Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/d8-pDVHl021V_6TAQKZn9fI5EEI.roa
File:                     d8-pDVHl021V_6TAQKZn9fI5EEI.roa (raw, json)
Hash identifier:          O3dKX3jfPZBdmrrRdYdbBg7KMfCw7WhPCWLJKATRw/Y=
Subject key identifier:   77:CF:A9:0D:51:E5:D3:6D:55:FF:A4:C0:40:A6:67:F5:F2:39:10:42
Certificate issuer:       /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial:       0AB0D6D5
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/d8-pDVHl021V_6TAQKZn9fI5EEI.roa
Signing time:             Sat 01 Jan 2022 16:10:30 +0000
ROA not before:           Sat 01 Jan 2022 16:10:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13138
IP address blocks:        213.148.64.0/23 maxlen: 23
                          213.148.64.0/24 maxlen: 24
                          213.148.64.0/20 maxlen: 20
                          213.148.64.0/19 maxlen: 19
                          213.148.64.0/22 maxlen: 22
                          213.148.64.0/21 maxlen: 21
                          213.148.65.0/24 maxlen: 24
                          213.148.68.0/22 maxlen: 22
                          213.148.66.0/24 maxlen: 24
                          213.148.66.0/23 maxlen: 23
                          213.148.67.0/24 maxlen: 24
                          213.148.68.0/24 maxlen: 24
                          213.148.68.0/23 maxlen: 23
                          213.148.69.0/24 maxlen: 24
                          213.148.70.0/24 maxlen: 24
                          213.148.70.0/23 maxlen: 23
                          213.148.71.0/24 maxlen: 24
                          213.148.77.0/24 maxlen: 24
                          213.148.72.0/22 maxlen: 22
                          213.148.73.0/24 maxlen: 24
                          213.148.72.0/21 maxlen: 21
                          213.148.72.0/23 maxlen: 23
                          213.148.74.0/23 maxlen: 23
                          213.148.74.0/24 maxlen: 24
                          213.148.75.0/24 maxlen: 24
                          213.148.72.0/24 maxlen: 24
                          213.148.76.0/24 maxlen: 24
                          213.148.76.0/23 maxlen: 23
                          213.148.76.0/22 maxlen: 22
                          213.148.78.0/24 maxlen: 24
                          213.148.78.0/23 maxlen: 23
                          213.148.80.0/23 maxlen: 23
                          213.148.80.0/21 maxlen: 21
                          213.148.84.0/22 maxlen: 22
                          213.148.84.0/24 maxlen: 24
                          213.148.84.0/23 maxlen: 23
                          213.148.85.0/24 maxlen: 24
                          213.148.80.0/20 maxlen: 20
                          213.148.80.0/22 maxlen: 22
                          213.148.80.0/24 maxlen: 24
                          213.148.81.0/24 maxlen: 24
                          213.148.79.0/24 maxlen: 24
                          213.148.82.0/24 maxlen: 24
                          213.148.83.0/24 maxlen: 24
                          213.148.82.0/23 maxlen: 23
                          213.148.86.0/23 maxlen: 23
                          213.148.87.0/24 maxlen: 24
                          213.148.88.0/24 maxlen: 24
                          213.148.88.0/23 maxlen: 23
                          213.148.88.0/22 maxlen: 22
                          213.148.89.0/24 maxlen: 24
                          213.148.90.0/23 maxlen: 23
                          213.148.90.0/24 maxlen: 24
