Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/6hwrGLXJCWk082afO0CizHP2wzQ.roa
File:                     6hwrGLXJCWk082afO0CizHP2wzQ.roa (raw, json)
Hash identifier:          jMv3cApRtVx/99U1ZqlXX2m4EWucLNOePP7li3iPCOE=
Subject key identifier:   EA:1C:2B:18:B5:C9:09:69:34:F3:66:9F:3B:40:A2:CC:73:F6:C3:34
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       2603C3FE
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/6hwrGLXJCWk082afO0CizHP2wzQ.roa
Signing time:             Fri 18 Feb 2022 11:28:02 +0000
ROA not before:           Fri 18 Feb 2022 11:28:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29314
IP address blocks:        178.235.41.0/24 maxlen: 24
                          178.235.42.0/24 maxlen: 24
                          178.235.43.0/24 maxlen: 24
                          178.235.40.0/24 maxlen: 24
                          109.107.0.0/21 maxlen: 21
                          109.107.0.0/19 maxlen: 19
                          95.160.228.0/22 maxlen: 22
                          178.235.0.0/17 maxlen: 17
                          95.160.233.0/24 maxlen: 24
                          109.241.192.0/18 maxlen: 18
                          95.160.236.0/22 maxlen: 22
                          109.107.9.0/24 maxlen: 24
                          195.26.72.0/22 maxlen: 22
                          178.235.146.0/24 maxlen: 24
                          178.235.147.0/24 maxlen: 24
                          178.235.148.0/22 maxlen: 22
                          178.235.148.0/23 maxlen: 23
                          178.235.150.0/24 maxlen: 24
                          178.235.150.0/23 maxlen: 23
                          178.235.152.0/21 maxlen: 21
                          178.235.160.0/19 maxlen: 19
                          178.235.192.0/18 maxlen: 18
                          178.235.98.0/24 maxlen: 24
                          178.235.110.0/24 maxlen: 24
                          178.235.131.0/24 maxlen: 24
                          178.235.132.0/23 maxlen: 23
                          178.235.128.0/24 maxlen: 24
                          178.235.129.0/24 maxlen: 24
                          178.235.130.0/24 maxlen: 24
                          178.235.138.0/23 maxlen: 23
                          178.235.134.0/24 maxlen: 24
                          178.235.135.0/24 maxlen: 24
                          178.235.136.0/23 maxlen: 23
                          178.235.140.0/24 maxlen: 24
                          178.235.141.0/24 maxlen: 24
                          178.235.142.0/23 maxlen: 23
                          178.235.144.0/23 maxlen: 23
                          95.160.56.0/22 maxlen: 22
                          95.160.76.0/22 maxlen: 22
                          31.11.202.0/24 maxlen: 24
                          95.160.0.0/17 maxlen: 24
                          95.160.16.0/22 maxlen: 22
                          88.156.80.176/28 maxlen: 28
                          31.11.228.0/24 maxlen: 24
                          95.160.28.0/22 maxlen: 22
                          109.241.0.0/18 maxlen: 18
                          95.160.166.0/24 maxlen: 24
                          193.201.18.0/23 maxlen: 23
                          109.241.128.0/18 maxlen: 18
                          95.160.170.0/24 maxlen: 24
                          109.241.64.0/18 maxlen: 18
                          95.160.128.0/17 maxlen: 17
                          95.160.152.0/24 maxlen: 24
                          95.160.153.0/24 maxlen: 24
                          95.160.154.0/24 maxlen: 24
                          95.160.158.0/24 maxlen: 24
                          95.160.159.0/24 maxlen: 24
                          95.160.155.0/24 maxlen: 24
                          95.160.156.0/24 maxlen: 24
                          95.160.157.0/24 maxlen: 24
                          93.105.128.0/17 maxlen: 17
                          93.105.142.0/24 maxlen: 24
                          93.105.144.0/22 maxlen: 22
                          185.51.180.0/22 maxlen: 22
                          93.105.168.0/21 maxlen: 21
                          82.139.0.0/18 maxlen: 18
                          78.31.209.0/24 maxlen: 24
                          93.105.236.0/24 maxlen: 24
                          93.105.237.0/24 maxlen: 24
                          31.11.172.0/24 maxlen: 24
                          93.105.178.0/23 maxlen: 23
                          78.31.152.0/21 maxlen: 21
                          93.105.176.0/23 maxlen: 23
                          93.105.180.0/24 maxlen: 24
