Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/iCCxXM8zEjirjFaTC5eHe09Bl5k.roa
File:                     iCCxXM8zEjirjFaTC5eHe09Bl5k.roa (raw, json)
Hash identifier:          xWg68gspXyngXOsSF79qv7anqrUGo21OSyhVW5izc6w=
Subject key identifier:   88:20:B1:5C:CF:33:12:38:AB:8C:56:93:0B:97:87:7B:4F:41:97:99
Certificate issuer:       /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial:       07075C3F
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/iCCxXM8zEjirjFaTC5eHe09Bl5k.roa
Signing time:             Sun 03 Jul 2022 10:36:26 +0000
ROA not before:           Sun 03 Jul 2022 10:36:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51375
IP address blocks:        95.84.112.0/21 maxlen: 21
                          95.84.120.0/21 maxlen: 21
                          37.131.92.0/24 maxlen: 24
                          95.84.72.0/22 maxlen: 22
                          95.84.80.0/21 maxlen: 21
                          95.84.88.0/21 maxlen: 21
                          95.84.96.0/21 maxlen: 21
                          95.84.104.0/21 maxlen: 21
                          178.132.44.0/24 maxlen: 24
                          178.132.43.0/24 maxlen: 24
                          178.132.42.0/24 maxlen: 24
                          178.132.41.0/24 maxlen: 24
                          178.132.40.0/24 maxlen: 24
                          178.132.46.0/24 maxlen: 24
                          46.184.166.0/24 maxlen: 24
                          46.184.165.0/24 maxlen: 24
                          46.184.164.0/24 maxlen: 24
                          109.63.96.0/24 maxlen: 24
                          46.184.163.0/24 maxlen: 24
                          46.184.162.0/24 maxlen: 24
                          46.184.161.0/24 maxlen: 24
                          46.184.160.0/24 maxlen: 24
                          46.184.172.0/24 maxlen: 24
                          46.184.171.0/24 maxlen: 24
                          46.184.169.0/24 maxlen: 24
                          46.184.168.0/24 maxlen: 24
                          46.184.167.0/24 maxlen: 24
                          46.184.179.0/24 maxlen: 24
                          46.184.178.0/24 maxlen: 24
                          46.184.177.0/24 maxlen: 24
                          46.184.176.0/24 maxlen: 24
                          46.184.175.0/24 maxlen: 24
                          46.184.174.0/24 maxlen: 24
                          46.184.173.0/24 maxlen: 24
                          46.184.183.0/24 maxlen: 24
                          46.184.182.0/24 maxlen: 24
                          46.184.181.0/24 maxlen: 24
                          46.184.180.0/24 maxlen: 24
                          109.63.124.0/24 maxlen: 24
                          46.184.191.0/24 maxlen: 24
                          46.184.190.0/24 maxlen: 24
                          46.184.189.0/24 maxlen: 24
                          109.63.120.0/24 maxlen: 24
                          109.63.53.0/24 maxlen: 24
                          46.184.132.0/24 maxlen: 24
                          46.184.131.0/24 maxlen: 24
                          46.184.130.0/24 maxlen: 24
                          46.184.129.0/24 maxlen: 24
                          46.184.128.0/24 maxlen: 24
                          46.184.139.0/24 maxlen: 24
                          46.184.138.0/24 maxlen: 24
                          46.184.137.0/24 maxlen: 24
                          46.184.136.0/24 maxlen: 24
                          46.184.135.0/24 maxlen: 24
                          46.184.134.0/24 maxlen: 24
                          46.184.133.0/24 maxlen: 24
                          46.184.144.0/24 maxlen: 24
                          46.184.143.0/24 maxlen: 24
                          46.184.142.0/24 maxlen: 24
                          185.36.88.0/24 maxlen: 24
                          46.184.141.0/24 maxlen: 24
                          46.184.140.0/24 maxlen: 24
