Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/6yCnj8gsjjmbHRXKyzqyBYG80sU.roa
File:                     6yCnj8gsjjmbHRXKyzqyBYG80sU.roa (raw, json)
Hash identifier:          PPq/O0i5tXX3GP9H32djAY0UXQ3K8Slc/NFtjt0TP5Y=
Subject key identifier:   EB:20:A7:8F:C8:2C:8E:39:9B:1D:15:CA:CB:3A:B2:05:81:BC:D2:C5
Certificate issuer:       /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial:       0A2E9801
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/6yCnj8gsjjmbHRXKyzqyBYG80sU.roa
Signing time:             Wed 19 Jan 2022 13:57:11 +0000
ROA not before:           Wed 19 Jan 2022 13:57:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9021
IP address blocks:        213.161.128.0/19 maxlen: 19
                          213.161.128.0/21 maxlen: 21
                          213.161.136.0/21 maxlen: 21
                          213.161.135.0/24 maxlen: 24
                          213.161.145.0/24 maxlen: 24
                          213.161.144.0/23 maxlen: 23
                          213.161.144.0/24 maxlen: 24
                          213.161.146.0/24 maxlen: 24
                          213.161.150.0/24 maxlen: 24
                          213.161.148.0/23 maxlen: 23
                          213.161.149.0/24 maxlen: 24
                          213.161.148.0/24 maxlen: 24
                          213.161.152.0/24 maxlen: 24
                          213.161.152.0/21 maxlen: 21
                          90.159.128.0/20 maxlen: 20
                          90.159.44.0/22 maxlen: 22
                          90.159.50.0/24 maxlen: 24
                          90.159.51.0/24 maxlen: 24
                          90.159.58.0/24 maxlen: 24
                          90.159.59.0/24 maxlen: 24
                          90.159.68.0/24 maxlen: 24
                          90.159.64.0/18 maxlen: 18
                          90.159.240.0/20 maxlen: 20
                          90.159.246.0/24 maxlen: 24
                          90.158.136.0/21 maxlen: 21
                          90.158.139.0/24 maxlen: 24
                          212.98.0.0/19 maxlen: 19
                          212.98.2.0/24 maxlen: 24
                          212.98.1.0/24 maxlen: 24
                          212.98.0.0/20 maxlen: 20
                          90.158.160.0/24 maxlen: 24
                          212.98.8.0/21 maxlen: 21
                          212.98.9.0/24 maxlen: 24
                          212.98.16.0/24 maxlen: 24
                          212.98.16.0/21 maxlen: 21
                          90.158.96.0/22 maxlen: 22
                          90.158.101.0/24 maxlen: 24
                          90.158.100.0/24 maxlen: 24
                          90.158.105.0/24 maxlen: 24
                          90.158.104.0/24 maxlen: 24
                          90.158.102.0/23 maxlen: 23
                          90.158.111.0/24 maxlen: 24
                          90.158.110.0/24 maxlen: 24
                          90.158.109.0/24 maxlen: 24
                          90.158.114.0/24 maxlen: 24
                          90.158.112.0/20 maxlen: 20
                          90.158.116.0/24 maxlen: 24
                          90.158.119.0/24 maxlen: 24
                          90.158.122.0/24 maxlen: 24
                          90.158.121.0/24 maxlen: 24
                          90.158.120.0/24 maxlen: 24
                          90.158.123.0/24 maxlen: 24
                          90.158.126.0/24 maxlen: 24
                          90.158.128.0/21 maxlen: 21
                          90.158.127.0/24 maxlen: 24
                          90.158.128.0/17 maxlen: 17
                          90.158.240.0/21 maxlen: 21
                          90.158.248.0/21 maxlen: 21
                          90.158.249.0/24 maxlen: 24
                          90.159.2.0/24 maxlen: 24
