Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fgx8ZIqHdQaOgXuF3JP1JYIDvwc.roa
File:                     fgx8ZIqHdQaOgXuF3JP1JYIDvwc.roa (raw, json)
Hash identifier:          ONX+zJzYKZlw/Sut1jxO2nyKXj0aHWoC9x3/qr0TAHc=
Subject key identifier:   7E:0C:7C:64:8A:87:75:06:8E:81:7B:85:DC:93:F5:25:82:03:BF:07
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       17EF3D89
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fgx8ZIqHdQaOgXuF3JP1JYIDvwc.roa
Signing time:             Mon 11 Apr 2022 21:40:54 +0000
ROA not before:           Mon 11 Apr 2022 21:40:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58272
IP address blocks:        188.72.119.0/24 maxlen: 24
                          37.18.0.0/24 maxlen: 24
                          185.4.150.0/24 maxlen: 24
                          37.18.15.0/24 maxlen: 24
                          185.4.149.0/24 maxlen: 24
                          185.4.148.0/24 maxlen: 24
                          185.4.151.0/24 maxlen: 24
                          188.72.83.0/24 maxlen: 24
                          188.72.81.0/24 maxlen: 24
                          188.72.80.0/24 maxlen: 24
                          188.72.85.0/24 maxlen: 24
                          188.72.84.0/24 maxlen: 24
                          188.72.86.0/24 maxlen: 24
                          188.72.88.0/24 maxlen: 24
                          188.72.90.0/24 maxlen: 24
                          37.18.63.0/24 maxlen: 24
                          37.230.187.0/24 maxlen: 24
                          178.170.231.0/24 maxlen: 24
                          178.170.139.0/24 maxlen: 24
                          178.170.137.0/24 maxlen: 24
                          178.170.140.0/24 maxlen: 24
                          217.150.90.0/24 maxlen: 24
                          217.150.89.0/24 maxlen: 24
                          217.150.88.0/24 maxlen: 24
                          217.150.91.0/24 maxlen: 24
                          217.150.94.0/24 maxlen: 24
                          217.150.93.0/24 maxlen: 24
                          217.150.92.0/24 maxlen: 24
                          178.170.146.0/24 maxlen: 24
                          217.150.95.0/24 maxlen: 24
                          46.243.149.0/24 maxlen: 24
                          141.101.248.0/24 maxlen: 24
                          141.101.255.0/24 maxlen: 24
                          46.243.139.0/24 maxlen: 24
                          46.243.138.0/24 maxlen: 24
                          37.230.134.0/24 maxlen: 24
                          37.230.163.0/24 maxlen: 24
                          37.230.170.0/24 maxlen: 24
                          37.230.171.0/24 maxlen: 24
                          37.230.176.0/24 maxlen: 24
                          37.230.183.0/24 maxlen: 24
                          37.230.182.0/24 maxlen: 24
                          46.243.204.0/24 maxlen: 24
                          46.243.213.0/24 maxlen: 24
                          46.243.208.0/24 maxlen: 24
                          46.243.207.0/24 maxlen: 24
                          46.243.214.0/24 maxlen: 24
                          46.243.217.0/24 maxlen: 24
                          46.243.216.0/24 maxlen: 24
                          46.243.222.0/24 maxlen: 24
                          46.243.221.0/24 maxlen: 24
                          46.243.225.0/24 maxlen: 24
                          46.243.223.0/24 maxlen: 24
                          46.243.232.0/24 maxlen: 24
                          46.243.233.0/24 maxlen: 24
                          46.243.240.0/24 maxlen: 24
                          46.243.236.0/24 maxlen: 24
                          46.243.235.0/24 maxlen: 24
                          46.243.234.0/24 maxlen: 24
                          46.243.238.0/24 maxlen: 24
                          46.243.237.0/24 maxlen: 24
                          46.243.243.0/24 maxlen: 24
                          46.243.242.0/24 maxlen: 24
                          46.243.241.0/24 maxlen: 24
