Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/eMFL0PKQoYDxq5-BJ4imVUFn3do.roa
File:                     eMFL0PKQoYDxq5-BJ4imVUFn3do.roa (raw, json)
Hash identifier:          nwYNSMSdDjLF+D5XEJvl5LbfE23jJ84uu//KrDAPGj0=
Subject key identifier:   78:C1:4B:D0:F2:90:A1:80:F1:AB:9F:81:27:88:A6:55:41:67:DD:DA
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       189B31B9
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/eMFL0PKQoYDxq5-BJ4imVUFn3do.roa
Signing time:             Wed 15 Jun 2022 09:17:44 +0000
ROA not before:           Wed 15 Jun 2022 09:17:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58272
IP address blocks:        37.230.187.0/24 maxlen: 24
                          188.72.119.0/24 maxlen: 24
                          178.170.231.0/24 maxlen: 24
                          178.170.139.0/24 maxlen: 24
                          178.170.137.0/24 maxlen: 24
                          217.150.90.0/24 maxlen: 24
                          217.150.89.0/24 maxlen: 24
                          217.150.88.0/24 maxlen: 24
                          217.150.91.0/24 maxlen: 24
                          178.170.140.0/24 maxlen: 24
                          217.150.94.0/24 maxlen: 24
                          217.150.93.0/24 maxlen: 24
                          217.150.92.0/24 maxlen: 24
                          217.150.95.0/24 maxlen: 24
                          46.243.149.0/24 maxlen: 24
                          37.18.0.0/24 maxlen: 24
                          185.4.150.0/24 maxlen: 24
                          37.18.15.0/24 maxlen: 24
                          185.4.149.0/24 maxlen: 24
                          185.4.148.0/24 maxlen: 24
                          185.4.151.0/24 maxlen: 24
                          141.101.255.0/24 maxlen: 24
                          46.243.139.0/24 maxlen: 24
                          46.243.138.0/24 maxlen: 24
                          37.230.134.0/24 maxlen: 24
                          37.230.151.0/24 maxlen: 24
                          188.72.73.0/24 maxlen: 24
                          188.72.83.0/24 maxlen: 24
                          188.72.81.0/24 maxlen: 24
                          188.72.80.0/24 maxlen: 24
                          188.72.85.0/24 maxlen: 24
                          188.72.84.0/24 maxlen: 24
                          37.230.163.0/24 maxlen: 24
                          188.72.86.0/24 maxlen: 24
                          37.230.170.0/24 maxlen: 24
                          37.230.171.0/24 maxlen: 24
                          37.230.176.0/24 maxlen: 24
                          37.230.183.0/24 maxlen: 24
                          37.230.182.0/24 maxlen: 24
                          46.243.204.0/24 maxlen: 24
                          46.243.214.0/24 maxlen: 24
                          46.243.217.0/24 maxlen: 24
                          46.243.216.0/24 maxlen: 24
                          46.243.222.0/24 maxlen: 24
                          46.243.221.0/24 maxlen: 24
                          46.243.225.0/24 maxlen: 24
                          46.243.223.0/24 maxlen: 24
                          46.243.232.0/24 maxlen: 24
                          46.243.233.0/24 maxlen: 24
                          37.18.63.0/24 maxlen: 24
                          46.243.240.0/24 maxlen: 24
                          46.243.236.0/24 maxlen: 24
                          46.243.235.0/24 maxlen: 24
                          46.243.234.0/24 maxlen: 24
                          46.243.238.0/24 maxlen: 24
                          46.243.237.0/24 maxlen: 24
                          46.243.243.0/24 maxlen: 24
                          46.243.242.0/24 maxlen: 24
                          46.243.241.0/24 maxlen: 24
                          46.243.246.0/24 maxlen: 24
                          46.243.250.0/24 maxlen: 24
                          46.243.249.0/24 maxlen: 24
                          46.243.248.0/24 maxlen: 24
                          46.243.247.0/24 maxlen: 24
                          37.230.131.0/24 maxlen: 24
                          46.243.251.0/24 maxlen: 24
                          128.0.71.0/24 maxlen: 24
                          141.101.179.0/24 maxlen: 24
                          141.101.191.0/24 maxlen: 24
                          141.101.132.0/24 maxlen: 24
                          141.101.133.0/24 maxlen: 24
                          141.101.135.0/24 maxlen: 24
                          141.101.145.0/24 maxlen: 24
                          141.101.143.0/24 maxlen: 24
                          141.101.148.0/24 maxlen: 24
                          141.101.147.0/24 maxlen: 24
                          141.101.150.0/24 maxlen: 24
                          141.101.149.0/24 maxlen: 24
                          141.101.155.0/24 maxlen: 24
                          141.101.154.0/24 maxlen: 24
