Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/1SQeBIA4xdjRKgrhZrTg5c1IlPY.roa
File:                     1SQeBIA4xdjRKgrhZrTg5c1IlPY.roa (raw, json)
Hash identifier:          cCm7XcqBvZAV08bnbUyaOLKtbgM3LoOsDl8r1ajZi8E=
Subject key identifier:   D5:24:1E:04:80:38:C5:D8:D1:2A:0A:E1:66:B4:E0:E5:CD:48:94:F6
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       17FEC1F1
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/1SQeBIA4xdjRKgrhZrTg5c1IlPY.roa
Signing time:             Tue 05 Jul 2022 06:19:26 +0000
ROA not before:           Tue 05 Jul 2022 06:19:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42695
IP address blocks:        86.107.49.0/24 maxlen: 24
                          86.107.48.0/23 maxlen: 24
                          86.107.48.0/24 maxlen: 24
                          185.16.84.0/22 maxlen: 24
                          89.46.82.0/24 maxlen: 24
                          89.46.81.0/24 maxlen: 24
                          89.46.80.0/24 maxlen: 24
                          89.46.83.0/24 maxlen: 24
                          89.46.84.0/23 maxlen: 23
                          89.46.86.0/24 maxlen: 24
                          89.46.87.0/24 maxlen: 24
                          185.2.152.0/22 maxlen: 24
                          188.241.198.0/23 maxlen: 24
                          188.241.198.0/24 maxlen: 24
                          188.241.199.0/24 maxlen: 24
                          89.36.90.0/23 maxlen: 23
                          45.114.121.0/24 maxlen: 24
                          45.114.120.0/22 maxlen: 24
                          45.114.123.0/24 maxlen: 24
                          45.114.122.0/24 maxlen: 24
                          141.255.184.0/21 maxlen: 24
                          37.153.138.0/23 maxlen: 24
                          185.52.156.0/22 maxlen: 24
                          89.45.226.0/23 maxlen: 24
                          89.45.226.0/24 maxlen: 24
                          37.153.172.0/23 maxlen: 24
                          188.240.222.0/23 maxlen: 24
                          91.106.192.0/21 maxlen: 24
                          91.123.192.0/20 maxlen: 24
                          89.45.227.0/24 maxlen: 24
                          185.103.48.0/23 maxlen: 23
                          185.103.51.0/24 maxlen: 24
                          185.103.50.0/24 maxlen: 24
                          89.42.140.0/23 maxlen: 24
                          185.62.204.0/22 maxlen: 24
                          185.62.204.0/24 maxlen: 24
                          185.62.206.0/24 maxlen: 24
                          185.62.205.0/24 maxlen: 24
                          185.62.207.0/24 maxlen: 24
                          116.206.168.0/22 maxlen: 24
                          188.240.92.0/22 maxlen: 24
                          77.81.188.0/23 maxlen: 24
                          188.240.18.0/23 maxlen: 24
                          188.95.224.0/21 maxlen: 24
                          46.254.10.0/23 maxlen: 23
                          46.254.8.0/21 maxlen: 24
                          46.254.13.0/24 maxlen: 24
                          46.254.12.0/24 maxlen: 24
                          46.254.15.0/24 maxlen: 24
                          46.254.14.0/24 maxlen: 24
                          188.212.108.0/23 maxlen: 24
                          103.57.72.0/22 maxlen: 24
                          103.57.74.0/24 maxlen: 24
                          86.107.242.0/23 maxlen: 24
                          77.81.6.0/23 maxlen: 24
                          103.81.140.0/22 maxlen: 24
                          89.40.216.0/23 maxlen: 23
                          2a03:d7c0::/29 maxlen: 48
                          2a03:b000:3002::/48 maxlen: 48
                          2a03:b000:100::/40 maxlen: 40
                          2a03:b000:c00::/40 maxlen: 40
                          2a03:b000:200::/40 maxlen: 40
                          2a03:b000::/40 maxlen: 40
                          2a03:b000:900::/40 maxlen: 40
                          2a03:b000:600::/40 maxlen: 40
                          2a03:b000:800::/40 maxlen: 40
                          2a03:b000:500::/40 maxlen: 40
                          2a03:b000:b00::/40 maxlen: 40
                          2a03:b000:400::/40 maxlen: 40
                          2a03:b000:700::/40 maxlen: 40
