Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0inPv8x9fbOlDjvRxERAVqMePJg.roa
File:                     0inPv8x9fbOlDjvRxERAVqMePJg.roa (raw, json)
Hash identifier:          hMMBFSeXYppNNoT8saMWhhrejuhAyrjU4cOMvP5Vgwg=
Subject key identifier:   D2:29:CF:BF:CC:7D:7D:B3:A5:0E:3B:D1:C4:44:40:56:A3:1E:3C:98
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       08CEBC11
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0inPv8x9fbOlDjvRxERAVqMePJg.roa
Signing time:             Thu 07 Apr 2022 08:53:27 +0000
ROA not before:           Thu 07 Apr 2022 08:53:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.133.0/24 maxlen: 24
                          188.255.144.0/20 maxlen: 20
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.229.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.69.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.243.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/21 maxlen: 21
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/19 maxlen: 19
                          77.105.32.0/22 maxlen: 22
                          77.105.38.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.0.0/24 maxlen: 24
                          77.105.4.0/22 maxlen: 22
                          77.105.0.0/22 maxlen: 22
                          77.105.8.0/24 maxlen: 24
                          77.105.11.0/24 maxlen: 24
                          77.105.10.0/24 maxlen: 24
                          77.105.6.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.14.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.128.0/23 maxlen: 23
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.96.0/22 maxlen: 22
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/20 maxlen: 20
                          79.175.64.0/21 maxlen: 21
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          185.47.91.0/24 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147766289 (0x8cebc11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Apr  7 08:53:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d229cfbfcc7d7db3a50e3bd1c4444056a31e3c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:50:1d:b8:fa:fe:7f:d3:1f:b7:31:1e:11:
                    72:12:98:3c:cf:01:a6:8e:2d:b9:ac:dd:7d:ef:b1:
                    f2:45:61:f2:a7:6e:39:c7:30:40:93:b5:8b:75:9d:
                    b1:08:a8:5c:04:27:50:34:98:54:f6:73:17:85:4a:
                    78:a3:95:ca:a9:e8:b2:b6:42:fe:81:04:5d:4e:e3:
                    0f:ee:f6:f6:df:6f:ce:a7:6c:2f:f8:12:ad:f8:ec:
                    b0:f0:37:f9:3b:f7:5f:f8:a3:c4:70:f2:21:35:c2:
                    bc:8e:95:92:ce:15:45:89:35:8a:9b:6b:32:b0:db:
                    7c:3c:7b:df:3c:06:d9:cb:eb:45:ef:78:2b:ef:90:
                    f6:7a:24:70:74:e9:6f:15:51:be:77:5a:fb:ec:35:
                    8f:19:e2:91:e8:55:df:52:a3:48:fc:a0:6a:30:20:
                    95:ed:45:57:cb:11:23:31:56:e9:bf:c7:10:17:5d:
                    49:d3:26:b0:b3:42:1f:48:61:12:02:f1:b5:4c:d0:
                    b1:19:7d:0a:47:77:b1:b9:c2:46:90:c4:13:4e:c9:
                    3b:44:9b:11:5b:a7:40:e4:8a:10:4d:f7:17:a0:74:
                    e4:58:a8:28:55:9f:27:f6:e4:5c:e2:35:0b:ab:56:
                    b9:19:07:f5:9e:bd:88:8d:be:cb:b9:f9:90:25:da:
                    d8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:29:CF:BF:CC:7D:7D:B3:A5:0E:3B:D1:C4:44:40:56:A3:1E:3C:98
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0inPv8x9fbOlDjvRxERAVqMePJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/18
                  79.175.64.0-79.175.102.255
                  79.175.104.0-79.175.114.255
                  79.175.116.0/24
                  79.175.119.0-79.175.123.255
                  79.175.125.0-79.175.127.255
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.69.0-93.186.70.255
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.243.255
                  178.253.246.0-178.253.255.255
                  185.47.91.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.220.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.128.0/23
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.14.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:86:06:65:db:78:9b:86:bb:e6:2b:9f:d6:5d:5a:a3:82:d5:
         41:55:18:ce:ed:de:e8:2c:30:17:aa:42:64:22:05:2b:a0:8a:
         93:5a:f3:3c:62:79:08:e3:6c:4c:d0:2a:61:29:20:d9:d8:7e:
         a9:7a:9e:24:21:9e:e5:8d:ec:d2:94:a7:05:6b:35:f3:fd:b7:
         38:55:2b:dd:fd:1c:c1:bc:1a:98:44:db:d3:86:ab:5a:ef:95:
         3e:91:b4:d1:42:66:8a:3f:f5:b0:a3:ec:2c:92:a9:08:71:39:
         67:f8:06:ba:07:18:e4:71:72:f5:ed:67:43:e3:6e:e8:4e:aa:
         d3:0b:c4:cb:72:ef:d8:34:8e:cf:c9:22:09:ac:3f:08:4a:66:
         b5:82:ed:af:42:6e:b3:a5:09:ac:67:5a:0d:02:e9:79:8e:0f:
         de:d3:7b:55:ea:2a:47:54:de:e5:5d:22:cb:fa:27:c5:ce:da:
         a4:b5:77:e1:f3:f8:8a:02:09:83:be:1a:e6:f6:78:01:b8:ec:
         59:88:be:f9:e2:67:2e:35:5a:b7:a8:81:9a:5e:ad:20:65:8e:
         b9:ca:fb:35:87:5b:d7:40:21:dd:1a:2d:d1:60:4f:26:c6:a0:
         0a:3d:03:57:19:be:0f:0e:e6:5f:7b:79:ab:f2:67:aa:7c:14:
         67:ca:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:25 2024 by rpki-client on console-fra.rpki-client.org