Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/q0VkKXcJWEIw1f5rJ6lkCx7Z4ww.roa
File:                     q0VkKXcJWEIw1f5rJ6lkCx7Z4ww.roa (raw, json)
Hash identifier:          aOe3sD5F1hjjEJ4xONsaXpEHoqhbjqibZJcdEzB9axE=
Subject key identifier:   AB:45:64:29:77:09:58:42:30:D5:FE:6B:27:A9:64:0B:1E:D9:E3:0C
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       4067C503
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/q0VkKXcJWEIw1f5rJ6lkCx7Z4ww.roa
Signing time:             Sat 01 Jan 2022 14:08:37 +0000
ROA not before:           Sat 01 Jan 2022 14:08:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33915
IP address blocks:        213.127.128.0/17 maxlen: 17
                          213.93.128.0/17 maxlen: 17
                          213.160.252.0/22 maxlen: 22
                          213.160.248.0/21 maxlen: 21
                          213.160.248.0/22 maxlen: 22
                          213.46.128.0/17 maxlen: 17
                          62.195.0.0/16 maxlen: 16
                          212.187.64.0/18 maxlen: 18
                          62.194.0.0/16 maxlen: 16
                          62.194.0.0/15 maxlen: 15
                          213.93.0.0/17 maxlen: 17
                          213.93.0.0/16 maxlen: 16
                          212.187.0.0/18 maxlen: 18
                          212.187.0.0/17 maxlen: 17
                          80.113.0.0/17 maxlen: 17
                          80.113.0.0/16 maxlen: 16
                          213.126.128.0/18 maxlen: 18
                          213.126.128.0/17 maxlen: 17
                          80.113.128.0/17 maxlen: 17
                          213.127.0.0/17 maxlen: 17
                          213.127.0.0/16 maxlen: 16
                          213.160.192.0/19 maxlen: 19
                          213.160.192.0/20 maxlen: 20
                          213.160.208.0/20 maxlen: 20
                          213.126.192.0/18 maxlen: 18
                          77.248.0.0/15 maxlen: 15
                          77.248.0.0/14 maxlen: 14
                          213.46.0.0/17 maxlen: 17
                          213.46.0.0/16 maxlen: 16
                          24.132.128.0/17 maxlen: 17
                          217.105.240.0/20 maxlen: 20
                          89.99.0.0/16 maxlen: 16
                          217.105.224.0/20 maxlen: 20
                          217.105.224.0/19 maxlen: 19
                          213.124.224.0/19 maxlen: 19
                          217.104.192.0/18 maxlen: 18
                          89.98.0.0/16 maxlen: 16
                          89.98.0.0/15 maxlen: 15
                          213.124.160.0/20 maxlen: 20
                          213.124.160.0/19 maxlen: 19
                          213.124.176.0/20 maxlen: 20
                          217.104.128.0/18 maxlen: 18
                          217.104.128.0/17 maxlen: 17
                          213.124.192.0/19 maxlen: 19
                          213.124.192.0/18 maxlen: 18
                          24.132.0.0/17 maxlen: 17
                          24.132.0.0/16 maxlen: 16
                          217.105.32.0/19 maxlen: 19
                          178.85.0.0/16 maxlen: 16
                          217.105.0.0/18 maxlen: 18
                          217.105.0.0/19 maxlen: 19
                          31.151.0.0/17 maxlen: 17
                          31.151.0.0/16 maxlen: 16
                          217.63.128.0/18 maxlen: 18
                          217.63.128.0/19 maxlen: 19
                          95.97.0.0/16 maxlen: 16
                          178.84.0.0/16 maxlen: 16
                          178.84.0.0/15 maxlen: 15
                          31.151.128.0/17 maxlen: 17
                          212.178.32.0/19 maxlen: 19
                          212.178.32.0/20 maxlen: 20
                          217.63.160.0/19 maxlen: 19
                          212.178.48.0/20 maxlen: 20
                          185.137.202.0/23 maxlen: 23
                          185.137.200.0/23 maxlen: 23
                          185.137.200.0/22 maxlen: 22
                          80.57.0.0/16 maxlen: 16
                          217.103.0.0/17 maxlen: 17
                          217.103.0.0/16 maxlen: 16
                          95.96.0.0/16 maxlen: 16
                          95.96.0.0/15 maxlen: 15
                          62.163.128.0/17 maxlen: 17
                          212.83.64.0/19 maxlen: 19
                          212.83.64.0/20 maxlen: 20
                          217.103.128.0/17 maxlen: 17
                          212.83.80.0/20 maxlen: 20
                          80.56.0.0/16 maxlen: 16
                          80.56.0.0/15 maxlen: 15
                          92.110.0.0/15 maxlen: 15
                          217.102.64.0/18 maxlen: 18
