Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/tleu_eCpgX22d4rM3VTwJdj14dA.roa
File:                     tleu_eCpgX22d4rM3VTwJdj14dA.roa (raw, json)
Hash identifier:          wGqhWnGqBWpLlo+Jj95pZJheicMncAlwUaGMRzulpKs=
Subject key identifier:   B6:57:AE:FD:E0:A9:81:7D:B6:77:8A:CC:DD:54:F0:25:D8:F5:E1:D0
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       0E1E44B0
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/tleu_eCpgX22d4rM3VTwJdj14dA.roa
Signing time:             Mon 30 May 2022 09:58:13 +0000
ROA not before:           Mon 30 May 2022 09:58:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203724
IP address blocks:        185.212.107.0/24 maxlen: 24
                          185.212.106.0/24 maxlen: 24
                          185.125.226.0/24 maxlen: 24
                          185.125.225.0/24 maxlen: 24
                          185.125.224.0/24 maxlen: 24
                          185.212.104.0/24 maxlen: 24
                          185.125.227.0/24 maxlen: 24
                          2a06:bcc0:5::/48 maxlen: 48
                          2a06:bcc0:9::/48 maxlen: 48
                          2a06:bcc0:4::/48 maxlen: 48
                          2a06:bcc0:2::/48 maxlen: 48
                          2a06:bcc0:3::/48 maxlen: 48
                          2a06:bcc0:11::/48 maxlen: 48
                          2a06:bcc0:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236864688 (0xe1e44b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: May 30 09:58:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b657aefde0a9817db6778accdd54f025d8f5e1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:9d:7d:5a:77:61:a2:e2:bc:2c:d5:4e:ce:
                    e2:06:a6:ff:3a:b5:9a:0b:bf:b9:8f:44:57:08:3d:
                    d5:51:b4:0e:ae:c6:ed:2b:6b:0b:78:25:16:a2:72:
                    63:ff:a5:81:18:ea:f7:86:ab:91:c1:33:66:b5:98:
                    f2:0d:86:b8:43:9b:57:93:74:b4:4b:48:f0:f8:2a:
                    b1:33:8e:ab:13:86:74:3a:f6:0d:0c:fd:5e:f4:78:
                    2e:5d:25:4f:85:74:cf:fd:76:7a:79:45:c0:91:3a:
                    c9:09:9c:aa:30:36:dc:33:70:f5:44:f2:d4:24:44:
                    ab:86:af:eb:9e:31:c2:0b:e4:9d:ea:ab:00:f7:fd:
                    90:a2:30:95:22:48:1e:87:bd:b6:ae:59:e7:4e:8a:
                    7d:90:17:01:c2:96:b0:84:bc:56:11:6e:29:7e:8c:
                    07:7c:20:83:f3:6e:9f:c6:39:4d:22:b7:6b:d9:f0:
                    82:4d:12:7c:e3:46:24:59:81:87:b8:52:93:7b:5f:
                    95:51:99:10:7c:27:2b:2c:bb:5a:aa:eb:cf:02:79:
                    54:e6:7e:06:af:85:5f:eb:4f:c1:7b:ed:01:20:2f:
                    89:79:c0:bb:99:34:26:c6:7f:e4:83:56:2d:bc:a4:
                    29:bf:29:ec:70:82:64:3a:cd:0c:0b:7c:f4:d5:2b:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:57:AE:FD:E0:A9:81:7D:B6:77:8A:CC:DD:54:F0:25:D8:F5:E1:D0
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/tleu_eCpgX22d4rM3VTwJdj14dA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.125.224.0/22
                  185.212.104.0/24
                  185.212.106.0/23
                IPv6:
                  2a06:bcc0:1::-2a06:bcc0:5:ffff:ffff:ffff:ffff:ffff
                  2a06:bcc0:9::/48
                  2a06:bcc0:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:c3:48:e4:79:25:d6:ac:85:30:d0:1a:08:66:45:5d:3d:82:
         c1:7c:be:89:d6:84:e5:40:78:67:34:2d:ec:a6:d4:cf:f2:de:
         f1:13:0e:6a:17:73:2e:ef:9a:08:a8:1d:e6:d1:78:3b:7e:b1:
         8b:7c:cb:e6:1a:d2:03:28:d8:79:e5:fe:55:0a:76:84:63:2a:
         97:0c:56:4a:d4:34:e8:30:52:1c:c3:b3:a8:74:d0:75:ba:e7:
         02:ce:8c:af:87:38:29:43:94:cc:9c:f7:de:11:4d:c3:3c:64:
         f8:e7:54:39:7d:d6:d7:5e:98:0a:54:d0:d8:35:85:ec:50:04:
         a1:e1:2c:bc:29:08:51:24:35:c8:49:80:5b:fe:c9:8f:8b:64:
         fd:bb:e0:62:4a:81:61:f4:c8:bb:8a:ef:04:97:15:fe:76:ef:
         55:05:e9:72:29:05:3f:f4:42:1f:b5:2a:99:bf:dc:59:9c:9b:
         ba:cf:a9:43:99:2f:19:c5:02:1c:1d:db:5c:0f:95:cd:ba:b8:
         99:35:f3:93:ed:6a:10:6c:a7:76:e0:45:68:b3:30:d9:64:59:
         dc:8f:06:9e:e0:f8:83:4e:76:53:a4:27:e6:4d:da:30:a8:cc:
         1f:57:ef:fe:53:0d:64:ea:8e:ac:93:10:3c:3e:f3:47:19:c0:
         65:7e:4b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:45 2024 by rpki-client on console-fra.rpki-client.org