Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/byxnTDuYWFLt74zhZtoVi4gyjkw.roa
File:                     byxnTDuYWFLt74zhZtoVi4gyjkw.roa (raw, json)
Hash identifier:          ppWiQagK1pMGhEiJ+mJXZ9P5B31GCsl7zrg4JyTThAI=
Subject key identifier:   6F:2C:67:4C:3B:98:58:52:ED:EF:8C:E1:66:DA:15:8B:88:32:8E:4C
Certificate issuer:       /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial:       01833B54A572B7D02000CB4FB3C375C142FA
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/byxnTDuYWFLt74zhZtoVi4gyjkw.roa
Signing time:             Wed 14 Sep 2022 09:29:06 +0000
ROA not before:           Wed 14 Sep 2022 09:29:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41798
IP address blocks:        37.208.43.0/24 maxlen: 24
                          37.208.42.0/24 maxlen: 24
                          37.208.44.0/24 maxlen: 24
                          37.208.41.0/24 maxlen: 24
                          37.208.40.0/24 maxlen: 24
                          37.208.45.0/24 maxlen: 24
                          37.208.46.0/24 maxlen: 24
                          37.208.47.0/24 maxlen: 24
                          87.255.203.0/24 maxlen: 24
                          87.255.202.0/24 maxlen: 24
                          87.255.205.0/24 maxlen: 24
                          87.255.204.0/24 maxlen: 24
                          87.255.206.0/24 maxlen: 24
                          87.255.208.0/24 maxlen: 24
                          87.255.210.0/24 maxlen: 24
                          87.255.209.0/24 maxlen: 24
                          87.255.207.0/24 maxlen: 24
                          87.255.212.0/24 maxlen: 24
                          87.255.211.0/24 maxlen: 24
                          87.255.219.0/24 maxlen: 24
                          87.255.218.0/24 maxlen: 24
                          87.255.215.0/24 maxlen: 24
                          87.255.217.0/24 maxlen: 24
                          87.255.216.0/24 maxlen: 24
                          87.255.214.0/24 maxlen: 24
                          87.255.222.0/24 maxlen: 24
                          87.255.223.0/24 maxlen: 24
                          87.255.221.0/24 maxlen: 24
                          87.255.220.0/24 maxlen: 24
                          176.98.226.0/24 maxlen: 24
                          176.98.225.0/24 maxlen: 24
                          176.98.224.0/20 maxlen: 20
                          176.98.224.0/24 maxlen: 24
                          176.98.228.0/24 maxlen: 24
                          176.98.233.0/24 maxlen: 24
                          176.98.232.0/24 maxlen: 24
                          176.98.230.0/24 maxlen: 24
                          176.98.229.0/24 maxlen: 24
                          176.98.231.0/24 maxlen: 24
                          176.98.235.0/24 maxlen: 24
                          176.98.234.0/24 maxlen: 24
                          176.98.240.0/24 maxlen: 24
                          176.98.239.0/24 maxlen: 24
                          176.98.237.0/24 maxlen: 24
                          176.98.236.0/24 maxlen: 24
                          176.98.238.0/24 maxlen: 24
                          37.17.176.0/24 maxlen: 24
                          37.17.178.0/24 maxlen: 24
                          37.17.177.0/24 maxlen: 24
                          37.17.183.0/24 maxlen: 24
                          37.17.182.0/24 maxlen: 24
                          37.17.181.0/24 maxlen: 24
                          176.98.243.0/24 maxlen: 24
                          176.98.242.0/24 maxlen: 24
                          176.98.241.0/24 maxlen: 24
                          2.57.96.0/24 maxlen: 24
                          2.57.98.0/24 maxlen: 24
                          2.57.97.0/24 maxlen: 24
                          2.57.99.0/24 maxlen: 24
                          91.246.80.0/24 maxlen: 24
                          91.246.85.0/24 maxlen: 24
                          91.246.82.0/24 maxlen: 24
                          91.246.81.0/24 maxlen: 24
                          91.246.84.0/24 maxlen: 24
                          91.246.83.0/24 maxlen: 24
                          91.246.89.0/24 maxlen: 24
