Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/CElcdcKDybrCS-dcy1AweIqgPKo.roa
File:                     CElcdcKDybrCS-dcy1AweIqgPKo.roa (raw, json)
Hash identifier:          w9xkALL6Qpf1HwTSzstQGEHMaR7zY73KH8nDHJbU33o=
Subject key identifier:   08:49:5C:75:C2:83:C9:BA:C2:4B:E7:5C:CB:50:30:78:8A:A0:3C:AA
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       0E33574A
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/CElcdcKDybrCS-dcy1AweIqgPKo.roa
Signing time:             Wed 02 Mar 2022 08:32:46 +0000
ROA not before:           Wed 02 Mar 2022 08:32:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        37.19.195.0/24 maxlen: 24
                          37.19.198.0/23 maxlen: 23
                          37.19.196.0/23 maxlen: 23
                          45.134.142.0/24 maxlen: 24
                          45.134.140.0/24 maxlen: 24
                          37.19.201.0/24 maxlen: 24
                          37.19.200.0/24 maxlen: 24
                          37.19.205.0/24 maxlen: 24
                          37.19.211.0/24 maxlen: 24
                          37.19.210.0/24 maxlen: 24
                          37.19.209.0/24 maxlen: 24
                          37.19.212.0/23 maxlen: 23
                          37.19.217.0/24 maxlen: 24
                          37.19.221.0/24 maxlen: 24
                          37.19.220.0/24 maxlen: 24
                          37.19.223.0/24 maxlen: 24
                          156.146.37.0/24 maxlen: 24
                          156.146.39.0/24 maxlen: 24
                          156.146.41.0/24 maxlen: 24
                          156.146.46.0/23 maxlen: 23
                          156.146.46.0/24 maxlen: 24
                          156.146.45.0/24 maxlen: 24
                          156.146.51.0/24 maxlen: 24
                          156.146.50.0/24 maxlen: 24
                          156.146.48.0/24 maxlen: 24
                          156.146.47.0/24 maxlen: 24
                          156.146.57.0/24 maxlen: 24
                          156.146.55.0/24 maxlen: 24
                          156.146.54.0/24 maxlen: 24
                          156.146.60.0/24 maxlen: 24
                          156.146.63.0/24 maxlen: 24
                          156.146.62.0/24 maxlen: 24
                          138.199.10.0/23 maxlen: 23
                          84.17.36.0/24 maxlen: 24
                          138.199.7.0/24 maxlen: 24
                          138.199.6.0/24 maxlen: 24
                          84.17.43.0/24 maxlen: 24
                          138.199.16.0/24 maxlen: 24
                          138.199.13.0/24 maxlen: 24
                          138.199.18.0/23 maxlen: 23
                          84.17.51.0/24 maxlen: 24
                          84.17.49.0/24 maxlen: 24
                          84.17.48.0/24 maxlen: 24
                          138.199.18.0/24 maxlen: 24
                          84.17.48.0/23 maxlen: 23
                          138.199.21.0/24 maxlen: 24
                          138.199.19.0/24 maxlen: 24
                          84.17.52.0/24 maxlen: 24
                          138.199.28.0/23 maxlen: 23
                          138.199.31.0/24 maxlen: 24
                          138.199.30.0/24 maxlen: 24
                          138.199.34.0/23 maxlen: 23
                          138.199.38.0/24 maxlen: 24
                          138.199.35.0/24 maxlen: 24
                          138.199.34.0/24 maxlen: 24
                          138.199.33.0/24 maxlen: 24
                          138.199.39.0/24 maxlen: 24
                          138.199.43.0/24 maxlen: 24
                          138.199.42.0/24 maxlen: 24
                          138.199.46.0/23 maxlen: 23
                          138.199.50.0/24 maxlen: 24
                          138.199.49.0/24 maxlen: 24
                          138.199.48.0/24 maxlen: 24
                          138.199.47.0/24 maxlen: 24
                          138.199.52.0/24 maxlen: 24
                          138.199.58.0/24 maxlen: 24
                          138.199.56.0/24 maxlen: 24
                          138.199.55.0/24 maxlen: 24
                          138.199.54.0/24 maxlen: 24
                          138.199.63.0/24 maxlen: 24
                          138.199.62.0/24 maxlen: 24
                          138.199.61.0/24 maxlen: 24
                          138.199.60.0/23 maxlen: 23
                          138.199.60.0/24 maxlen: 24
                          138.199.59.0/24 maxlen: 24
                          143.244.54.0/23 maxlen: 23
                          143.244.52.0/22 maxlen: 22
                          143.244.52.0/23 maxlen: 23
                          45.136.155.0/24 maxlen: 24
                          45.136.154.0/24 maxlen: 24
                          212.102.37.0/24 maxlen: 24
                          212.102.35.0/24 maxlen: 24
                          212.102.39.0/24 maxlen: 24
                          212.102.51.0/24 maxlen: 24
                          212.102.49.0/24 maxlen: 24
                          212.102.47.0/24 maxlen: 24
