Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SL_V3VXAnhARDeAIT_6gsKgi3Xo.roa
File:                     SL_V3VXAnhARDeAIT_6gsKgi3Xo.roa (raw, json)
Hash identifier:          P4F1Ml797p9vC+uTDycEEkptKa2FO9yJWx9IEVCrE+A=
Subject key identifier:   48:BF:D5:DD:55:C0:9E:10:11:0D:E0:08:4F:FE:A0:B0:A8:22:DD:7A
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       18814954
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SL_V3VXAnhARDeAIT_6gsKgi3Xo.roa
Signing time:             Mon 06 Jun 2022 17:29:20 +0000
ROA not before:           Mon 06 Jun 2022 17:29:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58272
IP address blocks:        37.230.187.0/24 maxlen: 24
                          188.72.119.0/24 maxlen: 24
                          178.170.231.0/24 maxlen: 24
                          178.170.139.0/24 maxlen: 24
                          178.170.137.0/24 maxlen: 24
                          217.150.90.0/24 maxlen: 24
                          217.150.89.0/24 maxlen: 24
                          217.150.88.0/24 maxlen: 24
                          217.150.91.0/24 maxlen: 24
                          178.170.140.0/24 maxlen: 24
                          217.150.94.0/24 maxlen: 24
                          217.150.93.0/24 maxlen: 24
                          217.150.92.0/24 maxlen: 24
                          217.150.95.0/24 maxlen: 24
                          46.243.149.0/24 maxlen: 24
                          37.18.0.0/24 maxlen: 24
                          185.4.150.0/24 maxlen: 24
                          37.18.15.0/24 maxlen: 24
                          185.4.149.0/24 maxlen: 24
                          185.4.148.0/24 maxlen: 24
                          185.4.151.0/24 maxlen: 24
                          141.101.255.0/24 maxlen: 24
                          46.243.139.0/24 maxlen: 24
                          46.243.138.0/24 maxlen: 24
                          37.230.134.0/24 maxlen: 24
                          37.230.151.0/24 maxlen: 24
                          188.72.73.0/24 maxlen: 24
                          188.72.83.0/24 maxlen: 24
                          188.72.81.0/24 maxlen: 24
                          188.72.80.0/24 maxlen: 24
                          188.72.85.0/24 maxlen: 24
                          188.72.84.0/24 maxlen: 24
                          37.230.163.0/24 maxlen: 24
                          188.72.86.0/24 maxlen: 24
                          37.230.170.0/24 maxlen: 24
                          37.230.171.0/24 maxlen: 24
                          37.230.176.0/24 maxlen: 24
                          37.230.183.0/24 maxlen: 24
                          37.230.182.0/24 maxlen: 24
                          46.243.204.0/24 maxlen: 24
                          46.243.214.0/24 maxlen: 24
                          46.243.217.0/24 maxlen: 24
                          46.243.216.0/24 maxlen: 24
                          46.243.222.0/24 maxlen: 24
                          46.243.221.0/24 maxlen: 24
                          46.243.225.0/24 maxlen: 24
                          46.243.223.0/24 maxlen: 24
                          46.243.232.0/24 maxlen: 24
                          46.243.233.0/24 maxlen: 24
                          37.18.63.0/24 maxlen: 24
                          46.243.240.0/24 maxlen: 24
                          46.243.236.0/24 maxlen: 24
                          46.243.235.0/24 maxlen: 24
                          46.243.234.0/24 maxlen: 24
                          46.243.238.0/24 maxlen: 24
                          46.243.237.0/24 maxlen: 24
                          46.243.243.0/24 maxlen: 24
                          46.243.242.0/24 maxlen: 24
                          46.243.241.0/24 maxlen: 24
                          46.243.246.0/24 maxlen: 24
                          46.243.250.0/24 maxlen: 24
