Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yyit2fZHFFqaPySDR53QMLhzArc.roa
File:                     yyit2fZHFFqaPySDR53QMLhzArc.roa (raw, json)
Hash identifier:          QLLNwPYKusdXnhHdylkOFjyxkO+0LZDY5UOFQ4BOD90=
Subject key identifier:   CB:28:AD:D9:F6:47:14:5A:9A:3F:24:83:47:9D:D0:30:B8:73:02:B7
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01824A1ABFBC0B4BF134C1A850F9C3307569
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yyit2fZHFFqaPySDR53QMLhzArc.roa
Signing time:             Fri 29 Jul 2022 13:17:23 +0000
ROA not before:           Fri 29 Jul 2022 13:17:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.146.0/23 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.69.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.243.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/21 maxlen: 21
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.32.0/19 maxlen: 19
                          77.105.38.0/24 maxlen: 24
                          77.105.44.0/24 maxlen: 24
                          77.105.43.0/24 maxlen: 24
                          77.105.40.0/24 maxlen: 24
                          77.105.41.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.46.0/23 maxlen: 23
                          77.105.45.0/24 maxlen: 24
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.11.0/24 maxlen: 24
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.128.0/23 maxlen: 23
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/21 maxlen: 21
                          79.175.64.0/20 maxlen: 20
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4a:1a:bf:bc:0b:4b:f1:34:c1:a8:50:f9:c3:30:75:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jul 29 13:17:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb28add9f647145a9a3f2483479dd030b87302b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:45:b7:7d:e4:26:ed:c9:6c:02:69:f3:bf:
                    5f:2e:dd:75:52:e9:81:d4:d5:07:5d:09:bc:10:f0:
                    bf:4c:8f:fd:77:46:73:48:45:09:39:d3:ff:94:e9:
                    66:ad:a4:f9:1e:04:79:0d:41:ac:06:ba:aa:b4:10:
                    2e:94:b2:58:6f:42:f0:1b:2b:fa:4e:e1:59:ec:46:
                    ec:62:79:97:b9:6c:39:79:ae:55:91:ca:62:d5:7f:
                    33:25:b9:da:44:67:e3:da:57:3f:0e:04:69:0d:e7:
                    be:27:31:54:af:e5:68:4d:ab:75:8f:47:c3:71:d4:
                    e6:16:ec:f2:a1:b2:95:25:7a:33:9e:fe:6f:27:c8:
                    dc:d5:2e:0b:79:8d:bb:0b:48:42:bb:24:ff:d1:6d:
                    6e:91:42:84:01:75:e5:45:47:ab:c4:b9:b3:63:d4:
                    f2:46:47:5d:7b:6f:a4:63:d8:00:cd:d9:b0:69:fa:
                    ee:c9:ed:be:4f:04:78:58:a1:2a:2c:e1:5a:17:59:
                    bc:71:67:50:3d:f6:e3:1e:9c:7d:2a:62:b3:91:2a:
                    d6:a4:8d:9f:b1:cb:0b:60:7a:ac:1d:29:47:7d:86:
                    30:9e:7b:9a:b9:ac:f3:86:66:10:84:1e:f5:04:73:
                    6b:f4:c9:77:56:9f:11:8c:c9:a8:9a:f4:50:a9:33:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:28:AD:D9:F6:47:14:5A:9A:3F:24:83:47:9D:D0:30:B8:73:02:B7
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yyit2fZHFFqaPySDR53QMLhzArc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.69.0-93.186.70.255
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.243.255
                  178.253.246.0-178.253.255.255
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.220.0-188.255.228.255
                  188.255.230.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.128.0/23
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.15.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:ff:8a:e2:f8:f3:0e:a8:43:6d:a5:9e:17:60:9f:3f:62:bc:
         59:34:f1:84:b8:60:f1:be:01:51:fb:ad:8e:21:fd:85:15:82:
         e2:7f:98:1f:af:ca:0c:3e:db:2e:f8:d0:0e:6f:1f:b9:6f:b4:
         43:da:1a:6a:cb:e6:b3:38:f1:29:d7:6c:ad:3d:71:37:78:36:
         22:13:a2:19:bc:d8:16:79:a7:63:2f:14:32:96:3a:a5:93:46:
         00:3c:6a:ed:0c:00:8c:63:ac:81:6f:ec:ad:21:8a:d4:75:d2:
         e1:db:cc:9d:05:22:56:68:ff:ef:01:a8:d3:d3:8d:2f:8a:13:
         36:64:03:1c:f9:b0:32:2b:eb:7b:ef:ef:e7:89:68:0d:1f:20:
         63:c8:6a:a8:52:95:0a:6c:75:0b:5b:b3:d7:67:d2:f7:fd:d2:
         22:2c:e5:5e:97:df:0e:30:8d:37:bf:14:85:6c:10:02:19:63:
         3d:ab:e9:e3:f0:b3:e7:b7:da:30:99:42:e3:2d:e7:9d:5f:d4:
         1e:e4:cf:ab:97:19:73:34:56:97:1a:05:16:dd:7e:13:f9:84:
         40:62:df:6c:c2:9c:07:31:da:52:7d:c3:9d:2b:e1:10:32:de:
         fd:d9:b8:7d:50:68:fd:d0:20:23:71:45:07:e8:35:7a:7d:9a:
         24:65:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org