Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/tnxQOGx-S0wb8nziNPKy2GdpmjE.roa
File:                     tnxQOGx-S0wb8nziNPKy2GdpmjE.roa (raw, json)
Hash identifier:          WqyRZEC848ubZuy9u0uJki1teIuc3y9b5yEnb0fs8v4=
Subject key identifier:   B6:7C:50:38:6C:7E:4B:4C:1B:F2:7C:E2:34:F2:B2:D8:67:69:9A:31
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       265E111F
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/tnxQOGx-S0wb8nziNPKy2GdpmjE.roa
Signing time:             Mon 28 Mar 2022 06:15:04 +0000
ROA not before:           Mon 28 Mar 2022 06:15:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29314
IP address blocks:        178.235.41.0/24 maxlen: 24
                          178.235.42.0/24 maxlen: 24
                          178.235.43.0/24 maxlen: 24
                          178.235.40.0/24 maxlen: 24
                          109.107.0.0/21 maxlen: 21
                          109.107.0.0/19 maxlen: 19
                          95.160.228.0/22 maxlen: 22
                          178.235.0.0/17 maxlen: 17
                          95.160.233.0/24 maxlen: 24
                          109.241.192.0/18 maxlen: 18
                          95.160.236.0/22 maxlen: 22
                          109.107.9.0/24 maxlen: 24
                          195.26.72.0/22 maxlen: 22
                          178.235.146.0/24 maxlen: 24
                          178.235.147.0/24 maxlen: 24
                          178.235.148.0/22 maxlen: 22
                          178.235.148.0/23 maxlen: 23
                          178.235.150.0/24 maxlen: 24
                          178.235.150.0/23 maxlen: 23
                          178.235.152.0/21 maxlen: 21
                          178.235.160.0/19 maxlen: 19
                          178.235.192.0/18 maxlen: 18
                          178.235.98.0/24 maxlen: 24
                          178.235.110.0/24 maxlen: 24
                          178.235.131.0/24 maxlen: 24
                          178.235.132.0/23 maxlen: 23
                          178.235.128.0/24 maxlen: 24
                          178.235.129.0/24 maxlen: 24
                          178.235.130.0/24 maxlen: 24
                          178.235.138.0/23 maxlen: 23
                          178.235.134.0/24 maxlen: 24
                          178.235.135.0/24 maxlen: 24
                          178.235.136.0/23 maxlen: 23
                          178.235.140.0/24 maxlen: 24
                          178.235.141.0/24 maxlen: 24
                          178.235.142.0/23 maxlen: 23
                          178.235.144.0/23 maxlen: 23
                          95.160.56.0/22 maxlen: 22
                          95.160.76.0/22 maxlen: 22
                          31.11.202.0/24 maxlen: 24
                          95.160.0.0/17 maxlen: 24
                          95.160.16.0/22 maxlen: 22
                          88.156.80.176/28 maxlen: 28
                          31.11.228.0/24 maxlen: 24
                          95.160.28.0/22 maxlen: 22
                          109.241.0.0/18 maxlen: 18
                          95.160.166.0/24 maxlen: 24
                          193.201.18.0/23 maxlen: 23
                          109.241.128.0/18 maxlen: 18
                          95.160.170.0/24 maxlen: 24
                          109.241.64.0/18 maxlen: 18
                          95.160.128.0/17 maxlen: 17
                          95.160.152.0/24 maxlen: 24
                          95.160.153.0/24 maxlen: 24
                          95.160.154.0/24 maxlen: 24
                          95.160.158.0/24 maxlen: 24
                          95.160.159.0/24 maxlen: 24
                          95.160.155.0/24 maxlen: 24
                          95.160.156.0/24 maxlen: 24
                          95.160.157.0/24 maxlen: 24
                          93.105.128.0/17 maxlen: 17
                          93.105.142.0/24 maxlen: 24
                          93.105.144.0/22 maxlen: 22
                          185.51.180.0/22 maxlen: 22
                          93.105.168.0/21 maxlen: 21
                          82.139.0.0/18 maxlen: 18
                          93.105.236.0/24 maxlen: 24
                          78.31.209.0/24 maxlen: 24
                          93.105.237.0/24 maxlen: 24
                          31.11.172.0/24 maxlen: 24
                          93.105.178.0/23 maxlen: 23
                          78.31.152.0/21 maxlen: 21
                          93.105.176.0/23 maxlen: 23
                          93.105.180.0/24 maxlen: 24
