Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eCUUN3Np0p6KMZzUeHY2ppSVi58.roa
File:                     eCUUN3Np0p6KMZzUeHY2ppSVi58.roa (raw, json)
Hash identifier:          kgo3RHOp8e8kJ4TZ6kvsMQGx/Ir/Y6NCt4S0kJbgWPw=
Subject key identifier:   78:25:14:37:73:69:D2:9E:8A:31:9C:D4:78:76:36:A6:94:95:8B:9F
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       018303B3DCAA1FF7D7652F265B9E5B8B22FB
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eCUUN3Np0p6KMZzUeHY2ppSVi58.roa
Signing time:             Sat 03 Sep 2022 14:14:22 +0000
ROA not before:           Sat 03 Sep 2022 14:14:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58224
IP address blocks:        212.16.78.0/24 maxlen: 24
                          212.16.80.0/24 maxlen: 24
                          212.16.79.0/24 maxlen: 24
                          212.16.85.0/24 maxlen: 24
                          212.16.89.0/24 maxlen: 24
                          212.16.87.0/24 maxlen: 24
                          212.16.86.0/24 maxlen: 24
                          212.16.94.0/24 maxlen: 24
                          212.16.93.0/24 maxlen: 24
                          212.16.92.0/24 maxlen: 24
                          185.29.220.0/22 maxlen: 24
                          212.80.0.0/24 maxlen: 24
                          212.80.11.0/24 maxlen: 24
                          212.80.10.0/24 maxlen: 24
                          212.80.9.0/24 maxlen: 24
                          212.80.8.0/24 maxlen: 24
                          212.80.7.0/24 maxlen: 24
                          212.80.6.0/24 maxlen: 24
                          212.80.24.0/24 maxlen: 24
                          212.80.23.0/24 maxlen: 24
                          212.80.22.0/24 maxlen: 24
                          212.80.21.0/24 maxlen: 24
                          212.80.20.0/24 maxlen: 24
                          212.80.19.0/24 maxlen: 24
                          212.80.18.0/24 maxlen: 24
                          212.80.29.0/24 maxlen: 24
                          185.24.148.0/22 maxlen: 24
                          46.38.136.0/22 maxlen: 24
                          46.38.144.0/21 maxlen: 24
                          46.38.143.0/24 maxlen: 24
                          46.38.142.0/24 maxlen: 24
                          46.38.141.0/24 maxlen: 24
                          46.38.152.0/22 maxlen: 24
                          46.38.158.0/24 maxlen: 24
                          46.38.157.0/24 maxlen: 24
                          46.38.156.0/24 maxlen: 24
                          46.38.132.0/22 maxlen: 24
                          46.38.130.0/24 maxlen: 24
                          46.38.128.0/24 maxlen: 24
                          109.94.165.0/24 maxlen: 24
                          109.94.164.0/23 maxlen: 23
                          185.143.74.0/23 maxlen: 23
                          185.143.72.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:03:b3:dc:aa:1f:f7:d7:65:2f:26:5b:9e:5b:8b:22:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Sep  3 14:14:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=782514377369d29e8a319cd4787636a694958b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:41:e5:b7:6f:2a:5b:b8:6b:9d:3c:da:7d:
                    cc:a4:79:db:b8:cd:b0:65:65:cf:5f:d7:ed:d9:30:
                    79:43:1c:47:21:ba:6c:dd:36:f6:27:43:4f:79:08:
                    1e:a2:20:3e:a3:1e:d7:a4:0f:e1:f9:4d:5a:2e:b4:
                    b9:fc:60:2f:12:37:9e:43:3b:48:55:75:f7:2e:a3:
                    a5:ad:01:d5:9d:31:69:6b:08:c8:d3:0b:5c:07:c8:
                    c1:da:46:2f:33:97:5c:15:d3:10:51:66:a1:11:1d:
                    94:4d:99:c4:ba:28:94:14:1c:2e:e4:e8:73:1d:63:
                    7e:ff:70:8e:a8:f9:0f:ca:3a:8b:b8:59:49:b9:33:
                    bb:d2:c8:3d:d7:52:91:66:f0:a5:4f:80:1c:7a:8c:
                    54:41:9a:62:35:ea:67:20:9b:df:37:1e:f9:cf:b4:
                    66:48:21:cd:1f:e2:bb:5a:c5:99:d7:6e:8f:4e:42:
                    ca:1a:06:27:07:b4:37:f8:f1:95:2b:b1:07:81:3c:
                    ae:f8:a3:cc:0f:05:9c:6c:ed:1a:47:ed:f1:54:0a:
                    b2:0d:63:7a:13:e0:91:e7:66:dc:36:ee:68:a7:e5:
                    91:01:ac:c2:e4:35:75:0f:24:3b:a2:38:40:35:e0:
                    c8:a4:f1:e8:41:4c:94:42:87:f2:34:dc:84:b8:3b:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:25:14:37:73:69:D2:9E:8A:31:9C:D4:78:76:36:A6:94:95:8B:9F
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eCUUN3Np0p6KMZzUeHY2ppSVi58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.38.128.0/24
                  46.38.130.0/24
                  46.38.132.0-46.38.139.255
                  46.38.141.0-46.38.158.255
                  109.94.164.0/23
                  185.24.148.0/22
                  185.29.220.0/22
                  185.143.72.0/22
                  212.16.78.0-212.16.80.255
                  212.16.85.0-212.16.87.255
                  212.16.89.0/24
                  212.16.92.0-212.16.94.255
                  212.80.0.0/24
                  212.80.6.0-212.80.11.255
                  212.80.18.0-212.80.24.255
                  212.80.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:84:3d:1f:43:39:36:a2:d2:1e:b0:19:f4:13:f5:6a:18:65:
         d6:db:d9:09:df:9d:0d:75:14:5a:1f:f2:58:30:2b:4e:e5:d5:
         35:e2:a6:91:c3:77:11:00:4b:b1:b9:9a:4d:6b:47:65:be:19:
         32:44:40:7a:b9:d6:eb:42:d4:c5:89:75:1b:fa:a9:f9:77:18:
         73:32:3f:17:e3:5e:3a:42:81:d1:27:9e:02:3a:7e:f7:2a:44:
         39:00:66:74:06:32:71:e1:46:8b:9f:cc:8e:65:92:57:0e:f1:
         e1:be:be:2e:05:aa:cf:be:71:aa:2f:b0:3b:64:84:c8:20:d3:
         e8:93:28:91:5d:ee:68:85:07:4e:5e:6b:da:94:36:02:21:a8:
         a3:fe:ab:c3:bd:3b:5b:a9:d6:08:30:22:d6:0a:97:59:a2:f9:
         b4:b8:80:eb:86:7f:f8:21:a6:5d:90:02:1e:e1:63:a9:15:0d:
         3c:82:4c:d8:3a:06:8e:b0:61:67:b7:32:7d:d5:6e:80:ec:36:
         e6:5b:07:c3:31:39:44:53:6a:ff:93:63:26:ec:ae:4d:cd:6c:
         ef:45:e8:e7:8f:2d:90:56:80:7f:09:a6:1a:82:26:f4:b4:da:
         59:b2:e9:5d:4a:76:1b:fa:92:b0:50:d7:7f:0d:f6:59:48:19:
         b2:77:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org