Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/sI6sO91CrV6JuhUeAhR8jGF8ffc.roa
File:                     sI6sO91CrV6JuhUeAhR8jGF8ffc.roa (raw, json)
Hash identifier:          m6/oWH2LbngrUw2houWYBOz52miaizVjDhU935NVU14=
Subject key identifier:   B0:8E:AC:3B:DD:42:AD:5E:89:BA:15:1E:02:14:7C:8C:61:7C:7D:F7
Certificate issuer:       /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial:       387DA71F
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/sI6sO91CrV6JuhUeAhR8jGF8ffc.roa
Signing time:             Sat 01 Jan 2022 16:10:57 +0000
ROA not before:           Sat 01 Jan 2022 16:10:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35104
IP address blocks:        46.235.84.0/24 maxlen: 24
                          46.235.83.0/24 maxlen: 24
                          46.235.82.0/24 maxlen: 24
                          46.235.81.0/24 maxlen: 24
                          46.235.85.0/24 maxlen: 24
                          46.235.80.0/24 maxlen: 24
                          46.235.87.0/24 maxlen: 24
                          46.235.86.0/24 maxlen: 24
                          188.127.40.0/24 maxlen: 24
                          188.127.39.0/24 maxlen: 24
                          188.127.44.0/24 maxlen: 24
                          188.127.43.0/24 maxlen: 24
                          188.127.42.0/24 maxlen: 24
                          188.127.41.0/24 maxlen: 24
                          188.127.45.0/24 maxlen: 24
                          37.228.64.0/24 maxlen: 24
                          37.228.68.0/24 maxlen: 24
                          37.228.67.0/24 maxlen: 24
                          37.228.66.0/24 maxlen: 24
                          37.228.65.0/24 maxlen: 24
                          37.228.71.0/24 maxlen: 24
                          37.228.70.0/24 maxlen: 24
                          37.228.69.0/24 maxlen: 24
                          188.127.38.0/24 maxlen: 24
                          188.127.33.0/24 maxlen: 24
                          188.127.32.0/24 maxlen: 24
                          188.127.37.0/24 maxlen: 24
                          188.127.36.0/24 maxlen: 24
                          188.127.35.0/24 maxlen: 24
                          188.127.34.0/24 maxlen: 24
                          93.185.67.0/24 maxlen: 24
                          93.185.66.0/24 maxlen: 24
                          93.185.65.0/24 maxlen: 24
                          93.185.71.0/24 maxlen: 24
                          93.185.70.0/24 maxlen: 24
                          93.185.69.0/24 maxlen: 24
                          93.185.68.0/24 maxlen: 24
                          93.185.73.0/24 maxlen: 24
                          93.185.74.0/24 maxlen: 24
                          93.185.72.0/21 maxlen: 21
                          93.185.72.0/24 maxlen: 24
                          93.185.78.0/24 maxlen: 24
                          93.185.77.0/24 maxlen: 24
                          93.185.76.0/24 maxlen: 24
                          93.185.75.0/24 maxlen: 24
                          93.185.79.0/24 maxlen: 24
                          89.219.24.0/24 maxlen: 24
                          89.219.25.0/24 maxlen: 24
                          89.219.27.0/24 maxlen: 24
                          89.219.26.0/24 maxlen: 24
                          77.245.97.0/24 maxlen: 24
                          77.245.96.0/24 maxlen: 24
                          77.245.98.0/24 maxlen: 24
                          77.245.100.0/24 maxlen: 24
                          77.245.99.0/24 maxlen: 24
                          77.245.104.0/24 maxlen: 24
                          77.245.104.0/22 maxlen: 22
                          77.245.103.0/24 maxlen: 24
                          77.245.102.0/24 maxlen: 24
                          77.245.101.0/24 maxlen: 24
                          77.245.105.0/24 maxlen: 24
                          77.245.111.0/24 maxlen: 24
                          77.245.110.0/24 maxlen: 24
                          77.245.109.0/24 maxlen: 24
                          77.245.108.0/24 maxlen: 24
                          77.245.108.0/23 maxlen: 23
                          77.245.107.0/24 maxlen: 24
                          77.245.106.0/24 maxlen: 24
                          93.185.64.0/24 maxlen: 24
                          193.29.53.0/24 maxlen: 24
                          185.20.125.0/24 maxlen: 24