                          91.246.88.0/24 maxlen: 24
                          91.246.91.0/24 maxlen: 24
                          91.246.90.0/24 maxlen: 24
                          91.246.87.0/24 maxlen: 24
                          91.246.86.0/24 maxlen: 24
                          91.246.92.0/24 maxlen: 24
                          91.246.94.0/24 maxlen: 24
                          91.246.93.0/24 maxlen: 24
                          91.246.96.0/24 maxlen: 24
                          91.246.95.0/24 maxlen: 24
                          91.246.98.0/24 maxlen: 24
                          91.246.97.0/24 maxlen: 24
                          91.246.103.0/24 maxlen: 24
                          91.246.102.0/24 maxlen: 24
                          91.246.99.0/24 maxlen: 24
                          91.246.101.0/24 maxlen: 24
                          91.246.100.0/24 maxlen: 24
                          193.104.253.0/24 maxlen: 24
                          91.185.16.0/24 maxlen: 24
                          91.185.17.0/24 maxlen: 24
                          91.185.13.0/24 maxlen: 24
                          91.185.12.0/24 maxlen: 24
                          91.185.15.0/24 maxlen: 24
                          91.185.14.0/24 maxlen: 24
                          91.185.20.0/24 maxlen: 24
                          91.185.19.0/24 maxlen: 24
                          91.185.22.0/24 maxlen: 24
                          91.185.21.0/24 maxlen: 24
                          91.185.18.0/24 maxlen: 24
                          91.185.23.0/24 maxlen: 24
                          91.185.24.0/24 maxlen: 24
                          91.185.30.0/24 maxlen: 24
                          91.185.31.0/24 maxlen: 24
                          91.185.27.0/24 maxlen: 24
                          91.185.26.0/24 maxlen: 24
                          91.185.29.0/24 maxlen: 24
                          91.185.25.0/24 maxlen: 24
                          91.185.2.0/24 maxlen: 24
                          91.185.4.0/24 maxlen: 24
                          91.185.3.0/24 maxlen: 24
                          91.185.1.0/24 maxlen: 24
                          91.185.0.0/24 maxlen: 24
                          91.185.6.0/24 maxlen: 24
                          91.185.5.0/24 maxlen: 24
                          91.185.8.0/24 maxlen: 24
                          91.185.7.0/24 maxlen: 24
                          91.185.9.0/24 maxlen: 24
                          91.185.11.0/24 maxlen: 24
                          178.22.172.0/24 maxlen: 24
                          178.22.169.0/24 maxlen: 24
                          178.22.168.0/24 maxlen: 24
                          178.22.171.0/24 maxlen: 24
                          178.22.175.0/24 maxlen: 24
                          178.22.174.0/24 maxlen: 24
                          178.22.173.0/24 maxlen: 24
                          94.141.226.0/24 maxlen: 24
                          94.141.225.0/24 maxlen: 24
                          94.141.224.0/24 maxlen: 24
                          94.141.228.0/24 maxlen: 24
                          94.141.227.0/24 maxlen: 24
                          94.141.233.0/24 maxlen: 24
                          94.141.230.0/24 maxlen: 24
                          94.141.229.0/24 maxlen: 24
                          94.141.232.0/24 maxlen: 24
                          94.141.231.0/24 maxlen: 24
                          94.141.234.0/24 maxlen: 24
                          94.141.235.0/24 maxlen: 24
                          94.141.240.0/24 maxlen: 24
                          94.141.237.0/24 maxlen: 24
                          94.141.236.0/24 maxlen: 24
                          94.141.239.0/24 maxlen: 24
                          94.141.238.0/24 maxlen: 24
                          94.141.241.0/24 maxlen: 24
                          94.141.242.0/24 maxlen: 24
                          94.141.243.0/24 maxlen: 24
                          94.141.251.0/24 maxlen: 24
                          94.141.250.0/24 maxlen: 24
                          94.141.248.0/24 maxlen: 24
                          94.141.249.0/24 maxlen: 24
                          2a00:ab40:7401::/48 maxlen: 48
