Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/YRdJVUommzT8FCV2jaATly0xj3U.roa
File:                     YRdJVUommzT8FCV2jaATly0xj3U.roa (raw, json)
Hash identifier:          xUhn7bWUr1HRwUGPfopBAcT33OFhusYahLfMewVT31I=
Subject key identifier:   61:17:49:55:4A:26:9B:34:FC:14:25:76:8D:A0:13:97:2D:31:8F:75
Certificate issuer:       /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial:       331B4C0A
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/YRdJVUommzT8FCV2jaATly0xj3U.roa
Signing time:             Sat 01 Jan 2022 10:59:03 +0000
ROA not before:           Sat 01 Jan 2022 10:59:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12301
IP address blocks:        79.120.168.0/23 maxlen: 24
                          79.120.176.0/20 maxlen: 24
                          79.120.192.0/19 maxlen: 24
                          79.120.198.0/24 maxlen: 24
                          79.120.128.0/19 maxlen: 24
                          79.120.224.0/20 maxlen: 24
                          79.120.240.0/21 maxlen: 24
                          79.120.250.0/23 maxlen: 24
                          212.24.160.0/19 maxlen: 19
                          193.226.196.0/22 maxlen: 24
                          193.226.194.0/23 maxlen: 24
                          193.226.200.0/21 maxlen: 24
                          89.186.98.0/23 maxlen: 24
                          89.186.100.0/23 maxlen: 24
                          193.226.208.0/22 maxlen: 24
                          213.253.192.0/18 maxlen: 24
                          89.186.104.0/23 maxlen: 24
                          193.226.216.0/21 maxlen: 24
                          89.186.116.0/23 maxlen: 24
                          193.226.224.0/23 maxlen: 24
                          193.226.228.0/22 maxlen: 24
                          193.226.236.0/23 maxlen: 24
                          193.226.234.0/23 maxlen: 24
                          193.226.242.0/23 maxlen: 24
                          193.226.252.0/22 maxlen: 24
                          193.226.250.0/23 maxlen: 24
                          94.125.248.0/21 maxlen: 24
                          82.131.160.0/20 maxlen: 24
                          62.77.192.0/22 maxlen: 24
                          193.91.64.0/19 maxlen: 24
                          82.131.176.0/22 maxlen: 24
                          62.77.200.0/21 maxlen: 24
                          62.77.208.0/20 maxlen: 24
                          82.131.180.0/23 maxlen: 24
                          82.131.192.0/22 maxlen: 24
                          62.77.224.0/20 maxlen: 24
                          82.131.199.0/24 maxlen: 24
                          82.131.208.0/21 maxlen: 24
                          62.77.244.0/22 maxlen: 24
                          62.77.242.0/23 maxlen: 24
                          91.83.148.0/22 maxlen: 24
                          91.83.146.0/23 maxlen: 24
                          91.83.152.0/23 maxlen: 24
                          91.83.156.0/22 maxlen: 24
                          91.83.160.0/20 maxlen: 24
                          213.16.64.0/18 maxlen: 24
                          91.83.176.0/22 maxlen: 24
                          87.97.64.0/20 maxlen: 24
                          91.83.92.0/23 maxlen: 24
                          91.83.96.0/22 maxlen: 24
                          91.83.100.0/23 maxlen: 24
                          91.83.104.0/22 maxlen: 24
                          91.83.108.0/23 maxlen: 24
                          91.83.122.0/23 maxlen: 24
                          91.83.124.0/22 maxlen: 24
                          91.83.128.0/21 maxlen: 24
                          82.144.160.0/22 maxlen: 24
                          91.83.254.0/23 maxlen: 24
                          82.144.168.0/22 maxlen: 24
                          82.144.178.0/23 maxlen: 24
                          82.144.180.0/22 maxlen: 24
                          82.144.184.0/22 maxlen: 24
                          82.144.190.0/23 maxlen: 24
                          185.50.28.0/22 maxlen: 24
