Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/T_kCU7tUG5MtAGkMHDNvIilvGIQ.roa
File:                     T_kCU7tUG5MtAGkMHDNvIilvGIQ.roa (raw, json)
Hash identifier:          qwEOxCUISicLmXLTP/5gNmtcTNZbW6qAfS1mZz1m6wk=
Subject key identifier:   4F:F9:02:53:BB:54:1B:93:2D:00:69:0C:1C:33:6F:22:29:6F:18:84
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       0CE279E2
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/T_kCU7tUG5MtAGkMHDNvIilvGIQ.roa
Signing time:             Sat 02 Jul 2022 05:25:25 +0000
ROA not before:           Sat 02 Jul 2022 05:25:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 16
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.188.58.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 16
                          78.38.220.0/23 maxlen: 23
                          78.38.238.0/24 maxlen: 24
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 23
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 21
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216168930 (0xce279e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Jul  2 05:25:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ff90253bb541b932d00690c1c336f22296f1884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2f:91:e7:85:3b:6a:43:6c:02:eb:00:79:05:
                    da:00:9c:0e:6a:59:90:20:1c:4f:18:b3:95:df:05:
                    e5:7e:80:cb:80:fc:45:93:ee:d3:89:bf:b3:a6:6c:
                    a4:fd:e6:f1:63:a4:da:0d:b3:7c:86:84:93:b0:12:
                    a6:21:ec:d7:05:27:84:05:75:f5:0e:f4:66:d6:af:
                    c4:fc:b4:b5:41:12:12:ea:11:6e:82:68:69:10:c4:
                    94:a6:af:b7:87:15:ea:90:cd:ec:1d:66:87:86:d4:
                    96:b8:fc:a9:61:5c:94:4f:ca:e1:e2:e5:ef:8f:ac:
                    87:b6:44:21:d5:0f:65:16:9a:3e:19:f2:6c:87:2b:
                    2f:bf:c5:8b:7a:9c:b9:7b:36:6d:fa:4c:9c:0a:56:
                    30:60:af:c0:36:36:5c:fb:56:1d:4a:8f:40:84:43:
                    56:a2:72:e2:68:e8:f0:3e:3f:90:ba:03:28:86:01:
                    35:d3:79:d6:e3:b8:56:04:32:0b:14:11:08:67:ed:
                    a5:0e:49:32:6a:7a:54:ac:70:92:41:7a:70:2c:8c:
                    33:1b:ad:f8:ae:a3:d4:bd:42:69:31:ad:7c:c2:7c:
                    cd:b9:42:cc:52:dc:7c:eb:ee:3d:04:6c:9e:b3:65:
                    8d:e8:c3:42:45:c8:b5:05:77:85:07:db:bb:3a:3e:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F9:02:53:BB:54:1B:93:2D:00:69:0C:1C:33:6F:22:29:6F:18:84
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/T_kCU7tUG5MtAGkMHDNvIilvGIQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:6d:57:a4:17:2a:f5:b9:70:b0:6a:7b:9f:8c:12:1d:5d:
         78:8d:34:d9:1f:a9:6b:2f:1b:19:97:f3:12:85:f4:77:03:8b:
         4d:b7:9b:2c:cc:00:e6:93:19:a5:44:30:f8:b6:b0:3a:d4:93:
         c8:09:36:9c:b3:7d:f6:fd:d7:ef:65:f3:b4:54:e0:bc:9f:b7:
         38:67:14:f7:df:e6:06:ae:b3:55:a9:87:77:86:00:25:08:ae:
         9a:27:13:db:2e:0d:fa:73:c0:c3:74:0b:99:8e:ba:dd:55:b1:
         c6:39:dd:09:46:8a:5a:56:c1:06:13:8c:b0:f5:0c:41:05:78:
         82:e9:e2:ab:1d:95:fd:3f:13:dd:bb:5b:67:74:10:45:cb:c7:
         8e:23:b3:17:cd:e7:4d:c5:94:1a:65:f3:fa:a6:ee:86:70:ba:
         83:4d:68:6b:7b:e8:26:e1:6e:e9:2c:ad:1f:18:29:65:0f:3d:
         ee:f6:bf:8a:ef:2d:fc:10:eb:33:b3:ea:13:60:0a:b7:64:92:
         21:a5:c4:90:22:52:2a:b3:62:a5:45:21:bc:63:fe:e0:ea:60:
         aa:7e:b1:b7:b3:6f:56:fb:b9:db:02:55:96:40:40:10:a1:42:
         bc:b1:10:6c:1e:e7:10:94:df:7c:7e:28:03:82:70:7c:10:f6:
         9a:22:0c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org