          37.211.96.0/22 maxlen: 24
                          78.100.53.0/24 maxlen: 24
                          78.100.64.0/20 maxlen: 24
                          37.211.104.0/22 maxlen: 24
                          37.211.100.0/22 maxlen: 24
                          78.100.59.0/24 maxlen: 24
                          185.96.224.0/22 maxlen: 22
                          37.211.112.0/22 maxlen: 24
                          37.211.108.0/22 maxlen: 24
                          37.211.116.0/22 maxlen: 24
                          37.211.124.0/22 maxlen: 24
                          37.211.120.0/22 maxlen: 24
                          78.100.80.0/20 maxlen: 24
                          176.202.0.0/15 maxlen: 24
                          37.211.208.0/22 maxlen: 24
                          37.211.212.0/22 maxlen: 24
                          37.211.216.0/22 maxlen: 24
                          37.211.224.0/22 maxlen: 24
                          37.208.128.0/17 maxlen: 24
                          37.211.228.0/22 maxlen: 24
                          37.211.232.0/22 maxlen: 24
                          37.211.236.0/22 maxlen: 24
                          37.211.240.0/20 maxlen: 24
                          78.100.2.0/24 maxlen: 24
                          78.100.3.0/24 maxlen: 24
                          86.62.241.0/24 maxlen: 24
                          78.100.6.0/24 maxlen: 24
                          89.211.48.0/20 maxlen: 24
                          78.100.0.0/15 maxlen: 15
                          213.130.96.0/19 maxlen: 24
                          213.130.112.0/24 maxlen: 24
                          213.130.113.0/24 maxlen: 24
                          78.100.32.0/20 maxlen: 24
                          78.100.32.0/24 maxlen: 24
                          213.130.121.0/24 maxlen: 24
                          213.130.119.0/24 maxlen: 24
                          78.100.48.0/20 maxlen: 20
                          78.100.48.0/24 maxlen: 24
                          86.62.192.0/18 maxlen: 24
                          89.211.4.0/24 maxlen: 24
                          89.211.3.0/24 maxlen: 24
                          89.211.0.0/16 maxlen: 24
                          89.211.7.0/24 maxlen: 24
                          89.211.6.0/24 maxlen: 24
                          89.211.5.0/24 maxlen: 24
                          89.211.16.0/21 maxlen: 24
                          89.211.24.0/21 maxlen: 24
                          89.211.32.0/20 maxlen: 24
                          37.210.0.0/15 maxlen: 24
                          212.77.192.0/24 maxlen: 24
                          212.77.192.0/19 maxlen: 24
                          212.77.199.0/24 maxlen: 24
                          212.77.204.0/24 maxlen: 24
                          212.77.202.0/24 maxlen: 24
                          212.77.207.0/24 maxlen: 24
                          212.77.211.0/24 maxlen: 24
                          212.77.210.0/24 maxlen: 24
                          212.77.209.0/24 maxlen: 24
                          212.77.218.0/24 maxlen: 24
                          212.77.217.0/24 maxlen: 24
                          212.77.221.0/24 maxlen: 24
                          212.77.220.0/24 maxlen: 24
                          82.148.96.0/19 maxlen: 24
                          82.148.96.0/24 maxlen: 24
                          178.152.0.0/15 maxlen: 24
                          2001:1a10::/29 maxlen: 48
                          2001:1a10:c1::/48 maxlen: 48
