Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/BtXgOEuFzVnudj-mSZsREoC8-A4.roa
File:                     BtXgOEuFzVnudj-mSZsREoC8-A4.roa (raw, json)
Hash identifier:          RF5ZJU7QFN6LK+ICxlqXjpHU6EN3xt2oR7Pn0AvMAUI=
Subject key identifier:   06:D5:E0:38:4B:85:CD:59:EE:76:3F:A6:49:9B:11:12:80:BC:F8:0E
Certificate issuer:       /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial:       03D079E8
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/BtXgOEuFzVnudj-mSZsREoC8-A4.roa
Signing time:             Sat 01 Jan 2022 03:52:31 +0000
ROA not before:           Sat 01 Jan 2022 03:52:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204170
IP address blocks:        178.20.17.0/24 maxlen: 24
                          178.20.16.0/24 maxlen: 24
                          178.20.16.0/21 maxlen: 21
                          178.20.18.0/24 maxlen: 24
                          178.20.19.0/24 maxlen: 24
                          178.20.22.0/24 maxlen: 24
                          178.20.23.0/24 maxlen: 24
                          178.20.20.0/24 maxlen: 24
                          178.20.21.0/24 maxlen: 24
                          84.242.37.0/24 maxlen: 24
                          84.242.35.0/24 maxlen: 24
                          84.242.36.0/24 maxlen: 24
                          84.242.33.0/24 maxlen: 24
                          84.242.32.0/20 maxlen: 20
                          84.242.34.0/24 maxlen: 24
                          84.242.32.0/24 maxlen: 24
                          84.242.38.0/24 maxlen: 24
                          84.242.44.0/24 maxlen: 24
                          84.242.42.0/24 maxlen: 24
                          84.242.43.0/24 maxlen: 24
                          84.242.40.0/24 maxlen: 24
                          84.242.41.0/24 maxlen: 24
                          84.242.39.0/24 maxlen: 24
                          84.242.47.0/24 maxlen: 24
                          84.242.45.0/24 maxlen: 24
                          84.242.46.0/24 maxlen: 24
                          206.167.33.0/24 maxlen: 24
                          141.105.172.0/24 maxlen: 24
                          141.105.171.0/24 maxlen: 24
                          185.112.104.0/24 maxlen: 24
                          141.105.169.0/24 maxlen: 24
                          185.112.104.0/22 maxlen: 22
                          141.105.170.0/24 maxlen: 24
                          141.105.168.0/24 maxlen: 24
                          141.105.168.0/21 maxlen: 21
                          185.112.105.0/24 maxlen: 24
                          185.112.107.0/24 maxlen: 24
                          141.105.174.0/24 maxlen: 24
                          141.105.175.0/24 maxlen: 24
                          141.105.173.0/24 maxlen: 24
                          185.112.106.0/24 maxlen: 24
                          78.111.40.0/24 maxlen: 24
                          78.111.39.0/24 maxlen: 24
                          78.111.43.0/24 maxlen: 24
                          78.111.44.0/24 maxlen: 24
                          78.111.41.0/24 maxlen: 24
                          78.111.42.0/24 maxlen: 24
                          78.111.47.0/24 maxlen: 24
                          78.111.45.0/24 maxlen: 24
                          78.111.46.0/24 maxlen: 24
                          96.9.131.0/24 maxlen: 24
                          96.9.132.0/24 maxlen: 24
                          96.9.129.0/24 maxlen: 24
                          96.9.130.0/24 maxlen: 24
                          96.9.128.0/19 maxlen: 19
                          96.9.128.0/24 maxlen: 24
                          96.9.136.0/24 maxlen: 24
                          96.9.137.0/24 maxlen: 24
                          96.9.134.0/24 maxlen: 24
                          96.9.135.0/24 maxlen: 24
                          96.9.133.0/24 maxlen: 24
                          96.9.138.0/24 maxlen: 24
                          96.9.139.0/24 maxlen: 24
                          96.9.143.0/24 maxlen: 24
                          96.9.144.0/24 maxlen: 24
                          96.9.141.0/24 maxlen: 24
                          96.9.142.0/24 maxlen: 24
                          96.9.140.0/24 maxlen: 24
                          96.9.145.0/24 maxlen: 24
                          96.9.150.0/24 maxlen: 24
                          96.9.151.0/24 maxlen: 24
                          96.9.148.0/24 maxlen: 24
                          96.9.149.0/24 maxlen: 24
                          96.9.147.0/24 maxlen: 24
                          96.9.146.0/24 maxlen: 24
                          96.9.152.0/24 maxlen: 24
                          96.9.157.0/24 maxlen: 24
                          96.9.158.0/24 maxlen: 24
                          96.9.155.0/24 maxlen: 24
                          96.9.156.0/24 maxlen: 24
                          96.9.154.0/24 maxlen: 24
                          96.9.153.0/24 maxlen: 24
                          96.9.159.0/24 maxlen: 24
                          185.29.141.0/24 maxlen: 24
                          185.29.140.0/22 maxlen: 22
                          185.29.142.0/24 maxlen: 24