                          2a00:ab40:7301::/48 maxlen: 48
                          2a00:ab40:7201::/48 maxlen: 48
                          2a00:ab40:7400::/48 maxlen: 48
                          2a00:ab40:7300::/48 maxlen: 48
                          2a00:ab40:7200::/48 maxlen: 48
                          2a00:ab40:5000::/48 maxlen: 48
                          2a00:ab40:4000::/48 maxlen: 48
                          2a00:ab40:3000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:3b:54:a5:72:b7:d0:20:00:cb:4f:b3:c3:75:c1:42:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
        Validity
            Not Before: Sep 14 09:29:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f2c674c3b985852edef8ce166da158b88328e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:50:eb:14:9d:b0:04:90:6a:ae:fc:87:21:9e:
                    d7:46:89:77:71:f0:77:d9:86:b9:18:df:e3:87:af:
                    8b:09:ef:f2:e6:a0:9c:84:4e:cd:fd:11:9d:22:73:
                    a0:50:4a:8e:70:8e:80:08:3d:f6:a0:d3:0d:e0:e0:
                    89:66:53:40:71:42:59:23:10:e4:4a:8f:4a:cd:5c:
                    b1:5f:33:d8:b0:47:c1:d1:ff:54:00:6e:70:eb:e3:
                    95:85:fc:c8:22:d3:a8:3e:a5:d1:d6:75:6b:53:aa:
                    1d:b8:7e:a2:c3:eb:a9:e4:38:3a:d3:28:a6:36:c6:
                    74:a8:85:96:6f:5b:d0:f5:7c:a8:c1:a5:c4:5d:88:
                    a3:aa:f6:09:27:8e:e9:b1:1e:0a:0c:1e:be:e1:53:
                    13:28:ab:a0:c8:cf:26:c3:e4:98:ef:d2:93:5c:44:
                    2f:db:5f:45:43:6d:c7:84:0f:a6:cc:4e:99:e7:c6:
                    80:79:53:6a:20:46:33:d2:6e:13:33:91:bd:ea:9a:
                    73:0b:e8:cd:be:aa:61:00:cc:b4:09:5a:b4:90:a9:
                    99:1c:5a:23:08:c5:bd:27:bc:d9:b5:16:1d:ad:74:
                    97:ac:a4:25:ec:29:eb:30:be:09:f6:5c:fd:64:da:
                    8d:9c:1b:34:a9:63:89:09:70:f9:c2:67:fd:db:c6:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2C:67:4C:3B:98:58:52:ED:EF:8C:E1:66:DA:15:8B:88:32:8E:4C
            X509v3 Authority Key Identifier:
                keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/byxnTDuYWFLt74zhZtoVi4gyjkw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.96.0/22
                  37.17.176.0-37.17.178.255
                  37.17.181.0-37.17.183.255
                  37.208.40.0/21
                  87.255.202.0-87.255.212.255
                  87.255.214.0-87.255.223.255
                  91.185.0.0-91.185.9.255
                  91.185.11.0-91.185.27.255
                  91.185.29.0-91.185.31.255
                  91.246.80.0-91.246.103.255
                  94.141.224.0-94.141.243.255
                  94.141.248.0/22
                  176.98.224.0-176.98.243.255
                  178.22.168.0/23
                  178.22.171.0-178.22.175.255
                  193.104.253.0/24
                IPv6:
                  2a00:ab40:3000::/48
                  2a00:ab40:4000::/48
                  2a00:ab40:5000::/48
                  2a00:ab40:7200::/47
                  2a00:ab40:7300::/47
                  2a00:ab40:7400::/47

    Signature Algorithm: sha256WithRSAEncryption
         92:78:04:cf:4c:47:c6:f3:85:ba:06:53:59:9f:5c:b7:c6:1b:
         54:c6:5e:b4:3a:15:86:6d:a7:8f:4a:1e:72:3d:98:ae:c3:85:
         67:87:21:9f:3e:67:f9:04:3b:dd:e0:72:30:54:e7:70:c7:29:
         94:59:ba:02:a3:8d:59:43:b1:98:ec:e1:37:8f:5a:18:db:36:
         5b:44:93:91:2f:5b:55:67:db:e8:7f:da:e4:1d:a2:7e:68:39:
         43:b6:b1:3c:0a:53:f7:46:60:96:45:a0:22:5a:c2:34:d5:a7:
         ff:22:43:17:45:58:a7:c7:4d:cc:9f:64:ce:d3:4c:b0:8b:56:
         7e:a9:6b:4a:8c:88:46:80:e9:9c:3a:8c:42:de:1c:ab:aa:fe:
         ca:72:89:40:d6:0b:ab:2a:16:12:aa:61:a1:a7:76:dd:fb:be:
         92:b6:92:56:e3:29:23:7d:09:30:dc:13:5b:ab:f2:05:40:5e:
         47:9d:a1:d1:f7:75:ac:ba:a9:90:c2:78:a2:f5:57:74:d7:de:
         02:28:48:53:7a:2e:73:50:4d:49:0a:bb:57:37:3d:43:f9:dd:
         07:d6:d9:0d:4f:e5:44:28:cf:46:f8:72:52:8f:96:c1:93:e3:
         28:41:0f:a4:09:8b:1f:3b:27:4f:01:5d:e7:55:99:f9:a5:70:
         72:ac:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:38 2024 by rpki-client on console-fra.rpki-client.org