Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/TxM_5Vc_7mjVToxwJj-h_waGnRk.roa
File:                     TxM_5Vc_7mjVToxwJj-h_waGnRk.roa (raw, json)
Hash identifier:          k+c38FdJ8gbBS7zhcW80Okj/bKa/p3EyHGkT+DMiHP8=
Subject key identifier:   4F:13:3F:E5:57:3F:EE:68:D5:4E:8C:70:26:3F:A1:FF:06:86:9D:19
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       0AA27AC2
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/TxM_5Vc_7mjVToxwJj-h_waGnRk.roa
Signing time:             Mon 07 Feb 2022 12:33:40 +0000
ROA not before:           Mon 07 Feb 2022 12:33:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42298
IP address blocks:        176.202.0.0/20 maxlen: 20
                          176.202.16.0/20 maxlen: 20
                          78.101.8.0/21 maxlen: 21
                          37.208.128.0/20 maxlen: 20
                          37.208.144.0/20 maxlen: 20
                          178.153.128.0/20 maxlen: 24
                          178.153.144.0/20 maxlen: 24
                          178.153.160.0/20 maxlen: 24
                          178.153.80.0/20 maxlen: 24
                          178.153.96.0/20 maxlen: 24
                          178.153.240.0/20 maxlen: 24
                          178.153.176.0/20 maxlen: 24
                          178.153.192.0/20 maxlen: 24
                          178.153.208.0/20 maxlen: 24
                          178.153.224.0/20 maxlen: 24
                          178.152.112.0/20 maxlen: 20
                          178.153.16.0/20 maxlen: 20
                          178.153.32.0/20 maxlen: 20
                          178.153.48.0/20 maxlen: 20
                          178.153.64.0/20 maxlen: 20
                          178.153.0.0/20 maxlen: 24
                          178.152.64.0/20 maxlen: 20
                          178.152.80.0/20 maxlen: 20
                          178.152.96.0/20 maxlen: 20
                          178.152.0.0/20 maxlen: 24
                          178.152.16.0/20 maxlen: 24
                          37.211.160.0/20 maxlen: 20
                          89.211.160.0/20 maxlen: 20
                          37.211.176.0/20 maxlen: 20
                          89.211.176.0/20 maxlen: 20
                          89.211.192.0/20 maxlen: 20
                          89.211.96.0/20 maxlen: 20
                          89.211.112.0/20 maxlen: 20
                          37.211.128.0/20 maxlen: 20
                          89.211.128.0/20 maxlen: 20
                          37.211.144.0/20 maxlen: 20
                          89.211.144.0/20 maxlen: 20
                          89.211.208.0/20 maxlen: 20
                          89.211.224.0/20 maxlen: 20
                          89.211.240.0/20 maxlen: 20
                          37.210.192.0/20 maxlen: 20
                          37.210.208.0/20 maxlen: 20
                          37.210.224.0/20 maxlen: 20
                          37.210.144.0/20 maxlen: 20
                          37.210.160.0/20 maxlen: 20
                          37.210.176.0/20 maxlen: 20
                          86.62.242.0/24 maxlen: 24
                          86.62.245.0/24 maxlen: 24
                          86.62.246.0/24 maxlen: 24
                          86.62.243.0/24 maxlen: 24
                          86.62.244.0/24 maxlen: 24
                          37.211.48.0/20 maxlen: 20
                          86.62.252.0/24 maxlen: 24
                          86.62.251.0/24 maxlen: 24
                          86.62.248.0/24 maxlen: 24
                          86.62.249.0/24 maxlen: 24
                          86.62.255.0/24 maxlen: 24
