Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/BAxCm7RjivaZn6AidEF8SNcOGiA.roa
File:                     BAxCm7RjivaZn6AidEF8SNcOGiA.roa (raw, json)
Hash identifier:          5xJAYadBOambRqNd+e7MCnABDxXv6WPJuva9idUO0gQ=
Subject key identifier:   04:0C:42:9B:B4:63:8A:F6:99:9F:A0:22:74:41:7C:48:D7:0E:1A:20
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       01852BA9CAEA116E62A3740485161B9508E2
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/BAxCm7RjivaZn6AidEF8SNcOGiA.roa
Signing time:             Mon 19 Dec 2022 18:33:45 +0000
ROA not before:           Mon 19 Dec 2022 18:33:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3326
IP address blocks:        185.46.248.0/22 maxlen: 22
                          195.114.131.0/24 maxlen: 24
                          194.146.198.0/24 maxlen: 24
                          194.146.197.0/24 maxlen: 24
                          194.146.196.0/24 maxlen: 24
                          176.241.130.0/23 maxlen: 23
                          176.241.128.0/23 maxlen: 23
                          176.241.132.0/22 maxlen: 22
                          176.241.136.0/21 maxlen: 21
                          176.241.144.0/20 maxlen: 20
                          176.241.104.0/21 maxlen: 21
                          176.112.0.0/19 maxlen: 19
                          188.247.96.0/20 maxlen: 20
                          188.247.112.0/22 maxlen: 22
                          188.247.116.0/22 maxlen: 22
                          217.112.208.0/20 maxlen: 20
                          91.193.68.0/22 maxlen: 22
                          178.213.168.0/21 maxlen: 21
                          109.206.32.0/19 maxlen: 19
                          80.91.166.0/24 maxlen: 24
                          80.91.160.0/22 maxlen: 22
                          80.91.164.0/23 maxlen: 23
                          85.159.0.0/21 maxlen: 21
                          80.91.172.0/22 maxlen: 22
                          80.91.168.0/24 maxlen: 24
                          80.91.167.0/24 maxlen: 24
                          80.91.171.0/24 maxlen: 24
                          80.91.170.0/24 maxlen: 24
                          80.91.169.0/24 maxlen: 24
                          80.91.176.0/22 maxlen: 22
                          80.91.180.0/23 maxlen: 23
                          80.91.184.0/21 maxlen: 21
                          80.91.183.0/24 maxlen: 24
                          213.111.192.0/18 maxlen: 18
                          46.164.128.0/20 maxlen: 20
                          46.164.144.0/21 maxlen: 21
                          46.164.152.0/23 maxlen: 23
                          46.164.158.0/24 maxlen: 24
                          46.164.159.0/24 maxlen: 24
                          46.164.154.0/23 maxlen: 23
                          46.164.156.0/23 maxlen: 23
                          94.232.72.0/21 maxlen: 21
                          80.77.38.0/24 maxlen: 24
                          80.77.37.0/24 maxlen: 24
                          80.77.36.0/24 maxlen: 24
                          80.77.32.0/22 maxlen: 22
                          80.77.39.0/24 maxlen: 24
                          80.77.40.0/21 maxlen: 21
                          93.183.200.0/21 maxlen: 21
                          93.183.208.0/22 maxlen: 22
                          93.183.212.0/23 maxlen: 23
                          93.183.218.0/23 maxlen: 23
                          93.183.215.0/24 maxlen: 24
                          93.183.214.0/24 maxlen: 24
                          93.183.217.0/24 maxlen: 24
                          93.183.216.0/24 maxlen: 24
                          93.183.220.0/22 maxlen: 22
                          93.183.225.0/24 maxlen: 24
                          93.183.224.0/24 maxlen: 24
                          93.183.226.0/24 maxlen: 24
                          93.183.232.0/22 maxlen: 22
                          93.183.230.0/23 maxlen: 23
                          93.183.228.0/24 maxlen: 24
                          93.183.227.0/24 maxlen: 24
                          93.183.229.0/24 maxlen: 24
                          93.183.239.0/24 maxlen: 24
                          93.183.237.0/24 maxlen: 24
                          93.183.240.0/21 maxlen: 21
                          93.183.248.0/21 maxlen: 21
                          93.183.192.0/24 maxlen: 24
                          193.109.164.0/22 maxlen: 24
                          93.183.193.0/24 maxlen: 24
                          93.183.197.0/24 maxlen: 24
                          93.183.196.0/24 maxlen: 24
                          93.183.194.0/23 maxlen: 23
                          93.183.198.0/23 maxlen: 23
                          195.69.176.0/23 maxlen: 23
                          195.69.177.0/24 maxlen: 24
