Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/0WjS8OohpiKijGuJbEOfT9a-MtE.roa
File:                     0WjS8OohpiKijGuJbEOfT9a-MtE.roa (raw, json)
Hash identifier:          aVrpaj94R7GQPoAAoFn0SHsfaOZOCtk6ViLKjq3HQjE=
Subject key identifier:   D1:68:D2:F0:EA:21:A6:22:A2:8C:6B:89:6C:43:9F:4F:D6:BE:32:D1
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       0B6D1E58
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/0WjS8OohpiKijGuJbEOfT9a-MtE.roa
Signing time:             Sat 29 Jan 2022 08:02:57 +0000
ROA not before:           Sat 29 Jan 2022 08:02:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 16
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.188.58.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 16
                          78.38.220.0/23 maxlen: 23
                          78.38.238.0/24 maxlen: 24
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 23
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 21
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.176.0.0/12 maxlen: 12
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191700568 (0xb6d1e58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Jan 29 08:02:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d168d2f0ea21a622a28c6b896c439f4fd6be32d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:56:90:14:a9:70:4d:f8:07:7f:79:3a:57:
                    02:43:78:1c:89:0d:85:ce:9a:ad:da:f5:20:dd:4b:
                    3b:ee:f8:f5:55:7d:e7:b0:3d:c7:fb:23:0b:fb:02:
                    56:7d:85:1b:4c:86:7b:83:a7:aa:b4:97:f3:47:74:
                    61:5c:d0:d1:f1:5c:aa:a5:70:eb:e0:83:70:13:83:
                    ad:49:ed:80:a4:16:94:13:b0:20:dd:d8:6c:4e:33:
                    19:28:59:25:36:d7:11:73:18:8d:6e:02:d4:2d:8a:
                    49:3b:8c:ed:2d:a3:b1:34:40:88:1d:01:fd:6c:55:
                    9b:db:09:a8:62:95:f0:95:44:ed:ae:42:b8:8f:bd:
                    5e:b5:84:bd:81:81:89:07:62:e2:16:dd:a5:ff:fc:
                    d2:f4:21:60:dc:5b:08:55:8b:ae:06:37:e4:b5:de:
                    f1:19:b6:33:e3:0d:9f:26:eb:ab:e2:87:42:7b:05:
                    39:3e:67:77:68:45:4b:b0:37:a9:49:89:e0:ee:44:
                    87:13:d3:71:3b:7c:2d:6c:30:27:0f:9b:e6:62:de:
                    bb:83:19:4f:83:24:7e:f9:b3:97:78:89:e5:7c:49:
                    7e:c1:6d:02:b4:06:65:1f:26:54:f5:c5:8c:52:3f:
                    10:d8:40:c0:01:27:25:ac:75:b9:b9:23:f0:d3:a6:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:68:D2:F0:EA:21:A6:22:A2:8C:6B:89:6C:43:9F:4F:D6:BE:32:D1
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/0WjS8OohpiKijGuJbEOfT9a-MtE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:db:e7:d1:69:6e:b9:5e:ee:1b:63:c6:86:d7:f3:71:ad:
         c3:7d:bb:42:59:13:40:8b:6e:6f:38:db:ff:c7:ce:17:31:1b:
         f0:f5:2e:e1:b2:90:2d:d6:9c:eb:fc:2c:42:9c:c6:f0:49:c6:
         49:ab:0a:b0:86:d2:e4:f7:5d:35:df:e3:1a:c0:ae:90:0b:dc:
         0d:28:0e:db:63:bf:7d:94:74:be:21:a6:67:11:26:57:1c:09:
         1e:d3:30:e3:91:af:64:6a:16:20:58:5c:1c:ba:3e:aa:64:fa:
         00:1a:13:eb:7c:71:f8:57:4c:43:58:cf:7a:de:e5:a3:b8:5e:
         38:e2:2e:6a:a3:89:46:d3:ed:aa:f5:3f:e1:b3:1a:b8:71:82:
         1a:29:98:4e:87:29:d2:d7:7b:36:6c:71:f9:75:16:39:56:53:
         6b:97:db:7b:49:05:39:ce:6b:d4:f3:91:0f:93:02:34:cf:cf:
         cd:fd:a3:7f:aa:21:55:25:b8:0a:b0:9f:c8:9a:5f:d5:7c:34:
         61:8e:d5:02:fc:7d:67:47:fa:88:c1:4f:47:60:89:2d:1c:7f:
         2e:93:c1:b5:b1:12:22:2a:05:a7:ab:d9:cc:5b:be:66:0b:04:
         7c:95:05:61:ef:5b:5c:45:ff:11:ac:92:71:5e:75:bd:c8:67:
         14:58:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:52 2024 by rpki-client on console-ams.rpki-client.org