Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/oZUKLg4fLXIjgu_uKYwcDYZJu08.roa
File:                     oZUKLg4fLXIjgu_uKYwcDYZJu08.roa (raw, json)
Hash identifier:          j/gbJ73Tr6plHki6lY0zGd0qcaQgm8xkZ6vY9sK3Kpc=
Subject key identifier:   A1:95:0A:2E:0E:1F:2D:72:23:82:EF:EE:29:8C:1C:0D:86:49:BB:4F
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       0F0B4A55
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/oZUKLg4fLXIjgu_uKYwcDYZJu08.roa
Signing time:             Mon 23 May 2022 14:14:29 +0000
ROA not before:           Mon 23 May 2022 14:14:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        37.19.195.0/24 maxlen: 24
                          37.19.198.0/23 maxlen: 23
                          37.19.196.0/23 maxlen: 23
                          45.134.142.0/24 maxlen: 24
                          45.134.140.0/24 maxlen: 24
                          37.19.201.0/24 maxlen: 24
                          37.19.200.0/24 maxlen: 24
                          37.19.205.0/24 maxlen: 24
                          37.19.211.0/24 maxlen: 24
                          37.19.210.0/24 maxlen: 24
                          37.19.209.0/24 maxlen: 24
                          37.19.212.0/23 maxlen: 23
                          37.19.217.0/24 maxlen: 24
                          37.19.221.0/24 maxlen: 24
                          37.19.220.0/24 maxlen: 24
                          37.19.223.0/24 maxlen: 24
                          156.146.37.0/24 maxlen: 24
                          156.146.39.0/24 maxlen: 24
                          156.146.41.0/24 maxlen: 24
                          156.146.46.0/23 maxlen: 23
                          156.146.46.0/24 maxlen: 24
                          156.146.45.0/24 maxlen: 24
                          156.146.51.0/24 maxlen: 24
                          156.146.50.0/24 maxlen: 24
                          156.146.48.0/24 maxlen: 24
                          156.146.47.0/24 maxlen: 24
                          156.146.57.0/24 maxlen: 24
                          156.146.55.0/24 maxlen: 24
                          156.146.54.0/24 maxlen: 24
                          156.146.60.0/24 maxlen: 24
                          156.146.63.0/24 maxlen: 24
                          156.146.62.0/24 maxlen: 24
                          138.199.10.0/23 maxlen: 23
                          84.17.36.0/24 maxlen: 24
                          138.199.7.0/24 maxlen: 24
                          138.199.6.0/24 maxlen: 24
                          84.17.43.0/24 maxlen: 24
                          138.199.16.0/24 maxlen: 24
                          138.199.13.0/24 maxlen: 24
                          138.199.18.0/23 maxlen: 23
                          84.17.51.0/24 maxlen: 24
                          84.17.49.0/24 maxlen: 24
                          84.17.48.0/24 maxlen: 24
                          138.199.18.0/24 maxlen: 24
                          84.17.48.0/23 maxlen: 23
                          138.199.21.0/24 maxlen: 24
                          138.199.19.0/24 maxlen: 24
                          84.17.52.0/24 maxlen: 24
                          138.199.28.0/23 maxlen: 23
                          138.199.31.0/24 maxlen: 24
                          138.199.30.0/24 maxlen: 24
                          138.199.34.0/23 maxlen: 23
                          138.199.38.0/24 maxlen: 24
                          138.199.35.0/24 maxlen: 24
                          138.199.34.0/24 maxlen: 24
                          138.199.33.0/24 maxlen: 24
                          138.199.39.0/24 maxlen: 24
                          138.199.43.0/24 maxlen: 24
                          138.199.42.0/24 maxlen: 24
                          138.199.46.0/23 maxlen: 23
                          138.199.50.0/24 maxlen: 24
                          138.199.49.0/24 maxlen: 24
                          138.199.48.0/24 maxlen: 24
                          138.199.47.0/24 maxlen: 24
                          138.199.52.0/24 maxlen: 24
                          138.199.58.0/24 maxlen: 24
                          138.199.56.0/24 maxlen: 24
                          138.199.55.0/24 maxlen: 24
                          138.199.54.0/24 maxlen: 24
                          138.199.63.0/24 maxlen: 24
                          138.199.62.0/24 maxlen: 24
                          138.199.61.0/24 maxlen: 24
                          138.199.60.0/23 maxlen: 23
                          138.199.60.0/24 maxlen: 24
                          138.199.59.0/24 maxlen: 24