                          93.105.181.0/24 maxlen: 24
                          93.105.182.0/24 maxlen: 24
                          93.105.183.0/24 maxlen: 24
                          31.11.131.0/24 maxlen: 24
                          31.11.128.0/24 maxlen: 24
                          31.11.129.0/24 maxlen: 24
                          31.11.132.0/22 maxlen: 22
                          31.11.128.0/17 maxlen: 17
                          31.11.130.0/24 maxlen: 24
                          192.166.120.0/23 maxlen: 23
                          91.192.76.0/24 maxlen: 24
                          91.192.76.0/22 maxlen: 22
                          91.192.78.0/24 maxlen: 24
                          37.77.152.0/21 maxlen: 21
                          93.105.40.0/24 maxlen: 24
                          93.105.42.0/24 maxlen: 24
                          93.105.0.0/17 maxlen: 17
                          89.151.0.0/18 maxlen: 18
                          195.191.162.0/23 maxlen: 23
                          195.225.92.0/22 maxlen: 22
                          91.238.232.0/22 maxlen: 22
                          88.156.222.0/24 maxlen: 24
                          88.156.226.0/23 maxlen: 23
                          37.8.192.0/18 maxlen: 18
                          88.156.255.0/24 maxlen: 24
                          83.143.136.0/21 maxlen: 21
                          37.8.208.0/24 maxlen: 24
                          88.156.164.0/22 maxlen: 22
                          83.143.40.0/21 maxlen: 21
                          195.28.170.0/23 maxlen: 23
                          88.156.192.0/18 maxlen: 18
                          109.197.56.0/21 maxlen: 21
                          109.197.64.0/21 maxlen: 21
                          91.231.116.0/23 maxlen: 23
                          37.8.214.0/24 maxlen: 24
                          94.231.48.0/20 maxlen: 20
                          37.8.231.0/24 maxlen: 24
                          37.8.230.0/24 maxlen: 24
                          31.22.96.0/21 maxlen: 21
                          31.22.100.0/23 maxlen: 23
                          88.156.0.0/18 maxlen: 18
                          78.88.188.0/22 maxlen: 22
                          62.122.112.0/21 maxlen: 21
                          194.54.188.0/22 maxlen: 22
                          83.243.104.0/21 maxlen: 21
                          78.88.123.0/24 maxlen: 24
                          31.135.168.0/21 maxlen: 21
                          78.88.128.0/17 maxlen: 17
                          31.135.175.0/24 maxlen: 24
                          88.156.128.0/23 maxlen: 23
                          88.156.128.0/21 maxlen: 21
                          88.156.132.0/23 maxlen: 23
                          91.230.159.0/24 maxlen: 24
                          88.156.128.0/18 maxlen: 18
                          88.156.130.0/23 maxlen: 23
                          88.156.134.0/23 maxlen: 23
                          91.230.162.0/23 maxlen: 23
                          91.230.164.0/22 maxlen: 22
                          88.156.136.0/21 maxlen: 21
                          78.88.216.0/22 maxlen: 22
                          88.156.64.0/24 maxlen: 24
                          88.156.64.0/18 maxlen: 18
                          88.156.78.0/24 maxlen: 24
                          77.222.240.0/20 maxlen: 20
                          77.222.248.0/22 maxlen: 22
                          78.88.0.0/17 maxlen: 17
                          195.242.252.0/22 maxlen: 22
                          78.88.30.0/24 maxlen: 24
                          78.88.28.0/22 maxlen: 22
                          78.88.31.0/24 maxlen: 24
                          78.88.28.0/24 maxlen: 24
                          78.88.29.0/24 maxlen: 24
                          77.222.224.0/21 maxlen: 21
                          78.88.43.0/24 maxlen: 24
                          77.222.232.0/21 maxlen: 21
                          2a00:9f00:c::/48 maxlen: 48
                          2a00:9f00::/48 maxlen: 48
                          2a00:9f00::/36 maxlen: 36
                          2a00:9f00::/32 maxlen: 32
                          2a00:9f00:b000::/36 maxlen: 36
                          2a00:9f00:1000::/36 maxlen: 36
                          2a00:9f00:6000::/36 maxlen: 36
                          2a00:9f00:e000::/36 maxlen: 36
                          2a00:9f00:9000::/36 maxlen: 36
                          2a00:9f00:3000::/36 maxlen: 36
                          2a00:9f00:8000::/36 maxlen: 36
                          2a00:9f00:d000::/36 maxlen: 36
