Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/WuPaUhJ7gMO3DD3TNGh3HDLeoC8.roa
File:                     WuPaUhJ7gMO3DD3TNGh3HDLeoC8.roa (raw, json)
Hash identifier:          tcFfix6plJ7Ycp6GJJzr5e55W7Wt0wRC/1005jauCzU=
Subject key identifier:   5A:E3:DA:52:12:7B:80:C3:B7:0C:3D:D3:34:68:77:1C:32:DE:A0:2F
Certificate issuer:       /CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Certificate serial:       380CCF94
Authority key identifier: 7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/WuPaUhJ7gMO3DD3TNGh3HDLeoC8.roa
Signing time:             Tue 05 Apr 2022 10:05:52 +0000
ROA not before:           Tue 05 Apr 2022 10:05:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24592
IP address blocks:        217.13.112.0/24 maxlen: 24
                          217.13.116.0/24 maxlen: 24
                          217.13.115.0/24 maxlen: 24
                          217.13.114.0/24 maxlen: 24
                          217.13.112.0/20 maxlen: 20
                          217.13.113.0/24 maxlen: 24
                          217.13.118.0/24 maxlen: 24
                          217.13.117.0/24 maxlen: 24
                          185.86.35.0/24 maxlen: 24
                          185.86.34.0/24 maxlen: 24
                          185.86.33.0/24 maxlen: 24
                          185.86.32.0/24 maxlen: 24
                          185.86.32.0/22 maxlen: 22
                          212.92.32.0/24 maxlen: 24
                          212.92.38.0/24 maxlen: 24
                          212.92.37.0/24 maxlen: 24
                          212.92.36.0/24 maxlen: 24
                          212.92.35.0/24 maxlen: 24
                          212.92.34.0/24 maxlen: 24
                          212.92.32.0/19 maxlen: 19
                          212.92.33.0/24 maxlen: 24
                          212.92.44.0/24 maxlen: 24
                          212.92.43.0/24 maxlen: 24
                          212.92.42.0/24 maxlen: 24
                          212.92.41.0/24 maxlen: 24
                          212.92.40.0/24 maxlen: 24
                          212.92.39.0/24 maxlen: 24
                          212.92.46.0/24 maxlen: 24
                          212.92.45.0/24 maxlen: 24
                          212.92.51.0/24 maxlen: 24
                          212.92.50.0/24 maxlen: 24
                          212.92.49.0/24 maxlen: 24
                          212.92.48.0/24 maxlen: 24
                          212.92.47.0/24 maxlen: 24
                          212.92.52.0/24 maxlen: 24
                          212.92.58.0/24 maxlen: 24
                          212.92.57.0/24 maxlen: 24
                          212.92.56.0/24 maxlen: 24
                          212.92.55.0/24 maxlen: 24
                          212.92.54.0/24 maxlen: 24
                          212.92.53.0/24 maxlen: 24
                          212.92.59.0/24 maxlen: 24
                          212.92.63.0/24 maxlen: 24
                          212.92.62.0/24 maxlen: 24
                          212.92.61.0/24 maxlen: 24
                          212.92.60.0/22 maxlen: 22
                          212.92.60.0/24 maxlen: 24
                          89.45.38.0/24 maxlen: 24
                          89.45.37.0/24 maxlen: 24
                          89.45.36.0/22 maxlen: 22
                          89.45.36.0/24 maxlen: 24
                          89.45.39.0/24 maxlen: 24
                          217.13.125.0/24 maxlen: 24