                          46.184.152.0/24 maxlen: 24
                          46.184.157.0/24 maxlen: 24
                          46.184.156.0/24 maxlen: 24
                          46.184.155.0/24 maxlen: 24
                          46.184.154.0/24 maxlen: 24
                          46.184.153.0/24 maxlen: 24
                          46.184.159.0/24 maxlen: 24
                          46.184.158.0/24 maxlen: 24
                          37.131.41.0/24 maxlen: 24
                          37.131.40.0/24 maxlen: 24
                          37.131.64.0/24 maxlen: 24
                          37.131.67.0/24 maxlen: 24
                          37.131.65.0/24 maxlen: 24
                          37.131.70.0/24 maxlen: 24
                          37.131.68.0/24 maxlen: 24
                          37.131.77.0/24 maxlen: 24
                          37.131.75.0/24 maxlen: 24
                          37.131.74.0/24 maxlen: 24
                          37.131.73.0/24 maxlen: 24
                          37.131.72.0/24 maxlen: 24
                          37.131.84.0/24 maxlen: 24
                          37.131.82.0/24 maxlen: 24
                          37.131.79.0/24 maxlen: 24
                          37.131.91.0/24 maxlen: 24
                          37.131.89.0/24 maxlen: 24
                          37.131.88.0/24 maxlen: 24
                          46.184.224.0/24 maxlen: 24
                          37.131.1.0/24 maxlen: 24
                          37.131.0.0/24 maxlen: 24
                          37.131.11.0/24 maxlen: 24
                          37.131.10.0/24 maxlen: 24
                          37.131.9.0/24 maxlen: 24
                          37.131.8.0/24 maxlen: 24
                          37.131.7.0/24 maxlen: 24
                          37.131.6.0/24 maxlen: 24
                          37.131.17.0/24 maxlen: 24
                          37.131.16.0/24 maxlen: 24
                          37.131.13.0/24 maxlen: 24
                          37.131.12.0/24 maxlen: 24
                          37.131.24.0/24 maxlen: 24
                          46.184.253.0/24 maxlen: 24
                          46.184.252.0/24 maxlen: 24
                          46.184.251.0/24 maxlen: 24
                          37.131.19.0/24 maxlen: 24
                          37.131.29.0/24 maxlen: 24
                          37.131.28.0/24 maxlen: 24
                          37.131.27.0/24 maxlen: 24
                          37.131.26.0/24 maxlen: 24
                          46.184.255.0/24 maxlen: 24
                          46.184.254.0/24 maxlen: 24
                          37.131.32.0/24 maxlen: 24
                          46.42.86.0/23 maxlen: 23
                          46.42.96.0/21 maxlen: 21
                          46.42.92.0/22 maxlen: 22
                          94.76.24.0/24 maxlen: 24
                          46.42.104.0/21 maxlen: 21
                          87.237.199.0/24 maxlen: 24
                          87.237.194.0/24 maxlen: 24
                          87.237.197.0/24 maxlen: 24
                          87.237.196.0/24 maxlen: 24
                          87.237.195.0/24 maxlen: 24
                          94.76.29.0/24 maxlen: 24
                          46.42.112.0/22 maxlen: 22
                          185.143.125.0/24 maxlen: 24
                          94.76.30.0/24 maxlen: 24
                          185.143.124.0/24 maxlen: 24
                          94.76.28.0/24 maxlen: 24
                          94.76.27.0/24 maxlen: 24
                          94.76.26.0/24 maxlen: 24
                          94.76.25.0/24 maxlen: 24
                          94.76.37.0/24 maxlen: 24
                          94.76.38.0/24 maxlen: 24
                          94.76.36.0/24 maxlen: 24
                          46.42.116.0/23 maxlen: 23
                          94.76.35.0/24 maxlen: 24
                          185.143.127.0/24 maxlen: 24