                          141.101.153.0/24 maxlen: 24
                          141.101.159.0/24 maxlen: 24
                          141.101.158.0/24 maxlen: 24
                          141.101.156.0/24 maxlen: 24
                          141.101.162.0/24 maxlen: 24
                          141.101.161.0/24 maxlen: 24
                          141.101.160.0/24 maxlen: 24
                          141.101.166.0/24 maxlen: 24
                          141.101.165.0/24 maxlen: 24
                          141.101.164.0/24 maxlen: 24
                          141.101.168.0/24 maxlen: 24
                          141.101.167.0/24 maxlen: 24
                          141.101.171.0/24 maxlen: 24
                          141.101.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412823993 (0x189b31b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jun 15 09:17:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78c14bd0f290a180f1ab9f812788a6554167ddda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:02:56:9c:b5:95:e0:1d:44:3e:7d:03:09:
                    2e:aa:65:83:da:6c:86:2b:b5:ed:42:cf:41:f3:70:
                    a0:50:24:4f:2b:8d:21:4c:a0:44:0e:2e:fc:64:79:
                    f8:1e:4e:b0:c6:00:96:01:f9:34:2f:36:58:07:fc:
                    07:be:05:67:71:bf:2f:d6:88:53:38:97:89:c6:1e:
                    d4:8a:fa:ad:6f:98:25:3b:0e:58:d1:41:01:cb:f3:
                    bb:9b:31:95:98:0f:b5:20:b9:51:e7:74:5c:cb:db:
                    64:3b:d5:0c:02:f2:3b:ea:81:fc:d4:b0:90:0c:91:
                    05:11:f4:93:c5:8f:ea:89:51:98:b9:b2:57:87:75:
                    5f:cd:b8:0c:07:19:75:30:41:7e:43:59:f4:9a:b5:
                    f1:18:3e:51:30:3d:74:8c:bf:4f:56:4e:98:52:07:
                    df:5d:a7:34:18:6b:26:06:c2:8f:ec:45:e7:e4:da:
                    69:5f:8f:cd:d0:5e:62:1c:45:6c:ce:00:d1:53:bf:
                    fc:f5:05:2c:9b:fa:bb:40:27:b0:f6:ed:b0:e5:bd:
                    44:5a:99:40:16:aa:2b:22:5d:b6:2f:a1:c8:94:73:
                    42:74:6e:2a:48:3c:03:2f:24:37:18:72:f1:56:40:
                    f4:c6:7f:32:fc:3f:d4:29:9d:14:5f:80:67:04:a1:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:4B:D0:F2:90:A1:80:F1:AB:9F:81:27:88:A6:55:41:67:DD:DA
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/eMFL0PKQoYDxq5-BJ4imVUFn3do.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.0.0/24
                  37.18.15.0/24
                  37.18.63.0/24
                  37.230.131.0/24
                  37.230.134.0/24
                  37.230.151.0/24
                  37.230.163.0/24
                  37.230.170.0/23
                  37.230.176.0/24
                  37.230.182.0/23
                  37.230.187.0/24
                  46.243.138.0/23
                  46.243.149.0/24
                  46.243.204.0/24
                  46.243.214.0/24
                  46.243.216.0/23
                  46.243.221.0-46.243.223.255
                  46.243.225.0/24
                  46.243.232.0-46.243.238.255
                  46.243.240.0/22
                  46.243.246.0-46.243.251.255
                  128.0.71.0/24
                  141.101.132.0/23
                  141.101.135.0/24
                  141.101.143.0/24
                  141.101.145.0/24
                  141.101.147.0-141.101.150.255
                  141.101.153.0-141.101.156.255
                  141.101.158.0-141.101.162.255
                  141.101.164.0-141.101.168.255
                  141.101.170.0/23
                  141.101.179.0/24
                  141.101.191.0/24
                  141.101.255.0/24
                  178.170.137.0/24
                  178.170.139.0-178.170.140.255
                  178.170.231.0/24
                  185.4.148.0/22
                  188.72.73.0/24
                  188.72.80.0/23
                  188.72.83.0-188.72.86.255
                  188.72.119.0/24
                  217.150.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:d4:1a:d5:10:75:72:99:c7:ac:68:73:47:68:9b:d7:5e:ac:
         33:36:4c:23:ef:40:2e:a4:6a:ea:d1:11:3b:d0:83:16:7e:bd:
         be:e6:40:c3:86:72:3a:e9:64:07:96:e0:df:03:4a:77:51:63:
         91:8b:a5:00:5e:ca:2c:aa:99:22:f6:53:81:29:9a:34:36:b3:
         35:46:bd:37:5d:cb:cc:26:a5:ff:7c:fb:59:79:e3:3a:48:ef:
         6a:33:d8:c8:ee:24:ef:d9:08:6a:ea:5f:3d:bf:e3:49:36:af:
         14:55:7f:85:8b:46:d1:78:83:55:73:fe:3a:31:6a:2f:27:bb:
         95:51:3f:cc:5d:9c:59:db:14:5d:3d:f9:68:0e:d9:f8:d1:54:
         f0:b4:2e:a3:76:ed:d2:2b:3c:4e:d3:c2:86:b7:04:9c:ee:b0:
         23:2b:59:7a:ca:62:ec:fb:f3:87:76:23:6a:bc:4f:d3:60:61:
         fb:7c:8f:98:a8:fc:9c:32:f5:79:5b:b2:dd:15:02:7e:2c:39:
         36:69:ca:f0:d5:31:07:be:0b:aa:a7:a5:2d:aa:44:3e:14:b0:
         30:12:68:10:6b:08:5a:c8:e5:b6:66:35:fd:da:47:a4:00:71:
         eb:d1:88:94:19:77:4d:36:da:3f:62:bf:50:ff:10:c3:6a:f0:
         38:f5:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org