                          169.150.198.0/24 maxlen: 24
                          169.150.197.0/24 maxlen: 24
                          169.150.196.0/24 maxlen: 24
                          169.150.199.0/24 maxlen: 24
                          169.150.205.0/24 maxlen: 24
                          169.150.204.0/24 maxlen: 24
                          169.150.203.0/24 maxlen: 24
                          169.150.201.0/24 maxlen: 24
                          169.150.210.0/23 maxlen: 23
                          169.150.212.0/24 maxlen: 24
                          169.150.209.0/24 maxlen: 24
                          169.150.208.0/24 maxlen: 24
                          169.150.218.0/24 maxlen: 24
                          169.150.226.0/23 maxlen: 23
                          143.244.54.0/23 maxlen: 23
                          143.244.52.0/22 maxlen: 22
                          143.244.52.0/23 maxlen: 23
                          45.136.155.0/24 maxlen: 24
                          45.136.154.0/24 maxlen: 24
                          212.102.37.0/24 maxlen: 24
                          212.102.35.0/24 maxlen: 24
                          212.102.39.0/24 maxlen: 24
                          212.102.51.0/24 maxlen: 24
                          212.102.49.0/24 maxlen: 24
                          212.102.47.0/24 maxlen: 24
                          212.102.57.0/24 maxlen: 24
                          212.102.53.0/24 maxlen: 24
                          185.156.44.0/24 maxlen: 24
                          185.156.46.0/24 maxlen: 24
                          143.244.34.0/24 maxlen: 24
                          143.244.41.0/24 maxlen: 24
                          143.244.44.0/24 maxlen: 24
                          143.244.47.0/24 maxlen: 24
                          143.244.46.0/24 maxlen: 24
                          45.134.212.0/24 maxlen: 24
                          45.134.213.0/24 maxlen: 24
                          45.134.214.0/24 maxlen: 24
                          2a02:6ea0:1100::/40 maxlen: 40
                          2a02:6ea0:1400::/40 maxlen: 40
                          2a02:6ea0:2800::/40 maxlen: 40
                          2a02:6ea0:1700::/40 maxlen: 40
                          2a02:6ea0:2b00::/40 maxlen: 40
                          2a02:6ea0:2400::/40 maxlen: 40
                          2a02:6ea0:1000::/40 maxlen: 40
                          2a02:6ea0:2100::/40 maxlen: 40
                          2a02:6ea0:1e00::/40 maxlen: 40
                          2a02:6ea0:3200::/40 maxlen: 40
                          2a02:6ea0:1300::/40 maxlen: 40
                          2a02:6ea0:2e00::/40 maxlen: 40
                          2a02:6ea0:3f00::/40 maxlen: 40
                          2a02:6ea0:3100::/40 maxlen: 40
                          2a02:6ea0:2300::/40 maxlen: 40
                          2a02:6ea0:2000::/40 maxlen: 40
                          2a02:6ea0:1a00::/40 maxlen: 40
                          2a02:6ea0:3800::/40 maxlen: 40
                          2a02:6ea0:1c00::/40 maxlen: 40
                          2a02:6ea0:2700::/40 maxlen: 40
                          2a02:6ea0:1600::/40 maxlen: 40
                          2a02:6ea0:2a00::/40 maxlen: 40
                          2a02:6ea0:1900::/40 maxlen: 40
                          2a02:6ea0:2d00::/40 maxlen: 40
                          2a02:6ea0:3000::/40 maxlen: 40
                          2a02:6ea0:2200::/40 maxlen: 40
                          2a02:6ea0:1b00::/40 maxlen: 40
                          2a02:6ea0:1800::/40 maxlen: 40
                          2a02:6ea0:2c00::/40 maxlen: 40
                          2a02:6ea0:1500::/40 maxlen: 40
                          2a02:6ea0:2900::/40 maxlen: 40
                          2a02:6ea0:2600::/40 maxlen: 40
                          2a02:6ea0:3700::/40 maxlen: 40
                          2a02:6ea0:1200::/40 maxlen: 40
                          2a02:6ea0:2500::/40 maxlen: 40
                          2a02:6ea0:3600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252398165 (0xf0b4a55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: May 23 14:14:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a1950a2e0e1f2d722382efee298c1c0d8649bb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:26:99:6d:ec:32:39:a1:05:5d:03:4c:db:
                    b3:46:ea:c6:8e:13:10:a3:97:49:21:f6:2f:3f:73:
                    ae:9c:10:cd:11:08:e6:78:d9:09:ce:de:a2:ea:b5:
                    86:36:5b:b9:3c:69:e0:8f:36:0c:81:2a:dc:68:f8:
                    e1:4b:d0:95:91:c0:0b:be:78:7b:2c:c5:65:de:ed:
                    a7:ca:43:1d:28:80:d7:df:08:bd:9f:66:a7:5f:72:
                    f3:69:8f:c9:ee:94:c0:82:66:da:54:c0:fc:67:f1:
                    7d:9e:91:eb:f4:3c:70:0e:f0:e3:a2:8f:4e:31:fa:
                    6e:df:36:36:98:f1:68:4e:c2:80:7a:9d:17:1a:86:
                    bb:d0:84:17:16:c6:ac:3a:0e:2a:82:87:c1:6b:7d:
                    7c:4b:20:c8:b8:75:08:71:b1:e7:f8:ca:68:97:c8:
                    a8:f0:4a:7a:c7:4f:e1:63:5f:75:3d:ab:e7:1a:c0:
                    1f:e4:ff:00:e8:28:26:2a:e3:ca:8c:5d:d8:40:aa:
                    d6:01:5b:b4:68:d5:a9:b2:a8:54:f1:a5:26:51:05:
                    76:2a:e1:0e:5f:b7:65:6a:5a:69:95:89:b4:78:c1:
                    67:bc:88:0e:03:25:ac:50:81:2e:f8:0f:43:82:ee:
                    dd:e8:9a:07:82:3b:95:a7:a8:b8:ae:78:10:ed:0d:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:95:0A:2E:0E:1F:2D:72:23:82:EF:EE:29:8C:1C:0D:86:49:BB:4F
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/oZUKLg4fLXIjgu_uKYwcDYZJu08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.19.195.0-37.19.201.255
                  37.19.205.0/24
                  37.19.209.0-37.19.213.255
                  37.19.217.0/24
                  37.19.220.0/23
                  37.19.223.0/24
                  45.134.140.0/24
                  45.134.142.0/24
                  45.134.212.0-45.134.214.255
                  45.136.154.0/23
                  84.17.36.0/24
                  84.17.43.0/24
                  84.17.48.0/23
                  84.17.51.0-84.17.52.255
                  138.199.6.0/23
                  138.199.10.0/23
                  138.199.13.0/24
                  138.199.16.0/24
                  138.199.18.0/23
                  138.199.21.0/24
                  138.199.28.0/22
                  138.199.33.0-138.199.35.255
                  138.199.38.0/23
                  138.199.42.0/23
                  138.199.46.0-138.199.50.255
                  138.199.52.0/24
                  138.199.54.0-138.199.56.255
                  138.199.58.0-138.199.63.255
                  143.244.34.0/24
                  143.244.41.0/24
                  143.244.44.0/24
                  143.244.46.0/23
                  143.244.52.0/22
                  156.146.37.0/24
                  156.146.39.0/24
                  156.146.41.0/24
                  156.146.45.0-156.146.48.255
                  156.146.50.0/23
                  156.146.54.0/23
                  156.146.57.0/24
                  156.146.60.0/24
                  156.146.62.0/23
                  169.150.196.0/22
                  169.150.201.0/24
                  169.150.203.0-169.150.205.255
                  169.150.208.0-169.150.212.255
                  169.150.218.0/24
                  169.150.226.0/23
                  185.156.44.0/24
                  185.156.46.0/24
                  212.102.35.0/24
                  212.102.37.0/24
                  212.102.39.0/24
                  212.102.47.0/24
                  212.102.49.0/24
                  212.102.51.0/24
                  212.102.53.0/24
                  212.102.57.0/24
                IPv6:
                  2a02:6ea0:1000::-2a02:6ea0:1cff:ffff:ffff:ffff:ffff:ffff
                  2a02:6ea0:1e00::/40
                  2a02:6ea0:2000::-2a02:6ea0:2eff:ffff:ffff:ffff:ffff:ffff
                  2a02:6ea0:3000::-2a02:6ea0:32ff:ffff:ffff:ffff:ffff:ffff
                  2a02:6ea0:3600::-2a02:6ea0:38ff:ffff:ffff:ffff:ffff:ffff
                  2a02:6ea0:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:7b:38:25:48:12:24:51:fc:09:8d:b2:31:3b:e2:b3:df:93:
         f8:e6:ee:2c:2a:bb:f9:f8:c5:ac:e8:a3:a4:88:62:ed:b1:f7:
         c3:bc:5b:c2:83:dd:d3:20:ba:4e:26:05:2c:0d:f1:fb:4b:9f:
         e3:b1:68:9f:87:84:2a:1f:11:d4:d4:8c:49:16:be:e2:3c:3b:
         6c:16:4b:be:07:37:33:34:e0:37:03:94:09:69:ef:f6:b7:3f:
         f5:d9:67:b2:8e:74:1e:db:a9:4e:39:51:e8:d4:94:d4:9c:57:
         ed:e4:0d:a1:a6:b6:3a:1e:0c:6a:4f:58:62:20:3b:e4:a6:81:
         ff:f5:b6:6c:81:f8:b6:39:34:c3:bc:71:2d:3e:13:c9:f6:b0:
         af:48:cd:03:cf:f6:60:5d:10:c5:a0:f6:4c:b6:73:86:c2:ee:
         2a:c2:19:db:1b:d4:cb:13:da:fb:76:4d:92:28:fe:78:e1:65:
         79:d5:58:23:e7:1d:48:ec:dc:38:fc:8f:64:b5:d6:9a:ef:ce:
         21:dd:3f:1c:83:27:a8:51:e5:8a:80:8e:29:76:2e:d8:c4:14:
         5a:d9:9a:47:a9:4f:59:02:8b:a3:21:fa:cb:b2:07:9a:31:66:
         f6:61:15:0a:0d:8e:43:79:d0:79:df:1b:df:f9:8a:e6:e8:d3:
         c8:69:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:42 2024 by rpki-client on console-fra.rpki-client.org