Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/IefbkxkypCNfU9ug_C8dd22cHwc.roa
File:                     IefbkxkypCNfU9ug_C8dd22cHwc.roa (raw, json)
Hash identifier:          PfTZWRYPHPIbMiyNWMmBQrQRo4JbGAkzMdAKmZKCkIU=
Subject key identifier:   21:E7:DB:93:19:32:A4:23:5F:53:DB:A0:FC:2F:1D:77:6D:9C:1F:07
Certificate issuer:       /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial:       07A333B9
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/IefbkxkypCNfU9ug_C8dd22cHwc.roa
Signing time:             Thu 24 Mar 2022 17:19:53 +0000
ROA not before:           Thu 24 Mar 2022 17:19:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211025
IP address blocks:        213.155.169.0/24 maxlen: 24
                          212.14.48.0/24 maxlen: 24
                          213.155.172.0/24 maxlen: 24
                          213.155.170.0/23 maxlen: 23
                          212.14.54.0/24 maxlen: 24
                          213.155.177.0/24 maxlen: 24
                          213.155.181.0/24 maxlen: 24
                          213.155.186.0/23 maxlen: 23
                          212.14.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128136121 (0x7a333b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
        Validity
            Not Before: Mar 24 17:19:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=21e7db931932a4235f53dba0fc2f1d776d9c1f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:67:eb:9f:af:40:ae:5b:5e:fc:28:d4:42:c5:
                    ec:42:19:47:7a:96:cc:19:4d:49:c7:f6:1f:26:bf:
                    92:b3:cb:94:b4:bf:86:26:cc:ed:14:b5:5b:af:fc:
                    c6:f0:87:4e:1b:02:b6:99:aa:0d:30:81:47:7a:d2:
                    48:fe:70:1e:19:5e:ce:36:92:24:e6:4c:5d:37:7f:
                    d5:b8:f1:a6:73:31:9e:6a:21:87:c4:54:d0:31:96:
                    82:e2:bc:78:a9:14:38:7d:8e:ce:10:4b:e2:ae:dd:
                    ae:25:fd:ef:65:93:f9:8a:8b:6c:e4:44:52:16:78:
                    05:40:26:26:64:de:1b:6f:f7:2a:fd:b1:f0:f3:d2:
                    5d:8a:f6:58:6d:3a:78:8a:b7:58:61:a0:53:87:be:
                    27:89:67:8f:ac:81:bd:d7:52:c5:06:9a:55:88:b1:
                    a4:e1:e0:59:39:f0:f0:cb:8b:02:13:d7:63:e7:cd:
                    a2:30:e6:b3:f3:c4:5f:17:5d:64:2c:b1:89:17:97:
                    00:7b:ef:36:75:d8:db:fa:c1:06:98:af:ef:d8:eb:
                    97:cb:25:ac:ab:8c:01:0a:16:d7:94:a5:34:5e:72:
                    47:ea:63:a9:c6:5d:e7:57:8d:c3:7d:4c:b3:88:74:
                    a9:5e:38:e5:9c:d4:bf:93:e2:db:66:1b:39:52:19:
                    d1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E7:DB:93:19:32:A4:23:5F:53:DB:A0:FC:2F:1D:77:6D:9C:1F:07
            X509v3 Authority Key Identifier:
                keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/IefbkxkypCNfU9ug_C8dd22cHwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.14.48.0/24
                  212.14.54.0/24
                  212.14.59.0/24
                  213.155.169.0-213.155.172.255
                  213.155.177.0/24
                  213.155.181.0/24
                  213.155.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:bc:4e:54:59:bc:9f:71:cd:25:2c:40:7b:1f:bf:54:9c:bd:
         0a:09:fd:21:21:fa:4e:4c:87:99:e0:0c:f9:b3:7e:ab:dd:ff:
         38:e2:99:33:1e:7f:57:5f:aa:23:88:95:cb:9f:3a:97:69:37:
         82:0c:7f:ed:04:21:47:01:23:b3:fd:35:e7:21:4c:e8:7a:a8:
         bd:32:e7:58:b0:ec:8e:d1:58:e6:2a:47:00:f7:50:72:e4:d1:
         a1:a6:42:6e:06:03:5b:c0:c0:94:25:ae:62:a8:fc:5e:4b:35:
         37:46:b7:af:e7:c8:39:f1:38:79:af:7e:f8:50:cc:88:33:0e:
         7e:3a:cb:5d:c2:ba:53:ea:04:cc:d2:fb:31:07:96:49:9c:76:
         50:ee:6f:d6:98:87:0a:75:6d:4b:0e:6e:40:64:5a:c9:96:22:
         3d:51:1d:42:e3:ad:0c:0e:88:c5:20:5b:2f:1e:c1:99:51:d6:
         70:0e:8b:a2:19:8f:12:4a:2a:dc:23:c3:8b:03:3f:26:42:14:
         b1:7d:3e:e3:8c:41:c6:26:b6:a9:06:2a:95:e0:23:4c:84:32:
         15:c0:15:39:79:25:02:64:04:c2:20:27:18:56:33:f6:73:1f:
         ef:70:e7:d0:77:e5:2c:28:84:9c:a3:4d:79:38:7b:f8:71:0b:
         f8:f3:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:11 2024 by rpki-client on console-fra.rpki-client.org