Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/evacQ6P6_c94uFRq0Uv1BNHisXI.roa
File:                     evacQ6P6_c94uFRq0Uv1BNHisXI.roa (raw, json)
Hash identifier:          bXosOxRf0J5AV92xVeeQ8GFRTw7Rqmgm2EVNckB1c7E=
Subject key identifier:   7A:F6:9C:43:A3:FA:FD:CF:78:B8:54:6A:D1:4B:F5:04:D1:E2:B1:72
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       1879E153
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/evacQ6P6_c94uFRq0Uv1BNHisXI.roa
Signing time:             Fri 03 Jun 2022 08:20:21 +0000
ROA not before:           Fri 03 Jun 2022 08:20:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58272
IP address blocks:        37.230.187.0/24 maxlen: 24
                          188.72.119.0/24 maxlen: 24
                          178.170.231.0/24 maxlen: 24
                          178.170.139.0/24 maxlen: 24
                          178.170.137.0/24 maxlen: 24
                          178.170.140.0/24 maxlen: 24
                          217.150.90.0/24 maxlen: 24
                          217.150.89.0/24 maxlen: 24
                          217.150.88.0/24 maxlen: 24
                          217.150.91.0/24 maxlen: 24
                          217.150.94.0/24 maxlen: 24
                          217.150.93.0/24 maxlen: 24
                          217.150.92.0/24 maxlen: 24
                          217.150.95.0/24 maxlen: 24
                          46.243.149.0/24 maxlen: 24
                          37.18.0.0/24 maxlen: 24
                          185.4.150.0/24 maxlen: 24
                          37.18.15.0/24 maxlen: 24
                          185.4.149.0/24 maxlen: 24
                          185.4.148.0/24 maxlen: 24
                          185.4.151.0/24 maxlen: 24
                          141.101.255.0/24 maxlen: 24
                          46.243.139.0/24 maxlen: 24
                          46.243.138.0/24 maxlen: 24
                          37.230.134.0/24 maxlen: 24
                          188.72.73.0/24 maxlen: 24
                          188.72.83.0/24 maxlen: 24
                          188.72.81.0/24 maxlen: 24
                          188.72.80.0/24 maxlen: 24
                          188.72.85.0/24 maxlen: 24
                          188.72.84.0/24 maxlen: 24
                          37.230.163.0/24 maxlen: 24
                          188.72.86.0/24 maxlen: 24
                          37.230.170.0/24 maxlen: 24
                          37.230.171.0/24 maxlen: 24
                          37.230.176.0/24 maxlen: 24
                          37.230.183.0/24 maxlen: 24
                          37.230.182.0/24 maxlen: 24
                          46.243.204.0/24 maxlen: 24
                          46.243.214.0/24 maxlen: 24
                          46.243.217.0/24 maxlen: 24
                          46.243.216.0/24 maxlen: 24
                          46.243.222.0/24 maxlen: 24
                          46.243.221.0/24 maxlen: 24
                          46.243.225.0/24 maxlen: 24
                          46.243.223.0/24 maxlen: 24
                          46.243.232.0/24 maxlen: 24
                          46.243.233.0/24 maxlen: 24
                          37.18.63.0/24 maxlen: 24
                          46.243.240.0/24 maxlen: 24
                          46.243.236.0/24 maxlen: 24
                          46.243.235.0/24 maxlen: 24
                          46.243.234.0/24 maxlen: 24
                          46.243.238.0/24 maxlen: 24
                          46.243.237.0/24 maxlen: 24
                          46.243.243.0/24 maxlen: 24
                          46.243.242.0/24 maxlen: 24
                          46.243.241.0/24 maxlen: 24
                          46.243.246.0/24 maxlen: 24
                          46.243.250.0/24 maxlen: 24
                          46.243.249.0/24 maxlen: 24
                          46.243.248.0/24 maxlen: 24
                          46.243.247.0/24 maxlen: 24
                          37.230.131.0/24 maxlen: 24
                          46.243.251.0/24 maxlen: 24
                          128.0.71.0/24 maxlen: 24
                          141.101.191.0/24 maxlen: 24
                          141.101.132.0/24 maxlen: 24
                          141.101.133.0/24 maxlen: 24
                          141.101.135.0/24 maxlen: 24
                          141.101.145.0/24 maxlen: 24
                          141.101.143.0/24 maxlen: 24
                          141.101.148.0/24 maxlen: 24
                          141.101.147.0/24 maxlen: 24
                          141.101.150.0/24 maxlen: 24
                          141.101.149.0/24 maxlen: 24
                          141.101.155.0/24 maxlen: 24
                          141.101.154.0/24 maxlen: 24
                          141.101.153.0/24 maxlen: 24