                          213.130.96.0/22 maxlen: 22
                          37.211.64.0/20 maxlen: 20
                          37.211.80.0/20 maxlen: 20
                          213.130.127.0/24 maxlen: 24
                          37.210.240.0/20 maxlen: 20
                          86.62.192.0/22 maxlen: 24
                          86.62.196.0/22 maxlen: 24
                          86.62.200.0/22 maxlen: 24
                          37.211.0.0/20 maxlen: 20
                          86.62.204.0/22 maxlen: 24
                          86.62.211.0/24 maxlen: 24
                          86.62.209.0/24 maxlen: 24
                          86.62.218.0/24 maxlen: 24
                          86.62.216.0/24 maxlen: 24
                          37.211.16.0/20 maxlen: 20
                          86.62.223.0/24 maxlen: 24
                          86.62.224.0/22 maxlen: 22
                          86.62.221.0/24 maxlen: 24
                          86.62.228.0/22 maxlen: 22
                          86.62.232.0/22 maxlen: 22
                          86.62.236.0/22 maxlen: 22
                          37.211.32.0/20 maxlen: 20
                          37.210.0.0/20 maxlen: 20
                          37.210.16.0/20 maxlen: 20
                          37.210.80.0/20 maxlen: 20
                          37.210.96.0/20 maxlen: 20
                          37.210.112.0/20 maxlen: 20
                          37.210.128.0/20 maxlen: 20
                          37.210.32.0/20 maxlen: 20
                          37.210.48.0/20 maxlen: 20
                          37.210.64.0/20 maxlen: 20
                          82.148.107.0/24 maxlen: 24
                          176.202.80.0/20 maxlen: 20
                          78.101.80.0/20 maxlen: 20
                          176.202.96.0/20 maxlen: 24
                          78.101.16.0/20 maxlen: 20
                          176.202.32.0/20 maxlen: 20
                          176.202.48.0/20 maxlen: 20
                          78.101.48.0/20 maxlen: 20
                          78.101.64.0/20 maxlen: 20
                          78.101.176.0/20 maxlen: 20
                          78.101.192.0/20 maxlen: 20
                          78.101.208.0/20 maxlen: 20
                          78.101.224.0/20 maxlen: 20
                          176.202.160.0/20 maxlen: 20
                          78.101.160.0/20 maxlen: 20
                          176.202.176.0/20 maxlen: 24
                          2001:1a10:1004::/48 maxlen: 48
                          2001:1a10:1001::/48 maxlen: 48
                          2001:1a10:100a::/48 maxlen: 48
                          2001:1a10:1007::/48 maxlen: 48
                          2001:1a10:1009::/48 maxlen: 48
                          2001:1a10:1006::/48 maxlen: 48
                          2001:1a10:100f::/48 maxlen: 48
                          2001:1a10:100c::/48 maxlen: 48
                          2001:1a10:100e::/48 maxlen: 48
                          2001:1a10:1008::/48 maxlen: 48
                          2001:1a10:100b::/48 maxlen: 48
                          2001:1a11::/32 maxlen: 53
                          2001:1a10:1000::/48 maxlen: 48
                          2001:1a10:1003::/48 maxlen: 48
                          2001:1a10:100d::/48 maxlen: 48
                          2001:1a10:1005::/48 maxlen: 48
                          2001:1a10:1002::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178420418 (0xaa27ac2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Feb  7 12:33:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f133fe5573fee68d54e8c70263fa1ff06869d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7d:ff:9a:e8:5c:c7:ec:5a:4c:e9:33:a1:a1:
