Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8WByMffCIdY35wSvrIaoQa6Nx14.roa
File:                     8WByMffCIdY35wSvrIaoQa6Nx14.roa (raw, json)
Hash identifier:          aMIxB7EFa/g4K/EmZEJkskqsoI94IJrtKjj+CmGoAMs=
Subject key identifier:   F1:60:72:31:F7:C2:21:D6:37:E7:04:AF:AC:86:A8:41:AE:8D:C7:5E
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       08B37458
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8WByMffCIdY35wSvrIaoQa6Nx14.roa
Signing time:             Fri 01 Apr 2022 08:36:42 +0000
ROA not before:           Fri 01 Apr 2022 08:36:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.133.0/24 maxlen: 24
                          188.255.144.0/20 maxlen: 20
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.229.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.69.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.243.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/21 maxlen: 21
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/19 maxlen: 19
                          77.105.32.0/22 maxlen: 22
                          77.105.38.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.0.0/24 maxlen: 24
                          77.105.4.0/22 maxlen: 22
                          77.105.0.0/22 maxlen: 22
                          77.105.8.0/24 maxlen: 24
                          77.105.11.0/24 maxlen: 24
                          77.105.10.0/24 maxlen: 24
                          77.105.6.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.14.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.128.0/23 maxlen: 23
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.96.0/22 maxlen: 22
                          79.175.111.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.112.0/21 maxlen: 21
                          79.175.120.0/22 maxlen: 22
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/20 maxlen: 20
                          79.175.64.0/21 maxlen: 21
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          185.47.91.0/24 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145978456 (0x8b37458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Apr  1 08:36:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f1607231f7c221d637e704afac86a841ae8dc75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:02:07:ba:de:4d:75:0b:4b:01:31:e2:15:
                    b2:c3:1a:10:5a:ba:46:a0:57:b7:ae:a0:aa:1d:c3:
                    52:24:eb:ca:a7:35:8a:e2:fe:96:bc:21:12:1e:cb:
                    ef:35:da:a5:a3:3d:69:2f:7b:e8:d1:c5:8b:ae:6e:
                    b6:a0:1c:f4:3b:69:df:84:2f:79:3b:c2:4a:b6:8e:
                    04:7b:2b:3a:75:ff:a6:bb:46:aa:19:8a:6e:e4:8e:
                    a0:90:10:7a:d2:e3:9d:f1:9a:47:a7:75:36:27:7b:
                    9f:b9:de:94:de:5b:ea:e2:30:c8:ae:13:95:a0:81:
                    cb:a4:4a:79:8c:95:bd:6e:f8:6e:d6:ca:81:67:04:
                    d2:07:1a:da:ab:44:0f:85:e3:9b:8e:9a:c7:e5:bd:
                    fd:43:4e:11:be:08:2c:be:52:56:38:50:8c:ab:2d:
                    07:8c:ea:af:8f:c9:13:cc:84:c6:8d:60:64:5a:84:
                    c5:65:ee:78:d8:cd:e2:b2:db:b1:5c:0f:bf:f3:fd:
                    b3:ed:d5:a1:c6:f0:a9:8f:55:92:71:3c:9c:46:b0:
                    03:c2:81:f6:a4:22:3c:3a:fe:5d:f9:0c:e6:56:b5:
                    47:4f:72:81:89:e6:06:5a:91:7c:84:2d:60:ab:84:
                    59:19:44:a7:de:b6:0b:dc:f7:a3:d6:5c:2e:21:b5:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:60:72:31:F7:C2:21:D6:37:E7:04:AF:AC:86:A8:41:AE:8D:C7:5E
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8WByMffCIdY35wSvrIaoQa6Nx14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/18
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.69.0-93.186.70.255
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.243.255
                  178.253.246.0-178.253.255.255
                  185.47.91.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.220.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.128.0/23
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.14.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:09:c1:6c:05:32:9e:be:0d:44:ba:50:8b:a1:c0:b5:e5:
         d7:6c:fb:d5:82:b2:29:1b:b8:6e:42:b7:5a:56:6c:af:fd:2c:
         13:f4:11:a8:5a:8b:ee:74:e2:d6:ca:c5:e3:79:06:aa:3b:1e:
         87:fe:cc:e3:d9:dd:4e:24:42:ee:a9:2a:80:2f:f4:43:39:d7:
         ee:34:be:56:1c:41:ea:0d:f0:89:df:27:71:7d:8f:c2:a6:b9:
         9e:b2:f3:ce:43:73:51:90:b2:39:bf:b6:71:86:9c:3b:4b:39:
         a9:8d:a8:be:7b:c4:27:77:3a:d3:c5:8c:5c:4d:b9:13:eb:4a:
         89:d3:5b:ea:65:75:d1:9f:f6:b9:47:88:3c:82:7a:cb:74:06:
         d1:b9:f6:db:47:d6:9a:4a:61:e8:6a:f3:be:2e:24:b2:8b:30:
         38:fd:06:8a:7c:b2:19:da:81:46:80:e0:86:5a:88:7f:75:70:
         9c:cb:1c:8a:9d:75:4f:b7:27:f3:db:ca:b8:6f:63:20:69:98:
         4c:74:14:a4:ab:82:44:65:8c:c6:f7:2d:3b:8d:07:2b:87:18:
         9e:b6:d6:be:a6:dd:4c:a8:1d:81:e6:56:c9:e3:46:97:5a:c6:
         72:5a:a6:55:88:c3:d5:ae:07:ea:64:3f:25:ba:c7:c8:95:76:
         54:c6:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org