Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/rlfGH_ncC7yj4rWe-3cMuE39JAo.roa
File:                     rlfGH_ncC7yj4rWe-3cMuE39JAo.roa (raw, json)
Hash identifier:          dFJIxoVf4svt4nLKADhkHBcB2VwQcHA+q5Ile16OfUg=
Subject key identifier:   AE:57:C6:1F:F9:DC:0B:BC:A3:E2:B5:9E:FB:77:0C:B8:4D:FD:24:0A
Certificate issuer:       /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial:       06DB16F7
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/rlfGH_ncC7yj4rWe-3cMuE39JAo.roa
Signing time:             Tue 14 Jun 2022 15:37:44 +0000
ROA not before:           Tue 14 Jun 2022 15:37:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51375
IP address blocks:        95.84.112.0/21 maxlen: 21
                          95.84.120.0/21 maxlen: 21
                          37.131.92.0/24 maxlen: 24
                          95.84.72.0/22 maxlen: 22
                          95.84.80.0/21 maxlen: 21
                          95.84.88.0/21 maxlen: 21
                          95.84.96.0/21 maxlen: 21
                          95.84.104.0/21 maxlen: 21
                          178.132.44.0/24 maxlen: 24
                          178.132.43.0/24 maxlen: 24
                          178.132.42.0/24 maxlen: 24
                          178.132.41.0/24 maxlen: 24
                          178.132.40.0/24 maxlen: 24
                          178.132.46.0/24 maxlen: 24
                          46.184.166.0/24 maxlen: 24
                          46.184.165.0/24 maxlen: 24
                          46.184.164.0/24 maxlen: 24
                          109.63.96.0/24 maxlen: 24
                          46.184.163.0/24 maxlen: 24
                          46.184.162.0/24 maxlen: 24
                          46.184.161.0/24 maxlen: 24
                          46.184.160.0/24 maxlen: 24
                          46.184.172.0/24 maxlen: 24
                          46.184.171.0/24 maxlen: 24
                          46.184.169.0/24 maxlen: 24
                          46.184.168.0/24 maxlen: 24
                          46.184.167.0/24 maxlen: 24
                          46.184.179.0/24 maxlen: 24
                          46.184.178.0/24 maxlen: 24
                          46.184.177.0/24 maxlen: 24
                          46.184.176.0/24 maxlen: 24
                          46.184.175.0/24 maxlen: 24
                          46.184.174.0/24 maxlen: 24
                          46.184.173.0/24 maxlen: 24
                          46.184.183.0/24 maxlen: 24
                          46.184.182.0/24 maxlen: 24
                          46.184.181.0/24 maxlen: 24
                          46.184.180.0/24 maxlen: 24
                          109.63.124.0/24 maxlen: 24
                          46.184.191.0/24 maxlen: 24
                          46.184.190.0/24 maxlen: 24
                          46.184.189.0/24 maxlen: 24
                          109.63.120.0/24 maxlen: 24
                          109.63.53.0/24 maxlen: 24
                          46.184.132.0/24 maxlen: 24
                          46.184.131.0/24 maxlen: 24
                          46.184.130.0/24 maxlen: 24
                          46.184.129.0/24 maxlen: 24
                          46.184.128.0/24 maxlen: 24
                          46.184.139.0/24 maxlen: 24
                          46.184.138.0/24 maxlen: 24
                          46.184.137.0/24 maxlen: 24
                          46.184.136.0/24 maxlen: 24
                          46.184.135.0/24 maxlen: 24
                          46.184.134.0/24 maxlen: 24
                          46.184.133.0/24 maxlen: 24
                          46.184.144.0/24 maxlen: 24
                          46.184.143.0/24 maxlen: 24
                          46.184.142.0/24 maxlen: 24
                          185.36.88.0/24 maxlen: 24
                          46.184.141.0/24 maxlen: 24
                          46.184.140.0/24 maxlen: 24
                          46.184.152.0/24 maxlen: 24
                          46.184.157.0/24 maxlen: 24
                          46.184.156.0/24 maxlen: 24
                          46.184.155.0/24 maxlen: 24
                          46.184.154.0/24 maxlen: 24
                          46.184.153.0/24 maxlen: 24
                          46.184.159.0/24 maxlen: 24
                          46.184.158.0/24 maxlen: 24
                          37.131.41.0/24 maxlen: 24
                          37.131.40.0/24 maxlen: 24
                          37.131.64.0/24 maxlen: 24
                          37.131.67.0/24 maxlen: 24
                          37.131.65.0/24 maxlen: 24
                          37.131.70.0/24 maxlen: 24
                          37.131.68.0/24 maxlen: 24
                          37.131.77.0/24 maxlen: 24
                          37.131.75.0/24 maxlen: 24
                          37.131.74.0/24 maxlen: 24
                          37.131.73.0/24 maxlen: 24
                          37.131.72.0/24 maxlen: 24
