Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/ZgrnmNt_YRWHNBHWkJ1JdbYtY3g.roa
File:                     ZgrnmNt_YRWHNBHWkJ1JdbYtY3g.roa (raw, json)
Hash identifier:          21s7UnFCR24prmIH4U+YENFnwTgEpxVFZ32A/TmM1js=
Subject key identifier:   66:0A:E7:98:DB:7F:61:15:87:34:11:D6:90:9D:49:75:B6:2D:63:78
Certificate issuer:       /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial:       38187961
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/ZgrnmNt_YRWHNBHWkJ1JdbYtY3g.roa
Signing time:             Sat 01 Jan 2022 01:59:39 +0000
ROA not before:           Sat 01 Jan 2022 01:59:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9150
IP address blocks:        185.67.64.0/24 maxlen: 24
                          185.67.66.0/24 maxlen: 24
                          185.67.65.0/24 maxlen: 24
                          185.67.67.0/24 maxlen: 24
                          213.207.64.0/18 maxlen: 18
                          213.206.192.0/18 maxlen: 18
                          212.83.192.0/18 maxlen: 18
                          185.67.64.0/22 maxlen: 22
                          213.207.95.0/24 maxlen: 24
                          213.207.94.0/24 maxlen: 24
                          213.207.93.0/24 maxlen: 24
                          213.207.98.0/24 maxlen: 24
                          213.207.97.0/24 maxlen: 24
                          213.207.96.0/24 maxlen: 24
                          213.207.92.0/24 maxlen: 24
                          213.207.99.0/24 maxlen: 24
                          213.207.102.0/24 maxlen: 24
                          213.207.101.0/24 maxlen: 24
                          213.207.100.0/24 maxlen: 24
                          213.207.105.0/24 maxlen: 24
                          213.207.104.0/24 maxlen: 24
                          213.207.103.0/24 maxlen: 24
                          213.207.109.0/24 maxlen: 24
                          213.207.108.0/24 maxlen: 24
                          213.207.107.0/24 maxlen: 24
                          213.207.112.0/24 maxlen: 24
                          213.207.111.0/24 maxlen: 24
                          213.207.110.0/24 maxlen: 24
                          213.207.106.0/24 maxlen: 24
                          213.207.113.0/24 maxlen: 24
                          213.207.116.0/24 maxlen: 24
                          213.207.115.0/24 maxlen: 24
                          213.207.114.0/24 maxlen: 24
                          213.207.118.0/24 maxlen: 24
                          213.207.117.0/24 maxlen: 24
                          213.207.123.0/24 maxlen: 24
                          213.207.122.0/24 maxlen: 24
                          213.207.121.0/24 maxlen: 24
                          213.207.125.0/24 maxlen: 24
                          213.207.124.0/24 maxlen: 24
                          213.207.120.0/24 maxlen: 24
                          213.207.119.0/24 maxlen: 24
                          213.207.126.0/24 maxlen: 24
                          213.207.127.0/24 maxlen: 24
                          213.207.64.0/24 maxlen: 24
                          213.207.67.0/24 maxlen: 24
                          213.207.66.0/24 maxlen: 24
                          213.207.65.0/24 maxlen: 24
                          213.207.71.0/24 maxlen: 24
                          213.207.70.0/24 maxlen: 24
                          213.207.69.0/24 maxlen: 24
                          213.207.68.0/24 maxlen: 24
                          213.207.74.0/24 maxlen: 24
                          213.207.73.0/24 maxlen: 24
                          213.207.72.0/24 maxlen: 24
                          213.207.78.0/24 maxlen: 24
                          213.207.77.0/24 maxlen: 24
                          213.207.76.0/24 maxlen: 24
                          213.207.75.0/24 maxlen: 24
                          213.207.81.0/24 maxlen: 24
                          213.207.80.0/24 maxlen: 24
                          213.207.79.0/24 maxlen: 24
                          213.207.85.0/24 maxlen: 24
                          213.207.84.0/24 maxlen: 24
                          213.207.83.0/24 maxlen: 24
                          213.207.82.0/24 maxlen: 24
                          213.207.88.0/24 maxlen: 24
                          213.207.87.0/24 maxlen: 24
                          213.207.86.0/24 maxlen: 24
                          213.207.91.0/24 maxlen: 24
                          213.207.90.0/24 maxlen: 24
                          213.207.89.0/24 maxlen: 24
                          213.206.243.0/24 maxlen: 24
                          213.206.242.0/24 maxlen: 24
                          213.206.241.0/24 maxlen: 24
                          213.206.246.0/24 maxlen: 24
                          213.206.245.0/24 maxlen: 24
