Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/Xc6i9kHZPGijgmhsjVIJCmTpgLA.roa
File:                     Xc6i9kHZPGijgmhsjVIJCmTpgLA.roa (raw, json)
Hash identifier:          TplH/YTGs5Zk/ivbtUoTxEfIlaGSPoCaHKXvXCLXe6A=
Subject key identifier:   5D:CE:A2:F6:41:D9:3C:68:A3:82:68:6C:8D:52:09:0A:64:E9:80:B0
Certificate issuer:       /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial:       03C0C664
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/Xc6i9kHZPGijgmhsjVIJCmTpgLA.roa
Signing time:             Fri 13 May 2022 13:36:40 +0000
ROA not before:           Fri 13 May 2022 13:36:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203020
IP address blocks:        188.241.249.0/24 maxlen: 32
                          185.66.136.0/22 maxlen: 32
                          92.255.52.0/24 maxlen: 32
                          92.255.64.0/24 maxlen: 32
                          188.241.200.0/21 maxlen: 32
                          212.70.0.0/23 maxlen: 32
                          212.70.3.0/24 maxlen: 32
                          212.70.4.0/22 maxlen: 32
                          119.12.192.0/20 maxlen: 32
                          212.70.8.0/21 maxlen: 32
                          92.255.80.0/22 maxlen: 32
                          212.70.16.0/20 maxlen: 32
                          89.46.242.0/24 maxlen: 32
                          92.114.81.0/24 maxlen: 32
                          86.104.76.0/22 maxlen: 32
                          89.40.81.0/24 maxlen: 32
                          110.238.192.0/19 maxlen: 32
                          92.114.60.0/22 maxlen: 32
                          94.177.14.0/23 maxlen: 32
                          91.92.216.0/23 maxlen: 32
                          188.241.15.0/24 maxlen: 32
                          91.92.218.0/24 maxlen: 32
                          93.113.52.0/23 maxlen: 24
                          188.240.214.0/23 maxlen: 32
                          91.92.178.0/23 maxlen: 32
                          94.139.224.0/20 maxlen: 24
                          188.241.0.0/23 maxlen: 32
                          92.255.0.0/24 maxlen: 32
                          85.217.190.0/23 maxlen: 32
                          193.56.24.0/22 maxlen: 32
                          89.32.132.0/22 maxlen: 32
                          188.211.24.0/23 maxlen: 32
                          86.106.176.0/23 maxlen: 32
                          85.217.220.0/23 maxlen: 32
                          94.139.40.0/21 maxlen: 32
                          176.223.104.0/22 maxlen: 32
                          91.92.17.0/24 maxlen: 32
                          91.92.20.0/24 maxlen: 32
                          91.92.22.0/23 maxlen: 32
                          94.139.60.0/23 maxlen: 32
                          94.176.0.0/23 maxlen: 32
                          193.142.103.0/24 maxlen: 32
                          176.223.68.0/22 maxlen: 32
                          188.240.48.0/23 maxlen: 32
                          94.176.172.0/22 maxlen: 32
                          89.38.155.0/24 maxlen: 32
                          91.92.138.0/24 maxlen: 32
                          193.200.104.0/23 maxlen: 32
                          176.223.182.0/23 maxlen: 32
                          185.101.68.0/22 maxlen: 32
                          188.212.136.0/21 maxlen: 32
                          119.13.224.0/20 maxlen: 32
                          93.114.236.0/22 maxlen: 32
                          93.114.136.0/23 maxlen: 32
                          188.94.84.0/22 maxlen: 32
                          2.57.76.0/22 maxlen: 32
