Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8nGPBQ4bgqQu2g2rcl93l7Giru0.roa
File:                     8nGPBQ4bgqQu2g2rcl93l7Giru0.roa (raw, json)
Hash identifier:          rqPYQDi23dz2dxGE2Raelk2MXmWQh432eJqgCPpHVr8=
Subject key identifier:   F2:71:8F:05:0E:1B:82:A4:2E:DA:0D:AB:72:5F:77:97:B1:A2:AE:ED
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       018505E129496012293FD4DE55F43A11B528
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8nGPBQ4bgqQu2g2rcl93l7Giru0.roa
Signing time:             Mon 12 Dec 2022 10:28:40 +0000
ROA not before:           Mon 12 Dec 2022 10:28:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31208
IP address blocks:        178.178.84.0/22 maxlen: 22
                          178.178.82.0/24 maxlen: 24
                          178.178.80.0/23 maxlen: 23
                          178.178.131.0/24 maxlen: 24
                          178.178.130.0/24 maxlen: 24
                          178.178.129.0/24 maxlen: 24
                          178.178.132.0/24 maxlen: 24
                          178.178.128.0/24 maxlen: 24
                          178.176.230.0/23 maxlen: 23
                          37.28.186.0/24 maxlen: 24
                          188.170.50.0/24 maxlen: 24
                          37.28.184.0/24 maxlen: 24
                          188.170.48.0/24 maxlen: 24
                          37.28.185.0/24 maxlen: 24
                          188.170.49.0/24 maxlen: 24
                          188.170.54.0/24 maxlen: 24
                          188.170.55.0/24 maxlen: 24
                          37.28.187.0/24 maxlen: 24
                          188.170.56.0/24 maxlen: 24
                          188.170.52.0/24 maxlen: 24
                          188.170.57.0/24 maxlen: 24
                          188.170.53.0/24 maxlen: 24
                          188.170.62.0/24 maxlen: 24
                          188.170.63.0/24 maxlen: 24
                          188.170.59.0/24 maxlen: 24
                          188.170.60.0/24 maxlen: 24
                          188.170.61.0/24 maxlen: 24
                          37.29.75.0/24 maxlen: 24
                          37.29.74.0/24 maxlen: 24
                          37.29.73.0/24 maxlen: 24
                          37.29.72.0/24 maxlen: 24
                          128.204.72.0/24 maxlen: 24
                          128.204.73.0/24 maxlen: 24
                          178.176.58.0/24 maxlen: 24
                          178.176.56.0/24 maxlen: 24
                          178.176.57.0/24 maxlen: 24
                          178.176.62.0/24 maxlen: 24
                          178.176.63.0/24 maxlen: 24
                          178.176.59.0/24 maxlen: 24
                          178.176.60.0/24 maxlen: 24
                          178.176.61.0/24 maxlen: 24
                          83.149.41.0/24 maxlen: 24
                          83.149.44.0/23 maxlen: 23
                          83.149.40.0/24 maxlen: 24
                          83.149.42.0/23 maxlen: 23
                          83.149.46.0/23 maxlen: 23
                          83.169.212.0/24 maxlen: 24
                          83.169.208.0/24 maxlen: 24
                          83.169.213.0/24 maxlen: 24
                          83.169.209.0/24 maxlen: 24
                          83.169.210.0/24 maxlen: 24
                          83.169.211.0/24 maxlen: 24
                          83.169.214.0/24 maxlen: 24
                          83.169.215.0/24 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          178.178.135.0/24 maxlen: 24
                          178.178.134.0/24 maxlen: 24
                          178.178.137.0/24 maxlen: 24
