Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UAtVZaGksmgcv9-ULrtMku-tdTg.roa
File:                     UAtVZaGksmgcv9-ULrtMku-tdTg.roa (raw, json)
Hash identifier:          zdmAhYlWObcgN3mrdR1zCBjQynroofhRBxTpnv1iLIs=
Subject key identifier:   50:0B:55:65:A1:A4:B2:68:1C:BF:DF:94:2E:BB:4C:92:EF:AD:75:38
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       09BED9DF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UAtVZaGksmgcv9-ULrtMku-tdTg.roa
Signing time:             Tue 28 Jun 2022 10:23:02 +0000
ROA not before:           Tue 28 Jun 2022 10:23:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.229.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.69.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.243.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/21 maxlen: 21
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.32.0/19 maxlen: 19
                          77.105.38.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.11.0/24 maxlen: 24
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.14.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.128.0/23 maxlen: 23
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/21 maxlen: 21
                          79.175.64.0/20 maxlen: 20
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          185.47.91.0/24 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163502559 (0x9bed9df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jun 28 10:23:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=500b5565a1a4b2681cbfdf942ebb4c92efad7538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:18:6c:23:71:6e:e3:d5:ba:cb:e8:a1:d4:
                    53:8e:19:82:f3:27:97:00:7c:7b:f1:bd:3e:8f:09:
                    31:23:48:44:05:78:76:a3:ba:51:a9:65:7b:82:71:
                    84:5b:9c:50:76:86:a4:1e:9b:ec:d6:63:dd:a3:a9:
                    45:78:ce:ff:ec:24:5b:b1:43:74:74:c5:ed:7c:8b:
                    5f:8d:2f:5f:c8:8b:e6:1a:32:4a:09:64:f9:db:ad:
                    bf:2a:d8:52:93:40:2f:a0:cb:d9:d1:6f:6d:6b:3c:
                    19:2c:84:e0:78:7a:14:a4:1e:df:00:80:8e:e4:bc:
                    9d:07:52:19:ec:8b:e1:8d:f3:ec:a9:0b:5c:96:25:
                    52:a5:84:7b:6d:1b:6c:c1:39:c9:84:3f:e5:aa:c6:
                    49:49:a9:0b:28:5a:34:51:74:f1:67:2c:7a:2e:82:
                    a8:1b:dd:31:b7:19:cf:b9:30:cb:1d:d4:30:76:7f:
                    f9:b5:10:b5:d3:ae:e7:f7:c7:d7:a2:d1:0d:de:90:
                    64:30:7e:5a:25:20:1f:91:2f:1c:2b:6e:69:40:aa:
                    e3:3a:ef:aa:bf:93:f4:8a:3f:28:bd:ab:a9:dd:3e:
                    64:95:b8:22:84:af:d7:ed:69:3d:30:b0:fb:37:9a:
                    61:21:5c:76:63:85:a9:9a:1e:e8:bd:09:d2:0e:10:
                    9a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0B:55:65:A1:A4:B2:68:1C:BF:DF:94:2E:BB:4C:92:EF:AD:75:38
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UAtVZaGksmgcv9-ULrtMku-tdTg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.69.0-93.186.70.255
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.243.255
                  178.253.246.0-178.253.255.255
                  185.47.91.0/24
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.220.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.128.0/23
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.14.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:ce:79:9a:bd:90:c8:91:1f:4c:f9:5a:b4:d8:9a:44:89:
         d2:98:8a:d5:88:a0:53:9b:eb:02:a8:86:35:f6:28:0d:90:a7:
         12:6d:d8:1a:ea:7a:25:8d:c2:27:98:f9:8f:4d:0e:e4:ed:31:
         7f:4c:08:b9:6a:1a:74:8b:8f:6d:1f:de:1a:be:d7:ba:ad:38:
         fa:6e:1a:8e:a9:fc:ab:be:1e:fc:ee:6d:1b:3a:8b:c3:48:2e:
         b9:d1:cf:d9:d8:d4:aa:41:e2:96:36:1c:34:40:b5:a1:e9:84:
         bd:95:bf:bc:a6:49:5f:25:c2:2c:9a:80:85:dd:7f:66:82:1a:
         b0:84:ad:86:82:23:69:14:e2:39:01:47:54:cf:a4:47:d1:87:
         66:84:54:0a:78:12:5c:3c:26:2f:b4:54:63:70:38:af:2a:45:
         db:40:39:29:b6:73:a2:fc:68:6c:00:43:2c:0b:d3:25:f1:fd:
         46:9c:e9:74:15:77:ca:5b:89:59:82:73:c7:db:c9:2d:2a:a7:
         e2:32:84:f5:b1:17:5d:4a:1c:1c:85:a6:83:62:77:42:68:1d:
         87:16:42:45:cc:15:43:de:1d:54:b2:66:65:b6:e9:dd:ad:ae:
         40:31:38:42:eb:fb:20:00:83:4d:78:80:ae:8c:9b:b0:77:11:
         37:c9:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org