Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zEUo4cVQbnitHrB_YqlAKyDXhb4.roa
File:                     zEUo4cVQbnitHrB_YqlAKyDXhb4.roa (raw, json)
Hash identifier:          oXeO9R0tybb1O2zEOJUKUw5liR/JiA+SyXWpvL3nlGQ=
Subject key identifier:   CC:45:28:E1:C5:50:6E:78:AD:1E:B0:7F:62:A9:40:2B:20:D7:85:BE
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0183558EE186C5231F85C95915778B1D400A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zEUo4cVQbnitHrB_YqlAKyDXhb4.roa
Signing time:             Mon 19 Sep 2022 11:42:50 +0000
ROA not before:           Mon 19 Sep 2022 11:42:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          188.255.211.0/24 maxlen: 24
                          188.255.209.0/24 maxlen: 24
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.146.0/23 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.251.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          178.253.252.0/22 maxlen: 22
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/23 maxlen: 23
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.38.0/24 maxlen: 24
                          77.105.44.0/24 maxlen: 24
                          77.105.43.0/24 maxlen: 24
                          77.105.40.0/24 maxlen: 24
                          77.105.42.0/24 maxlen: 24
                          77.105.41.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.46.0/23 maxlen: 23
                          77.105.45.0/24 maxlen: 24
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.129.0/24 maxlen: 24
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/20 maxlen: 20
                          79.175.64.0/21 maxlen: 21
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:55:8e:e1:86:c5:23:1f:85:c9:59:15:77:8b:1d:40:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Sep 19 11:42:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc4528e1c5506e78ad1eb07f62a9402b20d785be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e9:8e:e8:fa:3b:8e:f5:86:84:91:16:92:fd:
                    87:af:28:57:a5:aa:1e:79:05:64:6f:75:3f:00:1e:
                    98:7d:31:88:cc:01:d9:aa:da:d1:75:e0:ea:bb:ba:
                    69:f5:1a:88:51:e5:24:5e:7e:06:3c:22:60:11:44:
                    99:66:1c:19:9b:41:25:96:e5:13:ff:e8:bf:58:ae:
                    a8:24:8d:3c:ec:4c:7b:d7:0d:da:a5:93:01:52:9f:
                    ac:14:c7:22:45:4a:24:ba:ae:d5:20:86:f2:6e:e0:
                    d6:c4:99:4d:97:8d:d0:91:d6:5f:f3:1d:45:6f:60:
                    54:d2:47:a6:d1:36:11:f9:42:f5:28:44:a9:bd:ff:
                    b6:d6:f9:d6:db:fb:69:a5:9c:60:1a:2b:9a:36:f2:
                    86:f1:ed:d7:d8:38:74:be:dd:6f:91:48:28:b2:c1:
                    bc:19:a0:fe:34:93:e7:50:25:64:3c:ae:a3:14:65:
                    7c:52:61:c8:2d:56:c1:0b:ce:d6:f6:04:d9:68:d5:
                    80:78:24:24:83:f7:79:0b:cf:7d:7c:fd:81:cd:96:
                    c2:73:0f:d6:f6:27:d4:80:9c:8b:6b:80:25:05:33:
                    48:44:a9:f4:63:5f:71:87:a2:7a:3e:60:11:de:4b:
                    b4:e3:9b:1e:1e:b9:e3:10:bb:74:ae:8d:10:0e:7a:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:45:28:E1:C5:50:6E:78:AD:1E:B0:7F:62:A9:40:2B:20:D7:85:BE
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zEUo4cVQbnitHrB_YqlAKyDXhb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.10.255
                  77.105.12.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.70.0/24
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.242.255
                  178.253.246.0-178.253.249.255
                  178.253.251.0-178.253.255.255
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.209.0/24
                  188.255.211.0/24
                  188.255.220.0-188.255.228.255
                  188.255.230.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.129.0/24
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.15.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:14:22:04:33:8c:68:ae:16:08:6d:06:10:a4:50:46:86:c1:
         7e:68:ed:6c:14:77:33:8f:83:1d:b6:25:36:3f:2c:3f:5a:74:
         a9:f3:f8:e8:79:06:8f:25:1c:6c:9b:d5:b7:ac:98:18:60:5f:
         48:22:b0:2c:b2:03:66:5f:fc:57:9f:6a:14:2f:d4:ac:75:8c:
         0a:73:8a:3b:ac:8e:b8:55:2f:66:43:83:5d:3c:37:0d:d7:40:
         83:83:c0:09:1d:ec:6a:94:83:b5:fc:b0:c4:0d:e0:7a:10:82:
         c3:81:07:e0:7f:1d:2d:d5:f9:5f:3c:65:53:53:7a:77:c5:25:
         36:9d:0d:80:21:b7:d6:73:62:3e:f8:f1:1c:bc:a1:61:72:62:
         3d:1f:12:1e:63:e7:a0:a1:e2:4d:9e:0c:64:ba:ca:08:d4:90:
         39:95:ed:54:62:ec:e6:44:a4:5b:fc:f3:0a:ea:56:40:77:e8:
         d8:59:c7:a0:63:f4:77:30:e5:c7:f3:96:65:24:27:c1:fe:82:
         b2:93:c3:d7:91:6c:be:69:e9:c7:b2:aa:de:3f:12:a2:a3:71:
         fd:4d:e1:7c:53:20:45:e8:23:12:76:21:a3:a2:89:b2:b2:cd:
         70:eb:85:1c:c7:93:f7:74:74:8f:6b:9c:d2:a2:68:ed:d6:5c:
         b1:17:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org