                          213.206.244.0/24 maxlen: 24
                          213.206.253.0/24 maxlen: 24
                          213.206.252.0/24 maxlen: 24
                          213.206.251.0/24 maxlen: 24
                          213.206.247.0/24 maxlen: 24
                          213.206.250.0/24 maxlen: 24
                          213.206.249.0/24 maxlen: 24
                          213.206.248.0/24 maxlen: 24
                          213.206.254.0/24 maxlen: 24
                          213.206.255.0/24 maxlen: 24
                          213.206.192.0/24 maxlen: 24
                          213.206.195.0/24 maxlen: 24
                          213.206.194.0/24 maxlen: 24
                          213.206.193.0/24 maxlen: 24
                          213.206.198.0/24 maxlen: 24
                          213.206.197.0/24 maxlen: 24
                          213.206.196.0/24 maxlen: 24
                          213.206.199.0/24 maxlen: 24
                          213.206.202.0/24 maxlen: 24
                          213.206.201.0/24 maxlen: 24
                          213.206.200.0/24 maxlen: 24
                          213.206.205.0/24 maxlen: 24
                          213.206.204.0/24 maxlen: 24
                          213.206.203.0/24 maxlen: 24
                          213.206.206.0/24 maxlen: 24
                          213.206.212.0/24 maxlen: 24
                          213.206.211.0/24 maxlen: 24
                          213.206.210.0/24 maxlen: 24
                          213.206.213.0/24 maxlen: 24
                          213.206.209.0/24 maxlen: 24
                          213.206.208.0/24 maxlen: 24
                          213.206.207.0/24 maxlen: 24
                          213.206.216.0/24 maxlen: 24
                          213.206.215.0/24 maxlen: 24
                          213.206.214.0/24 maxlen: 24
                          213.206.219.0/24 maxlen: 24
                          213.206.218.0/24 maxlen: 24
                          213.206.217.0/24 maxlen: 24
                          213.206.226.0/24 maxlen: 24
                          213.206.225.0/24 maxlen: 24
                          213.206.224.0/24 maxlen: 24
                          213.206.223.0/24 maxlen: 24
                          213.206.222.0/24 maxlen: 24
                          213.206.221.0/24 maxlen: 24
                          213.206.220.0/24 maxlen: 24
                          213.206.229.0/24 maxlen: 24
                          213.206.228.0/24 maxlen: 24
                          213.206.227.0/24 maxlen: 24
                          213.206.233.0/24 maxlen: 24
                          213.206.232.0/24 maxlen: 24
                          213.206.231.0/24 maxlen: 24
                          213.206.230.0/24 maxlen: 24
                          213.206.240.0/24 maxlen: 24
                          213.206.239.0/24 maxlen: 24
                          213.206.238.0/24 maxlen: 24
                          213.206.237.0/24 maxlen: 24
                          213.206.236.0/24 maxlen: 24
                          213.206.235.0/24 maxlen: 24
                          213.206.234.0/24 maxlen: 24
                          212.83.192.0/24 maxlen: 24
                          212.83.194.0/24 maxlen: 24
                          212.83.193.0/24 maxlen: 24
                          212.83.198.0/24 maxlen: 24
                          212.83.197.0/24 maxlen: 24
                          212.83.196.0/24 maxlen: 24
                          212.83.195.0/24 maxlen: 24
                          212.83.199.0/24 maxlen: 24
                          212.83.255.0/24 maxlen: 24
                          212.83.254.0/24 maxlen: 24
                          212.83.201.0/24 maxlen: 24
                          212.83.200.0/24 maxlen: 24
                          212.83.205.0/24 maxlen: 24
                          212.83.204.0/24 maxlen: 24
                          212.83.203.0/24 maxlen: 24
                          212.83.202.0/24 maxlen: 24
                          212.83.206.0/24 maxlen: 24
                          212.83.212.0/24 maxlen: 24
                          212.83.211.0/24 maxlen: 24
                          212.83.210.0/24 maxlen: 24
                          212.83.209.0/24 maxlen: 24
                          212.83.213.0/24 maxlen: 24
                          212.83.208.0/24 maxlen: 24
                          212.83.207.0/24 maxlen: 24
                          212.83.215.0/24 maxlen: 24
                          212.83.214.0/24 maxlen: 24
                          212.83.219.0/24 maxlen: 24
                          212.83.218.0/24 maxlen: 24
                          212.83.217.0/24 maxlen: 24
                          212.83.216.0/24 maxlen: 24