                          93.105.181.0/24 maxlen: 24
                          93.105.182.0/24 maxlen: 24
                          93.105.183.0/24 maxlen: 24
                          31.11.131.0/24 maxlen: 24
                          31.11.128.0/24 maxlen: 24
                          31.11.132.0/22 maxlen: 22
                          31.11.129.0/24 maxlen: 24
                          31.11.128.0/17 maxlen: 17
                          31.11.130.0/24 maxlen: 24
                          192.166.120.0/23 maxlen: 23
                          91.192.76.0/24 maxlen: 24
                          91.192.76.0/22 maxlen: 22
                          37.77.152.0/21 maxlen: 21
                          93.105.40.0/24 maxlen: 24
                          93.105.42.0/24 maxlen: 24
                          93.105.0.0/17 maxlen: 17
                          89.151.0.0/18 maxlen: 18
                          195.191.162.0/23 maxlen: 23
                          195.225.92.0/22 maxlen: 22
                          91.238.232.0/22 maxlen: 22
                          88.156.222.0/24 maxlen: 24
                          88.156.226.0/23 maxlen: 23
                          37.8.192.0/18 maxlen: 18
                          88.156.255.0/24 maxlen: 24
                          83.143.136.0/21 maxlen: 21
                          37.8.208.0/24 maxlen: 24
                          88.156.164.0/22 maxlen: 22
                          83.143.40.0/21 maxlen: 21
                          195.28.170.0/23 maxlen: 23
                          88.156.192.0/18 maxlen: 18
                          109.197.56.0/21 maxlen: 21
                          109.197.64.0/21 maxlen: 21
                          91.231.116.0/23 maxlen: 23
                          37.8.214.0/24 maxlen: 24
                          94.231.48.0/20 maxlen: 20
                          37.8.231.0/24 maxlen: 24
                          37.8.230.0/24 maxlen: 24
                          31.22.96.0/21 maxlen: 21
                          31.22.100.0/23 maxlen: 23
                          88.156.0.0/18 maxlen: 18
                          78.88.188.0/22 maxlen: 22
                          62.122.112.0/21 maxlen: 21
                          194.54.188.0/22 maxlen: 22
                          83.243.104.0/21 maxlen: 21
                          78.88.123.0/24 maxlen: 24
                          31.135.168.0/21 maxlen: 21
                          78.88.128.0/17 maxlen: 17
                          31.135.175.0/24 maxlen: 24
                          88.156.128.0/23 maxlen: 23
                          88.156.128.0/21 maxlen: 21
                          91.230.159.0/24 maxlen: 24
                          88.156.132.0/23 maxlen: 23
                          88.156.128.0/18 maxlen: 18
                          88.156.130.0/23 maxlen: 23
                          88.156.134.0/23 maxlen: 23
                          91.230.162.0/23 maxlen: 23
                          91.230.164.0/22 maxlen: 22
                          88.156.136.0/21 maxlen: 21
                          78.88.216.0/22 maxlen: 22
                          88.156.64.0/24 maxlen: 24
                          88.156.64.0/18 maxlen: 18
                          88.156.78.0/24 maxlen: 24
                          77.222.240.0/20 maxlen: 20
                          77.222.248.0/22 maxlen: 22
                          78.88.0.0/17 maxlen: 17
                          195.242.252.0/22 maxlen: 22
                          78.88.30.0/24 maxlen: 24
                          78.88.28.0/22 maxlen: 22
                          78.88.31.0/24 maxlen: 24
                          78.88.28.0/24 maxlen: 24
                          78.88.29.0/24 maxlen: 24
                          77.222.224.0/21 maxlen: 21
                          78.88.43.0/24 maxlen: 24
                          77.222.232.0/21 maxlen: 21
                          2a00:9f00:c::/48 maxlen: 48
                          2a00:9f00::/48 maxlen: 48
                          2a00:9f00:8000::/36 maxlen: 36
                          2a00:9f00::/32 maxlen: 32
                          2a00:9f00:3000::/36 maxlen: 36
                          2a00:9f00:9000::/36 maxlen: 36
                          2a00:9f00:e000::/36 maxlen: 36
                          2a00:9f00:6000::/36 maxlen: 36
                          2a00:9f00:1000::/36 maxlen: 36
                          2a00:9f00:b000::/36 maxlen: 36
                          2a00:9f00::/36 maxlen: 36
                          2a00:9f00:d000::/36 maxlen: 36
