Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/H-61fiHDvqMvxXZ8hu0zaYCT1Yk.roa
File:                     H-61fiHDvqMvxXZ8hu0zaYCT1Yk.roa (raw, json)
Hash identifier:          IINeiN4ZTI0Q1kvArb+WwS8wsaoLLKTT0Lg/f+RIYuw=
Subject key identifier:   1F:EE:B5:7E:21:C3:BE:A3:2F:C5:76:7C:86:ED:33:69:80:93:D5:89
Certificate issuer:       /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial:       08163A1A
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/H-61fiHDvqMvxXZ8hu0zaYCT1Yk.roa
Signing time:             Sat 01 Jan 2022 05:00:17 +0000
ROA not before:           Sat 01 Jan 2022 05:00:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44565
IP address blocks:        188.124.4.0/24 maxlen: 24
                          188.124.1.0/24 maxlen: 24
                          188.124.0.0/24 maxlen: 24
                          188.124.3.0/24 maxlen: 24
                          188.124.2.0/24 maxlen: 24
                          188.124.11.0/24 maxlen: 24
                          188.124.6.0/24 maxlen: 24
                          188.124.5.0/24 maxlen: 24
                          188.124.8.0/24 maxlen: 24
                          188.124.7.0/24 maxlen: 24
                          188.124.10.0/24 maxlen: 24
                          188.124.9.0/24 maxlen: 24
                          188.124.13.0/24 maxlen: 24
                          188.124.12.0/24 maxlen: 24
                          188.124.15.0/24 maxlen: 24
                          188.124.14.0/24 maxlen: 24
                          188.124.17.0/24 maxlen: 24
                          188.124.16.0/24 maxlen: 24
                          188.124.18.0/24 maxlen: 24
                          188.124.20.0/24 maxlen: 24
                          188.124.19.0/24 maxlen: 24
                          188.124.22.0/24 maxlen: 24
                          188.124.21.0/24 maxlen: 24
                          188.124.24.0/24 maxlen: 24
                          188.124.25.0/24 maxlen: 24
                          188.124.27.0/24 maxlen: 24
                          188.124.26.0/24 maxlen: 24
                          188.124.29.0/24 maxlen: 24
                          188.124.28.0/24 maxlen: 24
                          188.124.30.0/24 maxlen: 24
                          79.171.17.0/24 maxlen: 24
                          79.171.16.0/24 maxlen: 24
                          79.171.19.0/24 maxlen: 24
                          79.171.18.0/24 maxlen: 24
                          79.171.21.0/24 maxlen: 24
                          79.171.20.0/24 maxlen: 24
                          93.186.112.0/24 maxlen: 24
                          93.186.113.0/24 maxlen: 24
                          93.186.115.0/24 maxlen: 24
                          93.186.114.0/24 maxlen: 24
                          93.186.117.0/24 maxlen: 24
                          93.186.116.0/24 maxlen: 24
                          93.186.118.0/24 maxlen: 24
                          93.186.120.0/24 maxlen: 24
                          93.186.119.0/24 maxlen: 24
                          93.186.122.0/24 maxlen: 24
                          93.186.121.0/24 maxlen: 24
                          93.186.124.0/24 maxlen: 24
                          93.186.123.0/24 maxlen: 24
                          93.186.127.0/24 maxlen: 24
                          93.186.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135674394 (0x8163a1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
        Validity
            Not Before: Jan  1 05:00:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1feeb57e21c3bea32fc5767c86ed33698093d589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:12:45:85:19:a6:23:07:27:df:d8:2a:d8:
                    10:17:49:08:48:56:2c:0f:6f:c8:8e:77:8d:4f:b0:
                    3a:c1:27:0a:be:4d:2c:e0:06:89:9a:29:9d:c7:b7:
                    59:88:a7:52:40:81:4f:b6:cb:69:80:0d:eb:75:63:
                    eb:ac:28:b6:0e:63:9a:74:7c:09:7a:8d:82:c8:3e:
                    2f:c6:bc:26:f8:5b:69:19:bc:bc:2e:bf:55:5e:d5:
                    5d:3f:71:d8:60:b9:90:8d:11:08:ee:f5:45:76:91:
                    ec:d4:60:32:01:a7:93:c5:86:10:c8:31:a5:e8:0f:
                    18:36:20:3c:d4:13:aa:3f:7e:d4:9d:11:53:7c:f0:
                    eb:64:25:b6:3c:24:14:c3:a6:cd:3e:68:58:1d:45:
                    08:4d:62:bc:00:23:3a:cc:1f:89:5e:c1:e8:91:25:
                    9c:8a:20:89:d7:ba:3f:4f:55:df:5a:98:cd:ea:0b:
                    90:7d:2a:90:c9:fc:db:75:78:d1:46:f8:d8:ed:9e:
                    2d:86:5f:8e:03:f0:22:63:3b:16:fc:f0:1e:f3:a1:
                    54:7b:3c:53:19:64:7a:93:5c:a4:15:43:1c:cc:cf:
                    01:49:6f:7e:b3:40:63:4d:f9:4f:3e:1a:57:6f:95:
                    a8:2b:1b:20:70:9a:16:7e:fd:65:0c:b2:33:df:32:
                    62:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EE:B5:7E:21:C3:BE:A3:2F:C5:76:7C:86:ED:33:69:80:93:D5:89
            X509v3 Authority Key Identifier:
                keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/H-61fiHDvqMvxXZ8hu0zaYCT1Yk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.171.16.0-79.171.21.255
                  93.186.112.0-93.186.124.255
                  93.186.126.0/23
                  188.124.0.0-188.124.22.255
                  188.124.24.0-188.124.30.255

    Signature Algorithm: sha256WithRSAEncryption
         bb:b6:ba:84:d2:d8:a5:d8:c9:e5:9d:d8:24:36:e5:c4:a1:49:
         8a:dd:80:64:27:90:ed:50:1f:40:9e:be:06:c1:4c:45:88:f2:
         a5:19:8a:aa:15:35:f9:73:0e:60:30:f9:92:c0:f7:e6:a5:4d:
         f8:31:7c:d8:14:df:f1:6d:48:23:c9:56:da:cf:f2:c1:41:e8:
         cd:93:da:f9:78:11:37:0c:f2:bc:d9:67:38:de:88:6d:ce:db:
         5d:6f:9c:7d:47:40:5f:60:11:ba:29:7a:dc:27:fa:d0:9c:a2:
         d6:56:2a:25:b7:11:89:5d:6b:30:b0:00:96:9e:5b:51:db:e2:
         46:ac:aa:f1:9b:0a:7a:e4:aa:49:e4:17:3b:c0:df:da:52:da:
         50:36:63:01:ff:13:3c:8f:0e:fd:ea:84:04:4f:e9:c4:f8:f2:
         83:5c:73:01:9f:5a:9c:96:64:36:9f:71:be:e1:36:a3:15:fc:
         6e:5a:fb:44:f9:60:9e:d3:e4:5c:77:8e:ee:c9:27:56:99:f3:
         ca:21:b9:ea:bd:d5:0c:19:c2:9e:30:4e:bd:7c:3d:e6:63:65:
         6a:d5:6c:62:4c:33:2c:68:33:66:2e:8e:e1:ea:b6:5b:01:11:
         8f:b1:b6:fa:1d:76:08:49:38:f2:e0:d6:55:be:88:43:ef:c1:
         2e:bf:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:07 2024 by rpki-client on console-fra.rpki-client.org