Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/wNGjQ4chnFjIxOGNiRt08Ae8llU.roa
File:                     wNGjQ4chnFjIxOGNiRt08Ae8llU.roa (raw, json)
Hash identifier:          9MYq8ArDX7mFeyZ18yte/AwXKEOUN2Vy+ZllFp97Pjs=
Subject key identifier:   C0:D1:A3:43:87:21:9C:58:C8:C4:E1:8D:89:1B:74:F0:07:BC:96:55
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       16DB64CA
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/wNGjQ4chnFjIxOGNiRt08Ae8llU.roa
Signing time:             Mon 28 Feb 2022 14:26:22 +0000
ROA not before:           Mon 28 Feb 2022 14:26:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42695
IP address blocks:        86.107.49.0/24 maxlen: 24
                          86.107.48.0/24 maxlen: 24
                          89.46.81.0/24 maxlen: 24
                          89.46.80.0/24 maxlen: 24
                          89.46.83.0/24 maxlen: 24
                          89.46.82.0/24 maxlen: 24
                          89.46.84.0/23 maxlen: 23
                          89.46.86.0/24 maxlen: 24
                          89.46.87.0/24 maxlen: 24
                          185.2.152.0/22 maxlen: 22
                          188.241.198.0/24 maxlen: 24
                          188.241.199.0/24 maxlen: 24
                          89.36.90.0/23 maxlen: 23
                          45.114.121.0/24 maxlen: 24
                          45.114.120.0/24 maxlen: 24
                          45.114.123.0/24 maxlen: 24
                          45.114.122.0/24 maxlen: 24
                          141.255.184.0/21 maxlen: 21
                          37.153.138.0/23 maxlen: 23
                          185.52.156.0/22 maxlen: 24
                          89.45.226.0/24 maxlen: 24
                          37.153.172.0/23 maxlen: 23
                          188.240.222.0/23 maxlen: 23
                          91.106.192.0/21 maxlen: 24
                          91.123.192.0/20 maxlen: 32
                          89.45.227.0/24 maxlen: 24
                          185.103.48.0/23 maxlen: 23
                          185.103.51.0/24 maxlen: 24
                          185.103.50.0/24 maxlen: 24
                          89.42.140.0/23 maxlen: 23
                          185.62.204.0/24 maxlen: 24
                          185.62.206.0/24 maxlen: 24
                          185.62.205.0/24 maxlen: 24
                          185.62.207.0/24 maxlen: 24
                          116.206.168.0/22 maxlen: 22
                          188.240.92.0/22 maxlen: 24
                          77.81.188.0/23 maxlen: 23
                          188.240.18.0/23 maxlen: 23
                          188.95.224.0/21 maxlen: 24
                          46.254.10.0/23 maxlen: 23
                          46.254.8.0/23 maxlen: 24
                          46.254.8.0/21 maxlen: 24
                          46.254.13.0/24 maxlen: 24
                          46.254.12.0/24 maxlen: 24
                          46.254.15.0/24 maxlen: 24
                          46.254.14.0/24 maxlen: 24
                          188.212.108.0/23 maxlen: 23
                          103.57.74.0/24 maxlen: 24
                          103.57.75.0/24 maxlen: 24
                          86.107.242.0/23 maxlen: 23
                          77.81.6.0/23 maxlen: 23
                          89.40.216.0/23 maxlen: 23
                          2a03:d7c0::/29 maxlen: 48
                          2a03:b000:3002::/48 maxlen: 48
