Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fY_v9OMAdW0s0indH2MyeyDM2e0.roa
File:                     fY_v9OMAdW0s0indH2MyeyDM2e0.roa (raw, json)
Hash identifier:          9cZ4XAozQWyO8qJDBIlP9LLKHHN6ntsjhjRMS5HCfQw=
Subject key identifier:   7D:8F:EF:F4:E3:00:75:6D:2C:D2:29:DD:1F:63:32:7B:20:CC:D9:ED
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       09D55F83
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fY_v9OMAdW0s0indH2MyeyDM2e0.roa
Signing time:             Mon 04 Jul 2022 11:23:25 +0000
ROA not before:           Mon 04 Jul 2022 11:23:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.229.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.146.0/23 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.69.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.243.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/21 maxlen: 21
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.32.0/19 maxlen: 19
                          77.105.38.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.11.0/24 maxlen: 24
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.14.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.128.0/23 maxlen: 23
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/21 maxlen: 21
                          79.175.64.0/20 maxlen: 20
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          185.47.91.0/24 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164978563 (0x9d55f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jul  4 11:23:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d8feff4e300756d2cd229dd1f63327b20ccd9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:c7:ce:ab:67:96:4b:a6:0d:88:fc:93:eb:
                    d0:b7:45:29:7c:f5:8c:ec:e7:77:02:f2:2f:65:ca:
                    89:22:ed:dc:e8:78:30:0e:5b:d9:2d:0c:5b:e4:66:
                    cf:1f:39:bc:92:58:47:f4:d3:93:37:bf:97:d2:52:
                    e4:73:39:c5:b7:86:6b:b2:9d:1f:b3:bb:b0:39:ff:
                    63:6e:fb:4e:e4:34:9d:ed:9e:d9:7c:82:e0:19:0f:
                    20:45:3f:f0:fa:01:a5:d0:1a:fc:14:2c:d6:af:96:
                    1a:bd:ab:02:bf:a5:1c:ed:d6:c2:e6:77:59:28:fc:
                    d5:4e:a9:31:6d:b6:81:3d:37:a6:4a:ad:b4:b8:c2:
                    e2:1b:fe:59:37:80:01:7d:60:e4:41:cd:2f:7d:4e:
                    43:0e:d3:b2:60:81:1a:54:d3:7d:04:11:c5:63:a2:
                    05:5e:63:2b:c2:f1:09:ac:40:ee:d6:98:0f:87:a7:
                    24:79:58:4d:71:2c:df:e5:bb:03:f4:02:00:24:c0:
                    3f:1c:d4:23:a2:a0:90:e5:c6:0d:b3:bf:64:b1:28:
                    01:0a:7d:ff:c7:00:d0:03:97:c1:29:08:1b:e2:4c:
                    7a:1f:48:db:d1:31:33:b2:0a:06:36:32:95:78:44:
                    a3:f8:52:87:bf:3f:2c:a4:f4:62:d6:09:c0:73:85:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8F:EF:F4:E3:00:75:6D:2C:D2:29:DD:1F:63:32:7B:20:CC:D9:ED
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fY_v9OMAdW0s0indH2MyeyDM2e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.69.0-93.186.70.255
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.243.255
                  178.253.246.0-178.253.255.255
                  185.47.91.0/24
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.220.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.128.0/23
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.14.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:a8:95:dc:a0:98:f7:bf:11:69:44:cf:30:7c:eb:16:ee:
         a4:e6:78:00:ba:d9:d2:1c:39:41:fb:a3:ca:3e:01:23:91:22:
         3f:70:6f:eb:c2:12:16:6b:5f:69:45:67:83:fe:22:ad:e1:5d:
         3b:50:1e:17:3d:77:15:9a:f3:4b:b6:a6:73:3f:da:8b:88:21:
         be:d8:f3:df:d5:f9:2f:bc:a3:5f:b6:3a:27:ef:49:e5:fd:63:
         ae:d9:eb:41:e1:0d:b2:84:07:1b:dc:49:5f:71:c7:77:e0:10:
         1a:70:56:e6:59:21:39:d6:9a:b3:9c:c9:58:88:5a:87:23:86:
         35:8c:4e:04:fc:5b:b5:01:de:a2:89:f4:aa:16:95:b4:e4:4e:
         8b:7d:77:d0:ff:6b:ad:e4:5d:3e:ea:42:81:1a:2d:2a:ca:5f:
         2b:14:09:7f:0f:70:e1:2d:12:95:49:21:8b:71:4b:32:e6:ed:
         fd:83:9e:fc:44:3b:98:6d:3b:2e:f7:88:90:a4:c4:99:a2:3e:
         1f:88:2e:8c:7d:cd:c4:c3:f4:d5:1e:6e:2f:07:7e:28:28:9c:
         08:52:50:a5:27:39:fa:fa:2f:a3:10:e6:7f:2f:37:06:13:8f:
         5f:06:e1:f7:cc:5b:35:c6:24:7b:fa:da:51:31:72:04:10:0c:
         88:85:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org