                          2a00:9f00:5000::/36 maxlen: 36
                          2a00:9f00:a000::/36 maxlen: 36
                          2a00:9f00:7000::/36 maxlen: 36
                          2a00:9f00:f000::/36 maxlen: 36
                          2a00:9f00:c000::/36 maxlen: 36
                          2a00:9f00:4000::/36 maxlen: 36
                          2a00:9f00:2000::/36 maxlen: 36
                          2a00:9f00:10::/48 maxlen: 48
                          2a00:9f00:a::/48 maxlen: 48
                          2a00:9f00:2007::/48 maxlen: 48
                          2a00:9f00:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637780990 (0x2603c3fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Feb 18 11:28:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea1c2b18b5c9096934f3669f3b40a2cc73f6c334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0b:5f:dd:a6:ef:d4:6d:3f:e6:df:78:e9:ce:
                    d4:d4:3d:68:cc:c3:95:5d:c0:bf:a0:35:2e:0b:a5:
                    85:3c:6e:ec:28:f8:47:88:30:c0:11:78:d7:da:38:
                    7c:ab:db:e0:a5:ea:9d:43:18:e1:7a:47:36:87:5e:
                    f3:df:e3:8e:53:22:34:06:3c:08:58:b7:80:23:5d:
                    a1:9f:5e:14:dc:c5:03:c4:f9:98:2e:5a:e6:39:1d:
                    5e:4a:b8:3d:3b:c9:f7:4c:b0:6b:15:7b:b7:92:c2:
                    6c:d6:31:44:2e:45:be:4d:97:b4:60:57:2a:42:93:
                    72:af:c1:a9:df:00:f3:1e:a6:17:7c:f1:6a:5e:f9:
                    92:42:19:39:25:ff:94:cd:32:61:03:1a:a8:f5:68:
                    01:ef:f2:bd:ec:60:e7:04:d2:58:2f:7c:6a:56:04:
                    08:08:43:8d:8f:e4:10:68:f3:6f:2c:c4:0c:8d:72:
                    ce:91:79:70:b9:d4:18:8c:2c:45:38:49:36:52:f5:
                    98:bc:a3:e1:48:2d:d4:d0:f2:45:d8:85:07:cb:dd:
                    a0:7b:2c:b5:32:b2:a5:5f:3a:ba:7b:a4:2e:50:0e:
                    12:0c:43:96:a0:5c:5c:73:57:c6:85:2d:4b:25:da:
                    e6:b3:48:46:11:4f:49:0d:fc:8c:7c:71:43:7b:85:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1C:2B:18:B5:C9:09:69:34:F3:66:9F:3B:40:A2:CC:73:F6:C3:34
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/6hwrGLXJCWk082afO0CizHP2wzQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.128.0/17
                  31.22.96.0/21
                  31.135.168.0/21
                  37.8.192.0/18
                  37.77.152.0/21
                  62.122.112.0/21
                  77.222.224.0/19
                  78.31.152.0/21
                  78.31.209.0/24
                  78.88.0.0/16
                  82.139.0.0/18
                  83.143.40.0/21
                  83.143.136.0/21
                  83.243.104.0/21
                  88.156.0.0/16
                  89.151.0.0/18
                  91.192.76.0/22
                  91.230.159.0/24
                  91.230.162.0-91.230.167.255
                  91.231.116.0/23
                  91.238.232.0/22
                  93.105.0.0/16
                  94.231.48.0/20
                  95.160.0.0/16
                  109.107.0.0/19
                  109.197.56.0-109.197.71.255
                  109.241.0.0/16
                  178.235.0.0/16
                  185.51.180.0/22
                  192.166.120.0/23
                  193.201.18.0/23
                  194.54.188.0/22
                  195.26.72.0/22
                  195.28.170.0/23
                  195.191.162.0/23
                  195.225.92.0/22
                  195.242.252.0/22
                IPv6:
                  2a00:9f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:ba:11:8e:f3:78:6f:0a:c6:6a:1e:69:cc:b7:ee:41:3a:0b:
         dc:c3:88:85:27:f4:98:d8:e0:f9:27:a3:3b:5c:f6:7f:9c:54:
         17:a4:f0:02:89:7f:5c:a4:60:a0:67:21:da:f2:8f:fc:a3:5a:
         08:a8:43:03:e6:64:8a:7a:1a:4a:77:c5:69:e1:da:fc:cf:74:
         c7:55:48:42:7f:34:0a:2b:75:55:da:92:59:c9:37:8e:3d:d4:
         2a:42:50:e9:5e:af:6d:5f:ab:18:a4:1c:fc:3f:f3:fb:6e:7b:
         ea:54:33:69:43:0f:5d:3f:71:bd:0c:d2:ce:e6:a1:ce:ff:83:
         3a:94:24:2b:05:82:e4:54:7e:b9:26:80:2c:62:f0:78:91:b6:
         9a:3d:f6:c5:83:78:12:71:ca:83:7b:a4:d1:29:6c:da:04:35:
         8b:4b:f9:d0:1c:ae:05:27:6a:f8:fd:5a:20:aa:b5:4a:29:47:
         f2:c9:0b:e7:68:7a:3c:0b:a7:ed:d6:a4:12:30:45:5b:e7:70:
         6c:74:28:e8:e9:2a:48:60:95:91:c8:20:d2:49:89:be:51:ad:
         d6:e9:2a:b3:99:2f:9e:66:ed:7b:00:8a:33:91:82:b9:ad:26:
         ea:84:5c:e4:72:dc:d8:0b:29:9b:15:64:69:53:49:e0:25:e5:
         32:67:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:30 2023 by rpki-client on console-ams.rpki-client.org