Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/li6lYMhJEZO6rxvycuMaSYil-ZY.roa
File:                     li6lYMhJEZO6rxvycuMaSYil-ZY.roa (raw, json)
Hash identifier:          qufbjVvM0jNmsTTcBK2TzdvZ6+RZfUnRmxmaJetSn6s=
Subject key identifier:   96:2E:A5:60:C8:49:11:93:BA:AF:1B:F2:72:E3:1A:49:88:A5:F9:96
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       0820C266
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/li6lYMhJEZO6rxvycuMaSYil-ZY.roa
Signing time:             Wed 16 Feb 2022 02:48:58 +0000
ROA not before:           Wed 16 Feb 2022 02:48:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3214
IP address blocks:        80.66.196.0/22 maxlen: 24
                          45.66.216.0/22 maxlen: 22
                          92.60.42.0/24 maxlen: 24
                          92.60.41.0/24 maxlen: 24
                          92.60.40.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          88.214.20.0/22 maxlen: 22
                          45.147.48.0/22 maxlen: 24
                          45.153.244.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          45.66.128.0/22 maxlen: 22
                          91.200.241.0/24 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          141.98.196.0/22 maxlen: 24
                          45.11.45.0/24 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          147.78.240.0/21 maxlen: 21
                          185.200.64.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          185.254.72.0/22 maxlen: 24
                          185.213.148.0/22 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          194.36.222.0/23 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          45.90.210.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          185.49.32.0/22 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          194.36.24.0/22 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          45.143.232.0/22 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          78.142.228.0/22 maxlen: 22
                          45.13.198.0/24 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          2a06:4fc0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a0b:4080::/32 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0c:ed40::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a0d:de80::/29 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a03:d9c0::/29 maxlen: 48
                          2a09:0:3::/48 maxlen: 48
                          2a10:2600::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a0e:6200::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a03:d9c0:3000::/48 maxlen: 64
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a0d:4bc0::/29 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a10:480::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136364646 (0x820c266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Feb 16 02:48:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=962ea560c8491193baaf1bf272e31a4988a5f996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:cb:20:e0:26:1d:23:a2:e3:88:c2:8b:b7:
                    56:0b:44:01:24:2b:2e:a5:d3:09:ba:7f:0c:81:8f:
                    8f:ce:84:a2:6b:58:03:18:06:26:25:13:da:16:20:
                    c1:9e:03:49:df:aa:16:c9:97:f8:70:f3:63:cf:76:
                    cc:91:f0:0c:15:f2:b6:41:91:35:f3:2e:e1:26:6c:
                    e6:c8:03:a2:26:b1:7a:0e:d3:59:ca:25:ea:6c:15:
                    77:1c:72:cb:17:4c:93:04:08:f3:52:5d:b2:b5:4b:
                    d2:12:f1:ff:c5:60:2b:eb:f9:3d:3d:a3:27:c9:24:
                    04:67:62:d5:35:cc:5f:17:0d:c7:63:89:99:0e:b7:
                    77:cc:59:a2:58:ee:67:e1:4e:cf:1b:ff:e9:72:41:
                    6a:0b:9c:a2:2b:04:c9:e9:49:40:67:b7:b9:f0:5a:
                    e2:fa:53:fc:96:cf:fe:6d:8b:e0:ff:6b:c5:c3:4d:
                    75:80:75:59:ba:27:76:3f:91:5b:99:25:b3:b8:c8:
                    ad:a8:de:e3:b5:6a:79:9f:96:02:2d:ce:48:f4:bd:
                    6d:9b:e4:c5:10:0c:c5:aa:62:23:f9:e8:50:4a:ba:
                    3d:63:8f:e0:f8:08:55:3e:bc:0c:92:71:27:b6:ce:
                    5b:03:e5:06:45:d7:39:df:c7:a1:1b:ab:20:48:7b:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2E:A5:60:C8:49:11:93:BA:AF:1B:F2:72:E3:1A:49:88:A5:F9:96
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/li6lYMhJEZO6rxvycuMaSYil-ZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.66.128.0/22
                  45.66.216.0/22
                  45.80.188.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.130.20.0/22
                  45.131.152.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/22
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  78.142.228.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  88.214.20.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  147.78.240.0/21
                  149.62.44.0/22
                  185.49.32.0/22
                  185.194.52.0/22
                  185.200.64.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.72.0/22
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  194.36.24.0/22
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:aa:1a:3f:a6:14:0e:84:e3:c2:9d:11:7a:02:d3:74:b9:4a:
         ed:9b:93:91:42:b8:cf:64:98:49:1e:e3:a6:83:1e:ce:be:46:
         22:c1:0a:59:8d:f9:8d:97:2f:58:c0:b2:0e:57:a6:bd:3d:c4:
         0b:2a:8d:8f:c7:cc:1f:2b:38:1b:6f:22:82:8f:42:e4:73:25:
         1e:ff:c7:eb:4b:b5:af:30:e4:df:10:4a:d1:79:ad:da:95:72:
         d0:7f:74:cd:52:2b:28:ca:1e:96:98:3c:23:e1:57:ee:a2:93:
         70:0a:0c:27:59:60:c5:cc:60:87:cb:e9:3e:1d:d9:30:eb:36:
         38:38:41:fa:fc:4e:50:7f:44:ff:21:9a:e7:46:09:22:43:d6:
         7a:7a:b7:70:d2:4a:f9:7c:a1:51:da:6a:bf:64:a3:03:02:fb:
         be:05:63:27:77:32:70:f1:dd:b8:a8:c8:2f:de:4e:9b:dd:71:
         40:88:1e:fe:1b:61:1e:94:6a:75:41:cf:2b:9e:d9:4b:c9:0c:
         c2:b7:d7:c1:29:e0:b9:7c:c5:a6:b8:8b:28:65:c9:16:3c:c0:
         03:2d:4f:48:f8:31:45:f2:3b:e5:0f:09:9b:22:3f:28:43:3a:
         de:d2:e5:58:a7:f2:68:4b:80:a6:96:ab:28:15:ec:23:d5:3b:
         ff:b2:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org