Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/YA-gMlHvlN0L4w2mrSrlLNfXyD0.roa
File:                     YA-gMlHvlN0L4w2mrSrlLNfXyD0.roa (raw, json)
Hash identifier:          lIK5GoE2dGZpbC8LrKhMCXwVBQoyeohhexTobyDAP70=
Subject key identifier:   60:0F:A0:32:51:EF:94:DD:0B:E3:0D:A6:AD:2A:E5:2C:D7:D7:C8:3D
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       0CE3E09B
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/YA-gMlHvlN0L4w2mrSrlLNfXyD0.roa
Signing time:             Sat 02 Jul 2022 07:13:25 +0000
ROA not before:           Sat 02 Jul 2022 07:13:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 16
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.189.5.48/28 maxlen: 28
                          2.188.58.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 16
                          78.38.220.0/23 maxlen: 23
                          78.38.238.0/24 maxlen: 24
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          2.189.5.64/28 maxlen: 28
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 23
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 21
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216260763 (0xce3e09b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Jul  2 07:13:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=600fa03251ef94dd0be30da6ad2ae52cd7d7c83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:31:0a:ec:d8:23:65:c0:8c:7e:28:3b:fe:
                    13:d9:d9:ec:0b:56:ed:61:36:ea:36:0a:36:42:49:
                    bb:da:f1:65:dd:6d:4a:99:3d:d8:85:02:87:e5:4c:
                    d2:86:76:93:28:cf:11:64:45:a9:fe:45:bd:ba:eb:
                    a8:80:d9:11:9b:70:ea:60:57:e2:09:9f:6a:aa:01:
                    39:a2:2f:b4:24:d8:72:b1:79:46:c3:80:f2:6b:44:
                    88:16:2c:b0:48:15:aa:bb:e9:2d:6f:c0:3a:5a:13:
                    05:b2:40:05:81:4f:1d:61:30:6a:8b:31:31:b6:ce:
                    71:a5:67:80:98:c8:c6:6f:81:f7:9a:3b:74:3d:a9:
                    4b:93:e8:9d:be:34:12:18:35:26:0e:3a:d7:03:21:
                    80:b1:53:b5:09:67:81:16:25:26:61:27:d0:87:0a:
                    8c:e1:ce:86:16:b2:b7:22:14:30:a8:d1:3a:bb:bc:
                    7e:1b:c7:75:e8:20:cd:77:e3:36:17:f3:38:9c:de:
                    94:0e:d9:3c:0a:b1:8c:44:1d:b1:42:8e:6d:cc:6e:
                    61:e0:28:11:c5:89:b6:87:ac:5d:f3:99:d1:40:9f:
                    16:39:0c:16:64:b9:07:a9:be:70:fc:9c:5b:a2:ac:
                    62:55:74:1c:80:3d:7e:66:76:56:4f:34:2f:03:c3:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0F:A0:32:51:EF:94:DD:0B:E3:0D:A6:AD:2A:E5:2C:D7:D7:C8:3D
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/YA-gMlHvlN0L4w2mrSrlLNfXyD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:4c:75:3f:e9:41:3f:5e:8b:08:91:3f:b4:08:f4:1a:d8:
         66:c6:d9:29:b9:f9:7b:1f:bb:17:14:da:c5:57:5b:5d:b1:87:
         f3:57:09:4f:86:a9:bd:be:8f:14:d6:db:cb:c9:1d:33:38:57:
         95:7f:c9:32:65:4e:8c:d4:0d:28:ce:31:90:d2:11:9b:8f:bd:
         8b:b0:8f:77:b9:00:86:10:b0:ab:14:cb:9e:e2:f9:79:69:d8:
         59:51:26:06:3d:ac:2b:40:34:da:eb:65:a0:31:63:29:cc:a2:
         24:12:69:ff:2a:98:a7:ce:d9:ad:f2:c7:ca:7b:f8:83:d5:ab:
         c7:11:ec:97:db:2b:98:a1:f2:da:c2:d0:f0:44:be:00:80:22:
         33:3f:ff:7a:e0:a6:42:30:69:b4:00:e7:15:91:64:ba:48:77:
         24:b7:e2:59:61:06:3a:81:dc:f4:f4:46:dc:1a:45:e3:6d:d8:
         11:0b:01:73:2b:bd:35:df:b5:b1:af:e6:7b:13:d4:06:99:4d:
         36:9c:e8:96:47:f9:c4:06:9c:49:a3:70:07:fd:0d:f2:dc:e4:
         a5:ea:e3:90:4b:61:22:82:2d:fa:37:22:8a:37:54:55:e5:e3:
         af:7e:8f:70:94:ff:36:b2:ec:95:b1:ef:1a:3c:c0:c3:20:bf:
         d2:bd:3e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org