Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/fuhDTREBCa0Dz0hKaXPoCvy9maY.roa
File:                     fuhDTREBCa0Dz0hKaXPoCvy9maY.roa (raw, json)
Hash identifier:          VC7wGYelYNkMT+mG/3vMrbcE8e/KR0wVTvvLd8wutog=
Subject key identifier:   7E:E8:43:4D:11:01:09:AD:03:CF:48:4A:69:73:E8:0A:FC:BD:99:A6
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       0E602102
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/fuhDTREBCa0Dz0hKaXPoCvy9maY.roa
Signing time:             Fri 18 Mar 2022 09:15:55 +0000
ROA not before:           Fri 18 Mar 2022 09:15:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        37.19.195.0/24 maxlen: 24
                          37.19.198.0/23 maxlen: 23
                          37.19.196.0/23 maxlen: 23
                          45.134.142.0/24 maxlen: 24
                          45.134.140.0/24 maxlen: 24
                          37.19.201.0/24 maxlen: 24
                          37.19.200.0/24 maxlen: 24
                          37.19.205.0/24 maxlen: 24
                          37.19.211.0/24 maxlen: 24
                          37.19.210.0/24 maxlen: 24
                          37.19.209.0/24 maxlen: 24
                          37.19.212.0/23 maxlen: 23
                          37.19.217.0/24 maxlen: 24
                          37.19.221.0/24 maxlen: 24
                          37.19.220.0/24 maxlen: 24
                          37.19.223.0/24 maxlen: 24
                          156.146.37.0/24 maxlen: 24
                          156.146.39.0/24 maxlen: 24
                          156.146.41.0/24 maxlen: 24
                          156.146.46.0/23 maxlen: 23
                          156.146.46.0/24 maxlen: 24
                          156.146.45.0/24 maxlen: 24
                          156.146.51.0/24 maxlen: 24
                          156.146.50.0/24 maxlen: 24
                          156.146.48.0/24 maxlen: 24
                          156.146.47.0/24 maxlen: 24
                          156.146.57.0/24 maxlen: 24
                          156.146.55.0/24 maxlen: 24
                          156.146.54.0/24 maxlen: 24
                          156.146.60.0/24 maxlen: 24
                          156.146.63.0/24 maxlen: 24
                          156.146.62.0/24 maxlen: 24
                          138.199.10.0/23 maxlen: 23
                          84.17.36.0/24 maxlen: 24
                          138.199.7.0/24 maxlen: 24
                          138.199.6.0/24 maxlen: 24
                          84.17.43.0/24 maxlen: 24
                          138.199.16.0/24 maxlen: 24
                          138.199.13.0/24 maxlen: 24
                          138.199.18.0/23 maxlen: 23
                          84.17.51.0/24 maxlen: 24
                          84.17.49.0/24 maxlen: 24
                          84.17.48.0/24 maxlen: 24
                          138.199.18.0/24 maxlen: 24
                          84.17.48.0/23 maxlen: 23
                          138.199.21.0/24 maxlen: 24
                          138.199.19.0/24 maxlen: 24
                          84.17.52.0/24 maxlen: 24
                          138.199.28.0/23 maxlen: 23
                          138.199.31.0/24 maxlen: 24
                          138.199.30.0/24 maxlen: 24
                          138.199.34.0/23 maxlen: 23
                          138.199.38.0/24 maxlen: 24
                          138.199.35.0/24 maxlen: 24
                          138.199.34.0/24 maxlen: 24
                          138.199.33.0/24 maxlen: 24
                          138.199.39.0/24 maxlen: 24
                          138.199.43.0/24 maxlen: 24
                          138.199.42.0/24 maxlen: 24
                          138.199.46.0/23 maxlen: 23
                          138.199.50.0/24 maxlen: 24
                          138.199.49.0/24 maxlen: 24
                          138.199.48.0/24 maxlen: 24
                          138.199.47.0/24 maxlen: 24
                          138.199.52.0/24 maxlen: 24
                          138.199.58.0/24 maxlen: 24
                          138.199.56.0/24 maxlen: 24
                          138.199.55.0/24 maxlen: 24
                          138.199.54.0/24 maxlen: 24
                          138.199.63.0/24 maxlen: 24
                          138.199.62.0/24 maxlen: 24
                          138.199.61.0/24 maxlen: 24
                          138.199.60.0/23 maxlen: 23
                          138.199.60.0/24 maxlen: 24
                          138.199.59.0/24 maxlen: 24
                          169.150.198.0/24 maxlen: 24
                          169.150.197.0/24 maxlen: 24
                          169.150.196.0/24 maxlen: 24
                          169.150.199.0/24 maxlen: 24
                          143.244.54.0/23 maxlen: 23
                          143.244.52.0/22 maxlen: 22
                          143.244.52.0/23 maxlen: 23
                          45.136.155.0/24 maxlen: 24
                          45.136.154.0/24 maxlen: 24
                          212.102.37.0/24 maxlen: 24
                          212.102.35.0/24 maxlen: 24
                          212.102.39.0/24 maxlen: 24
                          212.102.51.0/24 maxlen: 24