                          217.13.124.0/24 maxlen: 24
                          217.13.123.0/24 maxlen: 24
                          217.13.122.0/24 maxlen: 24
                          217.13.121.0/24 maxlen: 24
                          217.13.120.0/24 maxlen: 24
                          217.13.119.0/24 maxlen: 24
                          217.13.127.0/24 maxlen: 24
                          217.13.126.0/24 maxlen: 24
                          2a02:23c8::/40 maxlen: 40
                          2a02:23c8:ff00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940363668 (0x380ccf94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
        Validity
            Not Before: Apr  5 10:05:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ae3da52127b80c3b70c3dd33468771c32dea02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:f1:a6:5f:68:fe:b6:8e:a0:f4:27:4a:c5:
                    92:9f:f2:69:ea:97:20:c4:fd:18:48:91:cc:a4:00:
                    27:63:14:62:e7:a1:1c:22:30:18:74:41:6b:e9:3a:
                    17:2e:75:f3:ed:d7:21:8f:a5:e1:8a:b8:2b:df:de:
                    05:0d:ff:8e:ed:3c:65:e8:00:a5:28:c9:bd:28:a5:
                    2d:9f:91:bb:05:16:2c:fa:ab:e0:24:5d:b0:59:8a:
                    eb:08:46:1c:c9:b8:5f:74:c2:6d:4a:22:65:94:9b:
                    64:6d:b3:df:14:f2:6e:86:3e:0b:05:bb:4c:96:c7:
                    43:b8:d4:6e:88:0c:05:67:38:76:05:0a:1e:d3:ae:
                    bd:42:31:02:ec:37:58:5b:6c:87:43:7f:3e:ed:29:
                    57:11:26:73:d5:a3:ac:42:bc:f9:e0:4a:4e:8b:b9:
                    d2:e0:a4:5f:16:3d:e5:da:de:fe:82:b7:73:4e:8a:
                    39:80:02:4a:dc:53:88:ee:52:a5:7f:cf:9b:f5:ae:
                    0a:da:d8:61:1c:23:fb:00:50:9c:18:30:8d:f5:e5:
                    65:1b:4c:be:75:38:9b:0b:00:d3:c4:df:01:72:ed:
                    54:cd:88:43:a5:58:56:cc:cd:5f:89:3e:18:20:f2:
                    ab:3d:72:9e:68:b0:ce:c5:3b:87:e4:2f:e8:a9:2d:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:DA:52:12:7B:80:C3:B7:0C:3D:D3:34:68:77:1C:32:DE:A0:2F
            X509v3 Authority Key Identifier:
                keyid:7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/WuPaUhJ7gMO3DD3TNGh3HDLeoC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.45.36.0/22
                  185.86.32.0/22
                  212.92.32.0/19
                  217.13.112.0/20
                IPv6:
                  2a02:23c8::/40
                  2a02:23c8:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:25:cf:79:05:28:16:a2:bc:5e:a6:67:56:fc:d0:b8:e6:f1:
         24:ff:70:b5:0a:98:40:4e:03:59:18:9a:45:60:71:be:4e:17:
         ef:0f:33:2d:5c:6b:e0:49:d3:8f:65:32:c1:6a:3e:59:ef:a7:
         18:32:de:a7:fa:4a:1f:67:fe:4a:d2:28:8a:6f:e6:fc:d5:4e:
         12:55:e7:25:d9:a4:a1:b6:d8:03:e0:1c:6a:1d:5b:d4:17:93:
         5b:06:67:26:52:dd:85:b9:3c:7f:ac:4d:73:9d:5b:a2:60:6f:
         ff:11:b5:8b:ef:39:04:cf:0e:01:86:82:2c:cc:62:1e:08:6d:
         0c:0a:3c:e0:86:1d:51:db:17:81:95:f6:a1:c1:03:50:69:19:
         92:e8:27:21:b0:bd:10:50:15:f8:83:4a:fb:ef:1c:4c:e2:87:
         71:c7:5d:7d:69:a3:99:ed:17:cd:31:1d:b8:15:3b:cb:28:cb:
         59:30:e8:9d:3e:c9:9e:88:5c:86:8b:ae:dc:04:20:4f:0c:de:
         d5:c0:fa:8c:fe:d5:fa:e3:61:0e:6e:e1:a3:ab:8d:a7:13:ba:
         65:a6:99:b7:e0:ca:8b:09:ca:44:06:31:29:fc:a7:bc:a4:f9:
         ee:d4:61:5b:d6:b7:fe:4e:3b:67:6b:f6:de:a5:5c:06:d5:1b:
         35:fa:03:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:24 2024 by rpki-client on console-ams.rpki-client.org