Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/LOCzJ2_ArcN3Tdv2UgrUdlUDXJE.roa
File:                     LOCzJ2_ArcN3Tdv2UgrUdlUDXJE.roa (raw, json)
Hash identifier:          Qtk9Hkl4V6fisYKuZt1LF4cJct4m/QgM4BB5ZAQmDKE=
Subject key identifier:   2C:E0:B3:27:6F:C0:AD:C3:77:4D:DB:F6:52:0A:D4:76:55:03:5C:91
Certificate issuer:       /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial:       0185069396B5D1AAE8713B83CD68002C0785
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/LOCzJ2_ArcN3Tdv2UgrUdlUDXJE.roa
Signing time:             Mon 12 Dec 2022 13:43:33 +0000
ROA not before:           Mon 12 Dec 2022 13:43:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39122
IP address blocks:        185.97.236.0/22 maxlen: 22
                          81.17.240.0/20 maxlen: 24
                          194.36.58.0/23 maxlen: 23
                          91.197.234.0/23 maxlen: 23
                          194.36.64.0/23 maxlen: 23
                          176.52.222.0/23 maxlen: 23
                          185.152.72.0/22 maxlen: 22
                          185.209.164.0/22 maxlen: 22
                          200.69.8.0/21 maxlen: 21
                          185.206.192.0/22 maxlen: 22
                          78.153.192.0/19 maxlen: 24
                          185.2.64.0/22 maxlen: 22
                          46.22.128.0/20 maxlen: 20
                          2a01:a8::/32 maxlen: 32
                          2a01:ac::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:06:93:96:b5:d1:aa:e8:71:3b:83:cd:68:00:2c:07:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
        Validity
            Not Before: Dec 12 13:43:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ce0b3276fc0adc3774ddbf6520ad47655035c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:61:1e:c7:07:46:ce:e8:29:0c:9f:0c:a4:
                    58:00:f4:3d:e2:11:3e:0f:49:66:55:ad:43:13:b3:
                    3f:aa:ae:b0:54:d5:8e:f1:89:5c:ca:75:be:79:e2:
                    f9:0a:3e:54:72:18:3c:23:1a:6c:e9:4a:3b:71:2a:
                    22:14:6f:e5:42:f4:56:d5:4d:c6:f4:7b:4c:4b:c2:
                    ed:13:fb:38:41:b9:24:e2:b7:d8:e8:f5:a9:9c:46:
                    49:d2:ac:ea:a0:58:27:49:79:ca:65:fb:d9:4a:b4:
                    ef:f5:7b:d7:7c:f2:8d:3e:f0:c4:d9:18:19:1a:bd:
                    75:79:84:11:71:bd:9b:5d:61:7f:6e:4d:b8:7c:a7:
                    70:16:17:a4:da:a0:e3:52:43:18:d2:6a:fa:6e:35:
                    82:82:e8:a3:f9:61:81:a9:8d:7e:fb:eb:9f:59:b9:
                    5b:a8:fa:54:1f:00:1a:37:8e:5e:16:90:17:fe:a4:
                    5f:61:51:1e:1c:27:c4:d5:66:79:03:88:c2:9d:f9:
                    97:39:30:b6:81:72:8f:05:69:5f:2e:4c:67:7e:14:
                    d7:62:77:67:a3:67:3f:24:43:69:22:9e:f6:59:b5:
                    fb:56:8b:fb:75:55:45:01:95:38:1e:c4:d4:31:1f:
                    22:9a:e7:b8:86:99:e0:80:bc:ad:b9:0b:8c:38:72:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E0:B3:27:6F:C0:AD:C3:77:4D:DB:F6:52:0A:D4:76:55:03:5C:91
            X509v3 Authority Key Identifier:
                keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/LOCzJ2_ArcN3Tdv2UgrUdlUDXJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.22.128.0/20
