Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/76R5lRy6C4P4WqLoz7QmP-NJKNs.roa
File:                     76R5lRy6C4P4WqLoz7QmP-NJKNs.roa (raw, json)
Hash identifier:          jXLv328hpUtgOBuWdq52AaQvpe8zQT+UXabNm0ssyMQ=
Subject key identifier:   EF:A4:79:95:1C:BA:0B:83:F8:5A:A2:E8:CF:B4:26:3F:E3:49:28:DB
Certificate issuer:       /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial:       37F7516A
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/76R5lRy6C4P4WqLoz7QmP-NJKNs.roa
Signing time:             Sat 01 Jan 2022 11:03:38 +0000
ROA not before:           Sat 01 Jan 2022 11:03:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47253
IP address blocks:        62.16.64.0/24 maxlen: 24
                          62.16.64.0/20 maxlen: 20
                          62.16.65.0/24 maxlen: 24
                          62.16.67.0/24 maxlen: 24
                          62.16.66.0/24 maxlen: 24
                          185.6.58.0/24 maxlen: 24
                          185.6.57.0/24 maxlen: 24
                          62.16.79.0/24 maxlen: 24
                          185.6.56.0/22 maxlen: 24
                          185.6.56.0/24 maxlen: 24
                          185.6.59.0/24 maxlen: 24
                          194.58.242.0/23 maxlen: 23
                          194.58.244.0/23 maxlen: 23
                          194.58.247.0/24 maxlen: 24
                          93.184.1.0/24 maxlen: 24
                          93.184.0.0/22 maxlen: 22
                          93.184.0.0/20 maxlen: 20
                          93.184.0.0/24 maxlen: 24
                          93.184.3.0/24 maxlen: 24
                          93.184.2.0/24 maxlen: 24
                          93.184.4.0/22 maxlen: 22
                          93.184.4.0/24 maxlen: 24
                          93.184.11.0/24 maxlen: 24
                          93.184.5.0/24 maxlen: 24
                          93.184.6.0/24 maxlen: 24
                          93.184.8.0/24 maxlen: 24
                          93.184.7.0/24 maxlen: 24
                          93.184.8.0/22 maxlen: 22
                          93.184.10.0/24 maxlen: 24
                          93.184.9.0/24 maxlen: 24
                          93.184.12.0/24 maxlen: 24
                          93.184.13.0/24 maxlen: 24
                          93.184.12.0/22 maxlen: 22
                          93.184.15.0/24 maxlen: 24
                          93.184.14.0/24 maxlen: 24
                          46.18.17.0/24 maxlen: 24
                          46.18.16.0/24 maxlen: 24
                          46.18.16.0/21 maxlen: 21
                          46.18.18.0/24 maxlen: 24
                          46.18.19.0/24 maxlen: 24
                          46.18.21.0/24 maxlen: 24
                          46.18.20.0/24 maxlen: 24
                          46.18.23.0/24 maxlen: 24
                          46.18.22.0/24 maxlen: 24
                          194.58.72.0/22 maxlen: 22
                          194.58.76.0/23 maxlen: 23
                          194.58.220.0/23 maxlen: 23
                          194.58.240.0/24 maxlen: 24
                          194.58.152.0/23 maxlen: 23
                          193.124.248.0/24 maxlen: 24
                          193.124.248.0/22 maxlen: 22
                          193.124.250.0/24 maxlen: 24
                          193.124.249.0/24 maxlen: 24
                          193.124.251.0/24 maxlen: 24
                          2a02:26d0::/32 maxlen: 32
                          2a02:26d0:9::/48 maxlen: 48