                          2a03:b000:200::/40 maxlen: 40
                          2a03:b000:800::/40 maxlen: 40
                          2a03:b000:600::/40 maxlen: 40
                          2a03:b000:900::/40 maxlen: 40
                          2a03:b000::/40 maxlen: 40
                          2a03:b000:b00::/40 maxlen: 40
                          2a03:b000:500::/40 maxlen: 40
                          2a03:b000:400::/40 maxlen: 40
                          2a03:b000:100::/40 maxlen: 40
                          2a03:b000:c00::/40 maxlen: 40
                          2a03:b000:700::/40 maxlen: 40
                          2a04:f180::/29 maxlen: 48
                          2a06:2980::/29 maxlen: 48
                          2a00:16d8::/32 maxlen: 32
                          2a03:b000:3001::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383476938 (0x16db64ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Feb 28 14:26:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0d1a34387219c58c8c4e18d891b74f007bc9655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:c9:07:d5:92:39:46:44:f1:c1:f5:d9:9a:
                    1d:88:94:f2:17:b5:da:8e:fe:ca:dc:a5:04:96:a0:
                    7b:04:c4:b7:0e:41:30:5f:b4:95:6a:89:c5:5a:31:
                    f5:31:f1:48:eb:d4:44:d8:98:21:4c:1b:92:eb:bd:
                    1d:ef:2f:50:df:ae:2a:81:6c:65:5a:76:7d:0b:64:
                    d7:bc:43:fb:af:03:4c:3e:96:c8:99:53:08:05:a6:
                    ab:c0:2d:1b:e0:9b:78:4d:8e:73:74:11:54:59:1e:
                    4f:97:cc:31:09:33:b5:c2:32:05:10:a5:1b:11:13:
                    fb:f6:8a:67:d6:36:9c:f4:e5:26:d1:70:65:34:55:
                    eb:cc:01:18:c2:4f:38:59:f5:33:87:99:0f:66:5e:
                    27:a2:54:49:91:b3:d9:74:8b:14:d0:06:ca:39:bd:
                    b3:58:2e:13:2f:db:b8:16:eb:fe:00:55:1d:7d:10:
                    2e:b5:3d:76:0a:cc:fc:41:3b:e7:e6:e8:14:5f:ff:
                    86:1d:52:38:60:db:d5:3f:2f:d5:fa:76:79:ed:a6:
                    3e:6f:0a:cc:eb:b6:6b:2b:f2:7d:81:a2:bc:e1:8b:
                    47:e0:93:31:fb:9a:d9:c0:80:e7:c1:39:97:06:48:
                    bf:19:74:50:34:2a:5a:cb:93:09:ee:d2:49:90:a6:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D1:A3:43:87:21:9C:58:C8:C4:E1:8D:89:1B:74:F0:07:BC:96:55
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/wNGjQ4chnFjIxOGNiRt08Ae8llU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.153.138.0/23
                  37.153.172.0/23
                  45.114.120.0/22
                  46.254.8.0/21
                  77.81.6.0/23
                  77.81.188.0/23
                  86.107.48.0/23
                  86.107.242.0/23
                  89.36.90.0/23
                  89.40.216.0/23
                  89.42.140.0/23
                  89.45.226.0/23
                  89.46.80.0/21
                  91.106.192.0/21
                  91.123.192.0/20
                  103.57.74.0/23
                  116.206.168.0/22
                  141.255.184.0/21
                  185.2.152.0/22
                  185.52.156.0/22
                  185.62.204.0/22
                  185.103.48.0/22
                  188.95.224.0/21
                  188.212.108.0/23
                  188.240.18.0/23
                  188.240.92.0/22
                  188.240.222.0/23
                  188.241.198.0/23
                IPv6:
                  2a00:16d8::/32