                          89.104.122.0/23 maxlen: 32
                          31.14.26.0/24 maxlen: 32
                          121.91.176.0/20 maxlen: 32
                          89.223.22.0/23 maxlen: 32
                          91.192.212.0/22 maxlen: 32
                          93.115.4.0/23 maxlen: 32
                          77.81.92.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62965348 (0x3c0c664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
        Validity
            Not Before: May 13 13:36:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5dcea2f641d93c68a382686c8d52090a64e980b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:bb:1c:71:19:86:ab:8f:8e:09:72:ff:0f:
                    18:08:94:72:36:d0:5f:39:f9:6c:77:05:8d:87:fe:
                    47:c0:28:44:92:83:c3:eb:c1:3f:53:cc:0a:df:23:
                    8d:f0:fd:80:a5:7e:26:98:ef:15:1c:0d:9c:27:0b:
                    b9:ff:fb:73:ba:8e:9a:bf:7e:3c:bf:6f:90:15:d6:
                    42:95:10:21:6d:5b:d3:47:bf:bc:e3:3b:1e:2f:50:
                    63:eb:69:27:d7:31:e5:36:96:99:a4:d6:fb:24:9f:
                    db:a3:85:68:65:63:99:5b:b5:dc:3f:97:e9:7c:56:
                    04:84:f1:fe:8c:a3:fc:bc:1d:6e:a1:55:24:34:74:
                    52:0c:ab:f2:c1:99:c6:26:58:e2:d3:02:5b:86:69:
                    23:be:eb:8b:4a:06:ec:6f:ed:34:1c:a7:d7:3e:ef:
                    5c:be:5b:33:73:65:8d:42:cf:ae:26:96:f3:a0:a1:
                    cc:ca:09:22:78:ff:3a:1d:cc:0d:3b:dc:3a:c6:68:
                    45:52:32:7f:4b:8e:99:56:a0:35:a4:69:a0:ed:74:
                    06:45:2f:60:b5:2c:94:3c:1e:87:fd:86:b4:54:e7:
                    be:08:0a:bf:33:e8:e1:a6:0f:34:45:80:f8:dc:93:
                    33:2f:69:f9:93:5b:c7:99:57:18:0e:fc:d5:f2:dc:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:A2:F6:41:D9:3C:68:A3:82:68:6C:8D:52:09:0A:64:E9:80:B0
            X509v3 Authority Key Identifier:
                keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/Xc6i9kHZPGijgmhsjVIJCmTpgLA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.76.0/22
                  31.14.26.0/24
                  77.81.92.0/22
                  85.217.190.0/23
                  85.217.220.0/23
                  86.104.76.0/22
                  86.106.176.0/23
                  89.32.132.0/22
                  89.38.155.0/24
                  89.40.81.0/24
                  89.46.242.0/24
                  89.104.122.0/23
                  89.223.22.0/23
                  91.92.17.0/24
                  91.92.20.0/24
                  91.92.22.0/23
                  91.92.138.0/24
                  91.92.178.0/23
                  91.92.216.0-91.92.218.255
                  91.192.212.0/22
                  92.114.60.0/22
                  92.114.81.0/24
                  92.255.0.0/24
                  92.255.52.0/24
                  92.255.64.0/24
                  92.255.80.0/22
                  93.113.52.0/23
                  93.114.136.0/23
                  93.114.236.0/22
                  93.115.4.0/23
                  94.139.40.0/21
                  94.139.60.0/23
                  94.139.224.0/20
                  94.176.0.0/23
                  94.176.172.0/22
                  94.177.14.0/23
                  110.238.192.0/19
                  119.12.192.0/20
                  119.13.224.0/20
                  121.91.176.0/20
                  176.223.68.0/22
                  176.223.104.0/22
                  176.223.182.0/23
                  185.66.136.0/22
                  185.101.68.0/22
                  188.94.84.0/22
                  188.211.24.0/23