                    9c:a4:08:fb:8c:f6:75:86:f4:17:e4:dd:51:43:d5:
                    88:e3:e3:3e:ac:8f:85:94:af:f2:57:61:c3:07:72:
                    7d:38:b7:bf:7c:f6:bb:d8:02:bc:d5:ca:18:1a:c3:
                    af:3f:73:46:81:ea:7d:6d:8a:50:e8:2c:16:0e:46:
                    44:8a:49:34:98:2d:2a:86:cc:78:79:38:b4:33:75:
                    6a:65:2c:58:3a:04:62:6d:03:06:1d:bb:42:e0:6c:
                    f1:9f:fe:77:39:af:65:0a:40:e1:20:d3:23:54:aa:
                    54:9a:d7:cf:ed:97:ea:25:cf:9a:0b:ba:1d:ff:8b:
                    4e:d0:31:80:e1:17:00:a7:31:8d:72:8d:37:d6:94:
                    e8:2e:36:68:a7:98:d3:c8:b8:6e:d1:e8:db:ea:33:
                    5d:99:c0:2a:aa:78:d5:8c:70:77:52:ff:d3:7f:e6:
                    77:ff:9c:41:a7:7a:ec:df:6d:a3:a8:eb:1e:50:91:
                    26:cd:13:c0:52:e1:05:6c:06:3a:7e:8d:98:e7:34:
                    fb:c7:5a:bf:f2:5f:40:75:93:51:ce:c3:c0:cd:78:
                    c2:ce:a7:f0:56:da:8e:d4:98:1b:92:a2:c2:71:42:
                    7c:15:db:b7:0f:2d:81:92:d6:21:be:6a:80:49:47:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:13:3F:E5:57:3F:EE:68:D5:4E:8C:70:26:3F:A1:FF:06:86:9D:19
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/TxM_5Vc_7mjVToxwJj-h_waGnRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.208.128.0/19
                  37.210.0.0-37.211.95.255
                  37.211.128.0/18
                  78.101.8.0-78.101.31.255
                  78.101.48.0-78.101.95.255
                  78.101.160.0-78.101.239.255
                  82.148.107.0/24
                  86.62.192.0/20
                  86.62.209.0/24
                  86.62.211.0/24
                  86.62.216.0/24
                  86.62.218.0/24
                  86.62.221.0/24
                  86.62.223.0-86.62.239.255
                  86.62.242.0-86.62.246.255
                  86.62.248.0/23
                  86.62.251.0-86.62.252.255
                  86.62.255.0/24
                  89.211.96.0-89.211.255.255
                  176.202.0.0/18
                  176.202.80.0-176.202.111.255
                  176.202.160.0/19
                  178.152.0.0/19
                  178.152.64.0/18
                  178.153.0.0-178.153.111.255
                  178.153.128.0/17
                  213.130.96.0/22
                  213.130.127.0/24
                IPv6:
                  2001:1a10:1000::/44
                  2001:1a11::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:32:b6:12:4e:07:03:84:d6:3b:c3:19:5e:83:e1:15:6b:ef:
         4f:91:a3:80:57:e4:36:04:8f:be:8b:8f:9e:7b:e9:c2:10:2f:
         9c:23:48:5b:28:93:76:85:65:ea:c5:1c:75:9c:25:dc:24:56:
         53:7b:2a:b5:3b:65:8b:57:b7:a5:f3:2f:88:06:0c:c3:46:f7:
         03:b8:77:08:42:9e:b8:8b:07:12:91:91:09:22:0d:3e:6c:12:
         9f:9a:56:4c:8f:2a:b8:22:f7:62:cc:0c:d2:1b:97:6b:e8:ea:
         51:73:02:ea:33:49:24:95:53:47:92:a1:cd:82:0f:66:c2:ba:
         83:b1:d1:2d:ee:03:76:3d:9c:3f:32:e8:52:82:10:0f:3d:73:
         e0:1a:8c:a0:aa:e8:ef:59:32:b7:28:a8:7d:65:0d:b0:15:1a:
         f6:d4:ee:db:3b:49:ba:a8:23:43:ae:d9:fc:fa:7e:5a:b4:d9:
         92:52:9a:44:b2:53:54:30:16:66:b7:66:ae:48:51:7d:3c:ad:
         05:ff:8f:8b:b8:1e:8e:d2:aa:70:d8:0d:ca:9c:c3:74:d5:98:
         44:ce:db:cf:96:a7:45:bc:58:88:3b:4b:16:d7:84:b4:ae:c9:
         af:26:e4:78:96:4e:90:09:a9:20:5c:71:fc:69:91:4d:c0:be:
         78:a8:a6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:11 2024 by rpki-client on console-ams.rpki-client.org