                          37.131.84.0/24 maxlen: 24
                          37.131.82.0/24 maxlen: 24
                          37.131.79.0/24 maxlen: 24
                          37.131.91.0/24 maxlen: 24
                          37.131.89.0/24 maxlen: 24
                          37.131.88.0/24 maxlen: 24
                          46.184.224.0/24 maxlen: 24
                          37.131.1.0/24 maxlen: 24
                          37.131.0.0/24 maxlen: 24
                          37.131.11.0/24 maxlen: 24
                          37.131.10.0/24 maxlen: 24
                          37.131.9.0/24 maxlen: 24
                          37.131.8.0/24 maxlen: 24
                          37.131.7.0/24 maxlen: 24
                          37.131.6.0/24 maxlen: 24
                          37.131.17.0/24 maxlen: 24
                          37.131.16.0/24 maxlen: 24
                          37.131.13.0/24 maxlen: 24
                          37.131.12.0/24 maxlen: 24
                          37.131.24.0/24 maxlen: 24
                          46.184.253.0/24 maxlen: 24
                          46.184.252.0/24 maxlen: 24
                          46.184.251.0/24 maxlen: 24
                          37.131.19.0/24 maxlen: 24
                          37.131.29.0/24 maxlen: 24
                          37.131.28.0/24 maxlen: 24
                          37.131.27.0/24 maxlen: 24
                          46.184.255.0/24 maxlen: 24
                          37.131.26.0/24 maxlen: 24
                          46.184.254.0/24 maxlen: 24
                          37.131.32.0/24 maxlen: 24
                          46.42.86.0/23 maxlen: 23
                          46.42.96.0/21 maxlen: 21
                          46.42.92.0/22 maxlen: 22
                          94.76.24.0/24 maxlen: 24
                          46.42.104.0/21 maxlen: 21
                          87.237.199.0/24 maxlen: 24
                          87.237.194.0/24 maxlen: 24
                          87.237.197.0/24 maxlen: 24
                          87.237.196.0/24 maxlen: 24
                          87.237.195.0/24 maxlen: 24
                          94.76.29.0/24 maxlen: 24
                          46.42.112.0/22 maxlen: 22
                          185.143.125.0/24 maxlen: 24
                          94.76.30.0/24 maxlen: 24
                          185.143.124.0/24 maxlen: 24
                          94.76.28.0/24 maxlen: 24
                          94.76.27.0/24 maxlen: 24
                          94.76.26.0/24 maxlen: 24
                          94.76.25.0/24 maxlen: 24
                          94.76.37.0/24 maxlen: 24
                          94.76.38.0/24 maxlen: 24
                          94.76.36.0/24 maxlen: 24
                          94.76.35.0/24 maxlen: 24
                          46.42.116.0/23 maxlen: 23
                          185.143.127.0/24 maxlen: 24
                          94.76.32.0/24 maxlen: 24
                          185.143.126.0/24 maxlen: 24
                          46.42.120.0/21 maxlen: 21
                          94.76.39.0/24 maxlen: 24
                          46.42.64.0/21 maxlen: 21
                          46.42.72.0/21 maxlen: 21
                          188.116.240.0/24 maxlen: 24
                          188.116.246.0/24 maxlen: 24
                          188.116.245.0/24 maxlen: 24
                          188.116.244.0/24 maxlen: 24
                          188.116.253.0/24 maxlen: 24
                          188.116.252.0/24 maxlen: 24
                          188.116.249.0/24 maxlen: 24
                          188.116.248.0/24 maxlen: 24
                          188.116.247.0/24 maxlen: 24
                          188.116.255.0/24 maxlen: 24
                          188.116.254.0/24 maxlen: 24
                          93.188.192.0/21 maxlen: 24
                          37.131.96.0/21 maxlen: 21
                          37.131.104.0/21 maxlen: 21
                          95.84.64.0/24 maxlen: 24
                          95.84.65.0/24 maxlen: 24
                          37.131.112.0/21 maxlen: 21
                          37.131.120.0/21 maxlen: 21
                          178.132.40.0/21 maxlen: 21
                          46.184.192.0/19 maxlen: 19
                          109.63.48.0/21 maxlen: 21
                          109.63.56.0/21 maxlen: 21
                          46.184.128.0/21 maxlen: 21
                          109.63.64.0/21 maxlen: 21
                          109.63.64.0/19 maxlen: 19
                          46.184.136.0/21 maxlen: 21
                          37.131.48.0/21 maxlen: 21
                          37.131.56.0/21 maxlen: 21
                          37.131.64.0/19 maxlen: 19
                          46.184.224.0/20 maxlen: 20
                          37.131.0.0/19 maxlen: 19
                          46.184.240.0/21 maxlen: 21
                          46.184.254.0/23 maxlen: 23
                          46.42.85.0/24 maxlen: 24