                          90.159.1.0/24 maxlen: 24
                          90.159.0.0/24 maxlen: 24
                          90.159.0.0/22 maxlen: 22
                          90.159.3.0/24 maxlen: 24
                          90.159.0.0/16 maxlen: 16
                          90.159.10.0/24 maxlen: 24
                          90.159.15.0/24 maxlen: 24
                          90.159.20.0/24 maxlen: 24
                          90.159.29.0/24 maxlen: 24
                          90.159.27.0/24 maxlen: 24
                          90.159.31.0/24 maxlen: 24
                          90.159.33.0/24 maxlen: 24
                          90.159.36.0/24 maxlen: 24
                          90.159.34.0/24 maxlen: 24
                          90.159.38.0/24 maxlen: 24
                          90.159.37.0/24 maxlen: 24
                          212.98.28.0/22 maxlen: 22
                          90.158.200.0/23 maxlen: 23
                          213.143.255.0/24 maxlen: 24
                          213.143.254.0/24 maxlen: 24
                          90.158.28.0/24 maxlen: 24
                          90.158.26.0/24 maxlen: 24
                          90.158.30.0/24 maxlen: 24
                          90.158.29.0/24 maxlen: 24
                          90.158.32.0/24 maxlen: 24
                          90.158.33.0/24 maxlen: 24
                          90.158.37.0/24 maxlen: 24
                          90.158.36.0/24 maxlen: 24
                          90.158.39.0/24 maxlen: 24
                          90.158.44.0/24 maxlen: 24
                          90.158.43.0/24 maxlen: 24
                          90.158.50.0/23 maxlen: 23
                          90.158.51.0/24 maxlen: 24
                          90.158.46.0/24 maxlen: 24
                          90.158.48.0/20 maxlen: 20
                          90.158.48.0/24 maxlen: 24
                          90.158.47.0/24 maxlen: 24
                          90.158.52.0/23 maxlen: 23
                          90.158.53.0/24 maxlen: 24
                          90.158.52.0/24 maxlen: 24
                          90.158.56.0/24 maxlen: 24
                          90.158.55.0/24 maxlen: 24
                          90.158.54.0/23 maxlen: 23
                          90.158.60.0/24 maxlen: 24
                          90.158.62.0/24 maxlen: 24
                          90.158.64.0/21 maxlen: 21
                          90.158.64.0/24 maxlen: 24
                          90.158.66.0/24 maxlen: 24
                          90.158.65.0/24 maxlen: 24
                          90.158.68.0/24 maxlen: 24
                          90.158.67.0/24 maxlen: 24
                          90.158.73.0/24 maxlen: 24
                          90.158.72.0/24 maxlen: 24
                          90.158.72.0/22 maxlen: 22
                          90.158.75.0/24 maxlen: 24
                          90.158.74.0/24 maxlen: 24
                          90.158.0.0/23 maxlen: 23
                          90.158.0.0/22 maxlen: 22
                          90.158.0.0/18 maxlen: 18
                          90.158.3.0/24 maxlen: 24
                          90.158.0.0/16 maxlen: 16
                          90.158.8.0/24 maxlen: 24
                          90.158.16.0/24 maxlen: 24
                          90.158.15.0/24 maxlen: 24
                          90.158.18.0/24 maxlen: 24
                          90.158.19.0/24 maxlen: 24
                          90.158.24.0/24 maxlen: 24
                          213.143.224.0/20 maxlen: 20
                          213.143.226.0/24 maxlen: 24
                          213.143.226.0/23 maxlen: 23
                          213.143.228.0/24 maxlen: 24
                          213.143.227.0/24 maxlen: 24
                          213.143.230.0/24 maxlen: 24
                          213.143.229.0/24 maxlen: 24
