Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/f4Dv1DHVvetYIa3ClYtitASB8HQ.roa
File:                     f4Dv1DHVvetYIa3ClYtitASB8HQ.roa (raw, json)
Hash identifier:          AFRI/Kp8ROCk4vayOTEdwyi8y7RQaPme1NFyUqBMgLo=
Subject key identifier:   7F:80:EF:D4:31:D5:BD:EB:58:21:AD:C2:95:8B:62:B4:04:81:F0:74
Certificate issuer:       /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial:       39D378C6
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/f4Dv1DHVvetYIa3ClYtitASB8HQ.roa
Signing time:             Wed 25 May 2022 07:08:14 +0000
ROA not before:           Wed 25 May 2022 07:08:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35104
IP address blocks:        46.235.84.0/24 maxlen: 24
                          46.235.83.0/24 maxlen: 24
                          46.235.82.0/24 maxlen: 24
                          46.235.81.0/24 maxlen: 24
                          46.235.85.0/24 maxlen: 24
                          46.235.80.0/24 maxlen: 24
                          46.235.87.0/24 maxlen: 24
                          46.235.86.0/24 maxlen: 24
                          188.127.40.0/24 maxlen: 24
                          188.127.39.0/24 maxlen: 24
                          188.127.44.0/24 maxlen: 24
                          188.127.43.0/24 maxlen: 24
                          188.127.42.0/24 maxlen: 24
                          188.127.41.0/24 maxlen: 24
                          37.228.64.0/24 maxlen: 24
                          188.127.45.0/24 maxlen: 24
                          37.228.68.0/24 maxlen: 24
                          37.228.67.0/24 maxlen: 24
                          37.228.66.0/24 maxlen: 24
                          37.228.65.0/24 maxlen: 24
                          37.228.71.0/24 maxlen: 24
                          37.228.70.0/24 maxlen: 24
                          37.228.69.0/24 maxlen: 24
                          188.127.38.0/24 maxlen: 24
                          188.127.33.0/24 maxlen: 24
                          188.127.32.0/24 maxlen: 24
                          188.127.37.0/24 maxlen: 24
                          188.127.36.0/24 maxlen: 24
                          188.127.35.0/24 maxlen: 24
                          188.127.34.0/24 maxlen: 24
                          93.185.67.0/24 maxlen: 24
                          93.185.66.0/24 maxlen: 24
                          93.185.65.0/24 maxlen: 24
                          93.185.71.0/24 maxlen: 24
                          93.185.70.0/24 maxlen: 24
                          93.185.69.0/24 maxlen: 24
                          93.185.68.0/24 maxlen: 24
                          93.185.74.0/24 maxlen: 24
                          93.185.73.0/24 maxlen: 24
                          93.185.72.0/24 maxlen: 24
                          93.185.78.0/24 maxlen: 24
                          93.185.77.0/24 maxlen: 24
                          93.185.76.0/24 maxlen: 24
                          93.185.75.0/24 maxlen: 24
                          93.185.72.0/21 maxlen: 21
                          93.185.79.0/24 maxlen: 24
                          89.219.24.0/24 maxlen: 24
                          89.219.25.0/24 maxlen: 24
                          89.219.27.0/24 maxlen: 24
                          89.219.26.0/24 maxlen: 24
                          77.245.97.0/24 maxlen: 24
                          77.245.96.0/24 maxlen: 24
                          77.245.98.0/24 maxlen: 24
                          77.245.104.0/22 maxlen: 22
                          77.245.100.0/24 maxlen: 24
                          77.245.99.0/24 maxlen: 24
                          77.245.104.0/24 maxlen: 24
                          77.245.103.0/24 maxlen: 24
                          77.245.102.0/24 maxlen: 24
                          77.245.101.0/24 maxlen: 24
                          77.245.105.0/24 maxlen: 24
                          77.245.108.0/23 maxlen: 23
                          77.245.111.0/24 maxlen: 24
                          77.245.110.0/24 maxlen: 24
                          77.245.109.0/24 maxlen: 24
                          77.245.108.0/24 maxlen: 24
                          77.245.107.0/24 maxlen: 24
                          77.245.106.0/24 maxlen: 24
                          93.185.64.0/24 maxlen: 24
                          193.29.53.0/24 maxlen: 24
                          185.20.125.0/24 maxlen: 24
