Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/ZSGku2fpbqIhDgMfpDaL_ESjfGQ.roa
File:                     ZSGku2fpbqIhDgMfpDaL_ESjfGQ.roa (raw, json)
Hash identifier:          l88iNRfEx2gGTDV9vV4QAb6tlDiQIi4OirWQgQOlQuE=
Subject key identifier:   65:21:A4:BB:67:E9:6E:A2:21:0E:03:1F:A4:36:8B:FC:44:A3:7C:64
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       0182A69019A6353E0DBBCFB4D9C81466911A
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/ZSGku2fpbqIhDgMfpDaL_ESjfGQ.roa
Signing time:             Tue 16 Aug 2022 12:10:37 +0000
ROA not before:           Tue 16 Aug 2022 12:10:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202723
IP address blocks:        185.112.59.0/24 maxlen: 24
                          185.177.237.0/24 maxlen: 24
                          185.177.238.0/24 maxlen: 24
                          185.177.239.0/24 maxlen: 24
                          185.76.240.0/24 maxlen: 24
                          185.76.241.0/24 maxlen: 24
                          185.76.242.0/24 maxlen: 24
                          185.76.243.0/24 maxlen: 24
                          185.58.114.0/24 maxlen: 24
                          185.100.157.0/24 maxlen: 24
                          185.100.159.0/24 maxlen: 24
                          185.100.156.0/24 maxlen: 24
                          185.24.109.0/24 maxlen: 24
                          185.95.230.0/24 maxlen: 24
                          185.95.231.0/24 maxlen: 24
                          185.111.24.0/24 maxlen: 24
                          185.111.25.0/24 maxlen: 24
                          185.73.182.0/24 maxlen: 24
                          185.73.183.0/24 maxlen: 24
                          185.97.79.0/24 maxlen: 24
                          185.75.132.0/24 maxlen: 24
                          185.102.114.0/24 maxlen: 24
                          185.102.115.0/24 maxlen: 24
                          185.75.135.0/24 maxlen: 24
                          185.75.133.0/24 maxlen: 24
                          185.75.134.0/24 maxlen: 24
                          185.79.138.0/24 maxlen: 24
                          185.168.208.0/24 maxlen: 24
                          185.77.138.0/24 maxlen: 24
                          185.77.139.0/24 maxlen: 24
                          185.104.148.0/24 maxlen: 24
                          185.105.46.0/24 maxlen: 24
                          185.105.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a6:90:19:a6:35:3e:0d:bb:cf:b4:d9:c8:14:66:91:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Aug 16 12:10:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6521a4bb67e96ea2210e031fa4368bfc44a37c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e0:35:ba:67:53:7b:11:4d:53:3c:56:da:8f:
                    c7:06:57:6b:80:0a:c6:88:14:34:c0:6a:5d:23:9e:
                    06:8c:34:b8:76:45:9c:75:85:92:fa:70:1a:20:5d:
                    9d:44:35:65:96:4e:a8:a8:2d:9f:2e:1b:53:0a:01:
                    99:39:16:cd:50:47:c5:26:71:2f:69:7c:9d:39:7a:
                    9d:48:7e:9d:2a:1f:77:08:4a:16:b3:7a:6d:22:b1:
                    f4:39:3f:6b:bb:57:9b:dd:3b:da:87:3a:4f:76:89:
                    e7:6b:64:d5:4b:60:9d:62:a3:b2:48:44:70:8d:33:
                    fe:c1:36:66:1c:cd:50:91:41:1c:62:44:f0:0c:a3:
                    b9:67:d3:61:ff:3b:a1:b9:9d:5e:68:74:79:4c:9e:
                    6b:c9:1b:af:cd:1d:5d:af:7c:c5:39:e8:0e:00:1e:
                    52:f6:12:44:8c:f1:48:6a:41:b3:3c:a0:64:ba:d1:
                    dc:da:57:00:e1:0e:a7:4c:00:01:d9:a7:ec:a5:dd:
