Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ppvicpt7eiLswtZ4yV_a0Twoi6I.roa
File:                     Ppvicpt7eiLswtZ4yV_a0Twoi6I.roa (raw, json)
Hash identifier:          15z1+LnYjPvLvxGBFkPjSRP95HeogkT9Nu7r2mEuXgI=
Subject key identifier:   3E:9B:E2:72:9B:7B:7A:22:EC:C2:D6:78:C9:5F:DA:D1:3C:28:8B:A2
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       19B03FB9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ppvicpt7eiLswtZ4yV_a0Twoi6I.roa
Signing time:             Tue 12 Apr 2022 08:43:05 +0000
ROA not before:           Tue 12 Apr 2022 08:43:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46261
IP address blocks:        5.183.204.0/23 maxlen: 32
                          193.187.153.0/24 maxlen: 32
                          193.187.154.0/23 maxlen: 32
                          45.12.232.0/24 maxlen: 32
                          45.14.46.0/24 maxlen: 32
                          45.138.210.0/23 maxlen: 24
                          193.160.212.0/24 maxlen: 32
                          213.232.104.0/24 maxlen: 32
                          5.181.148.0/23 maxlen: 32
                          185.226.75.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430981049 (0x19b03fb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Apr 12 08:43:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e9be2729b7b7a22ecc2d678c95fdad13c288ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:bd:ec:c1:42:61:1f:69:a9:c8:96:ab:30:
                    cb:d9:ce:50:67:53:11:7a:d2:cf:1d:7f:a3:46:39:
                    9a:b6:99:d5:6c:b3:72:c4:ac:28:c6:6b:7c:bf:9f:
                    90:78:84:f4:5e:15:30:f6:d3:e5:a5:f4:f4:a2:64:
                    d4:c9:a8:11:d8:d7:35:57:56:99:16:d8:50:c7:cb:
                    d8:6f:e8:c8:c6:7d:18:c8:f0:12:eb:52:f1:15:53:
                    c7:56:53:75:5b:ba:86:fb:12:b3:12:3b:4a:11:80:
                    90:4e:29:a0:d7:27:6e:3d:cb:c6:c5:11:85:a3:e5:
                    82:a6:c5:44:e5:01:4e:97:89:59:64:0a:14:98:1f:
                    87:35:3e:80:10:e0:70:ef:0d:ea:99:f2:ba:49:47:
                    b7:3b:1c:1b:ff:20:7d:4f:34:7b:6f:25:da:19:66:
                    67:93:8c:f3:da:36:1c:8c:a2:21:24:b1:2b:2e:a8:
                    e0:62:c8:ad:2c:3c:c3:17:eb:31:d3:43:98:70:20:
                    b6:8c:4f:54:16:e8:19:54:07:9b:c9:b7:0f:25:f9:
                    92:7a:1d:46:a5:15:1a:15:4e:b8:69:18:57:15:c2:
                    53:77:21:13:e7:1c:fd:5a:1b:70:a0:aa:68:e3:38:
                    ab:ba:d6:29:d3:e1:83:67:d3:89:bb:95:e9:96:1f:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9B:E2:72:9B:7B:7A:22:EC:C2:D6:78:C9:5F:DA:D1:3C:28:8B:A2
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ppvicpt7eiLswtZ4yV_a0Twoi6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.148.0/23
                  5.183.204.0/23
                  45.12.232.0/24
                  45.14.46.0/24
                  45.138.210.0/23
                  185.226.75.0/24
                  193.160.212.0/24
                  193.187.153.0-193.187.155.255
                  213.232.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:5b:39:51:8e:0d:79:53:37:be:c8:e8:b7:90:a8:2e:7b:
         e9:74:c9:72:91:7a:ea:83:71:fa:ae:36:fb:51:4e:05:ca:61:
         86:86:1a:9e:8b:56:56:a9:1f:ed:73:ca:9e:f2:84:aa:25:0c:
         35:2f:4b:d8:93:9f:fe:c1:1f:c6:e6:f3:e3:ec:12:f7:52:0d:
         4a:7c:0c:2e:f7:fd:57:48:be:d3:48:67:02:a0:50:b4:03:69:
         ef:dc:cf:14:8d:70:17:2a:d5:bb:32:78:1b:1a:b5:fe:be:3a:
         7a:9a:c3:14:25:6e:41:e6:0a:c9:8d:20:1d:02:32:cd:6e:ea:
         08:c9:4b:b6:2b:ff:a0:15:3c:91:dd:03:e6:7a:a4:86:27:be:
         d9:b8:94:eb:a8:e3:66:82:02:fa:25:07:a9:86:09:d4:b3:56:
         bf:47:65:3d:13:36:76:11:f8:4c:8f:c1:ee:c7:03:05:48:af:
         2e:88:53:a5:85:6c:1a:e5:b0:59:3c:e8:8e:80:e2:9e:69:e4:
         3f:f6:37:19:09:97:eb:65:c3:31:25:8a:f8:f5:3b:9f:3a:a7:
         32:40:7c:10:0d:b7:47:5a:20:c7:96:af:66:a3:c5:b4:69:87:
         9f:7d:f4:da:c9:9b:32:f7:fd:9f:d7:8e:ca:60:15:e9:ac:a8:
         2b:3d:b3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org