                          91.83.208.0/20 maxlen: 24
                          91.83.224.0/20 maxlen: 24
                          91.83.240.0/21 maxlen: 24
                          91.83.248.0/22 maxlen: 24
                          91.82.192.0/20 maxlen: 24
                          91.82.208.0/23 maxlen: 24
                          91.82.216.0/21 maxlen: 24
                          91.82.224.0/22 maxlen: 24
                          91.82.236.0/22 maxlen: 24
                          91.82.152.0/21 maxlen: 24
                          91.82.148.0/22 maxlen: 24
                          91.82.174.0/23 maxlen: 24
                          213.197.64.0/21 maxlen: 24
                          91.82.184.0/22 maxlen: 24
                          91.83.40.0/21 maxlen: 24
                          91.83.48.0/22 maxlen: 24
                          91.83.56.0/21 maxlen: 24
                          91.83.64.0/20 maxlen: 24
                          194.143.224.0/19 maxlen: 24
                          91.83.80.0/21 maxlen: 24
                          91.83.88.0/22 maxlen: 24
                          91.82.244.0/22 maxlen: 24
                          195.184.0.0/19 maxlen: 24
                          91.82.252.0/22 maxlen: 24
                          91.82.248.0/23 maxlen: 24
                          91.82.8.0/21 maxlen: 24
                          91.82.16.0/21 maxlen: 24
                          212.108.192.0/18 maxlen: 24
                          91.82.84.0/22 maxlen: 24
                          91.82.80.0/23 maxlen: 24
                          91.82.88.0/21 maxlen: 24
                          91.82.96.0/19 maxlen: 24
                          91.82.128.0/23 maxlen: 24
                          213.163.0.0/18 maxlen: 24
                          91.82.40.0/21 maxlen: 24
                          91.82.48.0/21 maxlen: 24
                          91.82.58.0/23 maxlen: 24
                          91.82.62.0/23 maxlen: 24
                          91.82.72.0/21 maxlen: 24
                          81.0.64.0/20 maxlen: 24
                          81.0.80.0/23 maxlen: 24
                          81.0.88.0/23 maxlen: 24
                          81.0.96.0/23 maxlen: 24
                          81.94.176.0/20 maxlen: 24
                          81.0.104.0/22 maxlen: 24
                          81.0.100.0/22 maxlen: 24
                          82.141.128.0/18 maxlen: 24
                          193.68.32.0/19 maxlen: 24
                          81.0.110.0/23 maxlen: 24
                          81.0.112.0/21 maxlen: 24
                          81.0.124.0/23 maxlen: 24
                          81.0.120.0/23 maxlen: 24
                          2001:1aa0::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857426954 (0x331b4c0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
        Validity
            Not Before: Jan  1 10:59:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=611749554a269b34fc1425768da013972d318f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:44:ec:9e:4e:69:04:7d:4f:a1:de:b4:7c:00:
                    33:7e:27:3f:6a:a7:f3:51:ec:c3:74:a5:48:e7:de:
                    e1:77:15:10:18:1e:a3:f5:f7:c6:98:00:70:94:dc:
                    8d:62:62:0e:2d:e6:6f:e5:4d:09:11:02:ce:ff:88:
                    6c:32:56:4f:5d:c5:72:fd:47:00:e4:9e:df:57:c9:
                    57:5a:7e:33:15:19:7e:a9:68:8c:50:ec:8d:17:fe:
                    67:16:a5:46:67:ee:7b:b7:63:45:36:6b:67:d2:2e:
                    2a:5e:37:e3:7f:3b:3d:bc:c4:30:90:1d:17:7b:66:
                    e7:88:78:9b:99:ad:26:80:8b:dd:84:ab:dc:6c:e4:
                    aa:ac:98:a8:94:0e:25:88:f8:a5:55:c7:1c:76:63:
                    6c:b8:51:fe:e2:84:bf:97:c4:39:8b:c0:c7:2b:19:
                    22:03:c3:d9:fd:19:4c:d6:07:01:9d:cb:50:c6:fb:
                    79:42:dc:db:b4:4d:21:cf:d3:16:89:f9:6a:53:75:
                    fa:43:93:e2:0d:38:e2:bc:c8:c5:65:b1:57:d7:7d:
                    b4:bd:48:7c:93:7d:c8:7b:57:7a:5b:9f:28:b6:41:
                    db:71:a0:21:a1:38:f8:57:92:89:c7:ef:c2:bc:58:
