Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BXCsX1p7Yspu3XNwkj79Q9C5SCc.roa
File:                     BXCsX1p7Yspu3XNwkj79Q9C5SCc.roa (raw, json)
Hash identifier:          OjL0fHVtcdyp3E6a1630nMuhF52zthw9mnDrNF+J4Pw=
Subject key identifier:   05:70:AC:5F:5A:7B:62:CA:6E:DD:73:70:92:3E:FD:43:D0:B9:48:27
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       01826D29AB0919153CA7889459E51E53ED9E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BXCsX1p7Yspu3XNwkj79Q9C5SCc.roa
Signing time:             Fri 05 Aug 2022 08:40:23 +0000
ROA not before:           Fri 05 Aug 2022 08:40:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12741
IP address blocks:        77.252.0.0/14 maxlen: 14
                          159.205.0.0/16 maxlen: 16
                          193.19.104.0/23 maxlen: 23
                          89.171.0.0/16 maxlen: 16
                          62.87.128.0/17 maxlen: 17
                          178.16.116.0/24 maxlen: 24
                          178.16.121.0/24 maxlen: 24
                          178.16.125.0/24 maxlen: 24
                          62.181.160.0/19 maxlen: 19
                          213.134.128.0/19 maxlen: 19
                          87.204.0.0/15 maxlen: 15
                          62.244.128.0/19 maxlen: 19
                          82.143.128.0/18 maxlen: 18
                          62.89.64.0/18 maxlen: 18
                          77.65.188.0/24 maxlen: 24
                          77.65.193.0/24 maxlen: 24
                          77.65.209.0/24 maxlen: 24
                          213.241.0.0/17 maxlen: 17
                          178.36.0.0/15 maxlen: 15
                          213.238.64.0/18 maxlen: 18
                          213.241.89.0/24 maxlen: 24
                          83.238.0.0/16 maxlen: 16
                          62.233.128.0/17 maxlen: 17
                          81.210.0.0/17 maxlen: 17
                          5.226.135.0/24 maxlen: 24
                          213.186.64.0/19 maxlen: 19
                          77.65.134.0/24 maxlen: 24
                          212.106.0.0/19 maxlen: 19
                          77.65.155.0/24 maxlen: 24
                          77.65.171.0/24 maxlen: 24
                          213.146.32.0/19 maxlen: 19
                          78.8.0.0/14 maxlen: 14
                          62.111.128.0/17 maxlen: 17
                          37.128.0.0/17 maxlen: 17
                          85.128.0.0/17 maxlen: 17
                          62.148.64.0/19 maxlen: 19
                          84.40.128.0/17 maxlen: 17
                          81.168.128.0/17 maxlen: 17
                          81.219.0.0/16 maxlen: 16
                          193.91.16.0/20 maxlen: 20
                          195.114.160.0/19 maxlen: 19
                          85.202.54.0/24 maxlen: 24
                          85.202.59.0/24 maxlen: 24
                          213.195.128.0/18 maxlen: 18
                          217.30.128.0/19 maxlen: 19
                          213.17.128.0/17 maxlen: 17
                          5.226.92.0/24 maxlen: 24
                          213.216.64.0/18 maxlen: 18
                          193.192.173.0/24 maxlen: 24
                          93.159.0.0/18 maxlen: 18
                          193.192.181.0/24 maxlen: 24
                          193.192.190.0/24 maxlen: 24
                          193.192.188.0/24 maxlen: 24
                          62.111.250.0/24 maxlen: 24
                          5.226.64.0/18 maxlen: 18
                          87.105.0.0/16 maxlen: 16
                          2001:41b0::/32 maxlen: 32
                          2001:41b0:22b:100::/56 maxlen: 56
                          2001:16b0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6d:29:ab:09:19:15:3c:a7:88:94:59:e5:1e:53:ed:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Aug  5 08:40:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0570ac5f5a7b62ca6edd7370923efd43d0b94827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:6d:fd:3e:d3:6b:ce:ac:a5:9b:cd:79:36:
                    77:d9:60:a5:74:cc:56:e6:62:12:e0:5e:2f:f5:8e:
                    ce:94:91:e8:a7:f5:14:95:b7:1d:70:ad:96:5c:c5:
                    0c:3b:88:9c:0d:f6:38:d2:98:09:74:44:0b:8d:43:
                    04:82:e2:66:19:c3:50:7d:db:e7:a3:8c:57:6b:d8:
                    4f:49:b8:5c:df:06:dc:5e:51:81:e2:e5:7c:b0:f0:
                    27:46:66:11:03:28:ad:a0:c4:1f:78:25:30:32:76:
                    97:99:b6:cd:c9:0f:b9:c1:72:e1:7b:e5:c9:d3:5b:
                    32:77:07:b9:c3:be:0d:45:01:5a:21:dc:3e:ec:a0:
                    a0:0b:a5:48:a2:ae:76:a0:b4:2e:a0:5c:5b:fd:98:
                    e3:12:71:ff:99:e8:77:10:8e:14:6d:ca:2a:4c:2c:
                    76:58:4a:b2:a5:80:be:6b:de:07:9a:76:41:80:72:
                    c3:6c:24:c2:9e:b9:bb:d9:54:2f:7c:e1:32:9d:2b:
                    39:ee:e0:8c:a2:48:ad:bc:4d:9d:23:c3:46:ad:44:
                    1e:50:ad:7c:89:ef:e9:f6:ff:7c:c3:6e:2b:15:71:
                    84:18:06:e0:02:b9:9a:28:7c:f3:bf:61:c5:4b:f8:
                    d9:5f:e8:d5:4d:e8:31:21:7b:07:c0:7b:41:53:6c:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:70:AC:5F:5A:7B:62:CA:6E:DD:73:70:92:3E:FD:43:D0:B9:48:27
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BXCsX1p7Yspu3XNwkj79Q9C5SCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.64.0/18
                  5.226.135.0/24
                  37.128.0.0/17
                  62.87.128.0/17
                  62.89.64.0/18
                  62.111.128.0/17
                  62.148.64.0/19
                  62.181.160.0/19
                  62.233.128.0/17
                  62.244.128.0/19
                  77.65.134.0/24
                  77.65.155.0/24
                  77.65.171.0/24
                  77.65.188.0/24
                  77.65.193.0/24
                  77.65.209.0/24
                  77.252.0.0/14
                  78.8.0.0/14
                  81.168.128.0/17
                  81.210.0.0/17
                  81.219.0.0/16
                  82.143.128.0/18
                  83.238.0.0/16
                  84.40.128.0/17
                  85.128.0.0/17
                  85.202.54.0/24
                  85.202.59.0/24
                  87.105.0.0/16
                  87.204.0.0/15
                  89.171.0.0/16
                  93.159.0.0/18
                  159.205.0.0/16
                  178.16.116.0/24
                  178.16.121.0/24
                  178.16.125.0/24
                  178.36.0.0/15
                  193.19.104.0/23
                  193.91.16.0/20
                  193.192.173.0/24
                  193.192.181.0/24
                  193.192.188.0/24
                  193.192.190.0/24
                  195.114.160.0/19
                  212.106.0.0/19
                  213.17.128.0/17
                  213.134.128.0/19
                  213.146.32.0/19
                  213.186.64.0/19
                  213.195.128.0/18
                  213.216.64.0/18
                  213.238.64.0/18
                  213.241.0.0/17
                  217.30.128.0/19
                IPv6:
                  2001:16b0::/32
                  2001:41b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:46:b4:c2:f3:f5:ba:fd:f9:32:25:e7:9f:a9:74:b5:8c:a6:
         f6:58:cf:c6:bf:ef:74:48:ea:7a:b1:ad:26:aa:13:77:4e:42:
         4c:93:61:f3:65:2b:42:8c:7c:2a:04:b6:77:b9:e5:fb:fe:ff:
         0d:b2:e2:1f:23:c7:6c:98:67:0e:2d:de:80:a5:90:d3:f6:69:
         01:db:94:92:4b:1c:e3:06:87:08:ea:21:37:33:c8:4a:a7:69:
         31:e0:ff:9a:98:18:5d:c5:8e:6f:17:27:1d:90:a8:8e:39:87:
         47:75:3e:8b:5c:47:60:1b:5f:b8:35:60:a1:13:e0:78:d9:ba:
         39:af:96:16:52:4a:d9:e4:be:04:a1:95:82:75:07:eb:82:ab:
         b9:fc:01:00:84:54:17:9e:db:eb:2e:d7:c6:09:73:78:d6:12:
         67:f8:43:9d:26:cf:4d:a2:63:bd:90:5a:08:db:d5:81:5e:b0:
         27:79:c3:12:83:d8:3d:49:fe:ed:16:bd:17:0a:e1:46:89:68:
         bb:9b:fe:fc:dd:2d:0e:3c:91:1c:5e:07:27:e3:3a:ab:95:3c:
         19:63:78:04:c7:64:ed:eb:3d:0e:bd:e6:94:72:f0:d0:12:73:
         14:24:13:98:83:f4:81:56:17:ba:e9:46:52:0e:a4:d7:2e:ce:
         3e:4c:36:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org