Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/7dRfkmSyzS3jM4iUUh-JSlpl1yE.roa
File:                     7dRfkmSyzS3jM4iUUh-JSlpl1yE.roa (raw, json)
Hash identifier:          Zr67NXzpbStjMj3jN5+5sVwPolSVvi3PhyCUtBoBebY=
Subject key identifier:   ED:D4:5F:92:64:B2:CD:2D:E3:33:88:94:52:1F:89:4A:5A:65:D7:21
Certificate issuer:       /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial:       04F71B80
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/7dRfkmSyzS3jM4iUUh-JSlpl1yE.roa
Signing time:             Sat 01 Jan 2022 11:59:23 +0000
ROA not before:           Sat 01 Jan 2022 11:59:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60404
IP address blocks:        5.255.96.0/19 maxlen: 19
                          192.76.163.0/24 maxlen: 24
                          192.76.160.0/24 maxlen: 24
                          150.129.8.0/22 maxlen: 22
                          103.251.164.0/22 maxlen: 22
                          192.76.150.0/24 maxlen: 24
                          192.76.153.0/24 maxlen: 24
                          185.31.172.0/22 maxlen: 22
                          5.2.64.0/20 maxlen: 20
                          5.2.67.0/24 maxlen: 24
                          5.2.70.0/24 maxlen: 24
                          2a01:6340::/29 maxlen: 29
                          2a0f:6bc0::/29 maxlen: 29
                          2a04:52c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83303296 (0x4f71b80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
        Validity
            Not Before: Jan  1 11:59:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edd45f9264b2cd2de3338894521f894a5a65d721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:eb:50:1c:b9:5e:2c:7f:ed:3d:31:5d:19:
                    2d:c8:9c:cc:b4:0c:15:1f:c0:bb:04:cb:b8:bf:8f:
                    ef:2e:11:b3:e6:2d:bc:40:cf:8c:cf:4c:42:86:8d:
                    1e:4e:10:99:e9:a9:f4:22:fa:d0:4c:62:16:aa:6f:
                    94:69:b9:c2:7c:6a:33:88:a3:d2:fe:f3:18:66:f7:
                    5e:ab:cf:07:e9:cd:6d:c5:a7:a5:7c:64:f4:44:f6:
                    a3:80:60:ec:a3:c1:ed:57:56:05:ca:39:d7:fd:3b:
                    4b:b7:53:2e:55:b1:f8:84:4b:2f:06:a0:30:7a:28:
                    16:7f:e2:10:45:79:8d:38:ae:2f:bf:db:b6:9e:55:
                    4f:1f:41:a2:58:c0:32:ab:d3:c2:84:a6:47:95:9f:
                    70:f7:3f:cb:43:ab:3e:4a:e3:76:01:cd:87:cd:6b:
                    91:9e:ec:1b:60:4a:27:0e:67:8d:2e:af:60:70:21:
                    dd:10:ec:d7:a4:07:b5:52:e4:7e:9e:cb:f3:58:3e:
                    d8:d1:6f:58:f6:40:d7:48:47:55:39:ac:93:84:a6:
                    86:83:19:7f:12:c1:18:c4:c9:49:1d:67:4c:e4:ae:
                    0b:cd:23:81:fc:45:42:f2:fa:38:a2:ab:83:71:70:
                    b2:ae:10:5c:8a:c4:72:c1:2c:f6:34:21:af:d8:39:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:5F:92:64:B2:CD:2D:E3:33:88:94:52:1F:89:4A:5A:65:D7:21
            X509v3 Authority Key Identifier:
                keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/7dRfkmSyzS3jM4iUUh-JSlpl1yE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.2.64.0/20
                  5.255.96.0/19
                  103.251.164.0/22
                  150.129.8.0/22
                  185.31.172.0/22
                  192.76.150.0/24
                  192.76.153.0/24
                  192.76.160.0/24
                  192.76.163.0/24
                IPv6:
                  2a01:6340::/29
                  2a04:52c0::/32
                  2a0f:6bc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         c1:75:6f:ee:85:9f:bd:a8:31:8d:07:17:bc:9f:a3:54:10:b4:
         3e:7a:82:ba:c8:51:44:46:70:3b:a0:0d:66:bc:06:b0:8e:59:
         f5:45:0f:30:6e:cf:83:3f:18:1e:d8:37:ad:04:1c:cc:9f:cb:
         b4:16:a8:d5:44:d1:88:26:63:75:20:ff:05:e9:cf:dd:36:c8:
         1c:07:e2:b8:fe:e6:97:08:92:7e:88:9d:e8:94:b0:98:21:6e:
         3f:05:62:e6:c4:b0:1f:98:ba:8f:b9:f2:02:85:9c:5a:ab:ab:
         c9:85:9b:67:12:aa:31:29:4f:10:6c:96:bc:6e:f2:99:2c:3c:
         62:a9:cf:ae:e0:03:34:6a:1f:4d:b2:0f:88:4c:a0:83:25:8a:
         6e:69:ed:87:8d:a8:6c:28:14:6e:ae:c1:c7:57:71:c7:bd:91:
         55:c2:ea:21:57:9a:12:1d:ad:cd:74:47:be:04:7b:f9:59:8b:
         0a:b2:f9:05:38:0c:32:53:ff:b2:69:ed:88:4b:8a:ec:2a:0f:
         6e:7e:f2:0e:46:53:d5:de:f3:bd:4d:48:d4:f8:35:c4:de:f1:
         f5:9f:b0:7d:46:b8:d1:c4:30:02:99:b5:e4:7c:9f:bd:96:88:
         82:c6:6c:41:e2:c1:9d:8a:69:68:4f:9d:6f:9a:eb:89:fa:c5:
         5c:70:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:42 2024 by rpki-client on console-fra.rpki-client.org