Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/Wc4sPt87toQM1kZfR4-9dczXB0s.roa
File:                     Wc4sPt87toQM1kZfR4-9dczXB0s.roa (raw, json)
Hash identifier:          jsGFMc8P7nijFnSS5viAyLrXHmVCjNTub5Vr3WV59ek=
Subject key identifier:   59:CE:2C:3E:DF:3B:B6:84:0C:D6:46:5F:47:8F:BD:75:CC:D7:07:4B
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       0C4BF5FC
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/Wc4sPt87toQM1kZfR4-9dczXB0s.roa
Signing time:             Wed 15 Jun 2022 11:03:44 +0000
ROA not before:           Wed 15 Jun 2022 11:03:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20485
IP address blocks:        80.76.240.0/20 maxlen: 24
                          145.255.136.0/21 maxlen: 21
                          80.237.0.0/17 maxlen: 17
                          188.43.0.0/16 maxlen: 16
                          62.33.0.0/16 maxlen: 16
                          213.137.230.0/23 maxlen: 23
                          213.137.232.0/23 maxlen: 24
                          213.137.236.0/22 maxlen: 24
                          213.137.240.0/21 maxlen: 24
                          213.137.248.0/21 maxlen: 24
                          83.234.0.0/16 maxlen: 16
                          89.237.32.0/22 maxlen: 24
                          89.237.37.0/24 maxlen: 24
                          89.237.44.0/24 maxlen: 24
                          89.237.41.0/24 maxlen: 24
                          89.237.43.0/24 maxlen: 24
                          89.237.46.0/24 maxlen: 24
                          89.237.45.0/24 maxlen: 24
                          62.33.111.0/24 maxlen: 24
                          89.237.55.0/24 maxlen: 24
                          89.237.60.0/24 maxlen: 24
                          217.150.32.0/19 maxlen: 19
                          185.50.216.0/22 maxlen: 24
                          80.82.160.0/19 maxlen: 19
                          185.13.160.0/22 maxlen: 22
                          213.141.240.0/22 maxlen: 22
                          151.237.240.0/21 maxlen: 24
                          213.141.247.0/24 maxlen: 24
                          195.246.122.0/23 maxlen: 24
                          217.148.208.0/20 maxlen: 24
                          2a00:1e48::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206304764 (0xc4bf5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Jun 15 11:03:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59ce2c3edf3bb6840cd6465f478fbd75ccd7074b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:d7:24:7c:b2:98:65:dd:63:9c:5c:8e:31:
                    43:6c:af:6d:7a:8f:8e:b1:1a:df:63:6f:03:03:da:
                    aa:9c:ff:b1:27:59:ff:4b:32:40:8b:a9:b6:78:e4:
                    e0:c9:b6:10:06:f4:be:c3:35:44:99:28:11:7a:a4:
                    f7:6f:d3:9d:65:7e:67:78:f1:a9:53:02:d4:61:05:
                    1a:bd:c6:9b:6c:af:21:f9:43:4d:21:20:d1:5c:c1:
                    21:5f:13:c2:b2:d3:7f:31:5c:a3:d0:8c:95:37:1a:
                    50:aa:4d:2d:fe:ac:01:d9:96:92:a9:ee:92:87:48:
                    e1:63:50:e6:83:8a:47:22:4d:a2:23:ea:76:35:8a:
                    e0:af:a7:b6:c9:e9:96:c4:ab:e2:24:22:93:2f:45:
                    c0:a3:7b:c6:7c:98:03:60:99:b6:42:28:42:6d:d8:
                    ec:52:4f:8c:03:01:ab:86:19:d4:d5:6e:b5:66:fc:
                    51:bf:e8:f2:f0:51:63:2e:3a:ba:d6:94:0b:2c:18:
                    57:ca:f7:be:3b:02:14:49:80:a8:8f:cf:b8:93:53:
                    eb:6a:3f:00:8d:47:d6:66:91:d4:cd:ed:5d:d5:a1:
                    ac:24:25:ba:ca:d0:f0:77:6a:f5:61:01:35:2b:c3:
                    58:63:74:95:b0:17:1d:f8:20:75:8d:a7:52:08:df:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:2C:3E:DF:3B:B6:84:0C:D6:46:5F:47:8F:BD:75:CC:D7:07:4B
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/Wc4sPt87toQM1kZfR4-9dczXB0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.33.0.0/16
                  80.76.240.0/20
                  80.82.160.0/19
                  80.237.0.0/17
                  83.234.0.0/16
                  89.237.32.0/22
                  89.237.37.0/24
                  89.237.41.0/24
                  89.237.43.0-89.237.46.255
                  89.237.55.0/24
                  89.237.60.0/24
                  145.255.136.0/21
                  151.237.240.0/21
                  185.13.160.0/22
                  185.50.216.0/22
                  188.43.0.0/16
                  195.246.122.0/23
                  213.137.230.0-213.137.233.255
                  213.137.236.0-213.137.255.255
                  213.141.240.0/22
                  213.141.247.0/24
                  217.148.208.0/20
                  217.150.32.0/19
                IPv6:
                  2a00:1e48::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:f0:d4:8a:5c:1e:95:9e:1f:77:0a:64:b6:b3:c6:d4:b3:73:
         6c:b3:55:b9:93:b1:9c:43:88:de:ae:f2:b2:15:67:3b:e5:af:
         f2:18:0a:8e:c9:8f:01:9b:1a:60:68:a0:07:e0:7e:da:b6:12:
         50:ff:a7:c3:17:b5:e9:a3:1f:7a:82:f7:fd:b6:92:03:ed:82:
         49:24:c5:d1:40:4e:46:5a:61:58:fc:38:4e:14:4f:17:fd:da:
         4a:6b:d2:04:dc:5e:60:f1:dc:e7:83:b5:05:9c:47:6a:38:5c:
         52:20:07:8e:cd:12:70:d9:4d:77:49:44:cb:2b:fa:39:bf:e5:
         8f:c7:7e:21:ad:91:a9:47:04:d5:f6:af:25:e1:33:fa:43:9d:
         1a:03:cb:fc:a2:b9:4d:71:88:de:b4:cf:dd:56:29:3c:c2:27:
         e2:39:66:61:4a:8a:54:41:b4:16:94:d9:49:36:ad:84:2f:cc:
         87:49:0c:0f:38:a0:21:bd:a4:eb:02:bb:36:36:8b:65:c9:40:
         ae:cd:22:22:94:0b:3e:d1:08:f4:69:5e:14:de:c9:6f:31:f8:
         ef:5c:0c:a0:3c:f5:77:6b:4d:94:97:b2:34:23:ef:86:d7:47:
         a3:54:4f:90:5e:69:69:c7:3d:6e:62:4f:82:a4:73:6b:13:8a:
         64:5f:7e:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org