                          46.243.246.0/24 maxlen: 24
                          37.230.129.0/24 maxlen: 24
                          46.243.250.0/24 maxlen: 24
                          37.230.128.0/24 maxlen: 24
                          46.243.249.0/24 maxlen: 24
                          46.243.248.0/24 maxlen: 24
                          46.243.247.0/24 maxlen: 24
                          37.230.131.0/24 maxlen: 24
                          46.243.251.0/24 maxlen: 24
                          128.0.71.0/24 maxlen: 24
                          141.101.191.0/24 maxlen: 24
                          141.101.132.0/24 maxlen: 24
                          141.101.133.0/24 maxlen: 24
                          141.101.135.0/24 maxlen: 24
                          141.101.145.0/24 maxlen: 24
                          141.101.143.0/24 maxlen: 24
                          141.101.148.0/24 maxlen: 24
                          141.101.147.0/24 maxlen: 24
                          141.101.150.0/24 maxlen: 24
                          141.101.149.0/24 maxlen: 24
                          141.101.155.0/24 maxlen: 24
                          141.101.154.0/24 maxlen: 24
                          141.101.153.0/24 maxlen: 24
                          141.101.159.0/24 maxlen: 24
                          141.101.158.0/24 maxlen: 24
                          141.101.156.0/24 maxlen: 24
                          141.101.162.0/24 maxlen: 24
                          141.101.161.0/24 maxlen: 24
                          141.101.160.0/24 maxlen: 24
                          141.101.166.0/24 maxlen: 24
                          141.101.165.0/24 maxlen: 24
                          141.101.164.0/24 maxlen: 24
                          141.101.168.0/24 maxlen: 24
                          141.101.167.0/24 maxlen: 24
                          141.101.171.0/24 maxlen: 24
                          141.101.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401554825 (0x17ef3d89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Apr 11 21:40:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e0c7c648a8775068e817b85dc93f5258203bf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:9e:67:b0:9b:44:88:39:12:bf:37:4a:fd:
                    bb:65:9a:5f:23:ee:02:8b:c5:31:a9:97:e2:dd:82:
                    5a:ab:f1:84:22:34:47:3e:74:ac:cd:fe:ee:4b:46:
                    79:e3:98:80:bd:f5:81:29:59:91:3f:3a:c3:5f:17:
                    af:38:a5:df:38:83:5a:e6:29:f0:b5:5a:37:43:19:
                    43:a9:a8:54:43:cc:dc:d2:54:e3:e7:a2:34:6b:be:
                    4b:26:f5:cc:90:8d:84:45:18:52:50:1f:85:e9:0d:
                    6d:b9:0a:a6:3d:85:3f:1c:8c:ad:34:dd:59:69:11:
                    42:8f:20:ad:ef:95:a9:e3:35:66:1c:ee:72:38:a8:
                    df:31:d8:03:02:ed:81:30:de:10:c0:22:b4:3d:09:
                    0f:54:e2:27:76:4c:bd:c6:9e:1d:1f:e8:1e:b3:bc:
                    29:0e:9d:1b:29:ad:4c:5a:79:6e:62:da:b7:1c:d0:
                    69:ac:27:cd:3b:d7:25:82:f4:7a:4f:7b:60:a6:f1:
                    82:ee:ab:4d:84:cc:7e:84:c9:a3:30:d8:a8:e3:18:
                    40:e2:9e:17:a9:32:3d:7a:d5:2e:a3:8b:77:fd:99:
                    43:09:61:59:f8:e3:7b:cf:c6:db:fd:1d:b6:2f:8d:
                    30:2b:d9:10:c9:d7:8b:2d:8f:a1:ef:43:c8:5b:07:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:7C:64:8A:87:75:06:8E:81:7B:85:DC:93:F5:25:82:03:BF:07
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fgx8ZIqHdQaOgXuF3JP1JYIDvwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.0.0/24
                  37.18.15.0/24
                  37.18.63.0/24
                  37.230.128.0/23
                  37.230.131.0/24
                  37.230.134.0/24
                  37.230.163.0/24
                  37.230.170.0/23
                  37.230.176.0/24
                  37.230.182.0/23
                  37.230.187.0/24
                  46.243.138.0/23
                  46.243.149.0/24
                  46.243.204.0/24