                          94.76.32.0/24 maxlen: 24
                          185.143.126.0/24 maxlen: 24
                          46.42.120.0/21 maxlen: 21
                          94.76.39.0/24 maxlen: 24
                          46.42.64.0/21 maxlen: 21
                          46.42.72.0/21 maxlen: 21
                          188.116.240.0/24 maxlen: 24
                          188.116.246.0/24 maxlen: 24
                          188.116.245.0/24 maxlen: 24
                          188.116.244.0/24 maxlen: 24
                          188.116.242.0/24 maxlen: 24
                          188.116.253.0/24 maxlen: 24
                          188.116.252.0/24 maxlen: 24
                          188.116.249.0/24 maxlen: 24
                          188.116.248.0/24 maxlen: 24
                          188.116.247.0/24 maxlen: 24
                          188.116.255.0/24 maxlen: 24
                          188.116.254.0/24 maxlen: 24
                          93.188.192.0/21 maxlen: 24
                          37.131.96.0/21 maxlen: 21
                          37.131.104.0/21 maxlen: 21
                          95.84.64.0/24 maxlen: 24
                          95.84.65.0/24 maxlen: 24
                          37.131.112.0/21 maxlen: 21
                          37.131.120.0/21 maxlen: 21
                          178.132.40.0/21 maxlen: 21
                          46.184.192.0/19 maxlen: 19
                          109.63.48.0/21 maxlen: 21
                          109.63.56.0/21 maxlen: 21
                          46.184.128.0/21 maxlen: 21
                          109.63.64.0/21 maxlen: 21
                          109.63.64.0/19 maxlen: 19
                          46.184.136.0/21 maxlen: 21
                          37.131.48.0/21 maxlen: 21
                          37.131.56.0/21 maxlen: 21
                          37.131.64.0/19 maxlen: 19
                          46.184.224.0/20 maxlen: 20
                          37.131.0.0/19 maxlen: 19
                          46.184.240.0/21 maxlen: 21
                          46.184.254.0/23 maxlen: 23
                          46.42.85.0/24 maxlen: 24
                          46.42.84.0/24 maxlen: 24
                          46.42.81.0/24 maxlen: 24
                          94.76.0.0/21 maxlen: 21
                          46.42.80.0/24 maxlen: 24
                          94.76.8.0/21 maxlen: 21
                          46.42.87.0/24 maxlen: 24
                          46.42.86.0/24 maxlen: 24
                          94.76.16.0/21 maxlen: 21
                          46.42.100.0/24 maxlen: 24
                          46.42.103.0/24 maxlen: 24
                          46.42.102.0/24 maxlen: 24
                          46.42.101.0/24 maxlen: 24
                          46.42.118.0/24 maxlen: 24
                          94.76.40.0/21 maxlen: 21
                          46.42.119.0/24 maxlen: 24
                          94.76.48.0/21 maxlen: 21
                          46.42.72.0/24 maxlen: 24
                          188.116.216.0/21 maxlen: 21
                          188.116.224.0/21 maxlen: 21
                          188.116.232.0/21 maxlen: 21
                          109.63.0.0/21 maxlen: 21
                          109.63.8.0/21 maxlen: 21
                          109.63.16.0/21 maxlen: 21
                          109.63.32.0/21 maxlen: 21
                          94.76.56.0/21 maxlen: 21
                          188.116.192.0/21 maxlen: 21
                          188.116.200.0/21 maxlen: 21
                          188.116.208.0/21 maxlen: 21
                          93.188.192.0/24 maxlen: 24
                          2a02:2578:20a0::/44 maxlen: 48
                          2a02:2578::/32 maxlen: 48
                          2a02:2578:1920::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117922879 (0x7075c3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
