Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/s93i7o1SFJsYMEqHqDUJB1MXqJo.roa
File:                     s93i7o1SFJsYMEqHqDUJB1MXqJo.roa (raw, json)
Hash identifier:          i0jhI60RuHtDnwVIGiXyxAQrF3KR5v/GFUwXZYLOIX0=
Subject key identifier:   B3:DD:E2:EE:8D:52:14:9B:18:30:4A:87:A8:35:09:07:53:17:A8:9A
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       0ABD778A
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/s93i7o1SFJsYMEqHqDUJB1MXqJo.roa
Signing time:             Mon 14 Feb 2022 18:23:07 +0000
ROA not before:           Mon 14 Feb 2022 18:23:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42298
IP address blocks:        78.100.112.0/20 maxlen: 24
                          78.100.144.0/20 maxlen: 24
                          37.208.160.0/20 maxlen: 24
                          37.208.176.0/20 maxlen: 24
                          176.202.0.0/20 maxlen: 24
                          176.202.16.0/20 maxlen: 24
                          78.101.8.0/21 maxlen: 24
                          78.100.160.0/20 maxlen: 24
                          78.100.176.0/20 maxlen: 24
                          37.208.128.0/20 maxlen: 24
                          37.208.144.0/20 maxlen: 24
                          178.153.128.0/20 maxlen: 24
                          178.153.144.0/20 maxlen: 24
                          178.153.160.0/20 maxlen: 24
                          178.153.80.0/20 maxlen: 24
                          178.153.96.0/20 maxlen: 24
                          78.100.10.0/24 maxlen: 24
                          178.153.240.0/20 maxlen: 24
                          178.153.176.0/20 maxlen: 24
                          178.153.192.0/20 maxlen: 24
                          178.153.208.0/20 maxlen: 24
                          178.153.224.0/20 maxlen: 24
                          178.152.112.0/20 maxlen: 24
                          178.153.16.0/20 maxlen: 24
                          178.153.32.0/20 maxlen: 24
                          178.153.48.0/20 maxlen: 24
                          178.153.64.0/20 maxlen: 24
                          178.153.0.0/20 maxlen: 24
                          178.152.64.0/20 maxlen: 24
                          178.152.80.0/20 maxlen: 24
                          178.152.96.0/20 maxlen: 24
                          178.152.0.0/20 maxlen: 24
                          178.152.16.0/20 maxlen: 24
                          89.211.160.0/20 maxlen: 24
                          37.211.160.0/20 maxlen: 24
                          89.211.176.0/20 maxlen: 24
                          37.211.176.0/20 maxlen: 24
                          89.211.192.0/20 maxlen: 24
                          89.211.96.0/20 maxlen: 24
                          89.211.112.0/20 maxlen: 24
                          89.211.128.0/20 maxlen: 24
                          37.211.128.0/20 maxlen: 24
                          37.211.144.0/20 maxlen: 24
                          89.211.144.0/20 maxlen: 24
                          89.211.208.0/20 maxlen: 24
                          89.211.224.0/20 maxlen: 24
                          89.211.240.0/20 maxlen: 24
                          37.210.192.0/20 maxlen: 24
                          37.210.208.0/20 maxlen: 24
                          37.210.224.0/20 maxlen: 24
                          37.210.144.0/20 maxlen: 24
                          37.210.160.0/20 maxlen: 24
                          37.210.176.0/20 maxlen: 24
                          86.62.242.0/24 maxlen: 24
                          86.62.245.0/24 maxlen: 24
                          86.62.246.0/24 maxlen: 24
                          86.62.243.0/24 maxlen: 24
                          86.62.244.0/24 maxlen: 24
                          86.62.252.0/24 maxlen: 24
                          86.62.251.0/24 maxlen: 24