                          185.20.124.0/24 maxlen: 24
                          185.20.127.0/24 maxlen: 24
                          185.20.126.0/24 maxlen: 24
                          80.242.211.0/24 maxlen: 24
                          80.242.210.0/24 maxlen: 24
                          80.242.209.0/24 maxlen: 24
                          80.242.213.0/24 maxlen: 24
                          80.242.212.0/24 maxlen: 24
                          80.242.208.0/24 maxlen: 24
                          185.20.126.0/23 maxlen: 23
                          80.242.218.0/24 maxlen: 24
                          80.242.217.0/24 maxlen: 24
                          80.242.216.0/24 maxlen: 24
                          80.242.219.0/24 maxlen: 24
                          80.242.215.0/24 maxlen: 24
                          80.242.214.0/24 maxlen: 24
                          80.242.223.0/24 maxlen: 24
                          80.242.222.0/24 maxlen: 24
                          80.242.221.0/24 maxlen: 24
                          80.242.220.0/24 maxlen: 24
                          95.141.128.0/24 maxlen: 24
                          95.141.132.0/24 maxlen: 24
                          95.141.131.0/24 maxlen: 24
                          95.141.130.0/24 maxlen: 24
                          95.141.129.0/24 maxlen: 24
                          95.141.136.0/22 maxlen: 22
                          95.141.135.0/24 maxlen: 24
                          95.141.134.0/24 maxlen: 24
                          95.141.133.0/24 maxlen: 24
                          95.141.139.0/24 maxlen: 24
                          95.141.138.0/24 maxlen: 24
                          95.141.137.0/24 maxlen: 24
                          95.141.136.0/24 maxlen: 24
                          95.141.142.0/24 maxlen: 24
                          95.141.141.0/24 maxlen: 24
                          95.141.140.0/24 maxlen: 24
                          95.141.143.0/24 maxlen: 24
                          217.196.16.0/24 maxlen: 24
                          217.196.17.0/24 maxlen: 24
                          217.196.24.0/24 maxlen: 24
                          217.196.23.0/24 maxlen: 24
                          217.196.19.0/24 maxlen: 24
                          217.196.18.0/24 maxlen: 24
                          217.196.22.0/24 maxlen: 24
                          217.196.21.0/24 maxlen: 24
                          217.196.20.0/24 maxlen: 24
                          217.196.31.0/24 maxlen: 24
                          217.196.30.0/24 maxlen: 24
                          217.196.26.0/24 maxlen: 24
                          217.196.25.0/24 maxlen: 24
                          217.196.29.0/24 maxlen: 24
                          217.196.28.0/24 maxlen: 24
                          217.196.27.0/24 maxlen: 24
                          217.196.26.0/23 maxlen: 23
                          195.189.31.0/24 maxlen: 24
                          195.189.30.0/24 maxlen: 24
                          195.189.29.0/24 maxlen: 24
                          195.189.28.0/24 maxlen: 24
                          188.0.132.0/24 maxlen: 24
                          188.0.131.0/24 maxlen: 24
                          188.0.130.0/24 maxlen: 24
                          188.0.129.0/24 maxlen: 24
                          188.0.128.0/24 maxlen: 24
                          188.0.139.0/24 maxlen: 24
                          188.0.138.0/24 maxlen: 24
                          188.0.137.0/24 maxlen: 24
                          188.0.136.0/24 maxlen: 24
                          188.0.135.0/24 maxlen: 24
                          188.0.134.0/24 maxlen: 24
                          188.0.133.0/24 maxlen: 24
                          188.0.145.0/24 maxlen: 24
                          188.0.144.0/24 maxlen: 24
                          188.0.143.0/24 maxlen: 24
                          188.0.142.0/24 maxlen: 24
                          188.0.141.0/24 maxlen: 24
                          188.0.140.0/22 maxlen: 24
                          188.0.146.0/24 maxlen: 24
                          188.0.149.0/24 maxlen: 24
                          188.0.148.0/24 maxlen: 24
                          188.0.147.0/24 maxlen: 24
                          188.0.152.0/24 maxlen: 24
                          188.0.151.0/24 maxlen: 24
                          188.0.150.0/24 maxlen: 24
                          188.0.159.0/24 maxlen: 24