                          178.178.133.0/24 maxlen: 24
                          178.178.136.0/24 maxlen: 24
                          178.178.143.0/24 maxlen: 24
                          178.178.142.0/24 maxlen: 24
                          46.229.136.0/22 maxlen: 22
                          46.229.141.0/24 maxlen: 24
                          46.229.140.0/24 maxlen: 24
                          46.229.143.0/24 maxlen: 24
                          46.229.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:05:e1:29:49:60:12:29:3f:d4:de:55:f4:3a:11:b5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec 12 10:28:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2718f050e1b82a42eda0dab725f7797b1a2aeed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:ae:cf:ef:c4:4c:40:40:fb:8e:f8:f1:57:
                    ef:df:de:5a:6a:b8:79:f0:77:4a:59:29:0d:82:bf:
                    4e:c8:3a:f1:59:3e:78:6f:8b:16:34:a9:4d:42:dc:
                    14:75:62:87:21:c8:55:ac:3a:3e:76:7b:7d:f5:ee:
                    24:18:7d:be:66:63:78:30:a5:50:b0:3a:58:81:d1:
                    67:4f:48:b2:f9:68:6f:1b:0c:35:c7:7e:cc:c5:c3:
                    30:33:2b:55:ec:e4:44:18:cd:27:3d:84:f9:61:ed:
                    2a:db:8f:08:33:44:51:50:14:96:3a:2e:83:01:de:
                    7f:1d:71:06:a8:7f:32:ea:e3:d2:0a:87:ff:36:49:
                    0f:1f:b8:36:56:eb:cd:ca:b2:19:27:07:56:b3:c9:
                    eb:bf:52:8f:64:f7:ca:95:9a:e6:4b:55:65:02:2c:
                    d8:19:8a:f4:4e:e3:2f:e2:4c:43:72:f7:60:e9:24:
                    03:f5:8f:6a:1b:de:92:a3:f0:01:0b:b2:e1:45:cb:
                    ef:31:db:fb:3e:6a:46:e2:3f:2d:1e:74:e6:62:19:
                    1b:21:a7:8a:a1:6c:72:24:b8:4d:83:e4:81:fb:98:
                    b2:5b:84:f8:5f:85:92:d8:cb:24:0c:2f:32:f6:66:
                    7d:d8:a9:16:e6:1b:3a:37:d2:cd:f6:19:ce:0c:11:
                    b0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:71:8F:05:0E:1B:82:A4:2E:DA:0D:AB:72:5F:77:97:B1:A2:AE:ED
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8nGPBQ4bgqQu2g2rcl93l7Giru0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.28.184.0/22
                  37.29.72.0/22
                  46.229.136.0/21
                  83.149.40.0/21
                  83.169.208.0/21
                  128.204.72.0/23
                  178.176.56.0/21
                  178.176.230.0/23
                  178.178.80.0-178.178.82.255
                  178.178.84.0/22
                  178.178.128.0-178.178.137.255
                  178.178.142.0/23
                  188.162.0.0/16
                  188.170.48.0-188.170.50.255
                  188.170.52.0-188.170.57.255
                  188.170.59.0-188.170.63.255

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:28:3d:7a:02:b7:2a:b6:87:92:8e:65:31:17:72:12:f2:
         24:ca:af:0b:78:37:15:bf:e0:f6:ef:cc:b1:6e:14:85:45:f5:
         e4:d6:f4:07:ff:3c:32:0a:f4:8f:cd:74:f5:44:9f:db:db:6a:
         c2:4c:e2:55:ed:c9:cd:2a:38:77:60:b9:60:2d:1b:43:ce:ee:
         a8:15:9c:d4:72:4f:ce:86:36:e9:ea:bc:02:9c:a0:ae:94:b0:
         93:ab:26:31:60:48:40:5b:9d:d5:2b:38:64:23:88:13:e8:1d:
         69:8c:d5:5f:5e:4e:3b:00:ec:08:6c:d5:63:bb:72:e2:c6:7f:
         14:5d:ef:f8:bb:2b:c2:57:42:98:ec:b9:79:b0:a9:b6:cc:e4:
         85:0c:7a:ac:bb:1c:9b:67:7c:91:aa:70:3f:1b:82:77:ea:a1:
         10:38:91:cf:36:87:dc:f3:41:b8:86:fe:e4:b7:bb:b8:59:cb:
         63:6b:f0:0c:ac:92:2d:d9:93:a8:0d:cf:4d:01:0c:a2:9c:e7:
         a5:ae:bf:8a:71:28:d8:6f:f7:52:8d:eb:a2:34:58:da:29:4b:
         17:02:62:51:94:31:56:43:94:8c:07:2a:9b:be:20:48:f2:35:
         f7:41:ba:92:3a:cf:4d:7a:eb:38:f0:d8:62:37:68:52:8f:88:
         3d:0e:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org