                  2a03:b000::-2a03:b000:2ff:ffff:ffff:ffff:ffff:ffff
                  2a03:b000:400::-2a03:b000:9ff:ffff:ffff:ffff:ffff:ffff
                  2a03:b000:b00::-2a03:b000:cff:ffff:ffff:ffff:ffff:ffff
                  2a03:b000:3001::-2a03:b000:3002:ffff:ffff:ffff:ffff:ffff
                  2a03:d7c0::/29
                  2a04:f180::/29
                  2a06:2980::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:27:cd:82:b6:59:0c:fb:27:77:99:a7:35:3b:c7:6a:b0:6e:
         d3:b9:c0:cb:aa:a9:b0:eb:d6:63:06:03:11:11:81:91:5f:60:
         d7:ef:ec:34:cd:cb:dd:85:06:8a:a7:13:37:7c:2a:2f:c2:21:
         87:d3:e4:f2:5e:1a:5b:d0:f9:70:c0:00:a3:c6:66:8d:11:22:
         32:33:1f:3a:4a:ce:58:ef:d9:95:0b:d9:cd:8d:f7:46:4d:69:
         0d:98:d5:41:a1:f6:67:79:06:e3:01:45:c4:e5:3c:c7:b7:28:
         1e:20:22:11:51:51:91:f0:58:0e:0d:7a:a6:81:42:d7:d0:87:
         7c:07:4d:a9:0b:90:d2:b9:6d:08:dc:c4:ac:e5:80:52:db:f2:
         08:c6:3c:4d:2c:28:22:f3:a4:59:41:f5:5d:9e:44:f9:5e:6a:
         dd:11:aa:28:5c:dc:4c:ab:7a:a2:d4:a7:23:2f:9d:31:a6:8e:
         65:6e:a8:c1:ab:16:42:21:d0:59:b5:4e:b9:e6:11:60:af:49:
         05:32:4d:f6:3f:28:bd:e3:5b:d1:2b:61:f4:10:8f:22:1b:88:
         06:1c:1a:b3:e0:63:12:d0:b5:84:39:84:aa:4e:95:60:d6:38:
         12:df:d0:4e:bc:c7:c1:f8:a4:96:cb:ef:1b:69:ae:e8:62:57:
         12:d4:f7:e5
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIEFttkyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZGI5MjZmOGM2MDNhYWI3OWNiNDZhODgzYmY2MzI1NjRhM2ZhYWJmMB4XDTIyMDIy
ODE0MjYyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzBkMWEzNDM4NzIx
OWM1OGM4YzRlMThkODkxYjc0ZjAwN2JjOTY1NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKuYyQfVkjlGRPHB9dmaHYiU8he12o7+ytylBJagewTEtw5B
MF+0lWqJxVox9THxSOvURNiYIUwbkuu9He8vUN+uKoFsZVp2fQtk17xD+68DTD6W
yJlTCAWmq8AtG+CbeE2Oc3QRVFkeT5fMMQkztcIyBRClGxET+/aKZ9Y2nPTlJtFw
ZTRV68wBGMJPOFn1M4eZD2ZeJ6JUSZGz2XSLFNAGyjm9s1guEy/buBbr/gBVHX0Q
LrU9dgrM/EE75+boFF//hh1SOGDb1T8v1fp2ee2mPm8KzOu2ayvyfYGivOGLR+CT
Mfua2cCA58E5lwZIvxl0UDQqWsuTCe7SSZCmANsCAwEAAaOCAx8wggMbMB0GA1Ud
DgQWBBTA0aNDhyGcWMjE4Y2JG3TwB7yWVTAfBgNVHSMEGDAWgBTtuSb4xgOqt5y0
aog79jJWSj+qvzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzdia20tTVlEcXJlY3RHcUlPX1l5VmtvX3FyOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNTZjOTM0LWNmMTQtNGE0Zi1hZTdjLTNiZDE5NzhiZjJmNi8x
L3dOR2pRNGNobkZqSXhPR05pUnQwOEFlOGxsVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NTZjOTM0LWNmMTQtNGE0Zi1hZTdjLTNiZDE5NzhiZjJmNi8xLzdia20tTVlEcXJl
Y3RHcUlPX1l5VmtvX3FyOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ATMGCCsGAQUFBwEHAQH/BIIBIjCCAR4wga8EAgABMIGoAwQBJZmKAwQBJZmsAwQC
LXJ4AwQDLv4IAwQBTVEGAwQBTVG8AwQBVmswAwQBVmvyAwQBWSRaAwQBWSjYAwQB
WSqMAwQBWS3iAwQDWS5QAwQDW2rAAwQEW3vAAwQBZzlKAwQCdM6oAwQDjf+4AwQC
uQKYAwQCuTScAwQCuT7MAwQCuWcwAwQDvF/gAwQBvNRsAwQBvPASAwQCvPBcAwQB
vPDeAwQBvPHGMGoEAgACMGQDBQAqABbYMA4DBAQqA7ADBgAqA7AAAjAQAwYCKgOw
AAQDBgEqA7AACDAQAwYAKgOwAAsDBgAqA7AADDASAwcAKgOwADABAwcAKgOwADAC
AwUDKgPXwAMFAyoE8YADBQMqBimAMA0GCSqGSIb3DQEBCwUAA4IBAQAcJ82CtlkM
+yd3mac1O8dqsG7TucDLqqmw69ZjBgMREYGRX2DX7+w0zcvdhQaKpxM3fCovwiGH
0+TyXhpb0PlwwACjxmaNESIyMx86Ss5Y79mVC9nNjfdGTWkNmNVBofZneQbjAUXE
5TzHtygeICIRUVGR8FgODXqmgULX0Id8B02pC5DSuW0I3MSs5YBS2/IIxjxNLCgi
86RZQfVdnkT5XmrdEaooXNxMq3qi1KcjL50xpo5lbqjBqxZCIdBZtU655hFgr0kF
Mk32Pyi941vRK2H0EI8iG4gGHBqz4GMS0LWEOYSqTpVg1jgS39BOvMfB+KSWy+8b
aa7oYlcS1Pfl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:52 2023 by rpki-client on console-fra.rpki-client.org