                          213.143.233.0/24 maxlen: 24
                          213.143.235.0/24 maxlen: 24
                          213.143.234.0/24 maxlen: 24
                          213.143.238.0/24 maxlen: 24
                          213.143.236.0/22 maxlen: 22
                          213.143.240.0/24 maxlen: 24
                          213.143.240.0/22 maxlen: 22
                          213.143.239.0/24 maxlen: 24
                          213.143.240.0/20 maxlen: 20
                          213.143.241.0/24 maxlen: 24
                          213.143.244.0/22 maxlen: 22
                          213.143.243.0/24 maxlen: 24
                          213.143.252.0/24 maxlen: 24
                          213.143.251.0/24 maxlen: 24
                          213.143.250.0/24 maxlen: 24
                          213.143.253.0/24 maxlen: 24
                          2a00:1f90::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170825729 (0xa2e9801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
        Validity
            Not Before: Jan 19 13:57:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb20a78fc82c8e399b1d15cacb3ab20581bcd2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:f4:88:ec:52:85:82:f5:1a:f5:22:05:04:
                    e9:a3:28:b3:91:30:62:7e:2c:5b:38:ed:97:9b:08:
                    49:8e:36:3f:de:95:1f:be:9f:39:51:b7:05:ae:9d:
                    27:4d:2c:74:18:19:99:c3:a4:b4:58:7b:0a:01:b8:
                    30:a9:b4:48:de:68:d4:23:9b:8b:6f:7c:30:80:3d:
                    63:87:ea:0e:9f:b5:6b:e8:2e:20:ca:db:f5:6a:9f:
                    16:b1:14:d6:ed:7f:da:8c:82:32:7a:84:6c:c5:86:
                    50:16:2b:63:8d:53:00:84:65:4d:73:f8:a7:97:3a:
                    32:b2:c7:9b:2f:32:de:3e:9f:03:1e:86:24:79:d8:
                    06:41:ea:3a:61:b0:72:26:dc:33:e5:36:14:6c:3e:
                    e3:a3:71:7e:27:48:2f:f3:57:cf:5a:d3:0e:67:8a:
                    a1:42:7d:8f:53:24:4d:9f:f9:22:2e:9b:a9:76:32:
                    00:d0:48:a7:06:3e:2a:1d:79:a1:12:69:7d:cd:2c:
                    bb:4f:0a:82:c1:bb:1d:95:b7:ce:ce:d0:eb:fb:40:
                    c5:2d:63:e7:63:e7:7e:f1:2d:87:0d:3c:90:81:7f:
                    25:2d:7f:7a:5b:83:8d:eb:6f:cf:35:c6:c4:c2:6b:
                    87:ad:18:54:fc:0d:df:31:1c:33:81:0b:46:e2:52:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:20:A7:8F:C8:2C:8E:39:9B:1D:15:CA:CB:3A:B2:05:81:BC:D2:C5
            X509v3 Authority Key Identifier:
                keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/6yCnj8gsjjmbHRXKyzqyBYG80sU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  90.158.0.0/15
                  212.98.0.0/19
                  213.143.224.0/19
                  213.161.128.0/19
                IPv6:
                  2a00:1f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:19:c1:b3:ed:7f:54:5d:21:9f:77:e6:aa:1a:25:76:17:9e:
         87:5d:62:4f:0f:37:7a:50:e4:d1:d6:ad:02:61:8e:ca:18:89:
         35:68:b0:1d:34:5a:3d:8d:60:e6:9d:9d:0c:21:3d:49:33:4a:
         f2:6b:02:bf:6f:1a:b9:14:a5:c3:2c:87:31:ea:ed:a4:a3:a0:
         51:e4:0b:be:b2:af:e8:ad:00:a7:bd:5f:8d:be:c8:9e:a1:eb:
         79:9d:9e:2c:0b:23:ab:45:57:3e:27:d4:7e:ed:f0:5f:47:1c:
         04:b5:e7:62:08:87:e4:c5:04:fc:a3:eb:a5:12:84:8b:22:6c:
         f1:4c:15:e4:07:93:45:df:b5:5f:78:b9:b9:27:5b:6d:b4:26:
         b1:ae:14:5e:27:df:71:ba:61:34:16:10:25:4d:57:23:7e:01:
         0e:ee:43:3f:ff:a8:5c:d2:32:bb:d9:7a:53:d7:ec:5b:d9:13:
         d9:75:ca:3f:e9:94:87:a9:42:1b:bb:0d:a4:8f:c8:a5:a6:38:
         03:56:76:66:e7:25:f8:29:ba:2e:ce:38:6d:d1:3b:11:7b:d0:
         64:20:fe:e6:1b:a1:32:7e:58:74:9c:f5:1c:1a:79:7b:f8:4e:
         52:ac:ad:63:08:fe:88:71:be:79:1b:36:55:01:d8:fa:9a:1d:
         b1:9b:b6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:14 2024 by rpki-client on console-fra.rpki-client.org