Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iOdoK3iNQFvOX_85rVCEUU8Iepk.roa
File:                     iOdoK3iNQFvOX_85rVCEUU8Iepk.roa (raw, json)
Hash identifier:          hD6+b5PGmx53WrU/Z7xFDgAwNZGwRmXoqp1uNrHUmdw=
Subject key identifier:   88:E7:68:2B:78:8D:40:5B:CE:5F:FF:39:AD:50:84:51:4F:08:7A:99
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0184BE5437EA472C7CC3DF394A13C1160815
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iOdoK3iNQFvOX_85rVCEUU8Iepk.roa
Signing time:             Mon 28 Nov 2022 13:01:41 +0000
ROA not before:           Mon 28 Nov 2022 13:01:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.139.0/24 maxlen: 24
                          188.255.138.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.136.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          188.255.211.0/24 maxlen: 24
                          188.255.209.0/24 maxlen: 24
                          109.121.30.0/24 maxlen: 24
                          188.255.214.0/24 maxlen: 24
                          188.255.216.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.226.0/23 maxlen: 23
                          188.255.222.0/23 maxlen: 23
                          109.121.32.0/21 maxlen: 21
                          188.255.225.0/24 maxlen: 24
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.239.0/24 maxlen: 24
                          188.255.236.0/24 maxlen: 24
                          109.121.56.0/22 maxlen: 22
                          188.255.243.0/24 maxlen: 24
                          188.255.242.0/24 maxlen: 24
                          109.121.56.0/24 maxlen: 24
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.147.0/24 maxlen: 24
                          188.255.160.0/21 maxlen: 21
                          188.255.172.0/24 maxlen: 24
                          188.255.168.0/24 maxlen: 24
                          188.255.170.0/23 maxlen: 24
                          188.255.178.0/24 maxlen: 24
                          188.255.176.0/23 maxlen: 24
                          188.255.174.0/23 maxlen: 23
                          188.255.185.0/24 maxlen: 24
                          188.255.186.0/23 maxlen: 23
                          188.255.180.0/22 maxlen: 24
                          188.255.191.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.188.0/23 maxlen: 24
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.251.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          178.253.252.0/22 maxlen: 22
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/23 maxlen: 23
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.18.0/23 maxlen: 23
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.38.0/24 maxlen: 24
                          77.105.44.0/24 maxlen: 24
                          77.105.43.0/24 maxlen: 24
                          77.105.40.0/24 maxlen: 24
                          77.105.42.0/24 maxlen: 24
                          77.105.41.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.46.0/23 maxlen: 23
                          77.105.45.0/24 maxlen: 24
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/22 maxlen: 24
                          46.16.108.0/23 maxlen: 24
                          46.16.111.0/24 maxlen: 24
                          46.16.110.0/24 maxlen: 24
                          212.69.17.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.129.0/24 maxlen: 24
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/21 maxlen: 21
                          79.175.64.0/20 maxlen: 20
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:be:54:37:ea:47:2c:7c:c3:df:39:4a:13:c1:16:08:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Nov 28 13:01:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=88e7682b788d405bce5fff39ad5084514f087a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:83:51:79:2a:17:be:d6:16:ee:6a:6f:95:
                    77:40:87:8f:2c:9d:65:f7:30:d8:40:95:ed:82:b9:
                    b8:df:a3:5e:0e:bf:de:57:3a:1b:68:5e:3b:48:6e:
                    ab:37:8c:e8:6e:b0:33:46:37:4a:c2:de:3d:60:38:
                    0e:13:9a:b8:36:cb:b1:1d:25:eb:bc:12:22:b2:e2:
                    07:68:5b:70:04:fd:22:de:53:9f:81:41:57:2f:b9:
                    e7:75:9f:40:f0:7d:61:05:fc:1b:6d:8b:e2:2e:e1:
                    e9:de:f7:c4:70:39:33:40:d5:12:88:72:e4:da:da:
                    bb:6e:19:31:ce:a9:eb:87:8b:bd:ca:77:44:e6:8a:
                    aa:56:a9:38:e8:f8:f8:06:5f:c5:5b:a5:21:e1:00:
                    78:ce:d8:d9:d6:40:13:7e:34:22:60:1d:78:d6:80:
                    1f:8c:8d:53:3a:e1:2a:5a:92:da:c4:24:98:3c:d9:
                    76:be:9e:37:e4:89:cd:e9:51:7c:d1:2a:2b:60:b7:
                    6c:94:40:0f:b8:ff:6c:15:1b:52:11:3a:c5:2b:0c:
                    c7:cf:21:29:cc:b8:cb:78:96:ec:c5:54:95:44:8c:
                    08:72:ff:ba:d3:e1:88:28:0c:da:88:cb:76:66:de:
                    07:4e:9e:c4:85:3a:cf:cf:74:a7:44:1f:b6:fa:21:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:68:2B:78:8D:40:5B:CE:5F:FF:39:AD:50:84:51:4F:08:7A:99
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iOdoK3iNQFvOX_85rVCEUU8Iepk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.10.255
                  77.105.12.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.70.0/24
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.242.255
                  178.253.246.0-178.253.249.255
                  178.253.251.0-178.253.255.255
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0/22
                  188.255.142.0-188.255.168.255
                  188.255.170.0-188.255.172.255
                  188.255.174.0-188.255.178.255
                  188.255.180.0/22
                  188.255.185.0-188.255.189.255
                  188.255.191.0/24
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.209.0/24
                  188.255.211.0/24
                  188.255.214.0/24
                  188.255.216.0/24
                  188.255.220.0/24
                  188.255.222.0/23
                  188.255.225.0-188.255.228.255
                  188.255.230.0-188.255.236.255
                  188.255.239.0-188.255.243.255
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.129.0/24
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.15.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:82:b9:3b:41:b5:79:2e:9f:4b:40:15:0d:f4:93:54:eb:
         7e:d5:58:e4:76:40:9c:35:52:8a:16:72:75:2b:32:fb:53:2e:
         58:49:2d:e1:c4:f2:f6:6b:74:13:e9:cf:72:82:6e:ab:66:cf:
         02:d3:21:92:f1:40:46:f7:1e:9e:00:37:57:1c:78:27:55:07:
         20:b8:69:ef:85:94:d0:c6:0b:1d:fa:b2:90:a5:eb:3a:0e:03:
         0e:f6:e1:58:14:6e:b9:49:a7:6f:5a:ec:14:1a:96:09:e8:01:
         46:47:eb:11:32:f9:00:9a:70:7a:46:ce:24:e0:e8:c5:ac:16:
         c0:f1:fd:32:1e:d9:c6:7d:44:ac:4a:f5:18:10:7c:93:21:1f:
         7d:6c:55:74:b3:d4:c1:8c:91:9e:86:01:b8:35:e0:99:b0:35:
         3b:d6:d3:d4:92:12:ff:c8:cb:11:0d:da:59:e0:ed:4c:26:fa:
         be:b0:96:32:b6:cc:6d:d6:0e:1c:a7:9f:29:df:b9:51:94:74:
         2c:c7:8b:f2:63:f1:ae:a3:3e:a4:d1:c4:fc:4b:3e:0d:72:fd:
         f7:db:44:13:a1:5d:6b:10:4c:0e:02:da:de:86:08:9e:49:87:
         8d:b0:d0:e1:2e:53:cc:5b:df:ed:ef:b8:b8:d5:fa:e2:62:18:
         d7:f8:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org