                          185.20.124.0/24 maxlen: 24
                          80.242.212.0/24 maxlen: 24
                          80.242.211.0/24 maxlen: 24
                          80.242.210.0/24 maxlen: 24
                          80.242.209.0/24 maxlen: 24
                          80.242.213.0/24 maxlen: 24
                          80.242.208.0/24 maxlen: 24
                          185.20.127.0/24 maxlen: 24
                          185.20.126.0/23 maxlen: 23
                          185.20.126.0/24 maxlen: 24
                          80.242.218.0/24 maxlen: 24
                          80.242.217.0/24 maxlen: 24
                          80.242.216.0/24 maxlen: 24
                          80.242.219.0/24 maxlen: 24
                          80.242.215.0/24 maxlen: 24
                          80.242.214.0/24 maxlen: 24
                          80.242.223.0/24 maxlen: 24
                          80.242.222.0/24 maxlen: 24
                          80.242.221.0/24 maxlen: 24
                          80.242.220.0/24 maxlen: 24
                          95.141.128.0/24 maxlen: 24
                          95.141.130.0/24 maxlen: 24
                          95.141.129.0/24 maxlen: 24
                          95.141.132.0/24 maxlen: 24
                          95.141.131.0/24 maxlen: 24
                          95.141.135.0/24 maxlen: 24
                          95.141.134.0/24 maxlen: 24
                          95.141.133.0/24 maxlen: 24
                          95.141.139.0/24 maxlen: 24
                          95.141.138.0/24 maxlen: 24
                          95.141.137.0/24 maxlen: 24
                          95.141.136.0/24 maxlen: 24
                          95.141.136.0/22 maxlen: 22
                          95.141.142.0/24 maxlen: 24
                          95.141.141.0/24 maxlen: 24
                          95.141.140.0/24 maxlen: 24
                          95.141.143.0/24 maxlen: 24
                          217.196.16.0/24 maxlen: 24
                          217.196.17.0/24 maxlen: 24
                          217.196.24.0/24 maxlen: 24
                          217.196.23.0/24 maxlen: 24
                          217.196.19.0/24 maxlen: 24
                          217.196.18.0/24 maxlen: 24
                          217.196.22.0/24 maxlen: 24
                          217.196.21.0/24 maxlen: 24
                          217.196.20.0/24 maxlen: 24
                          217.196.31.0/24 maxlen: 24
                          217.196.30.0/24 maxlen: 24
                          217.196.26.0/23 maxlen: 23
                          217.196.26.0/24 maxlen: 24
                          217.196.25.0/24 maxlen: 24
                          217.196.29.0/24 maxlen: 24
                          217.196.28.0/24 maxlen: 24
                          217.196.27.0/24 maxlen: 24
                          195.189.31.0/24 maxlen: 24
                          195.189.30.0/24 maxlen: 24
                          195.189.29.0/24 maxlen: 24
                          195.189.28.0/24 maxlen: 24
                          188.0.132.0/24 maxlen: 24
                          188.0.131.0/24 maxlen: 24
                          188.0.130.0/24 maxlen: 24
                          188.0.129.0/24 maxlen: 24
                          188.0.128.0/24 maxlen: 24
                          188.0.139.0/24 maxlen: 24
                          188.0.138.0/24 maxlen: 24
                          188.0.137.0/24 maxlen: 24
                          188.0.136.0/24 maxlen: 24
                          188.0.135.0/24 maxlen: 24
                          188.0.134.0/24 maxlen: 24
                          188.0.133.0/24 maxlen: 24
                          188.0.145.0/24 maxlen: 24
                          188.0.144.0/24 maxlen: 24
                          188.0.143.0/24 maxlen: 24
                          188.0.142.0/24 maxlen: 24
                          188.0.141.0/24 maxlen: 24
                          188.0.140.0/22 maxlen: 24
                          188.0.146.0/24 maxlen: 24
                          188.0.149.0/24 maxlen: 24
                          188.0.148.0/24 maxlen: 24
                          188.0.147.0/24 maxlen: 24
                          188.0.152.0/24 maxlen: 24
                          188.0.151.0/24 maxlen: 24
                          188.0.150.0/24 maxlen: 24