                          217.102.0.0/18 maxlen: 18
                          217.102.0.0/17 maxlen: 17
                          46.129.0.0/17 maxlen: 17
                          46.129.0.0/16 maxlen: 16
                          46.129.128.0/17 maxlen: 17
                          62.163.0.0/17 maxlen: 17
                          62.163.0.0/16 maxlen: 16
                          81.175.96.0/19 maxlen: 19
                          62.108.0.0/20 maxlen: 20
                          62.108.0.0/19 maxlen: 19
                          62.108.16.0/20 maxlen: 20
                          92.108.0.0/15 maxlen: 15
                          92.108.0.0/14 maxlen: 14
                          213.34.0.0/19 maxlen: 19
                          213.34.0.0/20 maxlen: 20
                          213.34.16.0/20 maxlen: 20
                          81.175.64.0/19 maxlen: 19
                          81.175.64.0/18 maxlen: 18
                          77.250.0.0/15 maxlen: 15
                          2a02:a200::/28 maxlen: 28
                          2a02:a200::/27 maxlen: 27
                          2a02:a210::/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080542467 (0x4067c503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Jan  1 14:08:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab4564297709584230d5fe6b27a9640b1ed9e30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:94:21:b9:9e:36:e6:af:cf:1e:32:07:c3:
                    5a:c7:7a:70:45:b6:7c:db:76:db:2c:19:4d:ea:7b:
                    86:33:1b:24:cb:00:7c:7e:81:7d:6a:ba:3a:a8:ee:
                    57:54:12:60:b0:68:68:3f:e5:58:3d:89:22:1b:8b:
                    f3:17:2e:a1:c3:54:b3:42:23:ed:0c:29:55:71:1d:
                    31:67:5f:15:39:0b:22:08:9e:4e:36:d1:b1:1a:6e:
                    a2:18:9f:21:dd:e1:51:1d:2b:d6:92:b4:bd:60:59:
                    d3:53:ad:a3:13:a1:40:be:64:98:9f:67:bd:2b:98:
                    56:ea:d0:0b:7c:48:10:b1:4b:11:1b:3e:00:a3:e3:
                    0b:90:fb:f9:bd:44:d8:97:94:40:c7:2d:47:71:70:
                    85:6b:2b:04:40:6b:d2:2c:a7:01:9d:22:83:59:fc:
                    10:91:11:75:4c:4b:a2:b7:a0:ae:a6:94:97:82:cd:
                    e8:8f:05:e7:ad:ed:5b:cf:9a:de:6a:da:f1:04:6f:
                    91:f1:82:84:81:b4:fa:30:04:d3:b1:99:d8:3d:47:
                    9d:29:66:c5:63:7a:10:00:77:6a:b6:90:f5:7f:e6:
                    35:ac:a7:67:bd:f0:f8:b8:9e:98:74:30:6d:62:34:
                    ab:0e:38:2a:fd:08:91:79:c0:a7:1f:5e:f6:37:af:
                    c5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:45:64:29:77:09:58:42:30:D5:FE:6B:27:A9:64:0B:1E:D9:E3:0C
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/q0VkKXcJWEIw1f5rJ6lkCx7Z4ww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.132.0.0/16
                  31.151.0.0/16
                  46.129.0.0/16
                  62.108.0.0/19
                  62.163.0.0/16
                  62.194.0.0/15
                  77.248.0.0/14
                  80.56.0.0/15
                  80.113.0.0/16
                  81.175.64.0/18
                  89.98.0.0/15
                  92.108.0.0/14
                  95.96.0.0/15
                  178.84.0.0/15
                  185.137.200.0/22
                  212.83.64.0/19
                  212.178.32.0/19
                  212.187.0.0/17
                  213.34.0.0/19
                  213.46.0.0/16
                  213.93.0.0/16
                  213.124.160.0-213.124.255.255
                  213.126.128.0-213.127.255.255
                  213.160.192.0/19
                  213.160.248.0/21
                  217.63.128.0/18
                  217.102.0.0/17
                  217.103.0.0/16
                  217.104.128.0-217.105.63.255
                  217.105.224.0/19
                IPv6:
                  2a02:a200::/27

    Signature Algorithm: sha256WithRSAEncryption
         12:74:18:c9:17:1f:06:26:61:4f:32:b3:15:bf:44:95:90:37:
         68:85:16:ce:c9:d2:f3:4a:93:8c:62:e5:56:02:da:8f:60:df:
         89:50:2e:f9:72:e7:e0:dd:7e:b3:6d:f3:52:5b:69:27:80:45:
         df:2e:3c:b5:96:1d:7f:3a:50:e6:f7:91:f5:20:e8:ac:fd:ee:
         08:55:68:37:d3:e6:21:c0:7f:34:d9:bf:de:de:8b:39:3d:6a:
         2d:f6:cc:48:bd:c7:c3:aa:b6:1f:35:f7:46:0a:39:12:8a:a4:
         2d:9d:70:b5:9a:68:de:43:e6:e3:07:73:a3:cf:ed:71:fe:cc:
         b2:85:85:17:ba:0c:98:22:ae:06:09:45:ae:f5:13:87:e5:1b:
         b0:f5:89:fc:c3:8e:f2:88:95:c0:1c:bb:91:89:62:8e:12:90:
         81:1a:cb:f5:56:19:04:35:bf:ca:6d:22:6c:7e:52:c7:76:36:
         4e:a3:a4:2f:1d:16:cf:5e:fa:37:64:a0:6b:04:56:90:8b:87:
         58:19:ea:52:bb:1f:a5:6f:cb:5b:a4:ba:47:d9:70:d9:61:e1:
         0c:d1:eb:86:dd:8d:44:d3:f1:c8:62:c7:6e:05:50:47:6b:5d:
         76:a6:b7:63:a7:20:ad:e0:ee:9e:a4:42:67:85:37:d1:d8:36:
         8e:aa:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org