                          86.62.248.0/24 maxlen: 24
                          86.62.249.0/24 maxlen: 24
                          37.211.48.0/20 maxlen: 24
                          86.62.255.0/24 maxlen: 24
                          213.130.96.0/22 maxlen: 24
                          37.211.64.0/20 maxlen: 24
                          37.211.80.0/20 maxlen: 24
                          213.130.127.0/24 maxlen: 24
                          37.210.240.0/20 maxlen: 24
                          86.62.192.0/22 maxlen: 24
                          86.62.196.0/22 maxlen: 24
                          86.62.200.0/22 maxlen: 24
                          86.62.204.0/22 maxlen: 24
                          37.211.0.0/20 maxlen: 24
                          86.62.211.0/24 maxlen: 24
                          86.62.209.0/24 maxlen: 24
                          37.211.16.0/20 maxlen: 24
                          86.62.218.0/24 maxlen: 24
                          86.62.216.0/24 maxlen: 24
                          86.62.224.0/22 maxlen: 24
                          86.62.223.0/24 maxlen: 24
                          86.62.221.0/24 maxlen: 24
                          86.62.228.0/22 maxlen: 24
                          86.62.232.0/22 maxlen: 24
                          37.211.32.0/20 maxlen: 24
                          86.62.236.0/22 maxlen: 24
                          37.210.0.0/20 maxlen: 24
                          37.210.16.0/20 maxlen: 24
                          37.210.80.0/20 maxlen: 24
                          37.210.96.0/20 maxlen: 24
                          37.210.112.0/20 maxlen: 24
                          37.210.128.0/20 maxlen: 24
                          37.210.32.0/20 maxlen: 24
                          37.210.48.0/20 maxlen: 24
                          37.210.64.0/20 maxlen: 24
                          176.202.80.0/20 maxlen: 24
                          82.148.107.0/24 maxlen: 24
                          176.202.96.0/20 maxlen: 24
                          78.101.80.0/20 maxlen: 24
                          78.101.16.0/20 maxlen: 24
                          176.202.32.0/20 maxlen: 24
                          176.202.48.0/20 maxlen: 24
                          78.101.48.0/20 maxlen: 24
                          78.101.64.0/20 maxlen: 24
                          78.101.176.0/20 maxlen: 24
                          78.101.192.0/20 maxlen: 24
                          78.101.208.0/20 maxlen: 24
                          78.101.224.0/20 maxlen: 24
                          176.202.160.0/20 maxlen: 24
                          176.202.176.0/20 maxlen: 24
                          78.101.160.0/20 maxlen: 24
                          2001:1a10:1004::/48 maxlen: 48
                          2001:1a10:1001::/48 maxlen: 48
                          2001:1a10:100a::/48 maxlen: 48
                          2001:1a10:1007::/48 maxlen: 48
                          2001:1a10:1009::/48 maxlen: 48
                          2001:1a10:1006::/48 maxlen: 48
                          2001:1a10:100f::/48 maxlen: 48
                          2001:1a10:100c::/48 maxlen: 48
                          2001:1a10:100e::/48 maxlen: 48
                          2001:1a10:1008::/48 maxlen: 48
                          2001:1a10:100b::/48 maxlen: 48
                          2001:1a11::/32 maxlen: 53
                          2001:1a10:1000::/48 maxlen: 48
                          2001:1a10:1003::/48 maxlen: 48
                          2001:1a10:100d::/48 maxlen: 48
                          2001:1a10:1005::/48 maxlen: 48
                          2001:1a10:1002::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180189066 (0xabd778a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Feb 14 18:23:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3dde2ee8d52149b18304a87a83509075317a89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:c3:29:ec:6b:72:08:55:a8:34:8c:c5:d0:
                    41:39:62:76:38:11:f2:bb:c5:85:de:35:42:6a:93:
                    d4:b1:77:bd:b5:7d:ea:49:96:7c:97:91:d3:86:99:
                    2c:45:85:5f:cc:92:28:fe:76:2c:44:3e:c3:19:77:
                    89:0e:c2:c4:71:3a:c8:f6:f1:15:cb:88:b6:93:cd:
                    ea:c0:2f:66:56:56:b0:82:5e:4d:4d:4f:9e:04:9d:
                    30:37:2b:92:a2:0c:b2:8d:45:c3:3a:46:86:17:dd:
                    ae:89:86:25:e2:0b:00:50:a4:ec:df:54:ea:d2:c3:
                    29:43:a9:b8:11:66:b3:79:3b:40:cb:08:d5:47:fc:
                    97:7b:2a:a6:b0:d3:57:22:c1:62:36:da:92:e7:39:
                    02:71:7b:03:bb:5c:52:99:14:1c:79:71:5a:cb:c9:
                    70:c8:19:51:51:1b:04:ed:d4:80:e3:d2:ee:81:82:
                    5f:b2:eb:21:7e:3b:47:c7:47:5c:61:31:fd:ca:5f:
                    58:e5:33:3b:e0:a9:98:65:f2:5d:2d:29:96:4c:d8:
                    8e:2e:0f:a5:8e:29:81:30:9d:9c:0a:b8:32:eb:d9:
                    f1:70:ce:3c:36:2b:95:01:99:12:ce:14:10:17:82:
                    69:38:7a:a7:77:a4:42:f9:fc:df:25:e8:6a:11:4f:
                    39:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DD:E2:EE:8D:52:14:9B:18:30:4A:87:A8:35:09:07:53:17:A8:9A
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/s93i7o1SFJsYMEqHqDUJB1MXqJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.208.128.0/18
                  37.210.0.0-37.211.95.255
                  37.211.128.0/18
                  78.100.10.0/24
                  78.100.112.0/20
                  78.100.144.0-78.100.191.255
                  78.101.8.0-78.101.31.255
                  78.101.48.0-78.101.95.255
                  78.101.160.0-78.101.239.255
                  82.148.107.0/24
                  86.62.192.0/20
                  86.62.209.0/24
                  86.62.211.0/24
                  86.62.216.0/24
                  86.62.218.0/24
                  86.62.221.0/24
                  86.62.223.0-86.62.239.255
                  86.62.242.0-86.62.246.255
                  86.62.248.0/23
                  86.62.251.0-86.62.252.255
                  86.62.255.0/24
                  89.211.96.0-89.211.255.255
                  176.202.0.0/18
                  176.202.80.0-176.202.111.255
                  176.202.160.0/19
                  178.152.0.0/19
                  178.152.64.0/18
                  178.153.0.0-178.153.111.255
                  178.153.128.0/17
                  213.130.96.0/22
                  213.130.127.0/24
                IPv6:
                  2001:1a10:1000::/44
                  2001:1a11::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:02:c7:e4:fd:3e:3c:93:1c:a1:fd:64:94:7a:ed:3e:04:e7:
         44:9a:5f:5f:13:a8:7b:09:7c:ef:aa:06:94:a9:ee:c7:7a:0e:
         b5:e1:e9:4c:62:3d:19:19:3c:86:41:a4:d6:89:f1:10:8d:48:
         44:38:a9:1a:bc:d6:f4:95:d3:8d:11:50:f2:f1:ff:54:0f:6d:
         25:9d:90:e9:ad:12:02:52:28:ba:1c:81:4b:80:ed:9b:96:d4:
         2c:6e:d9:61:f3:60:a7:62:ea:30:a0:21:a8:89:59:90:43:5e:
         73:fc:34:24:50:41:16:f9:45:05:17:79:15:c5:aa:42:f5:71:
         27:90:84:7e:13:50:ac:3b:52:2b:d7:34:b3:2a:5f:40:6a:09:
         b0:1f:8c:60:24:6e:bb:7f:97:08:a0:4e:d0:e0:6c:fa:ec:b3:
         0d:9d:76:9e:29:de:27:7e:16:d0:6d:4b:dd:46:47:a4:71:42:
         c4:ca:1b:5f:f1:97:a6:15:bd:aa:29:66:ca:84:e5:5e:ca:f2:
         c4:17:62:e7:d7:14:52:5e:7f:0b:a7:a1:58:f9:29:ef:85:ee:
         e7:98:a0:f3:19:5d:4f:cf:f4:9c:02:13:ee:f0:ac:33:ba:83:
         7e:cf:30:52:85:42:bc:13:16:b6:b3:5a:bd:ba:9b:48:a0:2f:
         fa:3a:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:31 2024 by rpki-client on console-fra.rpki-client.org