Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0AexbBSgPlAy3b_Q7DNz-nT2lyk.roa
File:                     0AexbBSgPlAy3b_Q7DNz-nT2lyk.roa (raw, json)
Hash identifier:          oe05IusFvAt6eEgjBjt+0J94iu6Kkgvu3NQ17MMNmZk=
Subject key identifier:   D0:07:B1:6C:14:A0:3E:50:32:DD:BF:D0:EC:33:73:FA:74:F6:97:29
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       09AC1F50
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0AexbBSgPlAy3b_Q7DNz-nT2lyk.roa
Signing time:             Thu 23 Jun 2022 09:04:25 +0000
ROA not before:           Thu 23 Jun 2022 09:04:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.229.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.69.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.243.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/21 maxlen: 21
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.32.0/19 maxlen: 19
                          77.105.38.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.8.0/24 maxlen: 24
                          77.105.11.0/24 maxlen: 24
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.14.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.128.0/23 maxlen: 23
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/21 maxlen: 21
                          79.175.64.0/20 maxlen: 20
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          185.47.91.0/24 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162275152 (0x9ac1f50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jun 23 09:04:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d007b16c14a03e5032ddbfd0ec3373fa74f69729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:14:ed:25:c9:08:10:40:d7:2a:98:e8:95:d0:
                    4e:4e:2c:0a:9f:d4:a8:1f:06:85:88:8e:3c:2f:24:
                    68:23:0a:ed:14:30:66:72:cb:78:b7:14:2b:69:29:
                    31:bf:28:33:6d:9c:af:69:94:99:45:44:20:71:4d:
                    d7:5f:2e:fe:52:cd:bf:e4:67:12:ba:f9:71:29:78:
                    96:07:d9:35:eb:3d:c4:5f:67:af:83:00:68:9d:0c:
                    df:3f:ba:35:1d:c9:5c:a7:71:3d:a0:bb:5a:6d:31:
                    a2:5d:15:79:8a:65:76:73:24:9c:ab:0b:bb:2e:84:
                    7a:a2:a5:8f:3a:01:91:0a:8a:d2:5b:69:88:e9:42:
                    c1:db:5e:06:82:9f:0f:2d:36:a0:ef:65:c3:b4:2d:
                    4d:31:f5:0b:1e:8d:cb:d7:3d:58:db:78:4a:33:17:
                    67:1d:a7:cc:1c:49:a5:86:e0:4e:dd:bd:bb:cf:aa:
                    fc:a0:14:69:3f:54:b6:e3:4c:e9:92:03:33:e1:b0:
                    03:fe:85:1e:ca:0f:70:42:a1:0d:88:7a:c7:d5:66:
                    5f:fb:a4:64:40:5d:ca:ad:b5:74:16:d9:c9:67:92:
                    91:f1:f8:00:9e:09:fb:a7:91:44:27:6d:e2:8e:5d:
                    40:5a:d5:bc:f6:50:e3:37:39:6b:0f:c5:09:76:18:
                    97:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:07:B1:6C:14:A0:3E:50:32:DD:BF:D0:EC:33:73:FA:74:F6:97:29
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0AexbBSgPlAy3b_Q7DNz-nT2lyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.69.0-93.186.70.255
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.243.255
                  178.253.246.0-178.253.255.255
                  185.47.91.0/24
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.220.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.128.0/23
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.14.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:e0:f9:7d:cd:d8:43:77:79:7a:5c:de:08:e5:eb:2d:36:
         cc:b4:ae:ee:32:3f:95:2f:89:1a:f0:d2:bb:49:fd:ca:1a:2d:
         d8:1f:7f:d5:5b:bb:2f:87:29:88:56:31:ff:dd:d4:15:61:1b:
         2a:81:f7:19:47:8e:75:09:b5:08:fb:95:a6:3b:b4:a6:e4:1e:
         36:a2:32:b5:3e:cf:c8:5d:f6:6b:3a:c2:57:08:7a:b2:80:10:
         e4:ef:9a:5d:ab:c0:44:40:73:9f:e1:11:53:de:db:44:da:07:
         80:37:0d:a4:54:64:1b:06:46:42:22:fd:93:cb:6c:d1:f0:0f:
         48:b4:b9:b5:4a:5e:3a:99:c3:eb:6c:4d:14:1e:7e:2d:e0:96:
         e4:fc:15:1b:c4:2e:44:9b:9b:2b:dc:10:ee:8d:43:59:28:46:
         c6:5c:eb:40:47:12:c8:2c:cf:f6:c9:28:94:bf:d6:9d:0b:7e:
         cc:74:9a:7d:f9:b6:c6:b4:5f:db:e5:62:fd:79:ee:b3:77:b1:
         63:8b:f8:b3:d0:e3:c1:2d:1a:f6:a9:bd:f6:0c:53:18:a4:58:
         7b:2c:1b:ed:2a:51:2e:2e:86:1a:d7:18:55:b6:8e:d1:ac:a1:
         2a:c5:cd:97:70:8d:58:75:a1:86:2b:43:c8:fb:7a:68:bc:9e:
         46:9c:42:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org