                          188.0.158.0/24 maxlen: 24
                          188.0.157.0/24 maxlen: 24
                          188.0.153.0/24 maxlen: 24
                          188.0.156.0/24 maxlen: 24
                          188.0.155.0/24 maxlen: 24
                          188.0.154.0/24 maxlen: 24
                          2a03:a300:5000::/44 maxlen: 44
                          2a03:a300:4000::/44 maxlen: 44
                          2a03:a300:1140::/48 maxlen: 48
                          2a03:a300:2020::/48 maxlen: 48
                          2a03:a300:4100::/48 maxlen: 48
                          2a03:a300:2000::/48 maxlen: 48
                          2a03:a300:1000::/48 maxlen: 48
                          2a03:a300:3000::/48 maxlen: 48
                          2a03:a300:800::/37 maxlen: 37

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970160326 (0x39d378c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
        Validity
            Not Before: May 25 07:08:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7f80efd431d5bdeb5821adc2958b62b40481f074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:de:02:8e:e4:02:48:26:23:2b:e9:5c:cf:
                    4b:2e:4c:42:10:cc:ea:00:25:1e:d5:19:52:d2:ac:
                    91:29:78:04:7f:a5:e5:74:0d:75:40:5a:fc:00:c3:
                    f7:08:7b:db:ba:e4:f0:78:60:35:57:9f:d0:14:64:
                    45:23:9a:79:82:2e:50:a3:aa:83:b9:12:6f:2f:82:
                    11:cc:d6:c2:89:20:75:ac:9e:c6:f0:c2:1c:b1:30:
                    b3:68:58:c2:92:e7:c6:5e:5d:c8:65:c2:2f:ea:1d:
                    8c:1d:ec:9a:a8:87:f5:74:fd:63:de:14:a0:ea:81:
                    be:87:20:f9:c1:3a:6b:68:a9:0d:84:66:19:1d:5c:
                    b8:cd:e0:7f:3f:8c:23:ce:99:30:58:cc:5e:c0:8b:
                    01:fc:84:a8:df:d4:81:3a:14:fa:15:e4:6e:1a:22:
                    c1:be:cb:91:3f:6f:d8:d7:b2:d7:64:e5:65:1d:82:
                    a7:50:a3:eb:74:a7:0d:c0:80:f7:63:6b:08:3c:ec:
                    f9:98:22:ea:c5:e9:79:3d:24:0b:f9:89:ef:20:79:
                    ce:d2:a3:9c:28:1d:1f:01:a3:90:0f:9e:10:fd:0a:
                    dc:2d:2f:d3:fb:fc:6f:9c:8e:b7:86:a4:98:f7:4a:
                    ce:53:f1:d1:2d:aa:f1:aa:ce:ea:28:50:e5:2d:d1:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:80:EF:D4:31:D5:BD:EB:58:21:AD:C2:95:8B:62:B4:04:81:F0:74
            X509v3 Authority Key Identifier:
                keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/f4Dv1DHVvetYIa3ClYtitASB8HQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.228.64.0/21
                  46.235.80.0/21
                  77.245.96.0/20
                  80.242.208.0/20
                  89.219.24.0/22
                  93.185.64.0/20
                  95.141.128.0/20
                  185.20.124.0/22
                  188.0.128.0/19
                  188.127.32.0-188.127.45.255
                  193.29.53.0/24
                  195.189.28.0/22
                  217.196.16.0/20
                IPv6:
                  2a03:a300:800::-2a03:a300:1000:ffff:ffff:ffff:ffff:ffff
                  2a03:a300:1140::/48
                  2a03:a300:2000::/48
                  2a03:a300:2020::/48
                  2a03:a300:3000::/48
                  2a03:a300:4000::/44
                  2a03:a300:4100::/48
                  2a03:a300:5000::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:2c:42:87:32:c1:a5:aa:07:b0:07:83:36:a8:f5:17:aa:
         84:b2:ad:f8:a0:6f:03:91:e8:d8:56:ec:6b:6e:b0:cc:fa:d1:
         d6:01:a2:25:56:0a:ff:7c:a5:8d:61:e6:93:3b:7f:30:70:4e:
         4e:8b:fb:cc:57:56:dd:d7:64:a4:45:6b:6d:a1:ea:fe:5d:7f:
         c6:a8:99:ac:3d:c8:a6:7a:05:22:2e:9c:5a:b7:fc:9e:e9:a5:
         6f:3e:dc:02:f3:d5:1e:6e:df:fe:e8:36:1f:48:dc:81:40:c4:
         b3:17:e7:31:17:e0:7b:b6:4a:e3:50:21:73:e5:a8:bd:7a:91:
         37:c4:b8:29:b5:10:2c:63:0a:ab:f1:54:77:d3:44:9a:ef:f7:
         5b:57:6f:c8:d9:bc:25:9e:7e:24:f8:e8:7b:70:b1:be:03:d2:
         aa:41:81:53:35:c4:2b:f3:da:b2:c6:29:75:9f:ab:79:94:8f:
         fe:5d:1c:31:b7:f2:8c:66:d1:67:68:98:5b:0e:85:29:48:70:
         a4:e1:2e:82:29:5b:2d:27:cb:5a:19:db:d5:b8:4e:12:79:18:
         00:79:32:6e:d4:32:6e:4d:0c:1a:bc:cd:b1:5d:52:5f:71:7d:
         a6:51:38:bc:8d:ec:3f:37:fa:90:cb:60:8e:36:ff:f4:b1:a9:
         eb:03:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:17 2024 by rpki-client on console-fra.rpki-client.org