                          213.148.91.0/24 maxlen: 24
                          213.148.88.0/21 maxlen: 21
                          213.148.86.0/24 maxlen: 24
                          213.148.92.0/24 maxlen: 24
                          213.148.92.0/23 maxlen: 23
                          213.148.92.0/22 maxlen: 22
                          213.148.93.0/24 maxlen: 24
                          213.148.94.0/23 maxlen: 23
                          213.148.94.0/24 maxlen: 24
                          213.148.95.0/24 maxlen: 24
                          2a0d:5580::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179361493 (0xab0d6d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
        Validity
            Not Before: Jan  1 16:10:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77cfa90d51e5d36d55ffa4c040a667f5f2391042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:cb:f7:de:f3:b8:73:8d:86:d2:84:cb:eb:
                    54:63:d9:74:59:39:e3:98:dd:1a:d0:33:00:19:2b:
                    66:ca:08:a4:68:f4:1a:4f:ec:61:e0:d7:17:c8:b4:
                    8c:90:71:b2:a5:61:83:da:3b:6a:81:9a:be:4b:00:
                    84:21:f7:d2:43:f0:f6:76:c8:ba:ce:aa:01:bd:f5:
                    45:67:70:5d:4f:10:40:c1:58:fa:a0:81:58:fe:af:
                    f0:45:a6:3f:8f:83:7f:26:36:db:93:a2:72:41:8e:
                    6c:b0:1c:f5:75:40:c6:08:b6:4d:f2:26:c1:5f:16:
                    ba:89:c7:28:60:3b:6e:03:5c:07:8a:87:b4:10:52:
                    cd:38:c6:08:de:9d:cb:37:67:0e:77:3b:32:b3:0a:
                    d0:30:b4:e7:42:59:fa:36:64:cd:87:3f:8d:69:d8:
                    e8:c2:f1:58:c6:ac:b2:02:a1:b4:d3:89:35:6c:e6:
                    e1:6d:57:05:0d:30:e4:24:49:2c:94:6d:7b:c4:1e:
                    da:e5:b0:5d:f5:77:0c:7c:1c:1f:1e:ea:93:d1:45:
                    47:ae:3f:f4:a3:28:af:c1:91:40:e8:55:6b:70:09:
                    93:af:a7:10:35:3f:3b:a7:b6:6c:a6:7c:19:01:d3:
                    b7:73:2d:e5:07:58:02:ce:52:a8:1c:73:6a:90:7d:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CF:A9:0D:51:E5:D3:6D:55:FF:A4:C0:40:A6:67:F5:F2:39:10:42
            X509v3 Authority Key Identifier:
                keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/d8-pDVHl021V_6TAQKZn9fI5EEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.148.64.0/19
                IPv6:
                  2a0d:5580::/29

    Signature Algorithm: sha256WithRSAEncryption
         9d:6a:88:58:42:38:04:8a:55:a5:9c:36:53:6e:57:29:09:68:
         30:24:23:12:45:3a:83:50:62:da:58:8d:23:19:2b:90:af:a1:
         d7:70:35:c9:79:13:85:5f:18:5a:70:f8:ee:7f:7f:d5:81:15:
         87:cb:ed:17:84:97:26:93:32:40:b2:d7:ba:43:31:c4:31:a1:
         bf:9d:b3:48:84:c4:92:ef:25:9c:7b:ac:d2:f4:2f:ec:20:44:
         f7:b3:e2:a8:a2:04:03:f8:f6:2c:85:0a:8c:26:52:d0:58:98:
         a2:ff:20:17:e1:6b:7f:ff:17:1b:73:f2:77:ce:f0:7a:cb:22:
         9f:fe:a4:e1:f3:3e:5c:88:f3:62:7b:86:e0:f1:b0:d3:0a:49:
         c9:46:0a:36:df:16:f9:1a:37:3a:60:b1:bc:fb:a0:62:08:cb:
         4f:bb:87:b7:3e:03:08:58:d9:56:54:67:03:86:b7:68:a6:e8:
         33:1d:b7:23:39:82:0c:5e:b2:ef:4d:26:0c:6f:ca:c4:50:f5:
         7e:cb:36:07:cc:f9:54:50:dc:70:b7:64:c0:40:f8:fa:9c:dd:
         40:0b:0b:26:24:4f:27:c7:06:63:dc:a1:52:f0:49:04:58:a5:
         50:35:78:c6:6f:62:51:4a:56:70:ea:3b:2a:2f:8b:a0:5f:11:
         99:03:2c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:00 2024 by rpki-client on console-fra.rpki-client.org