Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/tTVQRfXNwVYDwMHIVLDFC11u--0.roa
File:                     tTVQRfXNwVYDwMHIVLDFC11u--0.roa (raw, json)
Hash identifier:          puXldJtsHzrdYmZvheLqQE3T9r9NlPGg4mtfW+/53cE=
Subject key identifier:   B5:35:50:45:F5:CD:C1:56:03:C0:C1:C8:54:B0:C5:0B:5D:6E:FB:ED
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0183D0BC30725733DEC6FD92F9D40E20B78F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/tTVQRfXNwVYDwMHIVLDFC11u--0.roa
Signing time:             Thu 13 Oct 2022 09:45:37 +0000
ROA not before:           Thu 13 Oct 2022 09:45:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        94.241.176.0/21 maxlen: 24
                          94.241.136.0/21 maxlen: 24
                          91.186.200.0/22 maxlen: 24
                          91.186.212.0/22 maxlen: 24
                          91.186.214.0/23 maxlen: 24
                          94.241.168.0/21 maxlen: 24
                          83.147.216.0/23 maxlen: 24
                          178.253.31.0/24 maxlen: 24
                          83.147.222.0/23 maxlen: 24
                          178.253.32.0/23 maxlen: 24
                          178.253.44.0/23 maxlen: 24
                          83.147.232.0/22 maxlen: 24
                          178.253.52.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d0:bc:30:72:57:33:de:c6:fd:92:f9:d4:0e:20:b7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Oct 13 09:45:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5355045f5cdc15603c0c1c854b0c50b5d6efbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:cf:c2:1f:5d:81:15:35:6f:13:cc:e1:c0:
                    66:5e:a0:13:44:f4:c8:2f:c3:78:38:a4:97:53:84:
                    fa:0b:4f:52:17:98:cc:bf:c5:45:65:f8:1d:ef:6c:
                    65:28:6f:ce:2e:e6:bf:1e:df:ab:03:8b:cb:50:98:
                    72:42:c8:3d:08:7e:87:d3:80:19:ff:32:2a:1f:71:
                    08:42:63:ba:73:06:b7:d1:17:36:9a:2d:7f:fc:3e:
                    30:02:72:a0:06:22:ed:aa:48:b9:3c:56:f5:95:62:
                    9c:33:5f:9d:5c:cf:8a:16:26:7b:80:79:c3:47:40:
                    ca:ff:6a:5c:e7:1c:d0:a2:06:fa:b6:01:a9:c9:d4:
                    3c:ef:44:28:51:50:13:26:af:91:73:16:fa:3b:26:
                    cd:74:67:a7:8c:c4:a7:52:26:af:5f:bb:fa:b0:50:
                    9b:4e:72:4b:db:84:50:b8:75:b9:c2:d6:f7:1c:99:
                    6b:81:30:22:a5:da:19:f9:15:7e:2b:78:4c:73:35:
                    60:f2:9e:a0:52:f0:dd:b1:a0:40:30:bd:da:ff:6b:
                    0b:34:32:93:40:db:25:6a:78:73:7b:44:e8:88:09:
                    9c:07:ff:64:44:e0:27:f7:ef:b4:4d:c5:76:fe:81:
                    98:8f:0d:7d:d3:48:db:9b:b4:cc:b7:8e:e3:46:a8:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:35:50:45:F5:CD:C1:56:03:C0:C1:C8:54:B0:C5:0B:5D:6E:FB:ED
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/tTVQRfXNwVYDwMHIVLDFC11u--0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.216.0/23
                  83.147.222.0/23
                  83.147.232.0/22
                  91.186.200.0/22
                  91.186.212.0/22
                  94.241.136.0/21
                  94.241.168.0-94.241.183.255
                  178.253.31.0-178.253.33.255
                  178.253.44.0/23
                  178.253.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:51:06:65:df:a3:43:06:c6:df:10:54:ef:1c:20:87:26:81:
         8f:fe:61:dd:03:2c:ce:73:71:7d:8d:a3:25:85:fc:f4:1b:53:
         7d:68:fd:9f:2d:74:c6:71:0f:f5:7f:a1:03:5c:7a:cd:08:72:
         f6:64:e4:b3:19:11:97:15:fa:87:29:89:a1:76:72:25:6b:56:
         ab:f3:6e:87:e2:ce:0c:f7:76:6a:d3:3a:36:1e:16:06:40:3a:
         43:fb:1e:63:32:30:20:3a:f0:ab:79:7a:6c:c0:bd:fc:8a:ec:
         fd:58:b6:8a:1d:40:96:4c:97:b9:24:bb:93:c6:ed:d6:ca:1f:
         31:62:d0:9a:d7:e7:b1:c5:bc:54:6b:8f:58:76:66:92:c7:d7:
         4b:61:25:02:10:0b:53:71:fc:48:4d:9a:b9:08:6b:c1:32:59:
         4b:67:16:7f:ff:d0:3a:de:2d:39:7e:ac:30:ac:4f:5e:b0:ad:
         d5:58:68:67:19:2a:d6:c3:45:6c:c8:cd:62:e5:62:12:3b:ce:
         5d:90:91:8b:19:5e:d3:76:c1:4f:b3:c8:1f:a8:72:5c:43:70:
         83:45:f8:d5:a9:0a:15:4b:e5:cf:c4:ca:6c:a0:a2:47:9c:76:
         9d:bf:21:d7:e8:76:20:97:b6:dd:63:f4:74:f8:b3:a7:3d:da:
         6e:ca:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:20 2024 by rpki-client on console-ams.rpki-client.org