Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ETjLTY5_uSf2Omnfis_EsflU4Dg.roa
File:                     ETjLTY5_uSf2Omnfis_EsflU4Dg.roa (raw, json)
Hash identifier:          BZmRcxsMPTQFvmN0UCp0NgBkLuMLSRTXoDdwyXIrmTk=
Subject key identifier:   11:38:CB:4D:8E:7F:B9:27:F6:3A:69:DF:8A:CF:C4:B1:F9:54:E0:38
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       05DAF5AB
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ETjLTY5_uSf2Omnfis_EsflU4Dg.roa
Signing time:             Thu 10 Feb 2022 11:04:27 +0000
ROA not before:           Thu 10 Feb 2022 11:04:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25211
IP address blocks:        94.26.79.0/24 maxlen: 24
                          91.92.33.0/24 maxlen: 24
                          78.159.131.0/24 maxlen: 24
                          78.159.128.0/24 maxlen: 24
                          91.92.35.0/24 maxlen: 24
                          78.159.129.0/24 maxlen: 24
                          91.92.40.0/24 maxlen: 24
                          91.92.43.0/24 maxlen: 24
                          78.159.137.0/24 maxlen: 24
                          78.159.138.0/24 maxlen: 24
                          91.92.44.0/24 maxlen: 24
                          91.92.41.0/24 maxlen: 24
                          91.92.42.0/24 maxlen: 24
                          78.159.136.0/24 maxlen: 24
                          78.159.139.0/24 maxlen: 24
                          93.152.213.0/24 maxlen: 24
                          91.92.46.0/24 maxlen: 24
                          91.92.47.0/24 maxlen: 24
                          91.92.45.0/24 maxlen: 24
                          91.92.50.0/24 maxlen: 24
                          91.92.51.0/24 maxlen: 24
                          93.152.212.0/24 maxlen: 24
                          91.92.49.0/24 maxlen: 24
                          94.26.28.0/24 maxlen: 24
                          94.26.29.0/24 maxlen: 24
                          185.96.253.0/24 maxlen: 24
                          185.96.252.0/24 maxlen: 24
                          185.96.255.0/24 maxlen: 24
                          94.26.76.0/24 maxlen: 24
                          94.26.78.0/24 maxlen: 24
                          94.26.77.0/24 maxlen: 24
                          93.152.215.0/24 maxlen: 24
                          91.92.53.0/24 maxlen: 24
                          93.152.216.0/24 maxlen: 24
                          93.152.214.0/24 maxlen: 24
                          91.92.52.0/24 maxlen: 24
                          78.159.152.0/22 maxlen: 22
                          78.159.149.0/24 maxlen: 24
                          78.159.150.0/24 maxlen: 24
                          93.152.220.0/24 maxlen: 24
                          93.152.221.0/24 maxlen: 24
                          78.159.158.0/24 maxlen: 24
                          93.152.225.0/24 maxlen: 24
                          78.159.156.0/24 maxlen: 24
                          93.152.224.0/24 maxlen: 24
                          78.159.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98235819 (0x5daf5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Feb 10 11:04:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1138cb4d8e7fb927f63a69df8acfc4b1f954e038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:38:de:e3:06:f8:dd:18:c5:c7:7d:ef:f9:0a:
                    85:b1:2a:b4:55:a2:98:1d:81:dd:65:46:35:87:44:
                    41:e5:22:df:b6:6e:b7:87:3b:64:d0:cd:b8:c1:87:
                    e7:b7:0f:e7:2a:93:bb:c6:3a:a4:0a:dc:b8:df:ef:
                    7f:6f:13:8f:fa:64:e6:fe:68:01:80:67:1c:ee:6d:
                    b2:2d:ac:3c:43:a9:9b:0b:33:9d:82:5e:86:71:91:
                    00:cd:c5:39:05:03:b9:b1:ba:ea:d9:a6:38:e0:27:
                    30:6b:88:f5:26:06:4d:b3:74:01:3c:41:99:84:1d:
                    41:b3:52:c7:65:3e:4e:6c:22:6c:22:48:08:41:7d:
                    1f:f8:4a:5b:50:9d:2c:ef:15:e7:50:cf:01:ba:3d:
                    c5:a5:9a:73:20:48:bf:f6:c4:f3:74:e6:47:d9:c2:
                    91:96:cb:2d:50:c1:95:7d:63:ab:b8:37:06:90:3c:
                    19:b7:01:62:a5:ec:db:fc:78:82:5a:19:ff:6b:98:
                    32:35:85:2c:7c:3d:fb:14:cb:5f:5a:e3:8d:04:99:
                    b9:cb:14:c7:1a:a8:89:52:fc:2e:ae:4f:b4:6a:e9:
                    52:21:82:23:8d:18:6a:32:31:0d:e0:6f:fc:15:39:
                    7b:73:5f:16:12:87:44:46:37:54:1c:1c:e9:08:ab:
                    d4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:38:CB:4D:8E:7F:B9:27:F6:3A:69:DF:8A:CF:C4:B1:F9:54:E0:38
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ETjLTY5_uSf2Omnfis_EsflU4Dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.159.128.0/23
                  78.159.131.0/24
                  78.159.136.0/22
                  78.159.149.0-78.159.150.255
                  78.159.152.0-78.159.158.255
                  91.92.33.0/24
                  91.92.35.0/24
                  91.92.40.0/21
                  91.92.49.0-91.92.53.255
                  93.152.212.0-93.152.216.255
                  93.152.220.0/23
                  93.152.224.0/23
                  94.26.28.0/23
                  94.26.76.0/22
                  185.96.252.0/23
                  185.96.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:34:29:50:33:23:6e:17:18:8d:f3:22:d4:8b:5b:e5:ed:
         6b:15:c8:17:0b:2b:c0:1d:f5:66:e4:74:45:f4:b0:d4:f0:79:
         4b:7d:e5:db:57:f8:e7:04:cd:b7:5b:ea:39:83:39:4b:d8:aa:
         97:ad:63:61:45:4b:6a:ff:f8:68:8c:d7:ae:0d:7b:ee:83:29:
         79:d3:fe:d5:23:89:0f:9c:91:03:03:72:e7:b3:b4:34:77:dd:
         66:6a:00:e5:cb:bf:41:b0:41:7e:02:1e:61:09:77:46:73:f5:
         20:d6:21:df:e8:2d:6f:3b:a2:be:08:41:19:73:cc:a0:55:29:
         bf:19:35:63:ff:f1:92:18:d9:18:03:57:78:fe:3f:ca:5f:c3:
         4e:f0:4e:c0:95:19:e8:36:d2:04:52:43:e6:a1:a6:56:e8:ac:
         be:1c:3b:b1:5e:2a:02:ee:b4:4c:03:62:ea:f5:73:58:26:eb:
         c4:c3:5b:21:56:4a:d4:07:ad:77:a3:de:4f:19:6c:ed:ba:2a:
         d4:05:b8:78:54:a7:c3:01:0e:46:39:ff:85:67:91:17:5a:98:
         c7:d4:bf:19:31:b6:fc:fe:b1:e1:b9:fd:29:c7:e0:1b:e6:cb:
         05:a6:ba:7c:a8:44:b2:e6:97:ca:21:77:10:08:c4:ee:f8:52:
         80:f9:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org