Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/tN762PM7A6APTrqLZai0Ci_tC0I.roa
File:                     tN762PM7A6APTrqLZai0Ci_tC0I.roa (raw, json)
Hash identifier:          9fdv/lXTqBsT94AZrdyG50SFITcN3GkQgBQQ7zSrvyM=
Subject key identifier:   B4:DE:FA:D8:F3:3B:03:A0:0F:4E:BA:8B:65:A8:B4:0A:2F:ED:0B:42
Certificate issuer:       /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial:       01851001D4749C74EA55D26C57FEB6AC3647
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/tN762PM7A6APTrqLZai0Ci_tC0I.roa
Signing time:             Wed 14 Dec 2022 09:40:33 +0000
ROA not before:           Wed 14 Dec 2022 09:40:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12302
IP address blocks:        81.12.216.0/21 maxlen: 21
                          81.12.224.0/21 maxlen: 21
                          81.12.231.0/24 maxlen: 24
                          81.12.230.0/24 maxlen: 24
                          81.12.229.0/24 maxlen: 24
                          81.12.228.0/24 maxlen: 24
                          81.12.232.0/21 maxlen: 21
                          81.12.245.0/24 maxlen: 24
                          81.12.243.0/24 maxlen: 24
                          81.12.242.0/24 maxlen: 24
                          81.12.240.0/21 maxlen: 21
                          81.12.246.0/24 maxlen: 24
                          81.12.248.0/21 maxlen: 21
                          81.12.247.0/24 maxlen: 24
                          81.12.160.0/21 maxlen: 21
                          81.12.168.0/21 maxlen: 21
                          81.12.176.0/21 maxlen: 21
                          81.12.184.0/21 maxlen: 21
                          81.12.192.0/21 maxlen: 21
                          81.12.192.0/24 maxlen: 24
                          81.12.195.0/24 maxlen: 24
                          81.12.199.0/24 maxlen: 24
                          81.12.200.0/21 maxlen: 21
                          81.12.200.0/23 maxlen: 23
                          81.12.208.0/21 maxlen: 21
                          136.255.224.0/20 maxlen: 20
                          136.255.251.0/24 maxlen: 24
                          81.12.128.0/17 maxlen: 17
                          81.12.132.0/23 maxlen: 23
                          136.255.0.0/16 maxlen: 24
                          81.12.128.0/21 maxlen: 21
                          81.12.136.0/21 maxlen: 21
                          81.12.134.0/24 maxlen: 24
                          81.12.144.0/21 maxlen: 21
                          81.12.152.0/21 maxlen: 21
                          81.12.153.0/24 maxlen: 24
                          81.12.159.0/24 maxlen: 24
                          213.233.123.0/24 maxlen: 24
                          213.233.122.0/24 maxlen: 24
                          213.233.121.0/24 maxlen: 24
                          213.233.120.0/24 maxlen: 24
                          213.233.119.0/24 maxlen: 24
                          213.233.125.0/24 maxlen: 24
                          213.233.124.0/24 maxlen: 24
                          213.233.127.0/24 maxlen: 24
                          213.233.126.0/24 maxlen: 24
                          165.78.160.0/19 maxlen: 19
                          213.233.67.0/24 maxlen: 24
                          213.233.66.0/24 maxlen: 24
                          213.233.65.0/24 maxlen: 24
                          213.233.71.0/24 maxlen: 24
                          213.233.70.0/24 maxlen: 24
                          213.233.69.0/24 maxlen: 24
                          213.233.68.0/24 maxlen: 24
                          213.233.74.0/24 maxlen: 24
                          213.233.73.0/24 maxlen: 24
                          213.233.72.0/24 maxlen: 24
                          213.233.78.0/24 maxlen: 24
                          213.233.77.0/24 maxlen: 24
                          213.233.76.0/24 maxlen: 24
                          213.233.75.0/24 maxlen: 24
                          213.233.81.0/24 maxlen: 24
                          213.233.80.0/24 maxlen: 24
                          213.233.79.0/24 maxlen: 24
                          213.233.85.0/24 maxlen: 24
                          213.233.84.0/24 maxlen: 24
                          165.78.96.0/19 maxlen: 19
                          213.233.83.0/24 maxlen: 24
                          213.233.82.0/24 maxlen: 24
                          213.233.88.0/24 maxlen: 24
                          213.233.87.0/24 maxlen: 24