                          2a04:f180::/29 maxlen: 48
                          2a06:2980::/29 maxlen: 48
                          2a00:16d8::/32 maxlen: 48
                          2a03:b000:3001::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402571761 (0x17fec1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Jul  5 06:19:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d5241e048038c5d8d12a0ae166b4e0e5cd4894f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2f:e0:af:50:d9:54:09:9e:26:d5:f0:02:62:
                    a7:d9:40:5b:4e:f5:a3:a2:a9:38:b7:88:f0:d5:63:
                    25:96:92:51:c6:ac:ed:73:f6:c1:31:ad:bd:93:89:
                    14:9c:d7:1d:56:42:d4:9e:c1:3a:d1:53:d5:1f:58:
                    7a:75:6a:49:6b:8f:11:2b:f2:69:4b:44:c2:94:90:
                    26:fb:38:38:f9:2b:92:09:3a:9e:58:5b:92:5d:41:
                    55:33:a9:66:d4:76:5d:35:6b:46:c0:b3:52:23:ff:
                    6e:ec:fd:26:f3:1b:4b:96:34:8b:79:2c:76:3f:f0:
                    e6:5c:d7:f4:8d:3f:97:bc:8d:aa:d9:7d:bc:e2:e9:
                    a5:39:66:9c:55:7c:d8:e1:d9:71:ea:f7:68:79:38:
                    6e:98:c9:97:cd:c0:b3:41:40:f8:45:60:71:43:af:
                    b5:87:1f:86:ff:7e:29:2a:9f:41:bc:d0:98:9e:61:
                    51:b1:b6:5c:fc:5e:bc:72:15:4a:7b:fd:ff:b0:cd:
                    83:6e:08:31:55:e3:70:a9:f8:85:ae:7c:c0:3a:cf:
                    03:ec:d8:b1:1e:a1:0d:d7:44:6b:13:fc:ed:7c:3f:
                    22:86:d4:e7:1c:c6:0a:be:94:0b:20:fc:f5:50:28:
                    0e:c0:b8:57:89:5b:0b:c3:44:03:55:5e:99:c5:6e:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:24:1E:04:80:38:C5:D8:D1:2A:0A:E1:66:B4:E0:E5:CD:48:94:F6
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/1SQeBIA4xdjRKgrhZrTg5c1IlPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.153.138.0/23
                  37.153.172.0/23
                  45.114.120.0/22
                  46.254.8.0/21
                  77.81.6.0/23
                  77.81.188.0/23
                  86.107.48.0/23
                  86.107.242.0/23
                  89.36.90.0/23
                  89.40.216.0/23
                  89.42.140.0/23
                  89.45.226.0/23
                  89.46.80.0/21
                  91.106.192.0/21
                  91.123.192.0/20
                  103.57.72.0/22
                  103.81.140.0/22
                  116.206.168.0/22
                  141.255.184.0/21
                  185.2.152.0/22
                  185.16.84.0/22
                  185.52.156.0/22
                  185.62.204.0/22
                  185.103.48.0/22
                  188.95.224.0/21
                  188.212.108.0/23
                  188.240.18.0/23
                  188.240.92.0/22
                  188.240.222.0/23
                  188.241.198.0/23
                IPv6:
                  2a00:16d8::/32
                  2a03:b000::-2a03:b000:2ff:ffff:ffff:ffff:ffff:ffff
                  2a03:b000:400::-2a03:b000:9ff:ffff:ffff:ffff:ffff:ffff
                  2a03:b000:b00::-2a03:b000:cff:ffff:ffff:ffff:ffff:ffff
                  2a03:b000:3001::-2a03:b000:3002:ffff:ffff:ffff:ffff:ffff
                  2a03:d7c0::/29
                  2a04:f180::/29
                  2a06:2980::/29

    Signature Algorithm: sha256WithRSAEncryption
         6a:43:05:e8:15:4f:f1:82:49:ea:28:a0:29:75:1b:6e:51:c7:
         70:6e:83:fb:76:18:9e:d6:98:93:bd:70:5f:8a:9f:f2:9f:38:
         fb:8a:b0:b5:fb:70:4f:77:b3:ff:19:2b:81:5a:73:fb:46:8a:
         25:2e:a0:90:cb:0c:1f:2f:bd:f6:30:76:5d:ac:06:76:76:f7:
         52:c9:8f:08:a3:fb:22:b0:e0:20:57:42:d8:93:f0:e1:e3:7b:
         91:c4:46:c4:1b:ed:d0:16:21:62:43:cf:81:ca:3e:b6:50:a1:
         46:88:d7:e5:95:bd:7f:f1:0d:33:d0:0e:6d:b0:8e:b4:c1:d3:
         84:7a:b8:69:69:e9:d6:3d:2f:f9:9c:3a:58:05:55:09:73:d1:
         06:f7:fb:27:5c:5d:c3:7c:c0:b1:dc:58:8c:87:a8:e2:ef:7a:
         28:44:81:cf:45:1f:21:49:2f:a0:c9:23:97:dc:ef:89:7e:43:
         81:52:ed:fd:4a:fc:92:b2:02:05:62:02:12:24:a1:51:30:56:
         28:eb:70:6a:c5:fb:c6:20:62:df:cb:81:ed:cd:36:eb:6c:66:
         fa:8a:e9:ac:d0:b2:59:d5:ea:03:19:b3:21:74:78:17:17:48:
         18:31:57:80:d4:05:c3:40:e1:cf:02:f6:7f:b1:9c:62:85:3b:
         bd:8a:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:37 2024 by rpki-client on console-fra.rpki-client.org