                          212.83.226.0/24 maxlen: 24
                          212.83.225.0/24 maxlen: 24
                          212.83.224.0/24 maxlen: 24
                          212.83.223.0/24 maxlen: 24
                          212.83.222.0/24 maxlen: 24
                          212.83.221.0/24 maxlen: 24
                          212.83.220.0/24 maxlen: 24
                          212.83.229.0/24 maxlen: 24
                          212.83.228.0/24 maxlen: 24
                          212.83.227.0/24 maxlen: 24
                          212.83.233.0/24 maxlen: 24
                          212.83.232.0/24 maxlen: 24
                          212.83.231.0/24 maxlen: 24
                          212.83.230.0/24 maxlen: 24
                          212.83.239.0/24 maxlen: 24
                          212.83.238.0/24 maxlen: 24
                          212.83.237.0/24 maxlen: 24
                          212.83.240.0/24 maxlen: 24
                          212.83.236.0/24 maxlen: 24
                          212.83.235.0/24 maxlen: 24
                          212.83.234.0/24 maxlen: 24
                          212.83.243.0/24 maxlen: 24
                          212.83.242.0/24 maxlen: 24
                          212.83.241.0/24 maxlen: 24
                          212.83.246.0/24 maxlen: 24
                          212.83.245.0/24 maxlen: 24
                          212.83.244.0/24 maxlen: 24
                          212.83.253.0/24 maxlen: 24
                          212.83.252.0/24 maxlen: 24
                          212.83.251.0/24 maxlen: 24
                          212.83.250.0/24 maxlen: 24
                          212.83.249.0/24 maxlen: 24
                          212.83.248.0/24 maxlen: 24
                          212.83.247.0/24 maxlen: 24
                          2001:4018::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941128033 (0x38187961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
        Validity
            Not Before: Jan  1 01:59:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=660ae798db7f6115873411d6909d4975b62d6378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:8f:0e:85:1e:13:ee:33:ca:75:c7:af:3b:
                    28:fb:fe:f1:79:a6:1e:7a:24:8a:8e:93:cb:56:38:
                    b4:6e:6a:49:88:95:c6:64:5c:5f:6b:1a:87:ed:37:
                    2e:ac:68:2b:f8:61:12:c7:d3:59:db:d4:56:88:3a:
                    47:e2:c1:fe:ef:84:27:a5:b4:1b:d0:8f:92:fe:39:
                    cf:6b:e3:05:6a:2b:c3:de:d0:2c:c3:79:83:ee:2c:
                    13:55:b7:6e:5e:af:9b:f5:1a:38:58:3b:81:a0:86:
                    7e:01:9b:35:7a:ed:c5:b7:13:e8:fd:63:9a:fa:ed:
                    14:4b:78:2d:5d:2a:01:1b:db:2a:c8:8c:ac:27:e1:
                    8e:d7:e2:48:f2:9e:31:3a:fc:67:24:86:63:a4:b3:
                    d2:73:fa:e2:84:56:53:46:2e:1c:2a:74:ea:89:85:
                    89:63:75:22:0f:0c:1a:6e:ab:dd:5c:df:97:26:09:
                    6b:96:48:6c:8c:f4:ed:1d:a6:51:99:35:16:3f:a5:
                    1a:26:6c:df:47:82:d5:4d:21:30:bf:80:c0:10:35:
                    61:8a:0f:84:29:e5:0d:e7:98:ab:7c:dc:0d:cf:38:
                    e4:f4:23:0f:37:c8:5e:9d:9b:f5:3a:ba:cb:5a:d9:
                    b1:63:41:39:6b:c1:c2:0e:ee:53:64:88:c4:26:e9:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:E7:98:DB:7F:61:15:87:34:11:D6:90:9D:49:75:B6:2D:63:78
            X509v3 Authority Key Identifier:
                keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/ZgrnmNt_YRWHNBHWkJ1JdbYtY3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.67.64.0/22
                  212.83.192.0/18
                  213.206.192.0/18
                  213.207.64.0/18
                IPv6:
                  2001:4018::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:b6:a3:e7:d4:0a:16:e8:25:c5:96:d5:7b:f3:34:96:6b:c6:
         b2:c9:3b:85:3f:46:cc:2a:3b:0e:9e:2e:de:07:d5:b0:8d:11:
         07:9f:18:17:92:8a:7b:f4:9c:87:7c:82:50:0c:60:b2:2f:b5:
         e6:3d:bc:d1:80:78:5e:60:ac:65:61:1d:48:47:f6:51:58:bf:
         aa:ed:9f:3f:6b:05:9a:6d:a8:db:ab:ff:e4:d4:ea:1b:c0:cd:
         91:f4:92:4c:57:0d:cf:4d:af:96:49:90:cc:78:5b:8a:f1:77:
         88:e0:b6:29:12:ab:00:20:e5:05:dc:66:b8:54:54:a7:0b:3d:
         7e:34:84:d8:4b:81:01:98:6c:85:49:98:07:26:a0:aa:b5:b5:
         22:97:2e:e3:a0:9a:56:05:ba:d1:73:94:9b:27:0f:6b:59:60:
         e9:fd:21:f6:71:93:0e:03:ae:b6:b2:cd:f1:b9:35:f3:a7:b8:
         0f:a9:e9:a4:03:49:1e:4c:7e:a0:53:4b:7e:d0:76:a2:17:5b:
         ca:e9:3d:ce:16:5d:6b:00:8b:52:91:f8:e7:e9:0d:bd:45:a0:
         2d:d9:db:04:5d:cb:1e:cb:c6:d8:b8:25:ea:67:39:00:a4:98:
         1c:7d:ab:b6:c9:2e:ed:6e:df:dd:f7:c8:db:d3:9a:48:61:4b:
         6a:5d:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:16 2023 by rpki-client on console-ams.rpki-client.org