                          213.233.86.0/24 maxlen: 24
                          213.233.91.0/24 maxlen: 24
                          213.233.90.0/24 maxlen: 24
                          213.233.89.0/24 maxlen: 24
                          213.233.95.0/24 maxlen: 24
                          213.233.94.0/24 maxlen: 24
                          213.233.93.0/24 maxlen: 24
                          213.233.92.0/24 maxlen: 24
                          213.233.98.0/24 maxlen: 24
                          213.233.97.0/24 maxlen: 24
                          213.233.96.0/24 maxlen: 24
                          213.233.102.0/24 maxlen: 24
                          213.233.101.0/24 maxlen: 24
                          213.233.100.0/24 maxlen: 24
                          213.233.99.0/24 maxlen: 24
                          213.233.105.0/24 maxlen: 24
                          213.233.104.0/24 maxlen: 24
                          213.233.103.0/24 maxlen: 24
                          213.233.109.0/24 maxlen: 24
                          213.233.108.0/24 maxlen: 24
                          213.233.107.0/24 maxlen: 24
                          213.233.106.0/24 maxlen: 24
                          213.233.112.0/24 maxlen: 24
                          213.233.111.0/24 maxlen: 24
                          213.233.110.0/24 maxlen: 24
                          213.233.118.0/24 maxlen: 24
                          213.233.117.0/24 maxlen: 24
                          213.233.116.0/24 maxlen: 24
                          165.78.128.0/21 maxlen: 21
                          165.78.128.0/19 maxlen: 19
                          213.233.115.0/24 maxlen: 24
                          213.233.114.0/24 maxlen: 24
                          213.233.113.0/24 maxlen: 24
                          165.78.192.0/21 maxlen: 21
                          165.78.192.0/19 maxlen: 19
                          165.78.224.0/19 maxlen: 19
                          46.97.232.0/21 maxlen: 21
                          46.97.240.0/21 maxlen: 21
                          46.97.176.0/21 maxlen: 21
                          46.97.184.0/21 maxlen: 21
                          46.97.192.0/21 maxlen: 21
                          46.97.200.0/21 maxlen: 21
                          46.97.208.0/21 maxlen: 21
                          46.97.216.0/21 maxlen: 21
                          46.97.224.0/21 maxlen: 21
                          217.10.192.0/24 maxlen: 24
                          217.10.193.0/24 maxlen: 24
                          217.10.199.0/24 maxlen: 24
                          217.10.198.0/24 maxlen: 24
                          217.10.197.0/24 maxlen: 24
                          217.10.196.0/24 maxlen: 24
                          217.10.195.0/24 maxlen: 24
                          165.78.32.0/19 maxlen: 19
                          217.10.194.0/24 maxlen: 24
                          217.10.200.0/24 maxlen: 24
                          217.10.206.0/24 maxlen: 24
                          217.10.205.0/24 maxlen: 24
                          217.10.204.0/24 maxlen: 24
                          217.10.203.0/24 maxlen: 24
                          217.10.202.0/24 maxlen: 24
                          217.10.201.0/24 maxlen: 24
                          217.10.207.0/24 maxlen: 24
                          217.10.213.0/24 maxlen: 24
                          217.10.212.0/24 maxlen: 24
                          217.10.211.0/24 maxlen: 24
                          217.10.210.0/24 maxlen: 24
                          217.10.209.0/24 maxlen: 24
                          217.10.208.0/24 maxlen: 24
                          217.10.214.0/24 maxlen: 24
                          217.10.219.0/24 maxlen: 24
                          217.10.218.0/24 maxlen: 24
                          217.10.217.0/24 maxlen: 24
                          217.10.216.0/24 maxlen: 24
                          217.10.215.0/24 maxlen: 24
                          217.10.221.0/24 maxlen: 24
                          217.10.220.0/24 maxlen: 24
                          165.78.64.0/21 maxlen: 21
                          165.78.64.0/19 maxlen: 19
                          217.10.223.0/24 maxlen: 24
                          217.10.222.0/24 maxlen: 24
                          213.233.64.0/24 maxlen: 24
                          165.78.0.0/21 maxlen: 21
                          165.78.0.0/19 maxlen: 19