                    58:41:76:2f:c3:86:8e:a3:82:fc:16:8f:a9:43:95:
                    87:46:82:82:62:ad:bf:7a:d1:c9:5f:af:1c:90:44:
                    e3:cc:28:94:bb:45:7c:e1:8c:85:15:c2:50:dd:72:
                    76:9e:2f:98:ea:c7:ee:d3:16:46:2c:f9:8b:03:f4:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:21:A4:BB:67:E9:6E:A2:21:0E:03:1F:A4:36:8B:FC:44:A3:7C:64
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/ZSGku2fpbqIhDgMfpDaL_ESjfGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.24.109.0/24
                  185.58.114.0/24
                  185.73.182.0/23
                  185.75.132.0/22
                  185.76.240.0/22
                  185.77.138.0/23
                  185.79.138.0/24
                  185.95.230.0/23
                  185.97.79.0/24
                  185.100.156.0/23
                  185.100.159.0/24
                  185.102.114.0/23
                  185.104.148.0/24
                  185.105.46.0/23
                  185.111.24.0/23
                  185.112.59.0/24
                  185.168.208.0/24
                  185.177.237.0-185.177.239.255

    Signature Algorithm: sha256WithRSAEncryption
         6a:f8:38:dd:dd:96:42:56:ed:2b:8e:12:c0:37:e2:fc:30:f4:
         c9:ac:72:54:21:02:ee:ad:75:52:26:ee:b5:44:cc:68:fa:4a:
         46:78:60:26:2e:9f:2d:e5:e5:24:17:07:fc:1a:cc:b1:53:11:
         4b:f6:58:95:e1:27:49:43:e3:86:a7:a3:fc:23:d7:21:cf:55:
         af:2a:71:b8:57:78:23:b2:a4:fc:73:97:25:f6:95:df:6b:36:
         01:2f:b1:eb:f7:60:e7:08:29:d4:45:d5:da:06:44:85:cf:65:
         51:eb:0a:8f:64:25:a1:ac:13:99:7f:90:31:6f:6c:a8:3c:9e:
         81:ea:ee:03:54:71:b6:e3:42:6b:57:1b:96:3e:70:8d:02:66:
         a7:77:72:8f:26:d7:42:a9:ae:38:e5:f5:9c:91:8d:f3:9b:9a:
         80:6a:a6:b2:d1:01:60:d5:4a:26:14:84:20:8b:28:06:77:f3:
         6e:6e:71:3e:c8:88:fd:2b:fe:8e:46:49:0a:e0:3c:80:72:86:
         9f:91:bf:48:bf:d6:d9:98:8e:0c:8c:ca:68:95:8a:70:e5:bb:
         4d:92:56:45:18:b6:8f:70:2d:05:70:d2:54:8a:da:af:cb:5f:
         b0:ec:1d:fc:9b:b1:15:a5:3a:24:f8:06:d3:6f:d9:5d:c6:4e:
         5f:35:8a:4e
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAYKmkBmmNT4Nu8+02cgUZpEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjIwODE2MTIxMDM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTIxYTRiYjY3ZTk2ZWEyMjEwZTAzMWZhNDM2OGJmYzQ0YTM3YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguA1umdTexFNUzxW2o/HBldrgArG
iBQ0wGpdI54GjDS4dkWcdYWS+nAaIF2dRDVllk6oqC2fLhtTCgGZORbNUEfFJnEv
aXydOXqdSH6dKh93CEoWs3ptIrH0OT9ru1eb3TvahzpPdonna2TVS2CdYqOySERw
jTP+wTZmHM1QkUEcYkTwDKO5Z9Nh/zuhuZ1eaHR5TJ5ryRuvzR1dr3zFOegOAB5S
9hJEjPFIakGzPKBkutHc2lcA4Q6nTAAB2afspd1YQXYvw4aOo4L8Fo+pQ5WHRoKC
Yq2/etHJX68ckETjzCiUu0V84YyFFcJQ3XJ2ni+Y6sfu0xZGLPmLA/Rj1QIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFGUhpLtn6W6iIQ4DH6Q2i/xEo3xkMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvWlNHa3UyZnBicUloRGdNZnBEYUxfRVNqZkdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEALkYbQME
ALk6cgMEAblJtgMEArlLhAMEArlM8AMEAblNigMEALlPigMEAblf5gMEALlhTwME
AblknAMEALlknwMEAblmcgMEALlolAMEAblpLgMEAblvGAMEALlwOwMEALmo0DAM
AwQAubHtAwQEubHgMA0GCSqGSIb3DQEBCwUAA4IBAQBq+Djd3ZZCVu0rjhLAN+L8
MPTJrHJUIQLurXVSJu61RMxo+kpGeGAmLp8t5eUkFwf8GsyxUxFL9liV4SdJQ+OG
p6P8I9chz1WvKnG4V3gjsqT8c5cl9pXfazYBL7Hr92DnCCnURdXaBkSFz2VR6wqP
ZCWhrBOZf5Axb2yoPJ6B6u4DVHG240JrVxuWPnCNAmand3KPJtdCqa445fWckY3z
m5qAaqay0QFg1UomFIQgiygGd/NubnE+yIj9K/6ORkkK4DyAcoafkb9Iv9bZmI4M
jMpolYpw5btNklZFGLaPcC0FcNJUitqvy1+w7B38m7EVpTok+AbTb9ldxk5fNYpO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org