Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/y8prHyVDsjT_M_CIaXLQ4gKOIDY.roa
File:                     y8prHyVDsjT_M_CIaXLQ4gKOIDY.roa (raw, json)
Hash identifier:          pmSN+PXCS1m2WAAbKnwmN7r08M2zvJ5pi//p/IaC4mk=
Subject key identifier:   CB:CA:6B:1F:25:43:B2:34:FF:33:F0:88:69:72:D0:E2:02:8E:20:36
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       083BD9AF
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/y8prHyVDsjT_M_CIaXLQ4gKOIDY.roa
Signing time:             Tue 18 Jan 2022 07:32:55 +0000
ROA not before:           Tue 18 Jan 2022 07:32:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210906
IP address blocks:        82.140.177.0/24 maxlen: 24
                          82.140.180.0/24 maxlen: 24
                          89.117.34.0/24 maxlen: 24
                          89.117.189.0/24 maxlen: 24
                          89.117.191.0/24 maxlen: 24
                          89.117.131.0/24 maxlen: 24
                          84.46.204.0/24 maxlen: 24
                          84.46.207.0/24 maxlen: 24
                          89.116.110.0/23 maxlen: 23
                          89.116.109.0/24 maxlen: 24
                          89.116.114.0/24 maxlen: 24
                          89.116.122.0/24 maxlen: 24
                          89.116.120.0/23 maxlen: 23
                          89.116.133.0/24 maxlen: 24
                          89.116.136.0/24 maxlen: 24
                          89.116.134.0/24 maxlen: 24
                          89.116.138.0/23 maxlen: 23
                          89.116.145.0/24 maxlen: 24
                          89.116.142.0/24 maxlen: 24
                          89.116.152.0/24 maxlen: 24
                          89.116.159.0/24 maxlen: 24
                          89.116.157.0/24 maxlen: 24
                          89.116.57.0/24 maxlen: 24
                          89.116.55.0/24 maxlen: 24
                          86.38.206.0/24 maxlen: 24
                          86.38.206.0/23 maxlen: 23
                          89.116.71.0/24 maxlen: 24
                          86.38.207.0/24 maxlen: 24
                          89.116.78.0/23 maxlen: 23
                          89.116.77.0/24 maxlen: 24
                          89.116.78.0/24 maxlen: 24
                          89.116.79.0/24 maxlen: 24
                          86.38.222.0/24 maxlen: 24
                          89.116.90.0/24 maxlen: 24
                          89.116.94.0/23 maxlen: 23
                          89.116.98.0/24 maxlen: 24
                          89.116.97.0/24 maxlen: 24
                          89.116.94.0/24 maxlen: 24
                          89.116.95.0/24 maxlen: 24
                          89.116.93.0/24 maxlen: 24
                          89.116.104.0/23 maxlen: 23
                          89.116.101.0/24 maxlen: 24
                          86.38.236.0/24 maxlen: 24
                          86.38.234.0/24 maxlen: 24
                          89.116.216.0/23 maxlen: 23
                          89.116.219.0/24 maxlen: 24
                          89.116.222.0/24 maxlen: 24
                          82.140.129.0/24 maxlen: 24
