Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HJNgiJ_cjc0lNjHVXKOwQZq9jqY.roa
File:                     HJNgiJ_cjc0lNjHVXKOwQZq9jqY.roa (raw, json)
Hash identifier:          wKu6ovhVSKSQcRYHtpCfWP7IUXh3dEEi3fvV58Vj9/Y=
Subject key identifier:   1C:93:60:88:9F:DC:8D:CD:25:36:31:D5:5C:A3:B0:41:9A:BD:8E:A6
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0183E5A3AB2D0288B9B2C3117D5EA73D94B9
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HJNgiJ_cjc0lNjHVXKOwQZq9jqY.roa
Signing time:             Mon 17 Oct 2022 11:10:52 +0000
ROA not before:           Mon 17 Oct 2022 11:10:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          188.255.211.0/24 maxlen: 24
                          188.255.209.0/24 maxlen: 24
                          109.121.30.0/24 maxlen: 24
                          188.255.214.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.146.0/23 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.185.0/24 maxlen: 24
                          188.255.181.0/24 maxlen: 24
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.251.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          178.253.252.0/22 maxlen: 22
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/23 maxlen: 23
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.38.0/24 maxlen: 24
                          77.105.44.0/24 maxlen: 24
                          77.105.43.0/24 maxlen: 24
                          77.105.40.0/24 maxlen: 24
                          77.105.42.0/24 maxlen: 24
                          77.105.41.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.46.0/23 maxlen: 23
                          77.105.45.0/24 maxlen: 24
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.129.0/24 maxlen: 24
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/20 maxlen: 20
                          79.175.64.0/21 maxlen: 21
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e5:a3:ab:2d:02:88:b9:b2:c3:11:7d:5e:a7:3d:94:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Oct 17 11:10:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c9360889fdc8dcd253631d55ca3b0419abd8ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:64:08:c9:92:6f:b1:90:68:39:39:78:61:
                    b0:07:eb:65:41:10:4a:a4:9c:2d:2a:5a:06:48:ec:
                    5f:98:d6:c3:2a:a1:9b:5b:30:3d:32:74:1f:53:9d:
                    27:70:de:b4:76:b7:03:9a:df:9a:9c:1d:d2:e5:0f:
                    c4:f1:07:e7:d1:40:b0:f6:53:87:c2:95:52:60:85:
                    4b:fb:f0:99:45:bf:b8:bc:4f:bf:02:e4:ca:0d:26:
                    d9:41:e7:44:31:23:4b:1d:5e:ee:62:8a:2e:32:c1:
                    3f:ca:8a:c5:2d:e7:a8:7c:07:e6:19:b0:25:cd:7a:
                    f1:ad:d7:ce:a1:72:17:cd:35:0f:6e:39:45:d9:63:
                    d0:9e:13:42:91:67:29:9b:53:c9:d9:b9:86:66:14:
                    02:70:61:6d:ad:02:4b:4a:ed:53:ff:a4:17:a8:4d:
                    44:14:75:4d:f9:69:b4:6e:1a:17:42:30:b7:09:85:
                    08:04:31:3b:86:4a:c4:74:55:f9:41:79:8f:b9:52:
                    13:1c:ec:8c:59:86:61:d8:22:89:6c:9d:10:76:e1:
                    5d:ae:7d:33:4d:79:45:c6:16:2c:98:b7:e9:5e:3c:
                    15:fd:93:b4:10:9c:ea:43:48:ea:30:c3:d1:a9:2e:
                    c4:c8:5b:30:d7:e6:b8:6c:a0:33:c7:17:c1:71:39:
                    72:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:93:60:88:9F:DC:8D:CD:25:36:31:D5:5C:A3:B0:41:9A:BD:8E:A6
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HJNgiJ_cjc0lNjHVXKOwQZq9jqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.10.255
                  77.105.12.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.70.0/24
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.242.255
                  178.253.246.0-178.253.249.255
                  178.253.251.0-178.253.255.255
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.209.0/24
                  188.255.211.0/24
                  188.255.214.0/24
                  188.255.220.0-188.255.228.255
                  188.255.230.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.129.0/24
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.15.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:fb:7e:af:5d:77:13:a2:e5:dc:fe:d6:09:dd:b7:14:80:f8:
         91:a1:d8:54:30:32:c6:d4:84:8e:a1:26:90:fd:a8:41:f4:46:
         d2:5b:e3:f1:32:58:e8:d9:3f:c8:0d:65:d2:2b:16:2c:a0:99:
         30:00:42:29:40:d2:fe:d9:5a:fa:98:a5:8b:03:e9:41:e0:1e:
         e6:ae:14:80:13:4a:e4:c1:f1:28:22:08:d9:0d:a1:b7:f2:3b:
         03:35:f9:aa:94:16:18:3b:f3:df:70:87:cc:62:84:48:02:69:
         0f:85:07:c8:90:14:58:31:83:62:ba:c2:b6:11:55:90:40:fd:
         3d:58:5d:bb:83:84:53:1a:d8:e9:9b:fe:5d:15:e3:f4:54:8d:
         2e:85:86:0d:4c:2d:50:a6:de:ca:16:75:28:b2:26:bb:ce:75:
         ec:ea:71:0a:d3:79:12:11:c6:91:02:11:b9:13:7e:2d:88:1a:
         16:8e:98:31:9a:f2:a4:f2:93:c2:a9:a3:47:b7:27:4e:cf:7a:
         a4:3d:e5:fa:55:b1:56:4a:38:de:6e:af:8b:59:b3:47:72:1a:
         ac:6f:3b:42:ba:02:aa:39:c6:75:d9:44:72:f3:e5:48:03:d1:
         e9:9d:e3:8a:9f:59:5d:09:7e:38:95:01:0a:92:13:7a:a0:16:
         8d:ac:78:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org