                  46.243.207.0-46.243.208.255
                  46.243.213.0-46.243.214.255
                  46.243.216.0/23
                  46.243.221.0-46.243.223.255
                  46.243.225.0/24
                  46.243.232.0-46.243.238.255
                  46.243.240.0/22
                  46.243.246.0-46.243.251.255
                  128.0.71.0/24
                  141.101.132.0/23
                  141.101.135.0/24
                  141.101.143.0/24
                  141.101.145.0/24
                  141.101.147.0-141.101.150.255
                  141.101.153.0-141.101.156.255
                  141.101.158.0-141.101.162.255
                  141.101.164.0-141.101.168.255
                  141.101.170.0/23
                  141.101.191.0/24
                  141.101.248.0/24
                  141.101.255.0/24
                  178.170.137.0/24
                  178.170.139.0-178.170.140.255
                  178.170.146.0/24
                  178.170.231.0/24
                  185.4.148.0/22
                  188.72.80.0/23
                  188.72.83.0-188.72.86.255
                  188.72.88.0/24
                  188.72.90.0/24
                  188.72.119.0/24
                  217.150.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:0d:ed:6e:d4:d4:8b:4e:34:69:c6:b9:72:88:e6:5b:ac:5c:
         09:c4:0d:21:b8:94:75:2c:d7:00:81:eb:69:e3:8c:85:a7:1b:
         79:8b:11:2f:f4:14:02:6c:bf:80:67:ea:b2:c3:28:60:54:41:
         d9:99:f1:5b:84:6c:40:e3:38:e4:ba:1d:3d:59:34:2a:98:d2:
         e0:23:04:c0:b8:17:5d:93:5e:31:0c:b2:da:ab:05:77:34:63:
         1f:32:4a:6a:35:27:11:cd:29:08:b2:c5:83:97:aa:91:c0:cd:
         dc:98:64:73:b5:be:8d:84:05:db:03:01:fc:05:d8:1c:4b:8b:
         49:25:28:0f:59:7e:93:9f:15:f1:e7:ce:ae:e1:b2:56:0f:ad:
         ce:2a:34:11:50:f5:77:68:8b:30:3e:35:5b:0b:c8:4a:95:cb:
         08:ea:2e:3d:af:5d:a0:7a:10:6c:db:b0:c0:fd:54:62:85:c4:
         93:a0:37:1c:da:36:e8:04:e4:7e:45:4b:33:ed:51:0e:be:35:
         6d:59:5c:1e:2f:3f:36:58:0e:54:a3:40:0d:2c:cd:ca:a8:d1:
         70:95:f6:5b:58:8d:e0:ae:de:9f:97:72:0e:fa:f3:38:d6:e0:
         1e:cb:15:94:24:9f:29:2a:66:3f:1c:40:f9:fa:9c:1c:d2:26:
         46:97:a5:a6
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIEF+89iTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDQx
MTIxNDA1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2UwYzdjNjQ4YTg3
NzUwNjhlODE3Yjg1ZGM5M2Y1MjU4MjAzYmYwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKrdnmewm0SIORK/N0r9u2WaXyPuAovFMamX4t2CWqvxhCI0
Rz50rM3+7ktGeeOYgL31gSlZkT86w18Xrzil3ziDWuYp8LVaN0MZQ6moVEPM3NJU
4+eiNGu+Syb1zJCNhEUYUlAfhekNbbkKpj2FPxyMrTTdWWkRQo8gre+VqeM1Zhzu
cjio3zHYAwLtgTDeEMAitD0JD1TiJ3ZMvcaeHR/oHrO8KQ6dGymtTFp5bmLatxzQ
aawnzTvXJYL0ek97YKbxgu6rTYTMfoTJozDYqOMYQOKeF6kyPXrVLqOLd/2ZQwlh
Wfjje8/G2/0dti+NMCvZEMnXiy2Poe9DyFsHsc0CAwEAAaOCA3kwggN1MB0GA1Ud
DgQWBBR+DHxkiod1Bo6Be4Xck/UlggO/BzAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L2ZneDhaSXFIZFFhT2dYdUYzSlAxSllJRHZ3Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AY0GCCsGAQUFBwEHAQH/BIIBfDCCAXgwggF0BAIAATCCAWwDBAAlEgADBAAlEg8D
BAAlEj8DBAEl5oADBAAl5oMDBAAl5oYDBAAl5qMDBAEl5qoDBAAl5rADBAEl5rYD
BAAl5rsDBAEu84oDBAAu85UDBAAu88wwDAMEAC7zzwMEAC7z0DAMAwQALvPVAwQA
LvPWAwQBLvPYMAwDBAAu890DBAUu88ADBAAu8+EwDAMEAy7z6AMEAC7z7gMEAi7z
8DAMAwQBLvP2AwQCLvP4AwQAgABHAwQBjWWEAwQAjWWHAwQAjWWPAwQAjWWRMAwD
BACNZZMDBACNZZYwDAMEAI1lmQMEAI1lnDAMAwQBjWWeAwQAjWWiMAwDBAKNZaQD
BACNZagDBAGNZaoDBACNZb8DBACNZfgDBACNZf8DBACyqokwDAMEALKqiwMEALKq
jAMEALKqkgMEALKq5wMEArkElAMEAbxIUDAMAwQAvEhTAwQAvEhWAwQAvEhYAwQA
vEhaAwQAvEh3AwQD2ZZYMA0GCSqGSIb3DQEBCwUAA4IBAQA8De1u1NSLTjRpxrly
iOZbrFwJxA0huJR1LNcAgetp44yFpxt5ixEv9BQCbL+AZ+qywyhgVEHZmfFbhGxA
4zjkuh09WTQqmNLgIwTAuBddk14xDLLaqwV3NGMfMkpqNScRzSkIssWDl6qRwM3c
mGRztb6NhAXbAwH8BdgcS4tJJSgPWX6TnxXx586u4bJWD63OKjQRUPV3aIswPjVb
C8hKlcsI6i49r12gehBs27DA/VRihcSToDcc2jboBOR+RUsz7VEOvjVtWVweLz82
WA5Uo0ANLM3KqNFwlfZbWI3grt6fl3IO+vM41uAeyxWUJJ8pKmY/HED5+pwc0iZG
l6Wm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org