        Validity
            Not Before: Jul  3 10:36:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8820b15ccf331238ab8c56930b97877b4f419799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:cb:89:9a:da:60:3c:00:c2:7d:92:07:5a:
                    8d:d6:2b:47:a1:52:53:d9:5a:d3:f1:62:64:91:9f:
                    12:20:a2:27:77:a3:9c:fa:d2:50:71:d1:81:a0:75:
                    a9:06:c7:74:40:bd:1f:68:99:48:12:c2:c1:88:6b:
                    70:02:27:5d:fa:28:13:c0:a2:6d:f6:3e:1e:7b:a4:
                    34:30:54:08:53:25:0f:f3:1a:21:97:33:50:90:dd:
                    6f:bc:65:f2:0f:e9:c8:4b:4b:12:fa:8c:6f:1e:a6:
                    a4:3c:ee:45:fb:2d:3f:34:1c:85:ec:db:3b:e6:95:
                    2c:5c:46:ee:91:43:a9:1c:8f:31:5f:ee:81:dd:97:
                    61:b9:eb:9d:8f:39:29:31:32:7b:21:6b:80:3d:33:
                    74:36:75:e6:fb:05:a9:1d:7e:fe:6e:44:5e:ec:de:
                    07:f6:14:bb:20:d9:f4:44:dd:3a:be:9e:7c:a8:7e:
                    b0:d2:8f:85:db:ab:0e:32:f6:fe:a0:c2:f0:8c:bc:
                    52:87:87:64:e3:e5:ba:cd:23:6f:d9:2d:e7:6b:5a:
                    da:14:d3:2b:cd:ba:ca:cf:17:77:47:ba:7e:22:6b:
                    e6:b2:2a:60:50:c2:8e:03:f3:66:1e:67:56:3d:4b:
                    3f:07:ff:fc:37:80:fe:9a:15:0f:9d:de:ee:08:67:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:20:B1:5C:CF:33:12:38:AB:8C:56:93:0B:97:87:7B:4F:41:97:99
            X509v3 Authority Key Identifier:
                keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/iCCxXM8zEjirjFaTC5eHe09Bl5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.131.0.0-37.131.32.255
                  37.131.40.0/23
                  37.131.48.0-37.131.127.255
                  46.42.64.0-46.42.81.255
                  46.42.84.0/22
                  46.42.92.0-46.42.127.255
                  46.184.128.0-46.184.144.255
                  46.184.152.0-46.184.169.255
                  46.184.171.0-46.184.183.255
                  46.184.189.0-46.184.247.255
                  46.184.251.0-46.184.255.255
                  87.237.194.0-87.237.197.255
                  87.237.199.0/24
                  93.188.192.0/21
                  94.76.0.0-94.76.30.255
                  94.76.32.0/24
                  94.76.35.0-94.76.63.255
                  95.84.64.0/23
                  95.84.72.0/22
                  95.84.80.0-95.84.127.255
                  109.63.0.0-109.63.23.255
                  109.63.32.0/21
                  109.63.48.0-109.63.96.255
                  109.63.120.0/24
                  109.63.124.0/24
                  178.132.40.0/21
                  185.36.88.0/24
                  185.143.124.0/22
                  188.116.192.0-188.116.240.255
                  188.116.242.0/24
                  188.116.244.0-188.116.249.255
                  188.116.252.0/22
                IPv6:
                  2a02:2578::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:11:56:c6:d9:c8:e8:fd:dd:7d:86:ff:a9:cc:40:27:4d:72:
         dd:09:fb:bf:87:1a:3c:2d:e2:1f:f5:29:81:14:70:63:58:60:
         99:2b:25:20:60:97:db:dc:d9:06:38:dc:0b:9c:fe:ca:f2:9b:
         4e:a9:f8:a1:eb:f2:1e:78:e5:46:01:ab:fa:a9:46:62:7b:4f:
         ba:e8:43:e9:2b:01:63:c0:f2:60:7d:03:c7:c1:f9:db:67:ef:
         a1:94:5e:52:cd:3c:b1:57:2c:a5:5c:f6:c5:09:82:ac:33:63:
         23:99:cc:77:17:86:4a:df:df:ff:91:a4:3e:7b:e4:51:a2:95:
         65:64:ea:a5:ed:03:a3:a1:8e:5f:e8:d1:54:f1:46:a3:88:20:
         9d:67:c1:f0:40:96:a1:c2:0b:92:a5:a0:14:19:c7:17:7a:be:
         5b:e2:eb:f0:9b:75:05:8d:2f:e2:a7:2c:31:0a:dd:13:69:90:
         a9:ae:00:4a:cd:7e:90:56:d7:df:f8:4c:01:ec:f3:31:60:90:
         b1:8f:ca:a7:0c:ec:5f:56:f2:45:94:8a:89:8a:b6:75:74:e1:
         9e:06:b4:1a:0b:d5:d8:ea:f6:36:20:17:48:5a:23:4a:5a:a9:
         e2:07:fd:f0:ca:00:27:40:c5:69:9f:e2:c0:ab:93:df:59:50:
         d8:a9:80:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-fra.rpki-client.org