Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/dlBhchauDWtOIWz5-pTO0UhDRkU.roa
File:                     dlBhchauDWtOIWz5-pTO0UhDRkU.roa (raw, json)
Hash identifier:          K3ce6hcy41pEoCPvOHiRa+yr8gv/Q847V7hv89Ax8qY=
Subject key identifier:   76:50:61:72:16:AE:0D:6B:4E:21:6C:F9:FA:94:CE:D1:48:43:46:45
Certificate issuer:       /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial:       0A334A0C
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/dlBhchauDWtOIWz5-pTO0UhDRkU.roa
Signing time:             Sat 01 Jan 2022 06:58:22 +0000
ROA not before:           Sat 01 Jan 2022 06:58:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48715
IP address blocks:        185.141.105.0/24 maxlen: 24
                          185.141.104.0/24 maxlen: 24
                          185.141.104.0/22 maxlen: 22
                          185.141.107.0/24 maxlen: 24
                          185.141.106.0/24 maxlen: 24
                          185.18.212.0/22 maxlen: 22
                          185.18.212.0/24 maxlen: 24
                          185.18.213.0/24 maxlen: 24
                          185.18.214.0/24 maxlen: 24
                          185.18.215.0/24 maxlen: 24
                          195.211.44.0/24 maxlen: 24
                          195.211.44.0/22 maxlen: 22
                          195.211.47.0/24 maxlen: 24
                          195.211.45.0/24 maxlen: 24
                          195.211.46.0/24 maxlen: 24
                          195.110.38.0/23 maxlen: 23
                          185.51.200.0/22 maxlen: 22
                          185.51.200.0/24 maxlen: 24
                          185.51.203.0/24 maxlen: 24
                          185.51.201.0/24 maxlen: 24
                          185.51.202.0/24 maxlen: 24
                          185.112.150.0/23 maxlen: 23
                          185.112.150.0/24 maxlen: 24
                          185.112.151.0/24 maxlen: 24
                          185.112.149.0/24 maxlen: 24
                          185.121.131.0/24 maxlen: 24
                          185.121.130.0/24 maxlen: 24
                          185.121.130.0/23 maxlen: 23
                          88.135.38.0/24 maxlen: 24
                          88.135.36.0/22 maxlen: 22
                          88.135.36.0/24 maxlen: 24
                          88.135.37.0/24 maxlen: 24
                          185.141.132.0/24 maxlen: 24
                          185.141.132.0/22 maxlen: 22
                          185.141.134.0/24 maxlen: 24
                          185.141.135.0/24 maxlen: 24
                          185.141.133.0/24 maxlen: 24
                          188.209.152.0/24 maxlen: 24
                          188.209.152.0/23 maxlen: 23
                          188.209.153.0/24 maxlen: 24
                          88.135.39.0/24 maxlen: 24
                          185.128.138.0/24 maxlen: 24
                          185.128.139.0/24 maxlen: 24
                          185.128.136.0/22 maxlen: 22
                          185.128.137.0/24 maxlen: 24
                          185.128.136.0/24 maxlen: 24
                          2a0a:5e80::/48 maxlen: 48
                          2a0a:5e80::/64 maxlen: 64
                          2a0a:5e80::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171133452 (0xa334a0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
        Validity
            Not Before: Jan  1 06:58:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7650617216ae0d6b4e216cf9fa94ced148434645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f0:a7:32:9d:13:c3:c8:84:89:c9:51:73:41:
                    ee:de:5d:72:69:f3:3f:90:4f:58:87:f6:71:a9:c5:
                    03:db:39:d4:56:1c:57:48:46:59:62:78:9f:dc:22:
                    df:e8:aa:3b:dc:ca:6d:11:63:41:ab:96:1f:5b:68:
                    0a:f7:f1:fe:fd:c3:19:20:8e:c4:6b:61:42:e4:3c:
                    e3:9e:ad:72:8e:85:f1:5a:b3:7e:da:1c:5e:1e:19:
                    c7:a0:5e:27:e8:89:c9:f6:c4:bf:49:2d:d0:6b:f8:
                    25:9e:57:ea:b7:51:02:ff:55:ab:6a:63:3c:dd:88:
                    ba:f7:b9:ff:05:22:62:6a:fe:3a:78:ca:58:26:de:
                    fe:09:13:7d:28:a9:83:09:0d:9e:e2:72:8c:4e:ed:
                    8e:b5:8f:98:61:5f:bc:f1:7f:a7:3e:e9:4d:34:c1:
                    9d:24:d1:52:8d:c6:32:d2:f6:89:8f:13:a9:a1:6e:
                    3b:6e:70:06:e3:d6:02:f4:d3:26:6f:ca:c8:0b:c2:
                    2b:27:a1:ce:b1:59:4d:4d:ed:c0:f2:74:b7:76:c5:
                    c4:0f:13:d2:dc:29:40:ec:3b:57:be:d6:c1:c2:8a:
                    74:ee:37:25:af:ae:7f:38:e0:37:2a:df:37:6d:cf:
                    0f:e8:55:fb:82:63:ad:5f:79:63:58:0e:3f:d2:b5:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:50:61:72:16:AE:0D:6B:4E:21:6C:F9:FA:94:CE:D1:48:43:46:45
            X509v3 Authority Key Identifier:
                keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/dlBhchauDWtOIWz5-pTO0UhDRkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.135.36.0/22
                  185.18.212.0/22
                  185.51.200.0/22
                  185.112.149.0-185.112.151.255
                  185.121.130.0/23
                  185.128.136.0/22
                  185.141.104.0/22
                  185.141.132.0/22
                  188.209.152.0/23
                  195.110.38.0/23
                  195.211.44.0/22
                IPv6:
                  2a0a:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:90:da:11:57:86:60:84:a9:df:ba:52:e8:b2:76:05:56:
         f8:7b:8f:83:56:f3:f7:70:88:ff:9e:ea:84:37:f9:33:05:c6:
         2e:49:fd:2d:8d:bc:2e:6c:0b:57:4e:55:85:c0:0f:35:fb:cb:
         a9:84:f4:fc:aa:85:54:30:79:f0:9c:90:6d:57:86:48:56:a2:
         6e:3c:7d:15:4d:73:83:6a:20:aa:8a:22:1b:a2:41:6a:8c:10:
         ea:f8:a7:da:0a:82:93:7f:0c:6d:61:3d:3a:da:0a:cd:0e:42:
         4d:6f:34:7e:97:b4:d6:42:f1:16:0c:39:65:a0:a2:a5:5d:69:
         5d:11:70:c5:50:dd:ef:29:74:e8:ed:78:47:53:3a:74:5a:80:
         74:9f:82:dd:17:d5:e4:42:c6:58:35:a7:ba:a5:c3:18:a9:07:
         79:4d:3a:6b:74:7d:68:5e:1e:c8:5e:26:16:c0:6b:a0:43:bd:
         e1:4a:92:88:67:00:bc:d4:99:ac:1c:1f:a8:bd:ab:27:a8:64:
         6a:9b:da:91:4b:5a:14:5c:03:0a:25:a1:9b:d4:08:cb:31:12:
         dd:3f:62:3e:06:72:4c:5a:2b:59:c5:51:c2:8f:b4:3c:c3:11:
         2d:e5:9d:e4:46:d6:0c:ad:ef:28:08:65:3c:5b:16:ab:16:a8:
         54:31:8a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org