                          188.0.159.0/24 maxlen: 24
                          188.0.158.0/24 maxlen: 24
                          188.0.157.0/24 maxlen: 24
                          188.0.153.0/24 maxlen: 24
                          188.0.156.0/24 maxlen: 24
                          188.0.155.0/24 maxlen: 24
                          188.0.154.0/24 maxlen: 24
                          2a03:a300:4000::/44 maxlen: 44
                          2a03:a300:5000::/44 maxlen: 44
                          2a03:a300:1140::/48 maxlen: 48
                          2a03:a300:3000::/48 maxlen: 48
                          2a03:a300:1000::/48 maxlen: 48
                          2a03:a300:2000::/48 maxlen: 48
                          2a03:a300:4100::/48 maxlen: 48
                          2a03:a300:800::/37 maxlen: 37

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947758879 (0x387da71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
        Validity
            Not Before: Jan  1 16:10:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b08eac3bdd42ad5e89ba151e02147c8c617c7df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:43:1f:1c:2d:b8:44:b2:9c:36:d4:cf:58:
                    e7:ac:8d:3f:3a:c5:b0:34:7f:33:f1:d0:a4:b9:ae:
                    35:72:b6:c2:2f:4b:eb:45:48:54:ab:80:45:03:90:
                    88:13:a0:bd:78:a7:51:d4:ae:d5:a8:fd:11:18:32:
                    51:dd:20:fd:fc:80:52:a8:cc:f3:2e:93:0a:9e:58:
                    18:c4:a2:fc:54:56:0c:d6:89:5e:60:18:91:bc:56:
                    0a:09:c6:bc:49:41:af:3e:b4:d3:e6:7a:d2:d8:33:
                    59:21:e4:2b:25:e9:20:11:8b:05:98:56:fb:50:79:
                    51:55:4b:84:6c:0c:fe:88:14:9b:3c:5c:a1:44:97:
                    76:cc:87:d6:8d:4f:b1:69:dc:a1:84:1d:6d:87:5e:
                    08:27:92:23:7d:35:9e:ec:95:a9:b8:f3:9c:fd:be:
                    88:ce:b6:55:40:e3:5a:c3:86:09:be:f7:d3:dc:3d:
                    b1:d1:d6:74:2e:b8:1a:df:bc:48:c5:1d:64:66:8f:
                    66:e5:fb:04:c5:e6:aa:82:a5:01:ff:89:6e:d9:7e:
                    aa:49:25:d6:99:3d:f7:37:ea:47:1e:85:2f:7c:74:
                    21:9e:06:dd:2a:28:25:32:5d:a6:74:34:93:19:28:
                    85:5a:92:0f:77:5e:6e:33:34:40:33:a0:9f:95:9c:
                    b3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8E:AC:3B:DD:42:AD:5E:89:BA:15:1E:02:14:7C:8C:61:7C:7D:F7
            X509v3 Authority Key Identifier:
                keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/sI6sO91CrV6JuhUeAhR8jGF8ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.228.64.0/21
                  46.235.80.0/21
                  77.245.96.0/20
                  80.242.208.0/20
                  89.219.24.0/22
                  93.185.64.0/20
                  95.141.128.0/20
                  185.20.124.0/22
                  188.0.128.0/19
                  188.127.32.0-188.127.45.255
                  193.29.53.0/24
                  195.189.28.0/22
                  217.196.16.0/20
                IPv6:
                  2a03:a300:800::-2a03:a300:1000:ffff:ffff:ffff:ffff:ffff
                  2a03:a300:1140::/48
                  2a03:a300:2000::/48
                  2a03:a300:3000::/48
                  2a03:a300:4000::/44
                  2a03:a300:4100::/48
                  2a03:a300:5000::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:52:17:80:8b:84:78:74:db:fc:25:bc:a9:43:82:51:c8:
         d8:50:65:6c:22:30:ea:41:9d:2e:59:ac:19:29:da:ef:c4:22:
         68:b4:93:e3:15:b3:14:77:6d:a0:3e:cb:2d:ac:4a:76:a7:3e:
         8f:24:34:5c:b8:df:4a:96:78:c9:9a:f7:2f:4b:99:5b:61:9e:
         43:f6:d5:a5:a7:3b:69:ff:a1:9a:93:98:e9:57:61:90:f2:e8:
         42:5b:fd:13:8a:0c:38:57:5e:d8:46:39:6a:90:6f:ae:a5:5c:
         05:14:c2:fd:7a:33:8a:fe:e8:2e:6e:de:bb:0a:12:08:bd:e7:
         73:d8:de:2c:3d:ac:68:46:63:8d:40:fc:14:41:18:4f:23:99:
         2f:8e:6a:fc:3b:a3:27:ca:5d:f3:bb:cc:b2:2d:da:0d:98:49:
         ba:80:a0:80:37:28:c0:53:79:21:7b:85:48:62:c9:ad:c7:33:
         cf:20:9f:f8:1b:5e:9b:52:8b:ba:85:01:b0:13:ae:fe:d0:9a:
         fe:67:9e:8f:a6:5c:dc:50:64:5e:a1:97:f5:f7:4e:6f:04:ef:
         6e:d8:47:97:34:a6:ff:29:e2:1a:95:98:2d:0d:6c:90:12:25:
         f9:02:f5:a2:47:f2:28:57:2e:fd:80:86:72:15:b5:d6:4f:51:
         aa:f5:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:39 2024 by rpki-client on console-ams.rpki-client.org