                          2a02:26d0:2::/48 maxlen: 48
                          2a02:26d0:1::/48 maxlen: 48
                          2a02:26d0:a::/48 maxlen: 48
                          2a02:26d0::/48 maxlen: 48
                          2a02:26d0:4::/48 maxlen: 48
                          2a02:26d0:10::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938955114 (0x37f7516a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
        Validity
            Not Before: Jan  1 11:03:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efa479951cba0b83f85aa2e8cfb4263fe34928db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:42:a3:d2:c7:cd:cd:7c:a2:8c:d7:4a:ed:
                    05:9d:9a:d9:7f:60:05:aa:e1:2d:d3:31:88:a4:cb:
                    51:54:24:28:62:e4:88:df:c6:66:9a:4a:dd:d3:89:
                    39:b3:ac:49:3b:fc:be:af:99:b6:b3:14:6b:3c:1d:
                    16:55:c5:a6:fa:b9:38:88:3a:49:59:e4:5d:00:fd:
                    83:e5:a8:11:1c:b4:c1:d2:fa:42:69:8a:8e:ab:ec:
                    67:b5:b4:74:93:05:68:91:2f:03:73:9b:1a:34:c0:
                    12:82:b8:1f:47:17:9e:15:6f:ea:58:f0:d5:37:a9:
                    48:5c:57:4f:e4:e8:bf:fe:b3:d1:9c:ea:c7:d8:56:
                    67:10:b6:85:99:a6:6e:78:87:38:8a:d5:11:28:52:
                    c0:81:3b:79:5c:a8:cb:c5:b5:30:ae:30:0c:3e:8a:
                    e4:61:ac:70:ed:c7:90:bf:23:f4:fe:ea:19:30:c2:
                    39:f9:b5:7b:b5:47:f0:e2:3f:42:bf:05:d4:28:c2:
                    5f:21:1c:25:4a:44:fa:57:9a:75:b5:f0:ce:ad:10:
                    9b:2f:e9:b6:99:2d:54:c5:78:c2:fc:cb:51:8b:10:
                    6c:d2:11:32:0b:b7:4d:7b:b9:62:56:9d:c2:a9:a0:
                    2e:ac:91:91:17:a7:70:f7:d0:57:c6:cc:0c:e6:67:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A4:79:95:1C:BA:0B:83:F8:5A:A2:E8:CF:B4:26:3F:E3:49:28:DB
            X509v3 Authority Key Identifier:
                keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/76R5lRy6C4P4WqLoz7QmP-NJKNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.18.16.0/21
                  62.16.64.0/20
                  93.184.0.0/20
                  185.6.56.0/22
                  193.124.248.0/22
                  194.58.72.0-194.58.77.255
                  194.58.152.0/23
                  194.58.220.0/23
                  194.58.240.0/24
                  194.58.242.0-194.58.245.255
                  194.58.247.0/24
                IPv6:
                  2a02:26d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:c1:4e:3a:51:ab:c5:b8:a4:4c:57:c6:7c:48:5b:8c:15:
         d5:0a:03:59:73:bd:bd:ec:00:78:57:a5:4e:f0:38:d6:37:41:
         62:83:95:7f:4c:15:6b:77:a5:ea:6a:02:ef:22:3a:0d:f1:93:
         58:e1:52:5c:c2:fa:a6:51:97:c5:0f:f2:16:92:3c:65:ea:80:
         73:fc:2b:52:af:58:5a:9f:92:58:a9:fc:54:e2:4f:78:e1:42:
         6c:47:f5:ad:bf:41:bf:c9:96:2b:4f:4e:f1:df:1f:97:35:02:
         f4:bb:c5:05:e3:06:2e:fc:6c:d7:12:f6:2f:05:6d:31:d5:53:
         b3:1f:08:9a:ab:b7:8a:05:52:da:be:50:9c:45:3e:e9:a9:79:
         11:71:f5:a3:14:ff:4f:f3:2c:37:36:98:ef:ae:40:a5:72:d9:
         3c:e7:01:1f:38:2f:69:48:1c:23:2b:0c:3e:26:2e:58:16:f6:
         bd:dd:9b:f2:76:f6:42:f9:bb:ad:38:d6:1c:3a:3a:08:58:ae:
         9e:ce:72:47:ae:56:91:2a:55:77:f3:59:da:e9:93:d7:2c:a5:
         da:0e:9e:b9:81:66:8b:43:25:83:db:e6:28:7b:be:a4:58:a7:
         16:a5:52:af:b1:9d:9b:6e:0a:78:27:05:02:ba:9d:a9:85:17:
         52:0b:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:02 2024 by rpki-client on console-fra.rpki-client.org