                    dc:5c:f9:5d:83:d5:dd:25:05:5a:85:d3:76:57:bb:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:17:49:55:4A:26:9B:34:FC:14:25:76:8D:A0:13:97:2D:31:8F:75
            X509v3 Authority Key Identifier:
                keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/YRdJVUommzT8FCV2jaATly0xj3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.77.192.0/22
                  62.77.200.0-62.77.239.255
                  62.77.242.0-62.77.247.255
                  79.120.128.0/19
                  79.120.168.0/23
                  79.120.176.0-79.120.247.255
                  79.120.250.0/23
                  81.0.64.0-81.0.81.255
                  81.0.88.0/23
                  81.0.96.0/23
                  81.0.100.0-81.0.107.255
                  81.0.110.0-81.0.121.255
                  81.0.124.0/23
                  81.94.176.0/20
                  82.131.160.0-82.131.181.255
                  82.131.192.0/22
                  82.131.199.0/24
                  82.131.208.0/21
                  82.141.128.0/18
                  82.144.160.0/22
                  82.144.168.0/22
                  82.144.178.0-82.144.187.255
                  82.144.190.0/23
                  87.97.64.0/20
                  89.186.98.0-89.186.101.255
                  89.186.104.0/23
                  89.186.116.0/23
                  91.82.8.0-91.82.23.255
                  91.82.40.0-91.82.55.255
                  91.82.58.0/23
                  91.82.62.0/23
                  91.82.72.0-91.82.81.255
                  91.82.84.0-91.82.129.255
                  91.82.148.0-91.82.159.255
                  91.82.174.0/23
                  91.82.184.0/22
                  91.82.192.0-91.82.209.255
                  91.82.216.0-91.82.227.255
                  91.82.236.0/22
                  91.82.244.0-91.82.249.255
                  91.82.252.0/22
                  91.83.40.0-91.83.51.255
                  91.83.56.0-91.83.93.255
                  91.83.96.0-91.83.101.255
                  91.83.104.0-91.83.109.255
                  91.83.122.0-91.83.135.255
                  91.83.146.0-91.83.153.255
                  91.83.156.0-91.83.179.255
                  91.83.208.0-91.83.251.255
                  91.83.254.0/23
                  94.125.248.0/21
                  185.50.28.0/22
                  193.68.32.0/19
                  193.91.64.0/19
                  193.226.194.0-193.226.211.255
                  193.226.216.0-193.226.225.255
                  193.226.228.0/22
                  193.226.234.0-193.226.237.255
                  193.226.242.0/23
                  193.226.250.0-193.226.255.255
                  194.143.224.0/19
                  195.184.0.0/19
                  212.24.160.0/19
                  212.108.192.0/18
                  213.16.64.0/18
                  213.163.0.0/18
                  213.197.64.0/21
                  213.253.192.0/18
                IPv6:
                  2001:1aa0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:3f:e3:b0:c6:23:a5:e2:7d:22:64:ba:9d:04:dc:ab:a3:
         d6:68:25:9c:b7:4b:e1:13:cc:77:d1:b9:af:44:ac:f0:5d:ad:
         af:57:5d:27:a4:79:61:be:b1:63:77:9a:8a:1f:c0:4f:50:a8:
         e2:e8:16:99:a9:c0:73:3d:b8:0e:9b:4f:2d:ad:e8:6c:42:e8:
         78:1c:f8:bb:51:b0:f5:51:94:d2:a1:16:62:b5:ed:41:22:17:
         3b:fb:a1:b2:8d:37:0a:87:8e:c4:f7:e1:93:6b:4b:d1:be:49:
         e5:aa:e4:dd:f2:f4:42:b8:bf:09:62:f9:67:fc:59:70:0d:42:
         c7:84:0a:f9:5d:05:c2:17:89:e3:52:04:94:88:d3:af:a4:53:
         1e:51:0e:33:32:96:e9:b9:5c:ac:88:5c:3c:cd:0e:a1:16:60:
         0a:f4:75:cb:77:eb:49:c7:71:24:08:4c:1d:7e:fa:06:ee:80:
         10:22:5c:43:f4:5a:1f:f6:94:b1:f4:68:94:3c:72:d2:f6:e2:
         c8:6c:22:32:25:5c:4f:5d:9c:27:82:fd:11:6c:b7:41:90:ff:
         9a:46:a3:c9:12:32:81:ea:6a:03:b2:46:3b:79:29:b5:92:27:
         a8:d1:6a:cf:4c:4a:87:d2:6e:8c:27:68:47:19:73:a8:be:51:
         97:00:a7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:16 2024 by rpki-client on console-ams.rpki-client.org