                  188.212.136.0/21
                  188.240.48.0/23
                  188.240.214.0/23
                  188.241.0.0/23
                  188.241.15.0/24
                  188.241.200.0/21
                  188.241.249.0/24
                  193.56.24.0/22
                  193.142.103.0/24
                  193.200.104.0/23
                  212.70.0.0/23
                  212.70.3.0-212.70.31.255

    Signature Algorithm: sha256WithRSAEncryption
         18:1e:cb:77:da:69:f7:92:f2:27:0b:f6:d3:09:63:6a:bc:aa:
         5e:ad:f7:6d:24:5f:c1:1f:e0:62:f6:b7:6b:d2:e3:6e:13:16:
         16:3e:2d:43:58:42:13:fc:7e:84:47:e9:e4:bd:c7:1f:7b:ca:
         3b:b6:5b:97:44:c1:a4:e5:9b:b0:7b:b5:6f:10:a4:f2:6a:bf:
         e3:e8:ca:49:75:a9:51:ea:44:de:3f:6e:eb:67:99:db:f8:a1:
         80:86:2a:35:57:50:80:fc:7a:3c:0c:fe:81:e6:f2:62:b7:9a:
         ae:8d:da:15:21:8d:f4:df:41:c4:be:d5:91:ad:7b:ce:61:e6:
         82:22:17:29:8f:4b:8c:76:9d:3c:c9:c6:84:8d:73:cc:6f:6e:
         8b:62:d9:49:2b:7a:86:89:ba:b0:03:b3:87:52:5f:ca:94:f9:
         cf:66:12:e9:f1:62:85:8d:7e:ed:bb:e4:02:7e:63:b6:95:e3:
         ec:77:9d:af:23:7a:73:65:c4:e9:d4:89:c0:b9:f8:a1:e6:8f:
         7f:07:cc:5c:cf:ab:3a:66:b2:3a:99:a1:d5:3c:de:1f:b0:11:
         a2:0a:07:14:f8:a1:be:08:1f:c4:a1:13:2d:1d:06:c7:86:5d:
         82:99:56:19:3f:03:f9:30:ee:53:68:82:13:c1:08:59:70:f8:
         e5:85:d8:82
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIEA8DGZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDRkYjhiMDk4M2FjZjk3YTMyNTUxNTJjMmVhNTkyYWRhZTc3MzViMB4XDTIyMDUx
MzEzMzY0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWRjZWEyZjY0MWQ5
M2M2OGEzODI2ODZjOGQ1MjA5MGE2NGU5ODBiMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvwuxxxGYarj44Jcv8PGAiUcjbQXzn5bHcFjYf+R8AoRJKD
w+vBP1PMCt8jjfD9gKV+JpjvFRwNnCcLuf/7c7qOmr9+PL9vkBXWQpUQIW1b00e/
vOM7Hi9QY+tpJ9cx5TaWmaTW+ySf26OFaGVjmVu13D+X6XxWBITx/oyj/LwdbqFV
JDR0Ugyr8sGZxiZY4tMCW4ZpI77ri0oG7G/tNByn1z7vXL5bM3NljULPriaW86Ch
zMoJInj/Oh3MDTvcOsZoRVIyf0uOmVagNaRpoO10BkUvYLUslDweh/2GtFTnvggK
vzPo4aYPNEWA+NyTMy9p+ZNbx5lXGA781fLcjwcCAwEAAaOCA38wggN7MB0GA1Ud
DgQWBBRdzqL2Qdk8aKOCaGyNUgkKZOmAsDAfBgNVHSMEGDAWgBTETbiwmDrPl6Ml
UVLC6lkq2udzWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hFMjRzSmc2ejVlakpWRlN3dXBaS3RybmMxcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjQvNDM3ODk3LWFmNTgtNDk1OS04ZTc2LWVlZGQ5NGVjMTI4Yy8x
L1hjNmk5a0haUEdpamdtaHNqVklKQ21UcGdMQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQv
NDM3ODk3LWFmNTgtNDk1OS04ZTc2LWVlZGQ5NGVjMTI4Yy8xL3hFMjRzSmc2ejVl
akpWRlN3dXBaS3RybmMxcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AZMGCCsGAQUFBwEHAQH/BIIBgjCCAX4wggF6BAIAATCCAXIDBAICOUwDBAAfDhoD
BAJNUVwDBAFV2b4DBAFV2dwDBAJWaEwDBAFWarADBAJZIIQDBABZJpsDBABZKFED
BABZLvIDBAFZaHoDBAFZ3xYDBABbXBEDBABbXBQDBAFbXBYDBABbXIoDBAFbXLIw
DAMEA1tc2AMEAFtc2gMEAlvA1AMEAlxyPAMEAFxyUQMEAFz/AAMEAFz/NAMEAFz/
QAMEAlz/UAMEAV1xNAMEAV1yiAMEAl1y7AMEAV1zBAMEA16LKAMEAV6LPAMEBF6L
4AMEAV6wAAMEAl6wrAMEAV6xDgMEBW7uwAMEBHcMwAMEBHcN4AMEBHlbsAMEArDf
RAMEArDfaAMEAbDftgMEArlCiAMEArllRAMEArxeVAMEAbzTGAMEA7zUiAMEAbzw
MAMEAbzw1gMEAbzxAAMEALzxDwMEA7zxyAMEALzx+QMEAsE4GAMEAMGOZwMEAcHI
aAMEAdRGADAMAwQA1EYDAwQF1EYAMA0GCSqGSIb3DQEBCwUAA4IBAQAYHst32mn3
kvInC/bTCWNqvKperfdtJF/BH+Bi9rdr0uNuExYWPi1DWEIT/H6ER+nkvccfe8o7
tluXRMGk5Zuwe7VvEKTyar/j6MpJdalR6kTeP27rZ5nb+KGAhio1V1CA/Ho8DP6B
5vJit5qujdoVIY3030HEvtWRrXvOYeaCIhcpj0uMdp08ycaEjXPMb26LYtlJK3qG
ibqwA7OHUl/KlPnPZhLp8WKFjX7tu+QCfmO2lePsd52vI3pzZcTp1InAufih5o9/
B8xcz6s6ZrI6maHVPN4fsBGiCgcU+KG+CB/EoRMtHQbHhl2CmVYZPwP5MO5TaIIT
wQhZcPjlhdiC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:46 2024 by rpki-client on console-fra.rpki-client.org