Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j9lM1v7-2gqoLOWKieJ-B3l128k.roa
File:                     j9lM1v7-2gqoLOWKieJ-B3l128k.roa (raw, json)
Hash identifier:          EIsjK5k3LDCPohcZcmL4pGsyGcuOoewJY025MCRwAPk=
Subject key identifier:   8F:D9:4C:D6:FE:FE:DA:0A:A8:2C:E5:8A:89:E2:7E:07:79:75:DB:C9
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01823982B4DB0EDABAA3B994594EDA8F49BF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j9lM1v7-2gqoLOWKieJ-B3l128k.roa
Signing time:             Tue 26 Jul 2022 07:57:23 +0000
ROA not before:           Tue 26 Jul 2022 07:57:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.146.0/23 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.69.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.243.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/21 maxlen: 21
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.32.0/19 maxlen: 19
                          77.105.38.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.11.0/24 maxlen: 24
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.128.0/23 maxlen: 23
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/21 maxlen: 21
                          79.175.64.0/20 maxlen: 20
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:39:82:b4:db:0e:da:ba:a3:b9:94:59:4e:da:8f:49:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jul 26 07:57:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fd94cd6fefeda0aa82ce58a89e27e077975dbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:17:f9:a0:de:99:3d:1f:28:25:c0:f0:a6:
                    5f:62:62:c7:a8:ce:38:b1:ad:8f:b0:df:a3:a2:a9:
                    30:a0:e7:d2:87:f5:03:37:39:bb:c7:4d:5b:2b:d5:
                    0f:91:b1:85:24:45:d2:de:21:e0:f0:60:3b:aa:b5:
                    5a:e5:8c:cb:4a:e3:1d:25:d9:d5:87:98:86:f8:16:
                    ed:f9:a3:8b:4e:2e:07:ad:99:40:4e:6c:65:57:6d:
                    ec:e7:28:4d:99:8b:5b:d9:4b:3b:d3:57:19:41:ec:
                    b7:5d:99:6d:7d:08:93:2c:be:02:ed:97:df:fc:f0:
                    4e:1a:95:bc:dc:0c:f9:1d:e1:38:73:31:d9:1c:36:
                    17:2b:4d:42:bb:27:d2:f9:b0:ae:55:fd:2c:1d:9f:
                    8d:e4:d3:99:3b:6c:32:8d:0c:a0:61:e7:fb:80:97:
                    8c:2a:57:c9:d7:94:be:49:b3:3d:f5:55:29:d7:c9:
                    3b:47:01:79:4a:99:09:d7:9b:8d:e2:0f:d8:b4:a3:
                    e1:00:21:5c:98:98:ab:bb:d3:5b:be:3e:8c:13:70:
                    c0:fd:62:5f:01:c0:d1:e2:7f:1e:a2:b9:0f:07:21:
                    c6:87:d6:c8:d6:c8:33:e1:0b:30:5c:1f:8f:72:df:
                    bc:f0:df:a1:30:02:e4:a6:02:64:89:8e:d6:4a:cf:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D9:4C:D6:FE:FE:DA:0A:A8:2C:E5:8A:89:E2:7E:07:79:75:DB:C9
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j9lM1v7-2gqoLOWKieJ-B3l128k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.69.0-93.186.70.255
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.243.255
                  178.253.246.0-178.253.255.255
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.220.0-188.255.228.255