                          195.69.176.0/24 maxlen: 24
                          195.69.179.0/24 maxlen: 24
                          195.69.178.0/24 maxlen: 24
                          91.197.222.0/24 maxlen: 24
                          91.197.221.0/24 maxlen: 24
                          91.197.220.0/24 maxlen: 24
                          91.197.223.0/24 maxlen: 24
                          91.204.92.0/23 maxlen: 23
                          91.204.95.0/24 maxlen: 24
                          91.204.94.0/24 maxlen: 24
                          194.29.60.0/22 maxlen: 22
                          5.1.16.0/20 maxlen: 20
                          88.81.232.0/22 maxlen: 22
                          176.102.32.0/21 maxlen: 21
                          88.81.237.0/24 maxlen: 24
                          88.81.236.0/24 maxlen: 24
                          88.81.238.0/23 maxlen: 23
                          88.81.240.0/22 maxlen: 22
                          176.102.40.0/21 maxlen: 21
                          88.81.246.0/24 maxlen: 24
                          88.81.244.0/22 maxlen: 22
                          88.81.248.0/24 maxlen: 24
                          88.81.251.0/24 maxlen: 24
                          176.102.48.0/23 maxlen: 23
                          88.81.249.0/24 maxlen: 24
                          88.81.252.0/23 maxlen: 23
                          176.102.50.0/24 maxlen: 24
                          176.102.51.0/24 maxlen: 24
                          176.102.52.0/22 maxlen: 22
                          176.102.56.0/21 maxlen: 21
                          88.81.254.0/23 maxlen: 23
                          77.88.202.0/24 maxlen: 24
                          77.88.201.0/24 maxlen: 24
                          77.88.206.0/24 maxlen: 24
                          77.88.208.0/23 maxlen: 23
                          77.88.207.0/24 maxlen: 24
                          77.88.212.0/24 maxlen: 24
                          77.88.211.0/24 maxlen: 24
                          77.88.210.0/24 maxlen: 24
                          5.1.0.0/23 maxlen: 23
                          5.1.4.0/22 maxlen: 22
                          5.1.8.0/21 maxlen: 21
                          88.81.224.0/21 maxlen: 21
                          77.88.216.0/22 maxlen: 22
                          77.88.214.0/23 maxlen: 23
                          77.88.221.0/24 maxlen: 24
                          77.88.220.0/24 maxlen: 24
                          77.88.248.0/24 maxlen: 24
                          77.88.253.0/24 maxlen: 24
                          77.88.252.0/24 maxlen: 24
                          77.88.254.0/24 maxlen: 24
                          185.8.41.0/24 maxlen: 24
                          185.8.40.0/24 maxlen: 24
                          77.88.255.0/24 maxlen: 24
                          185.8.40.0/22 maxlen: 22
                          77.222.137.0/24 maxlen: 24
                          77.222.139.0/24 maxlen: 24
                          77.222.138.0/24 maxlen: 24
                          77.222.140.0/22 maxlen: 22
                          77.222.144.0/21 maxlen: 21
                          188.0.64.0/22 maxlen: 22
                          188.0.64.0/23 maxlen: 23
                          188.0.66.0/24 maxlen: 24
                          31.128.68.0/22 maxlen: 22
                          77.222.152.0/22 maxlen: 22
                          31.128.72.0/22 maxlen: 22
                          77.222.158.0/23 maxlen: 23
                          31.128.76.0/23 maxlen: 23
                          77.222.156.0/23 maxlen: 23
                          31.128.78.0/23 maxlen: 23
                          31.128.80.0/20 maxlen: 20
                          193.108.51.0/24 maxlen: 24
                          193.108.49.0/24 maxlen: 24
                          193.108.48.0/24 maxlen: 24
                          195.114.139.0/24 maxlen: 24
                          195.114.142.0/24 maxlen: 24
                          195.114.141.0/24 maxlen: 24
                          195.114.143.0/24 maxlen: 24
                          195.114.144.0/20 maxlen: 22
                          77.222.128.0/21 maxlen: 21
                          193.108.129.0/24 maxlen: 24
                          193.108.128.0/24 maxlen: 24
                          193.41.48.0/22 maxlen: 22
                          80.249.224.0/20 maxlen: 20
                          2a01:758::/32 maxlen: 48
                          2a01:758:ffe0::/48 maxlen: 48
                          2a01:758:ffe3::/48 maxlen: 48
                          2a02:70:1::/48 maxlen: 48
                          2a01:758:ffe1::/48 maxlen: 48
                          2a01:758:ffe4::/48 maxlen: 48
                          2a02:70::/32 maxlen: 32
                          2a02:70:100::/40 maxlen: 40