                          212.102.57.0/24 maxlen: 24
                          212.102.53.0/24 maxlen: 24
                          185.156.44.0/24 maxlen: 24
                          185.156.46.0/24 maxlen: 24
                          143.244.34.0/24 maxlen: 24
                          143.244.41.0/24 maxlen: 24
                          143.244.44.0/24 maxlen: 24
                          143.244.47.0/24 maxlen: 24
                          143.244.46.0/24 maxlen: 24
                          45.134.212.0/24 maxlen: 24
                          45.134.213.0/24 maxlen: 24
                          45.134.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238245706 (0xe33574a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Mar  2 08:32:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08495c75c283c9bac24be75ccb5030788aa03caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:a6:02:97:a9:5f:7f:6b:9d:14:99:c4:41:
                    0a:8a:02:b8:bd:ec:01:f5:30:48:b2:63:22:15:15:
                    f4:60:a1:1a:48:c4:89:78:35:40:8f:34:06:ce:65:
                    70:b0:68:c0:68:59:6d:22:7d:ee:5b:70:84:ef:56:
                    ce:df:0f:7d:22:a3:1a:f1:c5:ab:72:4e:24:ca:3f:
                    f0:3e:e5:42:04:30:6c:ae:f9:b9:4b:b4:a6:e0:a6:
                    3b:7b:dd:1e:f2:d1:77:fc:cc:a5:7f:8d:2b:ae:7a:
                    eb:f3:8e:d7:6d:f1:40:49:2d:fb:49:16:7e:18:91:
                    a4:89:36:db:07:27:a5:4c:0e:30:99:18:c2:1b:9f:
                    e3:dd:c1:d9:51:57:f7:ee:c3:af:29:5b:94:d1:62:
                    fb:88:a2:83:94:7f:cc:03:98:9e:67:6e:e4:ff:2b:
                    8c:55:f8:bf:0d:2a:a5:c7:0e:f3:af:5b:06:5b:40:
                    5d:3f:bd:72:41:d2:c6:51:2b:de:c0:05:44:3a:b1:
                    48:9e:91:06:f5:e6:5f:e3:85:9a:62:11:48:7f:6b:
                    e7:a9:0f:29:f0:18:eb:10:e7:8a:d6:eb:29:03:06:
                    03:f6:5a:e5:c0:eb:f7:7e:73:8f:52:7d:43:66:30:
                    af:08:0c:7e:c5:b8:1d:d3:0b:56:9e:5e:53:99:86:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:49:5C:75:C2:83:C9:BA:C2:4B:E7:5C:CB:50:30:78:8A:A0:3C:AA
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/CElcdcKDybrCS-dcy1AweIqgPKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.19.195.0-37.19.201.255
                  37.19.205.0/24
                  37.19.209.0-37.19.213.255
                  37.19.217.0/24
                  37.19.220.0/23
                  37.19.223.0/24
                  45.134.140.0/24
                  45.134.142.0/24
                  45.134.212.0-45.134.214.255
                  45.136.154.0/23
                  84.17.36.0/24
                  84.17.43.0/24
                  84.17.48.0/23
                  84.17.51.0-84.17.52.255
                  138.199.6.0/23
                  138.199.10.0/23
                  138.199.13.0/24
                  138.199.16.0/24
                  138.199.18.0/23
                  138.199.21.0/24
                  138.199.28.0/22
                  138.199.33.0-138.199.35.255
                  138.199.38.0/23
                  138.199.42.0/23
                  138.199.46.0-138.199.50.255
                  138.199.52.0/24
                  138.199.54.0-138.199.56.255
                  138.199.58.0-138.199.63.255
                  143.244.34.0/24
                  143.244.41.0/24
                  143.244.44.0/24
                  143.244.46.0/23
                  143.244.52.0/22
                  156.146.37.0/24
                  156.146.39.0/24
                  156.146.41.0/24
                  156.146.45.0-156.146.48.255
                  156.146.50.0/23
                  156.146.54.0/23
                  156.146.57.0/24
                  156.146.60.0/24
                  156.146.62.0/23
                  185.156.44.0/24
                  185.156.46.0/24
                  212.102.35.0/24
                  212.102.37.0/24
                  212.102.39.0/24
                  212.102.47.0/24
                  212.102.49.0/24
                  212.102.51.0/24
                  212.102.53.0/24
                  212.102.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ee:11:d2:fb:2e:10:81:20:47:f5:bb:40:0c:42:f3:b7:45:
         2f:4c:30:dd:0b:7f:0d:da:10:c9:ac:cd:6b:4c:51:8c:b1:ce:
         5d:b1:82:7a:b5:4a:2a:4a:8f:7e:e6:10:5d:5f:b7:7f:21:fc:
         2c:23:51:12:cf:84:c9:4b:18:7f:1b:1e:a8:0a:93:33:36:b2:
         b0:81:ac:04:c7:04:94:5c:80:2a:6f:ae:eb:6e:92:53:a9:cb:
         82:db:b4:3f:da:6b:1e:54:41:fd:db:2c:46:d6:b6:6e:ca:5d:
         25:0f:67:4e:81:b4:f9:5f:c7:45:f9:67:42:3d:77:59:ff:d1:
         cf:e1:e6:85:c3:38:4e:2a:98:5b:53:fe:4c:c7:0a:92:29:08:
         ca:2a:f2:d1:55:0c:80:49:37:6c:0f:6f:1f:7d:5f:c6:56:71:
         7f:85:f8:28:69:95:6a:ef:d8:2a:ee:76:51:d0:cb:a3:07:1a:
         72:a3:18:c9:ae:97:68:e3:8e:9f:f7:cd:5a:80:56:95:31:8c:
         43:fa:4a:57:33:c3:13:6f:6a:99:7a:de:79:d9:f9:2b:a7:d7:
         94:ab:85:9d:ba:55:5f:8b:51:0d:b7:42:d1:79:56:6e:9a:cf:
         8b:de:a1:3f:ed:84:b6:26:74:ac:74:d0:86:a0:39:74:c9:ee:
         58:80:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:41 2024 by rpki-client on console-fra.rpki-client.org