                  78.153.192.0/19
                  81.17.240.0/20
                  91.197.234.0/23
                  176.52.222.0/23
                  185.2.64.0/22
                  185.97.236.0/22
                  185.152.72.0/22
                  185.206.192.0/22
                  185.209.164.0/22
                  194.36.58.0/23
                  194.36.64.0/23
                  200.69.8.0/21
                IPv6:
                  2a01:a8::/32
                  2a01:ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:35:f8:9a:aa:fa:53:8f:b7:30:5b:07:4e:17:0e:d7:47:05:
         29:88:9c:9c:aa:f3:fc:55:9f:ed:69:b8:e8:a9:29:7d:84:87:
         2a:05:b4:10:e3:56:6a:c0:fa:b9:30:fa:70:6d:95:b3:d6:58:
         6a:f8:0c:1a:e3:8e:57:37:97:4d:14:9a:11:da:f3:ed:13:ad:
         6e:8d:bb:3c:72:18:cd:32:b1:0f:82:77:ad:74:2e:b7:a8:ec:
         17:60:d8:26:df:7c:09:2e:1c:bf:3b:95:92:e8:e8:1b:f9:fa:
         35:e1:98:a9:10:a8:df:f1:31:2f:b1:4c:4a:ce:da:8a:7f:ed:
         73:e3:48:93:3b:c1:f2:8f:e3:15:96:b9:fe:3c:da:48:b9:72:
         b0:51:3d:3b:e7:1c:59:d8:83:ea:1d:6e:8c:67:ea:a5:d8:b5:
         11:70:48:35:7f:40:9d:9f:82:60:e3:8e:9a:21:60:10:27:7d:
         d8:0c:b7:4b:11:fe:e6:e3:a8:65:43:0c:60:63:53:eb:a5:b5:
         e8:f6:19:30:1d:af:f4:38:1f:0f:48:c9:7f:5a:23:63:d9:e0:
         6e:a0:58:ac:ba:dd:38:5d:f9:f7:92:de:fc:67:0c:a7:b2:ad:
         5e:d9:5c:2f:55:cd:de:e2:34:3c:9e:6c:9a:a4:27:4c:13:74:
         01:a2:c1:68
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAYUGk5a10arocTuDzWgALAeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTZhZWE2YmFiNzljNDhmNWRkZWU0YTQ2YmY0YWI2NGQ4
NjMxNjAwHhcNMjIxMjEyMTM0MzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2UwYjMyNzZmYzBhZGMzNzc0ZGRiZjY1MjBhZDQ3NjU1MDM1YzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVRhHscHRs7oKQyfDKRYAPQ94hE+
D0lmVa1DE7M/qq6wVNWO8YlcynW+eeL5Cj5Uchg8Ixps6Uo7cSoiFG/lQvRW1U3G
9HtMS8LtE/s4Qbkk4rfY6PWpnEZJ0qzqoFgnSXnKZfvZSrTv9XvXfPKNPvDE2RgZ
Gr11eYQRcb2bXWF/bk24fKdwFhek2qDjUkMY0mr6bjWCguij+WGBqY1+++ufWblb
qPpUHwAaN45eFpAX/qRfYVEeHCfE1WZ5A4jCnfmXOTC2gXKPBWlfLkxnfhTXYndn
o2c/JENpIp72WbX7Vov7dVVFAZU4HsTUMR8imue4hpnggLytuQuMOHKiRwIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFCzgsydvwK3Dd03b9lIK1HZVA1yRMB8GA1UdIwQY
MBaAFGaWrqa6t5xI9d3uSka/SrZNhjFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2Qt
ZjAxOThjNmMyNDc0LzEvTE9DekoyX0FyY04zVGR2MlVnclVkbFVEWEpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2QtZjAxOThjNmMyNDc0
LzEvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBUBAIAATBOAwQELhaAAwQF
TpnAAwQEURHwAwQBW8XqAwQBsDTeAwQCuQJAAwQCuWHsAwQCuZhIAwQCuc7AAwQC
udGkAwQBwiQ6AwQBwiRAAwQDyEUIMBQEAgACMA4DBQAqAQCoAwUAKgEArDANBgkq
hkiG9w0BAQsFAAOCAQEASjX4mqr6U4+3MFsHThcO10cFKYicnKrz/FWf7Wm46Kkp
fYSHKgW0EONWasD6uTD6cG2Vs9ZYavgMGuOOVzeXTRSaEdrz7ROtbo27PHIYzTKx
D4J3rXQut6jsF2DYJt98CS4cvzuVkujoG/n6NeGYqRCo3/ExL7FMSs7ain/tc+NI
kzvB8o/jFZa5/jzaSLlysFE9O+ccWdiD6h1ujGfqpdi1EXBINX9AnZ+CYOOOmiFg
ECd92Ay3SxH+5uOoZUMMYGNT66W16PYZMB2v9DgfD0jJf1ojY9ngbqBYrLrdOF35
95Le/GcMp7KtXtlcL1XN3uI0PJ5smqQnTBN0AaLBaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:36 2024 by rpki-client on console-ams.rpki-client.org