                          185.29.140.0/24 maxlen: 24
                          185.29.143.0/24 maxlen: 24
                          78.111.33.0/24 maxlen: 24
                          78.111.34.0/24 maxlen: 24
                          78.111.32.0/20 maxlen: 20
                          78.111.32.0/24 maxlen: 24
                          78.111.38.0/24 maxlen: 24
                          78.111.36.0/24 maxlen: 24
                          78.111.37.0/24 maxlen: 24
                          78.111.35.0/24 maxlen: 24
                          199.48.224.0/24 maxlen: 24
                          94.176.17.0/24 maxlen: 24
                          94.176.16.0/20 maxlen: 20
                          94.176.16.0/24 maxlen: 24
                          94.176.20.0/24 maxlen: 24
                          94.176.21.0/24 maxlen: 24
                          94.176.18.0/24 maxlen: 24
                          94.176.19.0/24 maxlen: 24
                          94.176.24.0/24 maxlen: 24
                          94.176.22.0/24 maxlen: 24
                          94.176.23.0/24 maxlen: 24
                          94.176.27.0/24 maxlen: 24
                          94.176.28.0/24 maxlen: 24
                          94.176.25.0/24 maxlen: 24
                          94.176.26.0/24 maxlen: 24
                          94.176.31.0/24 maxlen: 24
                          94.176.29.0/24 maxlen: 24
                          94.176.30.0/24 maxlen: 24
                          5.102.179.0/24 maxlen: 24
                          5.102.176.0/21 maxlen: 21
                          5.102.178.0/24 maxlen: 24
                          5.102.176.0/24 maxlen: 24
                          5.102.177.0/24 maxlen: 24
                          5.102.181.0/24 maxlen: 24
                          5.102.182.0/24 maxlen: 24
                          5.102.180.0/24 maxlen: 24
                          5.102.183.0/24 maxlen: 24
                          2a0a:c740:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63994344 (0x3d079e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
        Validity
            Not Before: Jan  1 03:52:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=06d5e0384b85cd59ee763fa6499b111280bcf80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:19:9e:f4:78:69:19:f7:25:6c:88:d6:22:
                    9c:a4:e7:3f:29:dd:47:84:f9:79:c8:b0:bf:04:07:
                    20:e8:38:ce:2d:35:6d:7d:32:bd:9d:b0:10:50:61:
                    c3:20:f1:6e:a4:7d:4a:62:ba:15:26:7c:43:1d:4a:
                    ba:42:b1:77:1d:94:53:1b:9c:9b:c9:43:7e:0d:52:
                    c7:52:f0:ef:fb:d2:af:74:d1:3f:85:88:0d:3a:dc:
                    67:61:d5:73:ef:89:cc:2c:4a:79:66:d5:51:3c:c5:
                    f1:8a:86:32:ff:59:68:e1:e9:3d:c2:8c:ff:00:74:
                    18:5d:66:93:49:77:ab:a0:ec:be:a7:a0:ff:db:4b:
                    ef:30:1d:aa:10:a1:a5:34:ad:7e:9a:a1:c5:19:3e:
                    92:60:e2:f0:26:98:e6:e5:e4:9d:dd:9f:3c:68:f6:
                    d9:f9:d1:00:10:68:f2:f7:9e:76:05:23:1e:1e:b2:
                    14:ba:10:0a:e1:c0:27:5c:1c:e3:49:3e:b8:a1:68:
                    1c:2f:21:16:d3:8a:ef:92:2a:f7:ff:fb:fa:9a:d2:
                    4b:c4:c7:e2:2b:2e:bb:bf:9d:f8:19:d9:93:08:09:
                    4c:df:10:ce:39:b5:36:0f:47:8b:72:95:8e:07:ca:
                    db:3b:92:46:d3:a9:e6:2f:37:48:12:cd:c1:cb:5a:
                    61:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D5:E0:38:4B:85:CD:59:EE:76:3F:A6:49:9B:11:12:80:BC:F8:0E
            X509v3 Authority Key Identifier:
                keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/BtXgOEuFzVnudj-mSZsREoC8-A4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.102.176.0/21
                  78.111.32.0/20
                  84.242.32.0/20
                  94.176.16.0/20
                  96.9.128.0/19
                  141.105.168.0/21
                  178.20.16.0/21
                  185.29.140.0/22
                  185.112.104.0/22
                  199.48.224.0/24
                  206.167.33.0/24
                IPv6:
                  2a0a:c740:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:c1:d5:7a:8f:69:b7:45:a7:f3:81:88:2b:6a:73:29:db:cb:
         42:54:3b:e3:c9:1c:6e:ec:a6:0f:74:6b:20:44:32:75:0c:8a:
         c7:ae:d8:8d:50:05:0b:df:08:95:39:9a:f8:2c:c9:e8:c3:f5:
         33:49:35:62:d2:5a:62:45:43:42:14:f9:e9:2c:38:88:5a:0f:
         3e:51:43:19:be:30:a4:35:3b:3b:38:7d:76:01:67:35:96:3f:
         fe:c9:d8:51:85:7f:04:b1:24:b9:0b:f3:b0:d9:25:96:e4:7e:
         30:c8:35:63:d1:d1:52:e7:92:40:8c:e0:db:29:ff:2e:36:4b:
         82:07:5f:80:f2:8b:48:b3:56:25:de:4d:5c:1d:ee:7f:39:aa:
         4e:cd:18:f4:ce:22:87:c1:36:a2:6a:f1:55:a3:b4:9d:c9:a5:
         d4:bf:b6:b3:56:8a:e9:fc:a1:42:a8:12:0c:95:82:8b:49:63:
         88:e8:c9:ad:5b:e5:d6:7e:61:f0:c7:48:f9:7e:f6:60:6f:ef:
         0c:5f:05:ce:6c:40:bf:4c:53:0c:76:f7:4a:d8:a7:0b:e4:55:
         d6:a7:73:9e:66:1b:93:cc:51:d7:4c:dd:4b:be:76:20:2e:3d:
         df:ec:49:68:65:82:88:63:e2:b6:8d:77:60:14:4d:0c:7d:54:
         d5:0c:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:53 2024 by rpki-client on console-ams.rpki-client.org