                          2a01:758:fff3::/48 maxlen: 48
                          2a01:758:ffe2::/48 maxlen: 48
                          2a01:758:ffe8::/48 maxlen: 48
                          2a02:70::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2b:a9:ca:ea:11:6e:62:a3:74:04:85:16:1b:95:08:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Dec 19 18:33:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=040c429bb4638af6999fa02274417c48d70e1a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:fe:c0:9d:c7:ba:62:02:5f:f5:4b:76:6b:
                    64:6a:a1:14:4c:a2:82:97:8a:12:02:bc:47:cf:cb:
                    a2:0b:d2:18:b7:35:a1:fa:bc:45:b4:cd:68:68:fa:
                    6a:3d:51:1f:ed:97:40:33:0f:3d:92:74:fd:65:e8:
                    d9:ad:7f:3f:eb:f9:f0:63:05:d7:9b:93:8f:f7:e4:
                    d4:18:2f:cd:04:10:eb:a0:44:d7:44:d4:64:84:b1:
                    d9:e8:05:9b:6e:76:8e:b2:16:c6:a7:e2:29:1e:59:
                    02:89:de:27:fe:50:eb:f0:21:1e:5f:35:b1:da:78:
                    90:aa:07:df:f1:80:79:41:df:02:1c:70:94:05:96:
                    a2:ed:94:66:86:e3:33:f9:fd:e6:39:25:9e:37:88:
                    53:8a:a8:d0:02:d9:9c:8a:1f:a6:a1:ef:36:08:66:
                    48:17:ad:f6:aa:c4:66:6a:ab:81:0d:2b:51:fb:9a:
                    74:51:4b:80:f7:c1:e4:ac:2d:bd:60:5f:be:9c:20:
                    58:ab:4d:ec:8e:a2:28:23:4c:f1:99:0f:ff:5c:e1:
                    cb:11:fb:14:81:8d:99:35:5b:12:d2:d8:d8:94:6d:
                    87:c2:87:49:95:44:b8:fe:b2:e5:ef:a5:33:84:58:
                    7b:b1:77:74:13:0e:27:d8:f7:77:a0:87:0e:6f:88:
                    02:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0C:42:9B:B4:63:8A:F6:99:9F:A0:22:74:41:7C:48:D7:0E:1A:20
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/BAxCm7RjivaZn6AidEF8SNcOGiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.0.0/23
                  5.1.4.0-5.1.31.255
                  31.128.68.0-31.128.95.255
                  46.164.128.0/19
                  77.88.201.0-77.88.202.255
                  77.88.206.0-77.88.212.255
                  77.88.214.0-77.88.221.255
                  77.88.248.0/24
                  77.88.252.0/22
                  77.222.128.0/21
                  77.222.137.0-77.222.159.255
                  80.77.32.0/20
                  80.91.160.0-80.91.181.255
                  80.91.183.0-80.91.191.255
                  80.249.224.0/20
                  85.159.0.0/21
                  88.81.224.0-88.81.249.255
                  88.81.251.0-88.81.255.255
                  91.193.68.0/22
                  91.197.220.0/22
                  91.204.92.0/22
                  93.183.192.0-93.183.235.255
                  93.183.237.0/24
                  93.183.239.0-93.183.255.255
                  94.232.72.0/21
                  109.206.32.0/19
                  176.102.32.0/19
                  176.112.0.0/19
                  176.241.104.0/21
                  176.241.128.0/19
                  178.213.168.0/21
                  185.8.40.0/22
                  185.46.248.0/22
                  188.0.64.0/22
                  188.247.96.0-188.247.119.255
                  193.41.48.0/22
                  193.108.48.0/23
                  193.108.51.0/24
                  193.108.128.0/23
                  193.109.164.0/22
                  194.29.60.0/22
                  194.146.196.0-194.146.198.255
                  195.69.176.0/22
                  195.114.131.0/24
                  195.114.139.0/24
                  195.114.141.0-195.114.159.255
                  213.111.192.0/18
                  217.112.208.0/20
                IPv6:
                  2a01:758::/32
                  2a02:70::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:5f:4f:dd:cd:cf:70:5e:34:cf:70:81:31:d0:1e:ed:10:45:
         ef:d8:89:fa:9c:3f:03:25:30:34:93:6d:5a:4f:61:72:02:04:
         dc:1a:d0:ca:94:51:a9:04:52:d6:3b:a2:33:30:9f:62:fe:af:
         d5:20:50:49:84:e4:ca:7f:5f:49:9d:a6:38:3d:a5:ac:bf:04:
         bd:9e:f3:e9:d8:ac:d2:7c:27:7d:b1:72:aa:fc:a9:53:0f:b4:
         d1:1a:dc:35:1f:f4:7b:0c:17:b8:cf:5b:aa:5c:41:6e:d4:4f:
         21:b1:de:87:d2:e8:a2:87:1e:e7:5a:7b:a3:66:f0:12:0f:95:
         2b:dd:7a:48:60:94:a0:2f:5d:fe:17:5c:62:ae:aa:27:5d:e4:
         93:18:0d:cd:84:25:00:62:e3:6c:df:87:6b:28:bc:24:f2:0e:
         e2:45:b1:b7:2c:42:93:ab:43:07:c7:88:8d:34:82:56:2f:8a:
         e2:7b:58:0b:36:4b:bb:60:9e:98:65:e6:4a:cd:09:e6:48:7a:
         c1:17:28:78:6c:b3:c8:d1:96:37:36:a5:e0:07:c8:11:f9:9e:
         71:a0:3f:01:86:97:c1:c7:78:1a:f2:a5:8d:76:0c:0a:41:06:
         c4:0c:20:5b:64:78:56:45:3e:25:a0:20:1b:7a:0a:1c:77:e0:
         66:03:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:04 2024 by rpki-client on console-ams.rpki-client.org