                          82.140.130.0/24 maxlen: 24
                          82.140.128.0/24 maxlen: 24
                          89.116.238.0/24 maxlen: 24
                          89.116.240.0/24 maxlen: 24
                          82.140.128.0/23 maxlen: 23
                          89.116.245.0/24 maxlen: 24
                          89.116.251.0/24 maxlen: 24
                          89.116.249.0/24 maxlen: 24
                          89.117.4.0/24 maxlen: 24
                          89.116.254.0/24 maxlen: 24
                          82.140.159.0/24 maxlen: 24
                          89.116.167.0/24 maxlen: 24
                          89.116.170.0/24 maxlen: 24
                          89.116.188.0/24 maxlen: 24
                          89.116.187.0/24 maxlen: 24
                          89.116.192.0/24 maxlen: 24
                          89.116.191.0/24 maxlen: 24
                          89.116.196.0/23 maxlen: 23
                          89.116.194.0/24 maxlen: 24
                          89.116.199.0/24 maxlen: 24
                          89.116.206.0/23 maxlen: 23
                          89.116.204.0/23 maxlen: 23
                          89.116.201.0/24 maxlen: 24
                          86.38.26.0/24 maxlen: 24
                          86.38.36.0/24 maxlen: 24
                          86.38.2.0/24 maxlen: 24
                          89.116.0.0/24 maxlen: 24
                          89.116.14.0/24 maxlen: 24
                          86.38.158.0/23 maxlen: 23
                          89.116.18.0/24 maxlen: 24
                          86.38.157.0/24 maxlen: 24
                          86.38.154.0/24 maxlen: 24
                          86.38.158.0/24 maxlen: 24
                          86.38.159.0/24 maxlen: 24
                          86.38.160.0/24 maxlen: 24
                          89.116.40.0/24 maxlen: 24
                          86.38.128.0/23 maxlen: 23
                          86.38.128.0/24 maxlen: 24
                          86.38.129.0/24 maxlen: 24
                          86.38.130.0/24 maxlen: 24
                          89.117.230.0/23 maxlen: 23
                          89.117.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138140079 (0x83bd9af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jan 18 07:32:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cbca6b1f2543b234ff33f0886972d0e2028e2036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:6a:cb:5a:26:bf:d7:5f:c5:74:8b:41:63:
                    ea:83:92:b6:1f:e2:30:f2:2f:b3:50:55:85:f6:8c:
                    bc:47:77:a3:1b:9a:46:53:dd:03:8d:d2:eb:af:62:
                    20:f1:52:ad:45:59:cb:58:e9:9e:e9:c5:7a:36:2e:
                    d7:b1:cb:05:aa:32:77:e3:c4:6b:96:90:7b:b3:c1:
                    f5:60:c2:0b:3c:b0:c5:4b:23:ac:53:87:23:dc:5d:
                    a4:3e:f1:76:48:ea:da:61:2a:6c:e2:ef:b1:9b:a0:
                    9b:e0:38:b0:48:f8:e4:ba:28:aa:36:1d:8b:65:ee:
                    30:02:56:34:82:60:d8:8e:70:86:c4:4e:b8:80:1f:
                    e1:1b:33:dc:b1:87:70:ee:46:47:c2:eb:30:c2:20:
                    7e:f1:87:08:4e:e5:4f:d8:16:fb:e7:b8:54:02:ee:
                    13:7e:c6:ee:59:b7:87:f1:c2:e2:b8:52:40:fa:ab:
                    f1:b0:c4:ba:ae:46:58:a2:1c:2a:34:c3:76:1b:2b:
                    47:bb:a3:9f:78:c0:ad:34:69:9f:c6:8c:5a:3b:b5:
                    ce:bc:c9:14:52:c6:39:b6:6c:12:c4:9b:98:6b:37:
                    7f:0d:f0:c3:27:79:ca:27:7c:2d:5b:88:7b:07:0c:
                    ec:be:f7:ac:aa:b9:ff:18:b5:b1:43:b0:d6:61:cc:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CA:6B:1F:25:43:B2:34:FF:33:F0:88:69:72:D0:E2:02:8E:20:36
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/y8prHyVDsjT_M_CIaXLQ4gKOIDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.128.0-82.140.130.255
                  82.140.159.0/24
                  82.140.177.0/24
                  82.140.180.0/24
                  84.46.204.0/24
                  84.46.207.0/24
                  86.38.2.0/24
                  86.38.26.0/24
                  86.38.36.0/24
                  86.38.128.0-86.38.130.255
                  86.38.154.0/24
                  86.38.157.0-86.38.160.255
                  86.38.206.0/23
                  86.38.222.0/24
                  86.38.234.0/24
                  86.38.236.0/24
                  89.116.0.0/24
                  89.116.14.0/24
                  89.116.18.0/24
                  89.116.40.0/24
                  89.116.55.0/24
                  89.116.57.0/24
                  89.116.71.0/24
                  89.116.77.0-89.116.79.255
                  89.116.90.0/24
                  89.116.93.0-89.116.95.255
                  89.116.97.0-89.116.98.255
                  89.116.101.0/24
                  89.116.104.0/23
                  89.116.109.0-89.116.111.255
                  89.116.114.0/24
                  89.116.120.0-89.116.122.255
                  89.116.133.0-89.116.134.255
                  89.116.136.0/24
                  89.116.138.0/23
                  89.116.142.0/24
                  89.116.145.0/24
                  89.116.152.0/24
                  89.116.157.0/24
                  89.116.159.0/24
                  89.116.167.0/24
                  89.116.170.0/24
                  89.116.187.0-89.116.188.255
                  89.116.191.0-89.116.192.255
                  89.116.194.0/24
                  89.116.196.0/23
                  89.116.199.0/24
                  89.116.201.0/24
                  89.116.204.0/22
                  89.116.216.0/23
                  89.116.219.0/24
                  89.116.222.0/24
                  89.116.238.0/24
                  89.116.240.0/24
                  89.116.245.0/24
                  89.116.249.0/24
                  89.116.251.0/24
                  89.116.254.0/24
                  89.117.4.0/24
                  89.117.34.0/24
                  89.117.131.0/24
                  89.117.189.0/24
                  89.117.191.0/24
                  89.117.230.0/23
                  89.117.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:e4:c8:67:48:55:78:02:36:7b:d3:4d:80:24:50:0a:70:
         a7:44:9d:41:47:d4:bf:51:2c:16:bb:6f:ef:00:b3:ca:a9:67:
         3e:14:05:7d:df:69:77:4b:ac:24:55:5b:b9:d6:68:93:2d:17:
         75:03:3e:10:6e:1b:cd:cd:e2:a6:e7:3f:e6:e9:c0:5e:fb:37:
         67:a8:a5:3e:70:fe:65:1f:14:71:16:51:b1:22:dd:18:ea:61:
         0c:ed:13:9d:26:9f:1a:b1:b1:e4:52:df:b4:9c:fe:83:26:72:
         6d:3b:c9:45:bc:ea:8f:15:4a:b7:03:a1:30:6d:8c:10:09:c6:
         48:cb:82:55:74:da:ff:93:d7:37:d8:c9:66:29:7f:97:fa:39:
         79:3b:da:54:4c:a7:ec:30:b0:30:2c:71:54:ab:e1:02:9c:3c:
         18:73:c3:5b:2c:b9:38:3f:ce:72:ae:64:5b:2c:09:3f:c5:b8:
         16:37:5b:1a:00:59:16:64:af:1a:4a:b4:2e:2e:2a:5e:93:f4:
         24:9a:27:55:9e:58:14:fb:96:eb:32:0e:37:0c:52:90:24:40:
         bf:e9:0b:07:6f:8a:ca:2d:1c:24:61:02:27:d9:db:ea:7d:ee:
         60:1d:3f:d9:7b:30:55:c3:3a:ed:e2:ba:62:ea:42:07:26:6d:
         79:62:a0:5e
-----BEGIN CERTIFICATE-----
MIIG0TCCBbmgAwIBAgIECDvZrzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MGRkODFhODMzZDliMDQzYzdmZmQ2MzVhNTk4N2Y1MzY5NzExODBkMB4XDTIyMDEx
ODA3MzI1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2JjYTZiMWYyNTQz
YjIzNGZmMzNmMDg4Njk3MmQwZTIwMjhlMjAzNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALO8astaJr/XX8V0i0Fj6oOSth/iMPIvs1BVhfaMvEd3oxua
RlPdA43S669iIPFSrUVZy1jpnunFejYu17HLBaoyd+PEa5aQe7PB9WDCCzywxUsj
rFOHI9xdpD7xdkjq2mEqbOLvsZugm+A4sEj45LooqjYdi2XuMAJWNIJg2I5whsRO
uIAf4Rsz3LGHcO5GR8LrMMIgfvGHCE7lT9gW++e4VALuE37G7lm3h/HC4rhSQPqr
8bDEuq5GWKIcKjTDdhsrR7ujn3jArTRpn8aMWju1zrzJFFLGObZsEsSbmGs3fw3w
wyd5yid8LVuIewcM7L73rKq5/xi1sUOw1mHMzHECAwEAAaOCA+swggPnMB0GA1Ud
DgQWBBTLymsfJUOyNP8z8IhpctDiAo4gNjAfBgNVHSMEGDAWgBTw3YGoM9mwQ8f/
1jWlmH9TaXEYDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhOMkJxRFBac0VQSF85WTFwWmhfVTJseEdBMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvYThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZkYy8x
L3k4cHJIeVZEc2pUX01fQ0lhWExRNGdLT0lEWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
YThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZkYy8xLzhOMkJxRFBac0VQ
SF85WTFwWmhfVTJseEdBMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
Af8GCCsGAQUFBwEHAQH/BIIB7jCCAeowggHmBAIAATCCAd4wDAMEB1KMgAMEAFKM
ggMEAFKMnwMEAFKMsQMEAFKMtAMEAFQuzAMEAFQuzwMEAFYmAgMEAFYmGgMEAFYm
JDAMAwQHViaAAwQAViaCAwQAViaaMAwDBABWJp0DBABWJqADBAFWJs4DBABWJt4D
BABWJuoDBABWJuwDBABZdAADBABZdA4DBABZdBIDBABZdCgDBABZdDcDBABZdDkD
BABZdEcwDAMEAFl0TQMEBFl0QAMEAFl0WjAMAwQAWXRdAwQFWXRAMAwDBABZdGED
BABZdGIDBABZdGUDBAFZdGgwDAMEAFl0bQMEBFl0YAMEAFl0cjAMAwQDWXR4AwQA
WXR6MAwDBABZdIUDBABZdIYDBABZdIgDBAFZdIoDBABZdI4DBABZdJEDBABZdJgD
BABZdJ0DBABZdJ8DBABZdKcDBABZdKowDAMEAFl0uwMEAFl0vDAMAwQAWXS/AwQA
WXTAAwQAWXTCAwQBWXTEAwQAWXTHAwQAWXTJAwQCWXTMAwQBWXTYAwQAWXTbAwQA
WXTeAwQAWXTuAwQAWXTwAwQAWXT1AwQAWXT5AwQAWXT7AwQAWXT+AwQAWXUEAwQA
WXUiAwQAWXWDAwQAWXW9AwQAWXW/AwQBWXXmAwQAWXX0MA0GCSqGSIb3DQEBCwUA
A4IBAQCPteTIZ0hVeAI2e9NNgCRQCnCnRJ1BR9S/USwWu2/vALPKqWc+FAV932l3
S6wkVVu51miTLRd1Az4QbhvNzeKm5z/m6cBe+zdnqKU+cP5lHxRxFlGxIt0Y6mEM
7ROdJp8asbHkUt+0nP6DJnJtO8lFvOqPFUq3A6EwbYwQCcZIy4JVdNr/k9c32Mlm
KX+X+jl5O9pUTKfsMLAwLHFUq+ECnDwYc8NbLLk4P85yrmRbLAk/xbgWN1saAFkW
ZK8aSrQuLipek/QkmidVnlgU+5brMg43DFKQJEC/6QsHb4rKLRwkYQIn2dvqfe5g
HT/ZezBVwzrt4rpi6kIHJm15YqBe
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:26 2023 by rpki-client on console-fra.rpki-client.org