Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/DW_Fv5hw9BSXkVqjSo4BigfCSH8.roa
File:                     DW_Fv5hw9BSXkVqjSo4BigfCSH8.roa (raw, json)
Hash identifier:          HJ7AzNBQTgJwY1oJ6P+Z73hi1vBCyk4MOiesFzZzAJY=
Subject key identifier:   0D:6F:C5:BF:98:70:F4:14:97:91:5A:A3:4A:8E:01:8A:07:C2:48:7F
Certificate issuer:       /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial:       01852A6786F0CC22F7213557CDA906C674DF
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/DW_Fv5hw9BSXkVqjSo4BigfCSH8.roa
Signing time:             Mon 19 Dec 2022 12:41:45 +0000
ROA not before:           Mon 19 Dec 2022 12:41:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206276
IP address blocks:        212.63.112.0/22 maxlen: 22
                          185.179.184.0/22 maxlen: 22
                          194.49.56.0/22 maxlen: 22
                          45.8.12.0/22 maxlen: 22
                          185.190.100.0/22 maxlen: 22
                          78.142.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2a:67:86:f0:cc:22:f7:21:35:57:cd:a9:06:c6:74:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
        Validity
            Not Before: Dec 19 12:41:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d6fc5bf9870f41497915aa34a8e018a07c2487f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:4e:36:07:9d:ed:8f:c3:3b:2c:0b:61:0b:
                    40:a3:e0:41:3b:b3:64:c8:a8:ba:a7:fe:f2:67:11:
                    6f:23:7f:5e:86:65:d2:20:71:65:57:b2:ca:e2:90:
                    7d:74:d4:58:37:7e:b8:34:8d:b4:b7:2c:c1:f6:c2:
                    44:53:45:08:22:f8:b8:5d:4a:be:e8:7f:02:60:42:
                    b9:f1:0e:36:0e:52:7b:05:f4:74:51:63:53:ef:22:
                    92:91:c0:15:e4:5d:2d:40:b4:1a:85:62:e1:1e:e3:
                    7d:d2:cf:54:99:85:8e:75:06:53:64:dc:69:76:7d:
                    33:6b:e1:e0:dd:db:cb:95:f1:93:dd:e3:d3:12:67:
                    de:8a:ed:b3:25:e9:8f:58:8d:ce:f6:c4:62:88:37:
                    ac:36:0a:ab:c2:08:17:54:55:c7:13:dc:c6:12:10:
                    66:08:c5:e9:70:41:d5:fb:ad:e0:ce:08:ee:a0:ba:
                    d7:25:31:64:46:1d:f0:66:e0:b2:1a:3d:37:dc:e0:
                    eb:f4:a7:4b:ce:e9:73:f6:cd:db:aa:2a:fb:58:d4:
                    fb:f4:0b:a6:ec:a2:df:ae:4d:31:eb:cf:9c:4f:d4:
                    80:c3:66:b5:9c:3b:97:4b:63:e3:5a:8e:43:cf:6e:
                    fc:ed:3a:43:4d:e6:6f:78:b2:dd:97:46:30:e0:01:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6F:C5:BF:98:70:F4:14:97:91:5A:A3:4A:8E:01:8A:07:C2:48:7F
            X509v3 Authority Key Identifier:
                keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/DW_Fv5hw9BSXkVqjSo4BigfCSH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.12.0/22
                  78.142.212.0/22
                  185.179.184.0/22
                  185.190.100.0/22
                  194.49.56.0/22
                  212.63.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:0d:b6:50:d3:c7:63:93:12:4a:99:34:67:7c:8c:a8:4e:40:
         de:a5:5c:a6:a0:40:fd:d7:8a:fd:38:57:30:a5:8e:1e:8e:f0:
         2d:29:8f:53:e7:58:e1:65:de:a0:f9:17:df:72:8f:15:80:9e:
         84:05:22:d5:77:54:1c:56:f2:45:24:67:fd:e3:61:43:d9:15:
         5e:e0:37:66:1d:58:e5:63:28:11:83:f8:45:7c:93:41:7f:51:
         5c:b5:03:4c:22:0b:4e:0b:89:93:cf:30:dc:a6:5c:cb:a2:25:
         0e:f1:61:b5:b1:2e:04:dd:85:a2:32:92:be:a9:d0:67:58:77:
         d7:e2:76:89:95:73:11:26:e4:c7:c0:51:6d:c4:52:e0:88:bd:
         4f:f9:21:8e:92:f0:54:e7:e9:72:96:64:bb:a7:6f:65:77:cf:
         f7:17:1c:1b:69:d1:b4:2e:f6:c3:b8:b6:ff:1d:fc:47:37:af:
         6a:e6:42:c7:8e:80:f6:26:69:87:12:47:5f:34:71:2d:d5:d8:
         e3:08:db:5b:d2:b3:be:b8:52:ad:41:f8:f9:99:b7:4b:13:16:
         43:93:62:0d:bb:fd:a2:89:54:0d:b9:03:d1:74:ee:7f:ea:7c:
         ca:ae:88:88:5e:1a:d0:30:08:93:47:53:fb:46:28:02:b8:52:
         d7:9c:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:32 2024 by rpki-client on console-ams.rpki-client.org