Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/i9Nxixm-6orAoPt-8Ejb2xdj58c.roa
File:                     i9Nxixm-6orAoPt-8Ejb2xdj58c.roa (raw, json)
Hash identifier:          tiTEREZiJrL99+08xKUuQPQ2/kQAMDgY04hcC6su7/0=
Subject key identifier:   8B:D3:71:8B:19:BE:EA:8A:C0:A0:FB:7E:F0:48:DB:DB:17:63:E7:C7
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       060E0609
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/i9Nxixm-6orAoPt-8Ejb2xdj58c.roa
Signing time:             Fri 28 Jan 2022 15:37:01 +0000
ROA not before:           Fri 28 Jan 2022 15:37:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1836
IP address blocks:        193.73.120.0/23 maxlen: 24
                          193.73.124.0/24 maxlen: 24
                          193.73.123.0/24 maxlen: 24
                          193.73.128.0/18 maxlen: 19
                          193.73.126.0/23 maxlen: 24
                          81.6.48.0/20 maxlen: 21
                          80.86.192.0/20 maxlen: 21
                          146.228.64.0/24 maxlen: 24
                          193.73.80.0/20 maxlen: 20
                          81.6.0.0/19 maxlen: 20
                          193.73.96.0/22 maxlen: 22
                          193.73.96.0/21 maxlen: 21
                          195.130.160.0/19 maxlen: 20
                          193.73.104.0/23 maxlen: 24
                          193.73.100.0/22 maxlen: 22
                          193.73.112.0/24 maxlen: 24
                          193.73.108.0/22 maxlen: 23
                          193.73.115.0/24 maxlen: 24
                          193.73.116.0/22 maxlen: 23
                          193.73.232.0/22 maxlen: 23
                          193.73.240.0/23 maxlen: 24
                          193.73.239.0/24 maxlen: 24
                          193.73.236.0/23 maxlen: 24
                          193.73.244.0/22 maxlen: 23
                          193.73.252.0/22 maxlen: 23
                          193.73.248.0/23 maxlen: 24
                          193.73.192.0/20 maxlen: 21
                          193.73.212.0/22 maxlen: 23
                          193.73.209.0/24 maxlen: 24
                          193.73.210.0/24 maxlen: 24
                          193.73.216.0/21 maxlen: 22
                          193.73.224.0/21 maxlen: 22
                          193.72.164.0/23 maxlen: 24
                          193.72.160.0/22 maxlen: 23
                          193.72.168.0/21 maxlen: 22
                          193.72.167.0/24 maxlen: 24
                          193.72.176.0/21 maxlen: 22
                          193.72.184.0/23 maxlen: 24
                          193.72.192.0/20 maxlen: 21
                          80.254.160.0/19 maxlen: 20
                          193.72.187.0/24 maxlen: 24
                          193.72.188.0/22 maxlen: 23
                          81.221.0.0/16 maxlen: 17
                          193.72.208.0/21 maxlen: 22
                          193.72.128.0/20 maxlen: 21
                          195.49.0.0/17 maxlen: 18
                          193.72.152.0/21 maxlen: 22
                          193.72.148.0/22 maxlen: 23
                          195.49.6.0/24 maxlen: 24
                          146.228.0.0/16 maxlen: 17
                          194.191.0.0/16 maxlen: 17
                          193.73.64.0/19 maxlen: 20
                          193.72.218.0/23 maxlen: 24
                          193.72.217.0/24 maxlen: 24
                          193.72.224.0/19 maxlen: 20
                          195.49.78.0/24 maxlen: 24
                          193.72.220.0/22 maxlen: 23
                          195.49.79.0/24 maxlen: 24
                          212.59.128.0/18 maxlen: 19
                          193.73.0.0/18 maxlen: 19
                          195.48.0.0/16 maxlen: 17
                          193.72.64.0/21 maxlen: 21
                          193.193.128.0/19 maxlen: 20
                          193.72.78.0/24 maxlen: 24
                          193.72.76.0/23 maxlen: 23
                          193.72.72.0/22 maxlen: 22
                          193.72.84.0/22 maxlen: 23
                          193.72.81.0/24 maxlen: 24
                          193.72.82.0/23 maxlen: 24