                          212.102.49.0/24 maxlen: 24
                          212.102.47.0/24 maxlen: 24
                          212.102.57.0/24 maxlen: 24
                          212.102.53.0/24 maxlen: 24
                          185.156.44.0/24 maxlen: 24
                          185.156.46.0/24 maxlen: 24
                          143.244.34.0/24 maxlen: 24
                          143.244.41.0/24 maxlen: 24
                          143.244.44.0/24 maxlen: 24
                          143.244.47.0/24 maxlen: 24
                          143.244.46.0/24 maxlen: 24
                          45.134.212.0/24 maxlen: 24
                          45.134.213.0/24 maxlen: 24
                          45.134.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241180930 (0xe602102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Mar 18 09:15:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ee8434d110109ad03cf484a6973e80afcbd99a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:61:07:0d:03:8d:6a:d3:12:ca:bf:83:25:
                    85:91:b3:f9:4b:c2:52:88:42:a1:7b:f0:5c:99:02:
                    18:cd:07:f7:bc:5a:4a:7b:38:68:04:db:1b:b1:63:
                    b3:3a:a6:86:43:f4:0e:81:b8:6c:44:1e:e4:43:d4:
                    2c:74:35:a5:8c:23:9b:e2:3b:61:1c:c6:f8:b0:8d:
                    6e:43:8d:e4:79:5b:ef:e5:0f:94:ca:43:2d:d4:2c:
                    3b:5a:75:c4:2b:64:64:51:74:f5:09:d8:fb:26:df:
                    9f:ca:0d:94:ce:2a:fb:54:ec:91:75:d7:69:41:85:
                    b8:8a:ed:5d:2b:10:1d:8f:de:44:16:0d:c7:07:e1:
                    e3:4e:f6:3d:ad:f5:f9:20:52:66:89:a5:d1:05:f8:
                    62:bf:54:b8:c9:46:f0:b3:3c:fa:1a:98:87:2b:b0:
                    85:05:cf:1e:bb:9b:5f:9d:5d:bc:7a:e9:f9:85:ba:
                    36:5a:9e:23:4a:7b:c6:44:67:7b:da:68:8a:0a:13:
                    57:93:44:15:64:6e:2d:05:66:a5:ca:99:8a:9b:a9:
                    58:91:ab:2a:42:93:bb:37:d8:2f:dd:0a:ce:12:f3:
                    53:35:f3:e2:40:89:e9:af:71:ff:ad:73:59:d7:64:
                    58:a1:8b:0c:e4:3f:66:2b:c2:1e:0e:82:5a:01:93:
                    9c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E8:43:4D:11:01:09:AD:03:CF:48:4A:69:73:E8:0A:FC:BD:99:A6
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/fuhDTREBCa0Dz0hKaXPoCvy9maY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.19.195.0-37.19.201.255
                  37.19.205.0/24
                  37.19.209.0-37.19.213.255
                  37.19.217.0/24
                  37.19.220.0/23
                  37.19.223.0/24
                  45.134.140.0/24
                  45.134.142.0/24
                  45.134.212.0-45.134.214.255
                  45.136.154.0/23
                  84.17.36.0/24
                  84.17.43.0/24
                  84.17.48.0/23
                  84.17.51.0-84.17.52.255
                  138.199.6.0/23
                  138.199.10.0/23
                  138.199.13.0/24
                  138.199.16.0/24
                  138.199.18.0/23
                  138.199.21.0/24
                  138.199.28.0/22
                  138.199.33.0-138.199.35.255
                  138.199.38.0/23
                  138.199.42.0/23
                  138.199.46.0-138.199.50.255
                  138.199.52.0/24
                  138.199.54.0-138.199.56.255
                  138.199.58.0-138.199.63.255
                  143.244.34.0/24
                  143.244.41.0/24
                  143.244.44.0/24
                  143.244.46.0/23
                  143.244.52.0/22
                  156.146.37.0/24
                  156.146.39.0/24
                  156.146.41.0/24
                  156.146.45.0-156.146.48.255
                  156.146.50.0/23
                  156.146.54.0/23
                  156.146.57.0/24
                  156.146.60.0/24
                  156.146.62.0/23
                  169.150.196.0/22
                  185.156.44.0/24
                  185.156.46.0/24
                  212.102.35.0/24
                  212.102.37.0/24
                  212.102.39.0/24
                  212.102.47.0/24
                  212.102.49.0/24
                  212.102.51.0/24
                  212.102.53.0/24
                  212.102.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:fd:24:36:27:53:a6:f1:9f:95:c0:91:90:5e:60:e4:f8:3e:
         b1:4b:2d:ea:c8:ab:96:d8:43:73:43:43:fd:08:81:96:08:a4:
         59:6d:e7:3b:3e:b5:2a:a2:a0:70:02:00:d3:34:8f:81:4e:bf:
         65:f1:93:d7:db:a9:d1:10:ea:5a:8b:41:51:7b:7d:34:94:81:
         88:04:95:99:6b:5f:9c:ab:08:dd:73:b0:bd:b2:c7:0b:1b:1e:
         13:36:81:b2:41:e8:ae:54:67:61:18:d0:ed:7d:59:db:70:9c:
         e4:2e:f3:fa:c8:ed:af:3e:4e:8e:f2:5c:2e:97:5c:22:f5:82:
         32:3c:00:f2:3c:03:0b:43:62:28:fd:ec:d5:4e:10:dd:12:70:
         f1:21:8e:4d:6c:e3:32:eb:a9:ad:8f:97:c2:42:7d:ed:7b:b8:
         54:ea:6c:0b:51:8f:6f:29:9b:fd:65:b9:68:23:ee:ce:d9:b8:
         3d:2e:17:91:c0:19:6e:55:41:92:09:a0:38:9e:4c:4e:24:db:
         67:d5:22:db:00:61:d2:d0:96:87:07:23:7e:35:c5:db:4f:43:
         2a:f9:91:5b:cb:ec:51:65:1b:46:b8:b8:74:76:db:5d:d1:63:
         9e:0a:e4:d2:a3:2d:12:e5:40:97:33:9c:19:4f:fd:bb:bf:64:
         0f:c0:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:41 2024 by rpki-client on console-fra.rpki-client.org