                  188.255.230.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.128.0/23
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.15.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:34:fe:0d:85:be:53:9f:97:01:29:e9:b8:bf:e5:e4:e2:cf:
         cc:47:4f:00:bc:fc:c9:02:c2:91:9a:cf:78:d9:c9:da:1f:12:
         34:3a:51:6b:6c:a1:ff:00:8d:27:4e:f0:b7:11:88:3a:a1:c1:
         33:e1:5f:3e:3f:69:55:87:82:f3:5d:08:d3:12:a2:a1:22:15:
         60:d2:83:61:c6:bd:10:b2:af:db:59:b4:e8:d5:7a:a9:ef:9f:
         48:7c:b8:ef:e6:be:92:bd:25:f2:be:11:07:37:f4:49:bf:b4:
         4a:04:1e:9e:84:f7:83:dd:4d:08:e5:3a:fe:08:31:c3:cf:d1:
         cf:8d:02:19:28:00:32:92:6b:52:ae:a9:89:36:a8:17:a3:34:
         22:97:15:7b:1c:46:c5:0b:17:23:27:44:87:30:9c:4a:ca:ac:
         a9:45:8e:d6:46:0e:ef:93:2b:06:ca:65:67:a3:89:62:a8:ed:
         79:53:67:1f:2c:6f:9d:07:28:df:8b:67:38:ef:93:ce:cc:33:
         b3:b9:f7:29:68:5a:0a:70:72:bf:30:15:55:8e:f7:84:c1:c8:
         93:35:e8:7f:89:2a:11:5e:73:4c:1f:b2:58:d9:bd:e3:cd:72:
         b4:05:77:94:58:a8:44:55:a2:2f:8d:18:97:3a:5a:a6:10:78:
         94:57:e9:25
-----BEGIN CERTIFICATE-----
MIIGrjCCBZagAwIBAgISAYI5grTbDtq6o7mUWU7aj0m/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIwNzI2MDc1NzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmQ5NGNkNmZlZmVkYTBhYTgyY2U1OGE4OWUyN2UwNzc5NzVkYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHsX+aDemT0fKCXA8KZfYmLHqM44
sa2PsN+joqkwoOfSh/UDNzm7x01bK9UPkbGFJEXS3iHg8GA7qrVa5YzLSuMdJdnV
h5iG+Bbt+aOLTi4HrZlATmxlV23s5yhNmYtb2Us701cZQey3XZltfQiTLL4C7Zff
/PBOGpW83Az5HeE4czHZHDYXK01CuyfS+bCuVf0sHZ+N5NOZO2wyjQygYef7gJeM
KlfJ15S+SbM99VUp18k7RwF5SpkJ15uN4g/YtKPhACFcmJiru9Nbvj6ME3DA/WJf
AcDR4n8eorkPByHGh9bI1sgz4QswXB+Pct+88N+hMALkpgJkiY7WSs8yYwIDAQAB
o4IDujCCA7YwHQYDVR0OBBYEFI/ZTNb+/toKqCzlionifgd5ddvJMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvajlsTTF2Ny0yZ3FvTE9XS2llSi1CM2wxMjhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBzgYIKwYBBQUHAQcBAf8EggG9MIIBuTCCAZ8EAgABMIIB
lwMEAy4QaAMEAk1pAAMEAE1pBTAMAwQATWkHAwQGTWkAAwQGT69AAwQEUEqgAwQA
URIyAwQAURI2MAwDBAFREjoDBABREjwDBAFREj4DBABdukIwDAMEAF26RQMEAF26
RgMEAF26SQMEAF26TwMEBm15ADAMAwQBbem6AwQAbem8AwQAbem/AwQCstsAAwQA
stsKMAwDBAKy2wwDBACy2w4wDAMEBrL9wAMEALL9zgMEAbL90AMEALL90wMEALL9
2TAMAwQAsv3bAwQBsv3cMAwDBACy/d8DBACy/eoDBACy/e8wDAMEALL98QMEArL9
8DALAwQBsv32AwMBsvwDBAC81+QDBAC8/4UwDAMEA7z/iAMEBrz/gAMEALz/wgME
Arz/xDAMAwQAvP/JAwQAvP/MMAwDBAK8/9wDBAC8/+QwDAMEAbz/5gMEArz/6AME
Arz/8AMEALz/+QMEALz//wMEAsFrBAMEAcIcgAMEAMIcgwMEANRFAgMEAdRFCDAM
AwQA1EUPAwQB1EUQAwQA1EUUAwQC1EUcMBQEAgACMA4DBQAqAIEAAwUAKgIGYDAN
BgkqhkiG9w0BAQsFAAOCAQEAMDT+DYW+U5+XASnpuL/l5OLPzEdPALz8yQLCkZrP
eNnJ2h8SNDpRa2yh/wCNJ07wtxGIOqHBM+FfPj9pVYeC810I0xKioSIVYNKDYca9
ELKv21m06NV6qe+fSHy47+a+kr0l8r4RBzf0Sb+0SgQenoT3g91NCOU6/ggxw8/R
z40CGSgAMpJrUq6piTaoF6M0IpcVexxGxQsXIydEhzCcSsqsqUWO1kYO75MrBspl
Z6OJYqjteVNnHyxvnQco34tnOO+Tzswzs7n3KWhaCnByvzAVVY73hMHIkzXof4kq
EV5zTB+yWNm9481ytAV3lFioRFWiL40YlzpaphB4lFfpJQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org