                          193.72.88.0/21 maxlen: 22
                          193.72.96.0/19 maxlen: 20
                          193.72.0.0/18 maxlen: 19
                          80.253.80.0/21 maxlen: 22
                          82.195.224.0/19 maxlen: 20
                          2001:1b50::/29 maxlen: 29
                          2a01:2a8::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101582345 (0x60e0609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: Jan 28 15:37:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8bd3718b19beea8ac0a0fb7ef048dbdb1763e7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:1c:97:60:5e:0d:3c:5d:4a:5c:44:cd:46:
                    61:5c:ff:cd:9d:1b:34:a1:c0:23:8f:44:10:1d:3c:
                    a3:7d:77:53:9e:03:d1:26:ba:cd:aa:df:1f:59:5c:
                    6d:eb:e7:d4:30:79:b6:5e:9a:df:fe:ea:7d:9a:28:
                    09:5b:b1:e8:06:80:c2:94:de:11:0f:23:39:2d:ca:
                    7c:bc:67:c9:0b:a4:63:56:29:c3:5d:7b:8d:bd:7f:
                    7d:ed:51:ea:c2:7a:79:63:5f:42:ac:05:bd:cc:08:
                    23:84:74:df:f6:23:30:0d:ae:2c:fc:00:1f:68:e8:
                    fd:86:5d:27:28:03:e9:78:a1:dd:8d:d1:90:6c:4f:
                    96:2d:cb:21:8c:c0:fa:d5:3c:30:c7:f2:33:c5:f6:
                    8b:86:89:ce:15:34:a9:c8:d2:cc:dc:88:84:59:40:
                    b2:20:61:45:5a:0a:ef:76:15:5d:5a:5b:53:22:80:
                    66:16:a0:a0:ca:18:fc:31:ff:e7:e1:21:c7:2f:20:
                    c4:4c:1b:0c:85:5f:55:6f:7a:81:36:c1:e6:65:fd:
                    8d:56:cc:cb:bd:3a:ea:16:c2:51:b3:46:4d:ad:1a:
                    e2:a9:55:89:6b:b3:d4:d3:b5:f6:9b:3b:ad:48:e7:
                    7c:28:d1:77:33:15:55:d0:17:23:b7:48:c6:c2:05:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D3:71:8B:19:BE:EA:8A:C0:A0:FB:7E:F0:48:DB:DB:17:63:E7:C7
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/i9Nxixm-6orAoPt-8Ejb2xdj58c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.86.192.0/20
                  80.253.80.0/21
                  80.254.160.0/19
                  81.6.0.0/19
                  81.6.48.0/20
                  81.221.0.0/16
                  82.195.224.0/19
                  146.228.0.0/16
                  193.72.0.0-193.72.78.255
                  193.72.81.0-193.72.143.255
                  193.72.148.0-193.72.165.255
                  193.72.167.0-193.72.185.255
                  193.72.187.0-193.72.215.255
                  193.72.217.0-193.73.105.255
                  193.73.108.0-193.73.112.255
                  193.73.115.0-193.73.121.255
                  193.73.123.0-193.73.124.255
                  193.73.126.0-193.73.207.255
                  193.73.209.0-193.73.210.255
                  193.73.212.0-193.73.237.255
                  193.73.239.0-193.73.241.255
                  193.73.244.0-193.73.249.255
                  193.73.252.0/22
                  193.193.128.0/19
                  194.191.0.0/16
                  195.48.0.0-195.49.127.255
                  195.130.160.0/19
                  212.59.128.0/18
                IPv6:
                  2001:1b50::/29
                  2a01:2a8::/29

    Signature Algorithm: sha256WithRSAEncryption
         3d:7e:db:17:5c:36:8b:b2:86:f8:c3:89:c0:74:66:b6:62:d6:
         62:ce:75:d4:a0:37:86:b3:88:04:a9:60:50:6e:ae:d0:e9:a3:
         3e:2b:9b:17:0a:b6:d7:b1:f1:a4:cd:c1:37:5a:a2:42:88:11:
         60:1a:9a:a0:51:c1:92:78:a2:25:e7:18:c6:40:c9:ff:0b:22:
         b7:98:0f:eb:88:d5:56:bb:19:e6:ea:0c:b2:d8:80:be:d4:0c:
         4f:6d:f9:48:6f:bd:75:71:27:88:ca:b7:78:90:0c:71:92:ea:
         f9:d0:d9:3d:cb:dd:97:7d:df:be:99:2c:31:8f:29:f4:e1:3b:
         63:9f:9e:35:ae:3a:25:e9:52:6d:8a:cc:3d:92:13:2c:88:94:
         c5:9d:25:fc:bc:f6:d0:5d:50:86:ef:68:84:b1:c3:e0:1f:79:
         26:cb:82:4e:60:f8:eb:3d:ba:da:5d:f9:52:cc:74:22:0d:45:
         a6:08:37:df:73:c4:d9:29:c1:4e:88:89:bc:b4:8e:eb:e0:af:
         5d:3b:6d:1a:3e:21:9a:76:82:50:76:ab:f3:22:a9:a4:4c:8a:
         fc:fc:4f:66:5e:3f:22:bd:cc:58:5c:55:20:a3:3a:c1:f9:a7:
         93:fc:cb:d2:4c:e2:e9:1b:87:dc:98:6f:1c:3b:1a:4a:49:b8:
         91:d4:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:26 2024 by rpki-client on console-ams.rpki-client.org