                          2001:1a11::/32 maxlen: 48
                          2001:1a10:1::/48 maxlen: 48
                          2001:1a10:cd::/48 maxlen: 64
                          2001:1a10:4000::/36 maxlen: 36
                          2001:1a10::/40 maxlen: 48
                          2001:1a10:100::/40 maxlen: 40
                          2001:1a10::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180229643 (0xabe160b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Feb 14 18:27:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7918d1f55761935f9510b80f7fbb88400d4ad8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:56:84:a2:c6:22:7f:22:4e:62:9c:95:72:
                    bb:cc:2d:7b:f8:49:e7:d3:57:2d:8f:5c:59:b1:b7:
                    b1:a4:49:36:2e:00:fc:d3:e4:34:ff:3a:03:cb:ea:
                    b5:48:83:67:b7:3f:34:3a:20:47:6d:b6:5f:34:44:
                    71:22:8b:47:7e:a6:a0:6d:fe:12:c0:36:75:93:f1:
                    0b:3f:41:ad:00:2a:fa:95:67:b5:81:02:1e:5d:7d:
                    89:6c:f8:4f:f3:9a:e9:47:ab:d1:0c:85:90:5c:d6:
                    67:5a:98:2a:78:ba:93:33:1f:0c:0c:08:48:b3:1e:
                    19:d7:cc:31:9f:90:f8:95:86:fa:1c:08:10:d5:6c:
                    5b:64:0f:8c:44:e4:d8:4d:55:3c:4a:3f:81:32:a2:
                    98:d2:54:11:0a:48:33:04:06:c3:31:6f:95:ef:8e:
                    c6:e3:a4:b8:57:a2:a9:6a:0f:49:07:72:f3:fd:2e:
                    ac:e9:22:67:13:45:0a:99:56:60:7e:73:1f:9f:fe:
                    35:7b:fe:fe:a8:ae:8f:6a:55:e2:d5:18:c4:4d:27:
                    85:07:7e:de:75:d8:9b:1b:b8:08:e0:be:14:82:f4:
                    db:ff:bf:67:74:69:4d:7f:8a:26:d0:be:6f:01:0a:
                    dd:10:1c:b5:51:e1:cd:d2:32:68:86:93:7e:31:05:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:18:D1:F5:57:61:93:5F:95:10:B8:0F:7F:BB:88:40:0D:4A:D8:A8
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/eRjR9Vdhk1-VELgPf7uIQA1K2Kg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.208.128.0/17
                  37.210.0.0/15
                  78.100.0.0/15
                  82.148.96.0/19
                  86.62.192.0/18
                  89.211.0.0/16
                  176.202.0.0/15
                  178.152.0.0/15
                  185.96.224.0/22
                  212.77.192.0/19
                  213.130.96.0/19
                IPv6:
                  2001:1a10::/29

    Signature Algorithm: sha256WithRSAEncryption
         59:55:5b:9a:c7:0c:4a:9b:fd:96:a9:79:76:d3:1c:85:a6:b2:
         db:c6:a4:2c:5c:06:90:5c:10:76:0c:a3:7e:72:f5:60:06:73:
         c6:a7:5e:24:eb:94:fa:87:9f:a2:dc:7a:ce:9e:08:13:32:53:
         46:f7:19:67:d4:02:94:38:76:f1:3c:67:7d:a4:7e:24:bf:e6:
         54:a4:86:0d:c2:12:04:0d:7b:32:69:02:68:79:ca:2f:75:a1:
         9e:a6:23:78:dd:ed:3c:d4:71:98:25:13:fb:de:3d:4e:32:8e:
         80:d5:86:9d:73:cc:62:28:97:f5:51:c7:61:6c:ef:36:45:1c:
         67:0b:f5:18:4c:ef:f6:af:b8:63:cc:0c:65:f7:80:48:7c:91:
         33:da:e2:71:2f:cf:c8:20:f8:5a:24:b2:98:a2:29:f0:5f:3c:
         12:bd:8c:64:8d:7b:d1:f0:32:f1:9b:ef:40:73:5d:af:e9:5e:
         db:fc:48:6e:ff:d0:34:dc:a7:10:ac:4a:a5:55:6a:89:a5:d5:
         cf:ee:68:db:86:b1:83:16:f5:ff:45:dc:86:72:8c:17:ef:79:
         f9:37:1b:65:a3:3d:f7:79:31:13:b4:5c:0b:e1:10:8c:9e:a7:
         df:46:fc:f2:59:60:64:6b:0e:07:9b:d6:a8:46:0e:07:77:21:
         ca:a8:26:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:31 2024 by rpki-client on console-fra.rpki-client.org