                          165.78.0.0/16 maxlen: 16
                          46.97.16.0/21 maxlen: 21
                          46.97.24.0/21 maxlen: 21
                          46.97.32.0/21 maxlen: 21
                          46.97.40.0/21 maxlen: 21
                          46.97.48.0/21 maxlen: 21
                          46.97.56.0/21 maxlen: 21
                          46.97.64.0/21 maxlen: 21
                          46.97.0.0/21 maxlen: 21
                          46.97.8.0/21 maxlen: 21
                          46.97.0.0/16 maxlen: 16
                          46.97.120.0/21 maxlen: 21
                          46.97.128.0/24 maxlen: 24
                          46.97.136.0/21 maxlen: 21
                          46.97.144.0/21 maxlen: 21
                          46.97.152.0/24 maxlen: 24
                          46.97.152.0/21 maxlen: 21
                          46.97.153.0/24 maxlen: 24
                          46.97.156.0/24 maxlen: 24
                          46.97.155.0/24 maxlen: 24
                          46.97.160.0/21 maxlen: 21
                          46.97.168.0/21 maxlen: 21
                          46.97.72.0/21 maxlen: 21
                          46.97.80.0/21 maxlen: 21
                          46.97.88.0/21 maxlen: 21
                          46.97.96.0/21 maxlen: 21
                          46.97.104.0/21 maxlen: 21
                          46.97.104.0/24 maxlen: 24
                          46.97.112.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:10:01:d4:74:9c:74:ea:55:d2:6c:57:fe:b6:ac:36:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
        Validity
            Not Before: Dec 14 09:40:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b4defad8f33b03a00f4eba8b65a8b40a2fed0b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:dd:33:4e:6c:65:32:77:c4:43:f9:06:19:
                    36:e0:21:c6:98:32:54:22:aa:00:82:53:93:43:c8:
                    5c:92:55:b3:be:8d:0f:11:f9:6f:fd:28:6d:29:6b:
                    dd:6c:f0:88:18:b4:7c:cf:ea:19:8c:bb:e1:58:a5:
                    e6:2f:9b:8a:ca:ab:5f:64:39:a3:68:d7:1f:d6:f2:
                    8d:9a:e9:08:4a:5e:96:a0:86:f6:6d:df:d0:21:dc:
                    ab:d4:70:64:01:7d:4f:e4:8d:fc:49:06:2a:cd:ca:
                    fc:b8:bd:9b:2a:83:8a:80:f2:48:d6:e7:13:c9:42:
                    44:fa:41:3c:6c:fe:8f:06:ac:63:30:4f:4f:12:07:
                    2a:77:0e:e2:e4:ef:cc:3c:1f:8b:45:dc:b1:5a:20:
                    fb:ff:04:c6:ea:a6:74:1c:54:a1:3f:1c:39:62:9e:
                    40:19:a7:0c:b8:ff:ee:9b:4c:3e:e8:84:f8:4d:25:
                    8c:6b:06:45:4e:92:85:9c:0a:9a:32:16:22:d0:a8:
                    a9:ac:e4:86:15:8d:10:86:09:59:85:c8:e2:25:b0:
                    a5:10:d4:31:f0:c3:71:d9:c7:9b:40:18:e8:ee:99:
                    09:85:95:c8:52:57:4b:59:6c:1d:2d:b3:17:36:2b:
                    a0:7f:74:13:f3:a3:35:96:70:cb:7e:d0:0c:ce:a6:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DE:FA:D8:F3:3B:03:A0:0F:4E:BA:8B:65:A8:B4:0A:2F:ED:0B:42
            X509v3 Authority Key Identifier:
                keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/tN762PM7A6APTrqLZai0Ci_tC0I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.97.0.0/16
                  81.12.128.0/17
                  136.255.0.0/16
                  165.78.0.0/16
                  213.233.64.0/18
                  217.10.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:77:88:86:c6:6e:d6:88:4d:72:1b:4c:f7:44:39:d7:cf:97:
         f3:e0:71:fd:d3:a6:14:ac:66:b7:0a:6f:14:a6:0a:82:3a:89:
         55:5f:c2:fe:89:96:9a:86:01:fe:af:0c:32:93:a0:ad:9e:c0:
         26:bd:ab:84:40:11:47:75:3a:29:9e:ce:a4:cd:8c:0f:87:ee:
         9f:f7:25:ff:c2:0b:f5:11:c1:a9:77:50:65:c4:f3:4b:3f:80:
         12:36:42:86:4b:4c:19:5c:1d:b1:81:2b:e7:2f:e0:9d:09:3b:
         85:93:a7:45:61:a3:a0:76:a5:07:cb:93:31:4e:ab:e0:71:c3:
         58:6c:80:d1:43:99:0d:81:fc:d0:64:1a:8d:1d:a1:54:0a:10:
         a1:33:eb:5d:dd:dd:2e:97:40:06:d3:0f:e0:a6:af:c9:2f:f1:
         e3:8a:df:e0:06:6d:e1:62:5f:12:42:66:29:55:3a:8f:20:b9:
         13:92:a0:1f:cc:53:f9:bd:99:b9:ef:ab:af:a4:53:d3:12:46:
         95:bc:03:03:94:74:bb:1d:c3:ff:49:fa:34:38:c5:be:46:55:
         5c:be:63:5c:b7:d4:18:e7:a3:0d:9f:23:a1:dd:86:00:81:e6:
         1f:00:2b:ee:c1:31:ca:c1:10:58:74:28:b5:b0:5e:60:26:c7:
         a9:ad:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:31 2024 by rpki-client on console-ams.rpki-client.org