Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/_wFgPD7bsJOQwT0c27vy4la2fMI.roa
File:                     _wFgPD7bsJOQwT0c27vy4la2fMI.roa (raw, json)
Hash identifier:          WAR31r1APld5i5uI2FnS3Am+Hmocj+iq/5l8nuv0rNE=
Subject key identifier:   FF:01:60:3C:3E:DB:B0:93:90:C1:3D:1C:DB:BB:F2:E2:56:B6:7C:C2
Certificate issuer:       /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial:       018262CD614B7F8D6C29B9F16E74BE1C4F2C
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/_wFgPD7bsJOQwT0c27vy4la2fMI.roa
Signing time:             Wed 03 Aug 2022 08:23:23 +0000
ROA not before:           Wed 03 Aug 2022 08:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39611
IP address blocks:        185.49.24.0/24 maxlen: 24
                          185.49.25.0/24 maxlen: 24
                          213.207.39.0/24 maxlen: 24
                          213.207.40.0/24 maxlen: 24
                          213.207.40.0/22 maxlen: 22
                          213.207.43.0/24 maxlen: 24
                          213.207.41.0/24 maxlen: 24
                          213.207.42.0/24 maxlen: 24
                          213.207.44.0/22 maxlen: 22
                          213.207.44.0/24 maxlen: 24
                          213.207.45.0/24 maxlen: 24
                          213.207.46.0/24 maxlen: 24
                          213.207.47.0/24 maxlen: 24
                          213.207.48.0/20 maxlen: 20
                          213.207.48.0/21 maxlen: 21
                          213.207.50.0/24 maxlen: 24
                          213.207.48.0/24 maxlen: 24
                          213.207.48.0/22 maxlen: 22
                          213.207.49.0/24 maxlen: 24
                          213.207.51.0/24 maxlen: 24
                          213.207.55.0/24 maxlen: 24
                          213.207.57.0/24 maxlen: 24
                          213.207.52.0/22 maxlen: 22
                          213.207.53.0/24 maxlen: 24
                          213.207.54.0/24 maxlen: 24
                          213.207.52.0/24 maxlen: 24
                          213.207.56.0/22 maxlen: 22
                          213.207.56.0/21 maxlen: 21
                          213.207.56.0/24 maxlen: 24
                          213.207.58.0/24 maxlen: 24
                          213.207.60.0/24 maxlen: 24
                          213.207.60.0/22 maxlen: 22
                          213.207.61.0/24 maxlen: 24
                          213.207.59.0/24 maxlen: 24
                          213.207.63.0/24 maxlen: 24
                          213.207.62.0/24 maxlen: 24
                          213.207.37.0/24 maxlen: 24
                          213.207.38.0/24 maxlen: 24
                          213.207.35.0/24 maxlen: 24
                          213.207.32.0/22 maxlen: 22
                          213.207.32.0/24 maxlen: 24
                          213.207.33.0/24 maxlen: 24
                          213.207.34.0/24 maxlen: 24
                          213.207.32.0/19 maxlen: 19
                          213.207.32.0/20 maxlen: 20
                          213.207.36.0/22 maxlen: 22
                          213.207.36.0/24 maxlen: 24
                          2a01:9d24::/31 maxlen: 31
                          2a01:9d20::/29 maxlen: 29
                          2a01:9d22::/31 maxlen: 31
                          2a01:9d20::/31 maxlen: 31
                          2a01:9d26::/31 maxlen: 31

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:62:cd:61:4b:7f:8d:6c:29:b9:f1:6e:74:be:1c:4f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
        Validity
            Not Before: Aug  3 08:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff01603c3edbb09390c13d1cdbbbf2e256b67cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0c:25:f6:88:aa:34:e3:b0:26:72:48:d3:3a:
                    52:fd:af:af:cb:92:e3:5e:59:63:e6:c7:03:19:0e:
                    bd:f2:2e:4a:46:55:ae:52:4d:a3:b7:02:8f:95:a1:
                    c7:59:2d:9d:c7:3f:9d:8d:c8:cc:1b:b2:85:d3:2f:
                    a0:f9:5d:eb:a4:5e:80:65:54:4f:b9:5d:6e:30:04:
                    5c:68:a0:f0:5d:7c:0d:02:7e:c8:74:99:40:7c:8f:
                    50:32:b3:3e:57:a5:c9:0c:20:e2:81:5b:8b:15:ab:
                    37:74:9b:eb:79:a4:39:b2:cf:60:12:67:e2:e6:0a:
                    25:cc:82:2e:a9:55:a4:be:b9:56:a5:64:ba:0c:30:
                    e8:c9:c6:98:f9:60:50:74:8e:15:83:84:c2:34:45:
                    26:ef:a0:4c:43:06:fc:39:28:a4:d0:a0:cb:30:d0:
                    68:8c:8e:0b:d9:6e:79:cb:75:71:09:24:3f:f5:0f:
                    ca:74:a7:4d:24:7e:50:10:5c:32:2a:fc:0a:3a:91:
                    a6:37:01:f6:f9:a8:e6:c3:41:30:f3:ce:f5:7a:c6:
                    24:a4:30:2d:52:eb:ad:6c:92:12:e4:a1:8c:5f:f9:
                    3d:3b:2a:9e:aa:73:2e:9a:e1:2f:81:6d:5f:4e:e3:
                    2f:0c:43:67:38:44:1c:62:4f:9e:ab:f1:92:68:71:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:01:60:3C:3E:DB:B0:93:90:C1:3D:1C:DB:BB:F2:E2:56:B6:7C:C2
            X509v3 Authority Key Identifier:
                keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/_wFgPD7bsJOQwT0c27vy4la2fMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.49.24.0/23
                  213.207.32.0/19
                IPv6:
                  2a01:9d20::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:2e:30:bb:86:54:21:4d:da:31:8f:cd:21:b8:6a:01:41:
         77:d9:c5:20:4d:40:c0:a4:09:8d:7b:2f:9a:cb:f1:f0:09:28:
         8e:e2:cb:1e:52:8f:c0:ea:2c:05:f7:e8:be:75:6b:43:f2:4c:
         0e:4a:49:95:35:fb:84:fe:60:d9:27:9d:44:bd:11:17:5b:48:
         22:58:00:17:4d:8a:dd:20:39:11:52:bb:93:63:ab:ce:80:f7:
         83:6b:ae:ef:0c:c6:79:db:60:f5:73:50:07:76:ae:67:b9:41:
         ae:01:5b:d1:49:ed:b7:63:d5:de:cc:fd:8c:c9:81:94:09:aa:
         b7:0a:3c:1b:81:3b:86:98:46:e0:26:ce:18:30:5c:9c:92:f2:
         09:18:0b:44:77:8a:89:c8:14:66:91:d1:82:bc:3c:f2:ff:34:
         9a:97:7c:f0:5b:94:8e:37:57:0c:a9:a9:af:82:e9:97:9d:d8:
         63:bc:61:32:50:de:bc:a5:72:75:ed:43:30:16:45:7c:c3:03:
         ac:3d:17:0f:0d:33:2b:c2:6d:44:ff:25:bc:b5:38:e6:8f:5e:
         29:40:2e:c1:bb:9e:b1:0c:69:5a:92:9b:5d:7d:a8:d7:c9:53:
         0b:b0:53:16:f1:e5:c0:29:a1:4c:a5:9f:cf:e3:72:01:ea:5a:
         f2:6a:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net