Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b3egqK1rEcyJvnWZz345OLq-u3A.roa
File:                     b3egqK1rEcyJvnWZz345OLq-u3A.roa (raw, json)
Hash identifier:          /VbO187gphw8GJaddVcFKNhC9t/7YIxrCpyTGXmJ/Sg=
Subject key identifier:   6F:77:A0:A8:AD:6B:11:CC:89:BE:75:99:CF:7E:39:38:BA:BE:BB:70
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01822FFC55A8263E68DDEC2A91FA2FF3042A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b3egqK1rEcyJvnWZz345OLq-u3A.roa
Signing time:             Sun 24 Jul 2022 11:34:02 +0000
ROA not before:           Sun 24 Jul 2022 11:34:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.146.0/23 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.69.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.243.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/21 maxlen: 21
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/19 maxlen: 19
                          77.105.32.0/22 maxlen: 22
                          77.105.38.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.11.0/24 maxlen: 24
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.128.0/23 maxlen: 23
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/20 maxlen: 20
                          79.175.64.0/21 maxlen: 21
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          185.47.91.0/24 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:2f:fc:55:a8:26:3e:68:dd:ec:2a:91:fa:2f:f3:04:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jul 24 11:34:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f77a0a8ad6b11cc89be7599cf7e3938babebb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ee:c3:57:26:b1:0c:24:ed:61:6b:d6:80:6b:
                    2d:ad:9c:3e:26:2b:2b:ea:3d:42:4d:91:8b:dc:0b:
                    c0:38:06:e3:9a:8f:56:a6:bd:f9:48:01:3a:56:29:
                    3e:d3:16:32:4e:de:b2:95:97:2a:09:0d:7e:e7:4d:
                    e6:b4:0e:29:f1:32:99:4c:cc:7e:e9:1e:71:d7:6f:
                    44:38:c1:c9:40:15:57:75:c4:c1:a1:cd:1e:d2:21:
                    7a:ed:33:26:7d:49:eb:50:61:75:58:72:3c:f2:78:
                    08:8e:17:f8:28:83:d9:3d:a2:5a:1f:6a:33:02:49:
                    47:3f:20:24:98:d0:c7:54:47:1f:7f:84:f6:e9:db:
                    67:cd:1e:28:bb:66:87:89:07:78:8c:b7:87:1b:5e:
                    54:f5:ff:cc:7e:53:c5:66:3b:e3:45:a7:c3:ff:4b:
                    2a:53:4c:7e:a1:5b:e6:ea:00:4d:c5:e8:40:f9:f5:
                    df:4a:6e:97:b8:59:fe:8a:48:56:b2:d2:3a:07:b5:
                    42:8d:fa:e5:7d:af:e2:42:06:9b:64:49:99:d5:89:
                    5f:e9:ab:29:94:dc:97:15:c4:fc:11:37:2e:0e:0f:
                    52:6c:07:15:6a:31:ae:dc:b4:d3:44:2f:42:c1:62:
                    9e:f2:d3:e0:49:8c:06:40:17:ac:2d:16:56:3d:cc:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:77:A0:A8:AD:6B:11:CC:89:BE:75:99:CF:7E:39:38:BA:BE:BB:70
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b3egqK1rEcyJvnWZz345OLq-u3A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.69.0-93.186.70.255
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.243.255
                  178.253.246.0-178.253.255.255
                  185.47.91.0/24
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.220.0-188.255.228.255
                  188.255.230.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.128.0/23
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.15.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:fb:19:23:54:36:74:3f:47:22:c4:0e:85:6d:6b:ff:cc:dd:
         57:33:b9:75:a0:83:e8:36:b4:e2:6a:89:cf:1a:15:60:c3:24:
         c8:79:47:ee:93:f3:31:b7:e5:a3:bd:c8:b3:15:14:6c:d6:df:
         48:70:42:18:bc:fa:f7:24:70:65:8d:10:26:22:e4:d3:25:ad:
         03:23:ea:2b:21:8d:cf:f2:88:dd:93:c7:48:fa:a7:09:0e:ff:
         08:87:e2:32:85:c2:a7:9c:c4:33:4a:e5:1c:d5:c8:f4:53:9f:
         72:a2:78:a4:48:ad:bb:0f:19:ce:a7:ff:16:a0:28:4e:c6:06:
         b4:7c:ab:9a:a4:c9:d4:1e:9d:9f:aa:7e:82:46:53:a0:1d:0b:
         e4:f3:93:e8:18:9c:8b:ea:59:59:7a:f4:45:c8:e0:93:9d:59:
         aa:fd:e3:96:8e:92:19:2f:20:d7:eb:37:9c:23:d6:02:91:03:
         e1:9a:0f:02:c1:1c:9c:00:94:59:72:94:20:23:bf:b9:a7:22:
         87:8a:9b:a6:36:fa:9a:f9:9a:92:05:0e:ca:37:e8:fa:5c:c9:
         ec:9f:25:98:ac:cc:30:2c:f2:26:68:d5:65:de:f7:c6:0a:0b:
         0a:5c:e5:1a:93:fa:01:5f:96:b2:fa:3f:bb:50:af:51:d0:73:
         d4:3a:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org