Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XP4AiEjTdLXU17cEiqx9DEXQdzg.roa
File:                     XP4AiEjTdLXU17cEiqx9DEXQdzg.roa (raw, json)
Hash identifier:          kxT+/WiGkpng/sX5sCryKUHH6QtlbvYFxG1D7kfxbk4=
Subject key identifier:   5C:FE:00:88:48:D3:74:B5:D4:D7:B7:04:8A:AC:7D:0C:45:D0:77:38
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01828D4BAC18D291AB07575A54B30B2F9D30
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XP4AiEjTdLXU17cEiqx9DEXQdzg.roa
Signing time:             Thu 11 Aug 2022 14:25:22 +0000
ROA not before:           Thu 11 Aug 2022 14:25:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.146.0/23 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.251.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          178.253.252.0/22 maxlen: 22
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/23 maxlen: 23
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.38.0/24 maxlen: 24
                          77.105.44.0/24 maxlen: 24
                          77.105.43.0/24 maxlen: 24
                          77.105.40.0/24 maxlen: 24
                          77.105.42.0/24 maxlen: 24
                          77.105.41.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.46.0/23 maxlen: 23
                          77.105.45.0/24 maxlen: 24
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.11.0/24 maxlen: 24
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.129.0/24 maxlen: 24
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/21 maxlen: 21
                          79.175.64.0/20 maxlen: 20
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8d:4b:ac:18:d2:91:ab:07:57:5a:54:b3:0b:2f:9d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Aug 11 14:25:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5cfe008848d374b5d4d7b7048aac7d0c45d07738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:93:14:24:b2:44:1a:87:6d:ac:bc:56:43:
                    ef:d9:2f:a2:df:6d:80:e6:92:79:d0:4c:47:db:b1:
                    78:c0:e2:3d:34:7d:cb:d7:3c:62:71:5d:5f:90:70:
                    11:b8:f1:ea:69:15:e1:73:af:a4:67:11:71:8c:75:
                    7c:a7:a7:da:c1:71:cf:ab:8e:90:f4:f4:22:23:a5:
                    e5:cf:94:7d:d8:c8:0f:3a:16:ab:81:bc:cc:98:6a:
                    70:7b:f1:45:ef:02:84:3b:af:6e:e3:c9:77:82:f5:
                    be:09:aa:91:ef:a3:58:2d:d8:f6:e8:e4:11:9a:85:
                    9f:ee:a2:79:64:da:7c:8f:95:a3:24:6a:f6:c2:fa:
                    7a:ae:8a:bd:16:82:e2:ae:90:c3:c3:fb:90:2e:19:
                    cf:cc:0d:6e:7e:70:cd:00:e1:a6:68:51:da:1c:ae:
                    f0:a3:1c:2c:8e:db:06:a0:0c:3c:e0:ca:49:5a:19:
                    b6:24:00:c4:02:72:9e:c7:ab:20:cd:0d:33:b9:db:
                    72:35:ad:82:ba:c9:51:b0:64:05:9e:4b:4e:24:15:
                    0f:43:f7:1c:6a:b1:88:3d:dc:51:16:ef:e6:75:0c:
                    fa:2d:91:ba:5b:19:b7:e1:10:91:fb:4a:61:26:23:
                    a2:fa:be:69:91:12:5e:2a:9b:50:a6:db:37:d4:ce:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FE:00:88:48:D3:74:B5:D4:D7:B7:04:8A:AC:7D:0C:45:D0:77:38
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XP4AiEjTdLXU17cEiqx9DEXQdzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.70.0/24
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.242.255
                  178.253.246.0-178.253.249.255
                  178.253.251.0-178.253.255.255
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.220.0-188.255.228.255
                  188.255.230.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.129.0/24
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.15.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:68:73:df:b8:8e:27:56:30:85:0f:36:b6:1a:b2:c7:d0:
         ba:2f:6d:d1:55:8a:ef:68:46:44:9e:dd:6d:7b:da:40:49:d1:
         de:e8:b7:f5:1d:c0:20:a5:74:0a:a6:8a:b6:c6:f5:a5:e4:78:
         61:c6:34:ac:03:2d:01:72:c1:02:98:a6:d2:14:ef:46:3d:65:
         c0:b5:f0:8e:ec:97:46:f1:e2:90:91:e4:5d:c8:da:44:7a:38:
         98:31:bc:72:f4:b8:0d:74:0f:66:15:77:c2:e5:f6:2f:43:13:
         06:6c:34:0a:16:46:b7:ae:ec:2c:c5:da:a8:de:67:31:59:e5:
         a1:89:1b:d8:fe:f7:d9:7a:4f:3f:a6:fe:f9:dd:48:99:20:d5:
         93:15:7d:89:d2:65:dc:ad:5d:98:0d:07:23:bf:0d:c1:93:47:
         e2:59:99:f0:ea:8f:1b:74:52:66:03:56:e2:7b:a5:89:42:13:
         e8:57:74:5d:15:28:50:e3:94:80:4f:92:d5:b0:d4:0b:69:49:
         6a:14:79:e8:6c:c9:69:d4:91:70:e8:c8:4e:99:8a:95:4d:a3:
         3e:cd:ff:15:21:f7:9f:ca:d3:15:a9:a8:4c:94:4d:21:cc:89:
         40:74:80:d3:ae:50:60:2e:24:fc:3b:f2:1c:d2:e2:99:32:f7:
         89:4d:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org