                          46.243.249.0/24 maxlen: 24
                          46.243.248.0/24 maxlen: 24
                          46.243.247.0/24 maxlen: 24
                          37.230.131.0/24 maxlen: 24
                          46.243.251.0/24 maxlen: 24
                          128.0.71.0/24 maxlen: 24
                          141.101.179.0/24 maxlen: 24
                          141.101.191.0/24 maxlen: 24
                          141.101.132.0/24 maxlen: 24
                          141.101.133.0/24 maxlen: 24
                          141.101.135.0/24 maxlen: 24
                          141.101.145.0/24 maxlen: 24
                          141.101.143.0/24 maxlen: 24
                          141.101.148.0/24 maxlen: 24
                          141.101.147.0/24 maxlen: 24
                          141.101.150.0/24 maxlen: 24
                          141.101.149.0/24 maxlen: 24
                          141.101.155.0/24 maxlen: 24
                          141.101.154.0/24 maxlen: 24
                          141.101.153.0/24 maxlen: 24
                          141.101.159.0/24 maxlen: 24
                          141.101.158.0/24 maxlen: 24
                          141.101.156.0/24 maxlen: 24
                          141.101.162.0/24 maxlen: 24
                          141.101.161.0/24 maxlen: 24
                          141.101.160.0/24 maxlen: 24
                          141.101.166.0/24 maxlen: 24
                          141.101.165.0/24 maxlen: 24
                          141.101.164.0/24 maxlen: 24
                          141.101.168.0/24 maxlen: 24
                          141.101.167.0/24 maxlen: 24
                          141.101.171.0/24 maxlen: 24
                          141.101.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411126100 (0x18814954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jun  6 17:29:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48bfd5dd55c09e10110de0084ffea0b0a822dd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:2e:44:ec:f8:ee:5d:05:d5:1d:0e:9e:a7:
                    b1:c1:4f:dc:e4:17:4a:42:9c:0e:ea:4f:29:31:69:
                    6b:66:5c:fb:cf:19:a7:71:c7:02:4c:51:03:83:74:
                    49:0e:bd:d3:13:fd:75:7d:72:a2:1b:f6:5f:16:71:
                    df:69:45:65:d4:d6:00:c4:72:17:2f:83:60:34:84:
                    90:fd:24:41:cb:64:f0:1f:00:e7:d4:53:53:24:45:
                    5b:03:bf:ec:23:ad:68:2d:a8:aa:6b:4f:f5:b0:cc:
                    bf:41:c9:84:ff:09:9b:a5:61:1d:1d:fe:8d:6c:c2:
                    cc:11:24:a8:56:24:58:a1:55:68:6f:28:e3:2f:8b:
                    ce:bb:0c:73:50:94:d9:b0:87:0c:16:31:b0:b7:46:
                    42:e3:cf:5f:58:18:97:c6:9f:b8:06:ec:d8:13:05:
                    27:46:33:88:cc:33:a2:24:e5:bd:a0:cb:15:db:ed:
                    44:fd:ff:29:93:7a:21:34:88:12:18:51:73:58:91:
                    f4:0e:13:fb:06:70:6c:7a:41:67:7f:c3:f1:66:1f:
                    3e:3e:aa:5f:6a:64:47:b5:f8:fe:17:a3:35:dc:8a:
                    f0:12:c1:40:9d:de:e2:9d:c2:18:ee:10:87:20:f0:
                    48:60:e3:96:56:f4:3e:43:4f:b3:ee:d1:48:15:3e:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BF:D5:DD:55:C0:9E:10:11:0D:E0:08:4F:FE:A0:B0:A8:22:DD:7A
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SL_V3VXAnhARDeAIT_6gsKgi3Xo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.0.0/24
                  37.18.15.0/24
                  37.18.63.0/24
                  37.230.131.0/24
                  37.230.134.0/24
                  37.230.151.0/24
                  37.230.163.0/24
                  37.230.170.0/23
                  37.230.176.0/24
                  37.230.182.0/23
                  37.230.187.0/24
                  46.243.138.0/23
                  46.243.149.0/24
                  46.243.204.0/24