                          2a00:9f00:2000::/36 maxlen: 36
                          2a00:9f00:a000::/36 maxlen: 36
                          2a00:9f00:f000::/36 maxlen: 36
                          2a00:9f00:c000::/36 maxlen: 36
                          2a00:9f00:4000::/36 maxlen: 36
                          2a00:9f00:7000::/36 maxlen: 36
                          2a00:9f00:5000::/36 maxlen: 36
                          2a00:9f00:10::/48 maxlen: 48
                          2a00:9f00:a::/48 maxlen: 48
                          2a00:9f00:2007::/48 maxlen: 48
                          2a00:9f00:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643698975 (0x265e111f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Mar 28 06:15:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b67c50386c7e4b4c1bf27ce234f2b2d867699a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:29:79:59:f9:41:0b:59:aa:7f:6c:95:82:
                    31:62:3d:ae:70:88:72:cd:9e:b8:3d:ff:d7:81:c3:
                    84:2e:35:a3:db:c4:95:72:2c:53:6d:10:e8:70:5e:
                    d4:6b:dc:9b:15:b2:10:54:82:6e:4f:8c:2c:1b:ec:
                    4d:e8:7c:d6:07:0e:d9:e0:78:a0:5a:30:67:2b:aa:
                    1b:f3:ea:db:73:27:42:7f:bf:1c:48:65:83:fb:b1:
                    ed:4a:6f:96:11:e6:b1:1d:1e:04:94:c3:1a:16:b7:
                    d5:a4:e8:3e:c5:47:81:6a:30:0a:66:94:13:59:2f:
                    12:b7:07:ca:35:a0:21:f2:24:7e:73:db:e2:65:12:
                    c6:3a:ab:55:88:01:8b:64:7e:02:87:1d:c8:cf:9d:
                    f1:a6:90:10:89:77:71:97:bf:37:be:03:1b:2c:45:
                    fe:fd:36:99:71:cb:26:f9:2e:2d:c9:0c:cb:13:f1:
                    db:fb:7d:87:37:57:96:aa:c0:5e:c6:3a:90:c9:8c:
                    be:0d:b5:2c:fb:5f:c7:dc:8b:fe:64:8e:d1:34:02:
                    bc:ea:5a:93:e1:7d:19:fe:f2:e0:8d:03:46:b5:b0:
                    40:d5:81:34:cb:f6:ad:da:71:af:1b:26:75:85:68:
                    17:f0:d1:60:a9:e5:70:51:e9:b7:6d:68:3a:5e:60:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7C:50:38:6C:7E:4B:4C:1B:F2:7C:E2:34:F2:B2:D8:67:69:9A:31
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/tnxQOGx-S0wb8nziNPKy2GdpmjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.128.0/17
                  31.22.96.0/21
                  31.135.168.0/21
                  37.8.192.0/18
                  37.77.152.0/21
                  62.122.112.0/21
                  77.222.224.0/19
                  78.31.152.0/21
                  78.31.209.0/24
                  78.88.0.0/16
                  82.139.0.0/18
                  83.143.40.0/21
                  83.143.136.0/21
                  83.243.104.0/21
                  88.156.0.0/16
                  89.151.0.0/18
                  91.192.76.0/22
                  91.230.159.0/24
                  91.230.162.0-91.230.167.255
                  91.231.116.0/23
                  91.238.232.0/22
                  93.105.0.0/16
                  94.231.48.0/20
                  95.160.0.0/16
                  109.107.0.0/19
                  109.197.56.0-109.197.71.255
                  109.241.0.0/16
                  178.235.0.0/16
                  185.51.180.0/22
                  192.166.120.0/23
                  193.201.18.0/23
                  194.54.188.0/22
                  195.26.72.0/22
                  195.28.170.0/23
                  195.191.162.0/23
                  195.225.92.0/22
                  195.242.252.0/22
                IPv6:
                  2a00:9f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:ea:36:ac:9a:e8:a5:5b:a4:d1:19:06:11:c5:ef:b7:87:c7:
         39:8e:bd:ab:25:ed:f0:62:ff:90:a6:02:12:7d:70:00:f2:41:
         53:e9:28:1e:b9:40:69:e9:d7:34:e7:2f:59:83:8e:a1:5a:2e:
         12:9f:55:d4:f9:6c:74:43:f3:e1:3f:4e:74:20:3d:e4:0c:0e:
         00:89:d6:f7:f4:b1:22:cb:7d:3a:c0:32:f3:60:be:e2:71:47:
         3d:ac:93:0e:de:b5:47:99:ae:d7:92:61:31:55:e7:88:b1:d0:
         6a:45:49:4d:6e:e7:41:d7:1b:c2:fc:02:56:28:44:56:d6:33:
         06:d6:b0:99:e3:5d:ba:a4:4f:79:06:6c:bd:04:18:61:0a:6d:
         6a:01:10:3e:8a:3b:58:10:66:85:63:73:db:12:cd:bf:0b:d7:
         7e:00:c9:56:e8:db:8b:04:6b:c8:5b:74:93:02:71:91:00:2f:
         4a:aa:6f:7b:0d:c0:98:4c:38:a8:91:8e:07:89:79:8a:51:46:
         f7:6c:35:12:43:37:35:3b:d3:b0:9a:e1:26:2a:b3:cd:6a:c6:
         c4:8d:0f:98:38:00:62:fc:30:6b:e6:d0:33:f9:52:76:bb:dc:
         9c:3d:16:7f:6b:69:db:93:43:8b:5a:42:73:76:a8:1f:8c:6a:
         bc:50:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:33 2024 by rpki-client on console-fra.rpki-client.org