                          141.101.159.0/24 maxlen: 24
                          141.101.158.0/24 maxlen: 24
                          141.101.156.0/24 maxlen: 24
                          141.101.162.0/24 maxlen: 24
                          141.101.161.0/24 maxlen: 24
                          141.101.160.0/24 maxlen: 24
                          141.101.166.0/24 maxlen: 24
                          141.101.165.0/24 maxlen: 24
                          141.101.164.0/24 maxlen: 24
                          141.101.168.0/24 maxlen: 24
                          141.101.167.0/24 maxlen: 24
                          141.101.171.0/24 maxlen: 24
                          141.101.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410640723 (0x1879e153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jun  3 08:20:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7af69c43a3fafdcf78b8546ad14bf504d1e2b172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:c3:70:97:32:4a:4b:ee:ca:05:53:0d:94:
                    4f:8d:05:1e:c5:f0:dc:43:f7:5a:5b:ac:4b:35:c8:
                    88:10:cc:e9:e6:18:7f:83:fa:74:db:e7:48:4a:68:
                    62:24:31:f6:60:08:31:cc:00:59:1d:89:09:1f:5b:
                    48:8e:47:95:59:72:5b:4f:47:80:81:34:b9:88:15:
                    98:14:06:e3:92:d3:d1:56:70:a4:56:d6:9e:5d:04:
                    dd:89:ae:9a:91:b1:d8:65:90:f2:d9:ce:4c:bb:cd:
                    6d:a7:e8:40:b3:3e:73:65:74:97:47:bc:1c:74:50:
                    e1:0d:5e:e4:7a:02:9c:7a:f5:ff:8a:3d:87:3d:6b:
                    59:43:05:28:9c:03:95:5d:66:83:5c:09:1c:ac:b9:
                    ea:c3:fa:36:57:13:54:99:97:d2:5a:ba:81:b9:67:
                    ea:bb:9b:1f:41:fb:96:b5:13:69:75:1f:50:ca:20:
                    ab:2d:a9:57:27:b5:d9:77:6f:0b:fa:38:b9:a7:b5:
                    ab:21:83:b2:48:d2:3c:9f:9c:84:28:18:66:2d:f2:
                    c3:e6:b6:dd:b4:a7:1c:e9:4e:4b:41:7d:ca:2a:2a:
                    c7:42:4a:eb:1b:3b:87:38:4a:f8:7a:cb:30:a9:b2:
                    82:2b:ee:c9:bb:3d:13:d5:30:8e:f4:f7:8d:3a:b3:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F6:9C:43:A3:FA:FD:CF:78:B8:54:6A:D1:4B:F5:04:D1:E2:B1:72
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/evacQ6P6_c94uFRq0Uv1BNHisXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.0.0/24
                  37.18.15.0/24
                  37.18.63.0/24
                  37.230.131.0/24
                  37.230.134.0/24
                  37.230.163.0/24
                  37.230.170.0/23
                  37.230.176.0/24
                  37.230.182.0/23
                  37.230.187.0/24
                  46.243.138.0/23
                  46.243.149.0/24
                  46.243.204.0/24
                  46.243.214.0/24
                  46.243.216.0/23
                  46.243.221.0-46.243.223.255
                  46.243.225.0/24
                  46.243.232.0-46.243.238.255
                  46.243.240.0/22
                  46.243.246.0-46.243.251.255
                  128.0.71.0/24
                  141.101.132.0/23
                  141.101.135.0/24
                  141.101.143.0/24
                  141.101.145.0/24
                  141.101.147.0-141.101.150.255
                  141.101.153.0-141.101.156.255
                  141.101.158.0-141.101.162.255
                  141.101.164.0-141.101.168.255
                  141.101.170.0/23
                  141.101.191.0/24
                  141.101.255.0/24
                  178.170.137.0/24
                  178.170.139.0-178.170.140.255
                  178.170.231.0/24
                  185.4.148.0/22
                  188.72.73.0/24
                  188.72.80.0/23
                  188.72.83.0-188.72.86.255
                  188.72.119.0/24
                  217.150.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:2a:68:37:0d:3a:5a:54:33:bf:d3:be:35:38:8b:6e:33:fd:
         45:8a:10:75:09:2b:41:1d:74:01:ee:d3:10:6b:0e:13:ee:49:
         eb:c0:ca:7c:e0:b2:8d:18:a8:2c:a4:d0:2d:f4:a3:a9:22:0d:
         49:a3:8f:d7:c0:06:9c:21:ae:4d:05:9f:ca:99:0b:62:c1:eb:
         71:6e:50:82:17:e0:73:fd:e8:d1:b6:eb:94:84:b0:94:33:65:
         3f:eb:33:ac:c8:e1:3c:3f:76:ef:94:83:cd:86:c1:13:3b:f9:
         92:a5:33:85:d4:5a:3d:21:e1:63:fb:83:4f:85:ac:21:16:16:
         ac:0a:98:09:6f:98:68:75:f4:a8:03:52:c2:b8:83:6b:6c:25:
         93:ef:20:5b:9f:dc:3d:f0:67:d3:2e:4b:14:4f:20:80:34:76:
         2a:a1:c0:c4:72:9f:be:ec:b3:42:8e:e2:7d:37:0a:9a:45:56:
         a1:1c:37:57:54:02:dc:8a:49:cc:48:3a:c4:1f:cb:7f:9a:4f:
         38:7c:c3:06:79:ff:ed:a4:25:ba:b8:39:80:82:5b:22:f4:88:
         68:3d:41:d2:a0:5d:4b:8f:84:b3:ab:b9:8d:5b:9f:52:9b:21:
         ad:3c:2d:36:38:0f:c2:77:1f:e5:14:5e:50:db:db:ee:55:a0:
         4c:d6:d4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org