                  46.243.214.0/24
                  46.243.216.0/23
                  46.243.221.0-46.243.223.255
                  46.243.225.0/24
                  46.243.232.0-46.243.238.255
                  46.243.240.0/22
                  46.243.246.0-46.243.251.255
                  128.0.71.0/24
                  141.101.132.0/23
                  141.101.135.0/24
                  141.101.143.0/24
                  141.101.145.0/24
                  141.101.147.0-141.101.150.255
                  141.101.153.0-141.101.156.255
                  141.101.158.0-141.101.162.255
                  141.101.164.0-141.101.168.255
                  141.101.170.0/23
                  141.101.179.0/24
                  141.101.191.0/24
                  141.101.255.0/24
                  178.170.137.0/24
                  178.170.139.0-178.170.140.255
                  178.170.231.0/24
                  185.4.148.0/22
                  188.72.73.0/24
                  188.72.80.0/23
                  188.72.83.0-188.72.86.255
                  188.72.119.0/24
                  217.150.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:15:1c:55:51:13:89:fe:29:f7:c6:44:1f:13:a3:b8:3c:36:
         84:b5:02:43:2f:09:16:72:19:f0:d7:d7:b2:e2:15:7c:5d:a9:
         45:dc:b6:b9:cf:a4:a4:09:d3:5f:81:0b:4a:a9:04:d5:d5:3e:
         11:cd:5b:cd:59:66:e2:d1:f7:35:8b:72:8b:2b:db:ac:c3:0e:
         be:42:31:ff:96:fc:7c:96:ea:76:c2:20:64:a9:b7:e2:08:52:
         b4:67:f0:ee:03:0b:de:ad:26:39:5e:6b:d1:84:27:f1:3c:4e:
         81:40:76:ea:5b:8a:57:03:4e:f3:a6:48:ef:f4:43:b1:28:76:
         6e:67:dd:b9:cb:43:e0:ba:5b:ef:68:e3:d7:a7:e9:0c:30:2c:
         4c:f0:08:b8:c1:e5:d1:f0:f0:ea:5f:02:c3:08:0b:92:5a:af:
         c3:bc:83:d2:86:ac:dc:5a:d5:08:29:aa:8b:4f:86:c7:2d:22:
         6a:cf:9c:e8:69:4f:92:b8:69:ea:1d:da:56:ab:8f:e7:58:b6:
         7d:f5:c5:d8:fe:a9:81:1d:fc:b0:61:13:0a:4e:ac:fb:02:1f:
         37:4d:2b:c1:74:3d:4b:17:7c:a2:f3:42:e2:65:81:c3:0a:35:
         09:c7:08:db:20:e7:08:06:ff:e3:c6:b8:35:a5:c9:6f:78:f4:
         ef:8c:43:be
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgIEGIFJVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDYw
NjE3MjkyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDhiZmQ1ZGQ1NWMw
OWUxMDExMGRlMDA4NGZmZWEwYjBhODIyZGQ3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMYOLkTs+O5dBdUdDp6nscFP3OQXSkKcDupPKTFpa2Zc+88Z
p3HHAkxRA4N0SQ690xP9dX1yohv2XxZx32lFZdTWAMRyFy+DYDSEkP0kQctk8B8A
59RTUyRFWwO/7COtaC2oqmtP9bDMv0HJhP8Jm6VhHR3+jWzCzBEkqFYkWKFVaG8o
4y+LzrsMc1CU2bCHDBYxsLdGQuPPX1gYl8afuAbs2BMFJ0YziMwzoiTlvaDLFdvt
RP3/KZN6ITSIEhhRc1iR9A4T+wZwbHpBZ3/D8WYfPj6qX2pkR7X4/hejNdyK8BLB
QJ3e4p3CGO4QhyDwSGDjllb0PkNPs+7RSBU+0G8CAwEAAaOCA1cwggNTMB0GA1Ud
DgQWBBRIv9XdVcCeEBEN4AhP/qCwqCLdejAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L1NMX1YzVlhBbmhBUkRlQUlUXzZnc0tnaTNYby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AWsGCCsGAQUFBwEHAQH/BIIBWjCCAVYwggFSBAIAATCCAUoDBAAlEgADBAAlEg8D
BAAlEj8DBAAl5oMDBAAl5oYDBAAl5pcDBAAl5qMDBAEl5qoDBAAl5rADBAEl5rYD
BAAl5rsDBAEu84oDBAAu85UDBAAu88wDBAAu89YDBAEu89gwDAMEAC7z3QMEBS7z
wAMEAC7z4TAMAwQDLvPoAwQALvPuAwQCLvPwMAwDBAEu8/YDBAIu8/gDBACAAEcD
BAGNZYQDBACNZYcDBACNZY8DBACNZZEwDAMEAI1lkwMEAI1lljAMAwQAjWWZAwQA
jWWcMAwDBAGNZZ4DBACNZaIwDAMEAo1lpAMEAI1lqAMEAY1lqgMEAI1lswMEAI1l
vwMEAI1l/wMEALKqiTAMAwQAsqqLAwQAsqqMAwQAsqrnAwQCuQSUAwQAvEhJAwQB
vEhQMAwDBAC8SFMDBAC8SFYDBAC8SHcDBAPZllgwDQYJKoZIhvcNAQELBQADggEB
AFYVHFVRE4n+KffGRB8To7g8NoS1AkMvCRZyGfDX17LiFXxdqUXctrnPpKQJ01+B
C0qpBNXVPhHNW81ZZuLR9zWLcosr26zDDr5CMf+W/HyW6nbCIGSpt+IIUrRn8O4D
C96tJjlea9GEJ/E8ToFAdupbilcDTvOmSO/0Q7Eodm5n3bnLQ+C6W+9o49en6Qww
LEzwCLjB5dHw8OpfAsMIC5Jar8O8g9KGrNxa1QgpqotPhsctImrPnOhpT5K4aeod
2larj+dYtn31xdj+qYEd/LBhEwpOrPsCHzdNK8F0PUsXfKLzQuJlgcMKNQnHCNsg
5wgG/+PGuDWlyW949O+MQ74=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org