Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/jP_iZ8kjSf_4itZ20dTqYYtBezU.roa
File:                     jP_iZ8kjSf_4itZ20dTqYYtBezU.roa (raw, json)
Hash identifier:          ay56AS8Xz7kJSXtGhlwYwl7dDFeLjMcxes+tUGH8q7s=
Subject key identifier:   8C:FF:E2:67:C9:23:49:FF:F8:8A:D6:76:D1:D4:EA:61:8B:41:7B:35
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       2C56807F
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/jP_iZ8kjSf_4itZ20dTqYYtBezU.roa
Signing time:             Fri 13 May 2022 04:47:41 +0000
ROA not before:           Fri 13 May 2022 04:47:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12741
IP address blocks:        77.252.0.0/14 maxlen: 14
                          159.205.0.0/16 maxlen: 16
                          193.19.104.0/23 maxlen: 23
                          89.171.0.0/16 maxlen: 16
                          62.87.128.0/17 maxlen: 17
                          178.16.116.0/24 maxlen: 24
                          178.16.121.0/24 maxlen: 24
                          178.16.125.0/24 maxlen: 24
                          62.181.160.0/19 maxlen: 19
                          213.134.128.0/19 maxlen: 19
                          87.204.0.0/15 maxlen: 15
                          62.244.128.0/19 maxlen: 19
                          82.143.128.0/18 maxlen: 18
                          62.89.64.0/18 maxlen: 18
                          77.65.188.0/24 maxlen: 24
                          77.65.193.0/24 maxlen: 24
                          77.65.209.0/24 maxlen: 24
                          213.241.0.0/17 maxlen: 17
                          178.36.0.0/15 maxlen: 15
                          213.238.64.0/18 maxlen: 18
                          213.241.89.0/24 maxlen: 24
                          83.238.0.0/16 maxlen: 16
                          62.233.128.0/17 maxlen: 17
                          81.210.0.0/17 maxlen: 17
                          5.226.135.0/24 maxlen: 24
                          213.186.64.0/19 maxlen: 19
                          77.65.134.0/24 maxlen: 24
                          212.106.0.0/19 maxlen: 19
                          77.65.155.0/24 maxlen: 24
                          77.65.171.0/24 maxlen: 24
                          213.146.32.0/19 maxlen: 19
                          78.8.0.0/14 maxlen: 14
                          62.111.128.0/17 maxlen: 17
                          85.128.0.0/17 maxlen: 17
                          37.128.0.0/17 maxlen: 17
                          62.148.64.0/19 maxlen: 19
                          84.40.128.0/17 maxlen: 17
                          81.168.128.0/17 maxlen: 17
                          81.219.0.0/16 maxlen: 16
                          193.91.16.0/20 maxlen: 20
                          195.114.160.0/19 maxlen: 19
                          85.202.54.0/24 maxlen: 24
                          85.202.59.0/24 maxlen: 24
                          213.195.128.0/18 maxlen: 18
                          217.30.128.0/19 maxlen: 19
                          213.17.128.0/17 maxlen: 17
                          5.226.92.0/24 maxlen: 24
                          213.216.64.0/18 maxlen: 18
                          193.192.173.0/24 maxlen: 24
                          93.159.0.0/18 maxlen: 18
                          193.192.181.0/24 maxlen: 24
                          193.192.190.0/24 maxlen: 24
                          193.192.188.0/24 maxlen: 24
                          62.111.250.0/24 maxlen: 24
                          5.226.64.0/18 maxlen: 18
                          87.105.0.0/16 maxlen: 16
                          2001:41b0::/32 maxlen: 32
                          2001:16b0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743866495 (0x2c56807f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: May 13 04:47:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8cffe267c92349fff88ad676d1d4ea618b417b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:05:73:dc:32:fc:15:f4:8d:7d:29:7f:97:
                    0f:9d:9f:bf:54:3f:b7:b6:2b:ec:0e:4f:e6:20:f5:
                    6f:df:49:78:de:76:17:15:57:de:8f:b5:c3:90:64:
                    8c:12:0a:26:90:ea:00:97:d7:ff:79:c2:4b:9b:f5:
                    3d:e0:41:9c:b2:fa:04:ff:dc:15:a9:db:c9:6b:ee:
                    e8:4d:cc:a5:5e:ad:a9:f3:76:00:ae:60:b1:23:35:
                    68:8e:43:73:fb:9e:7f:e0:06:23:04:5f:2e:f0:4d:
                    06:85:89:30:d8:68:b6:ed:1b:72:14:8f:23:3d:55:
                    18:33:10:b2:8b:cd:70:7f:d3:fc:64:89:8c:77:b8:
                    68:9e:aa:f4:e0:9f:d7:3e:b3:89:f4:16:e7:c1:5b:
                    6d:a5:ab:26:aa:ac:ae:b1:da:2c:33:ee:18:b0:a2:
                    51:f6:8c:1b:c7:de:26:b5:c1:24:67:0b:b3:08:f6:
                    31:fd:f8:6f:c6:1a:38:60:3c:0b:c8:51:97:61:bb:
                    91:47:3a:c0:46:57:2a:76:ec:13:df:51:d5:c1:83:
                    53:ea:76:eb:0c:29:4e:8e:b9:b2:79:fe:6a:8e:c9:
                    64:b4:93:ca:9b:76:ad:c4:89:95:9e:bb:e6:51:e3:
                    ca:7a:64:db:8f:d6:52:17:6f:5f:ad:bd:9a:b6:fe:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FF:E2:67:C9:23:49:FF:F8:8A:D6:76:D1:D4:EA:61:8B:41:7B:35
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/jP_iZ8kjSf_4itZ20dTqYYtBezU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.64.0/18
                  5.226.135.0/24
                  37.128.0.0/17
                  62.87.128.0/17
                  62.89.64.0/18
                  62.111.128.0/17
                  62.148.64.0/19
                  62.181.160.0/19
                  62.233.128.0/17
                  62.244.128.0/19
                  77.65.134.0/24
                  77.65.155.0/24
                  77.65.171.0/24
                  77.65.188.0/24
                  77.65.193.0/24
                  77.65.209.0/24
                  77.252.0.0/14
                  78.8.0.0/14
                  81.168.128.0/17
                  81.210.0.0/17
                  81.219.0.0/16
                  82.143.128.0/18
                  83.238.0.0/16
                  84.40.128.0/17
                  85.128.0.0/17
                  85.202.54.0/24
                  85.202.59.0/24
                  87.105.0.0/16
                  87.204.0.0/15
                  89.171.0.0/16
                  93.159.0.0/18
                  159.205.0.0/16
                  178.16.116.0/24
                  178.16.121.0/24
                  178.16.125.0/24
                  178.36.0.0/15
                  193.19.104.0/23
                  193.91.16.0/20
                  193.192.173.0/24
                  193.192.181.0/24
                  193.192.188.0/24
                  193.192.190.0/24
                  195.114.160.0/19
                  212.106.0.0/19
                  213.17.128.0/17
                  213.134.128.0/19
                  213.146.32.0/19
                  213.186.64.0/19
                  213.195.128.0/18
                  213.216.64.0/18
                  213.238.64.0/18
                  213.241.0.0/17
                  217.30.128.0/19
                IPv6:
                  2001:16b0::/32
                  2001:41b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:71:f3:f5:f3:21:82:c6:cc:38:df:29:93:e2:7a:9c:ef:e8:
         d2:c8:d1:d4:00:6d:25:0a:bc:a9:09:d6:2b:dd:ed:f9:52:58:
         0c:c2:3f:66:52:9e:05:9f:2d:ac:77:08:9f:a8:a0:c0:ab:48:
         a5:20:70:8d:b2:0f:a9:09:eb:a7:5a:ea:16:cb:7f:a3:77:39:
         d2:d1:05:cd:0b:62:7d:cd:12:ec:89:54:c0:8b:37:b8:ef:e7:
         20:9a:35:57:65:51:6c:25:2a:e3:75:c9:b3:b7:58:31:ad:74:
         93:ae:ed:df:45:bf:6b:99:ef:3b:29:0d:72:44:c8:9b:cf:58:
         96:5b:f5:b8:d3:4a:27:a7:a0:9b:dc:22:43:ce:cc:2e:3d:6d:
         90:2b:47:02:d5:80:f5:ba:f3:36:a2:33:23:cb:af:82:75:d6:
         38:15:f5:bc:bc:22:88:8c:15:f4:f5:f2:07:3c:84:02:17:b3:
         c8:ca:82:b4:3b:75:29:b6:7d:76:8d:4e:3a:ef:d0:43:65:1b:
         b7:e8:a4:65:77:c5:8b:8c:ec:5e:52:ca:c7:f3:41:8e:69:0a:
         8c:8e:fb:5e:60:a6:5a:2e:23:b6:43:09:0b:0e:8a:f8:47:53:
         f8:5c:1b:ab:d4:d0:34:8b:9c:e1:59:8e:c3:ad:fc:23:96:90:
         4f:7e:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org