                          46.42.84.0/24 maxlen: 24
                          46.42.81.0/24 maxlen: 24
                          94.76.0.0/21 maxlen: 21
                          46.42.80.0/24 maxlen: 24
                          94.76.8.0/21 maxlen: 21
                          46.42.87.0/24 maxlen: 24
                          46.42.86.0/24 maxlen: 24
                          94.76.16.0/21 maxlen: 21
                          46.42.100.0/24 maxlen: 24
                          46.42.103.0/24 maxlen: 24
                          46.42.102.0/24 maxlen: 24
                          46.42.101.0/24 maxlen: 24
                          46.42.118.0/24 maxlen: 24
                          94.76.40.0/21 maxlen: 21
                          46.42.119.0/24 maxlen: 24
                          94.76.48.0/21 maxlen: 21
                          46.42.72.0/24 maxlen: 24
                          188.116.216.0/21 maxlen: 21
                          188.116.224.0/21 maxlen: 21
                          188.116.232.0/21 maxlen: 21
                          109.63.0.0/21 maxlen: 21
                          109.63.8.0/21 maxlen: 21
                          109.63.16.0/21 maxlen: 21
                          109.63.32.0/21 maxlen: 21
                          94.76.56.0/21 maxlen: 21
                          188.116.192.0/21 maxlen: 21
                          188.116.200.0/21 maxlen: 21
                          188.116.208.0/21 maxlen: 21
                          93.188.192.0/24 maxlen: 24
                          2a02:2578::/32 maxlen: 48
                          2a02:2578:1920::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115021559 (0x6db16f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
        Validity
            Not Before: Jun 14 15:37:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ae57c61ff9dc0bbca3e2b59efb770cb84dfd240a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:9b:62:e1:68:d8:e8:b5:1c:7c:42:1e:1a:
                    a9:22:d4:06:01:41:f2:ca:51:aa:d2:60:9f:6d:96:
                    c1:a4:e1:0d:11:05:f7:5c:d9:8e:fb:64:cb:71:da:
                    03:7d:34:e7:02:2d:d3:09:23:16:7a:8f:29:20:07:
                    c9:01:79:fa:f7:4b:3b:eb:e1:36:97:b6:2c:ae:01:
                    a8:79:44:24:9d:5b:fe:7c:52:55:fb:c1:f6:a8:d5:
                    68:5c:c7:92:43:f4:bf:14:28:6e:cb:08:15:81:c0:
                    f5:4f:03:a5:2a:5e:b4:6a:83:40:9c:8b:8b:0b:62:
                    df:1d:08:39:71:30:6b:92:37:5b:f2:61:7e:dd:c2:
                    38:7e:09:ae:44:10:4e:a5:9a:38:be:17:bb:65:eb:
                    d9:2a:a9:eb:fb:c1:a1:71:a1:83:3c:62:b5:3e:2a:
                    89:fc:20:f0:44:8e:40:bc:0b:ff:c8:fa:59:fc:d6:
                    59:f6:ef:1b:55:92:a9:c4:0f:8a:64:46:e5:a9:c9:
                    45:24:36:49:6e:5e:34:74:92:69:eb:be:17:3d:ba:
                    87:3d:0d:35:77:ac:83:68:4d:a6:7a:95:33:e3:1a:
                    12:0b:59:46:d2:43:48:f0:f9:34:0c:97:c8:e5:6f:
                    39:92:1d:9b:1b:2b:e6:f5:cb:10:77:e6:7d:c1:e2:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:57:C6:1F:F9:DC:0B:BC:A3:E2:B5:9E:FB:77:0C:B8:4D:FD:24:0A
            X509v3 Authority Key Identifier:
                keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/rlfGH_ncC7yj4rWe-3cMuE39JAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.131.0.0-37.131.32.255
                  37.131.40.0/23
                  37.131.48.0-37.131.127.255
                  46.42.64.0-46.42.81.255
                  46.42.84.0/22
                  46.42.92.0-46.42.127.255
                  46.184.128.0-46.184.144.255
                  46.184.152.0-46.184.169.255
                  46.184.171.0-46.184.183.255
                  46.184.189.0-46.184.247.255
                  46.184.251.0-46.184.255.255
                  87.237.194.0-87.237.197.255
                  87.237.199.0/24
                  93.188.192.0/21
                  94.76.0.0-94.76.30.255
                  94.76.32.0/24
                  94.76.35.0-94.76.63.255
                  95.84.64.0/23
                  95.84.72.0/22
                  95.84.80.0-95.84.127.255
                  109.63.0.0-109.63.23.255
                  109.63.32.0/21
                  109.63.48.0-109.63.96.255
                  109.63.120.0/24
                  109.63.124.0/24
                  178.132.40.0/21
                  185.36.88.0/24
                  185.143.124.0/22
                  188.116.192.0-188.116.240.255
                  188.116.244.0-188.116.249.255
                  188.116.252.0/22
                IPv6:
                  2a02:2578::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:57:73:84:c1:82:6d:e4:76:98:ca:e2:a5:1f:c0:11:a3:5c:
         d5:91:df:95:30:e0:6d:db:74:da:28:c3:4c:db:c8:f0:a0:81:
         11:2f:6b:25:7b:94:62:b3:a3:65:2a:87:73:e4:65:aa:72:3e:
         44:2d:b5:c5:eb:2b:2d:94:c2:5a:85:02:80:e8:23:45:e0:fa:
         50:72:8b:bc:f0:f9:89:89:de:f3:78:cd:a4:4c:45:84:00:30:
         19:f5:f5:44:cb:17:4d:a7:20:44:bb:64:ce:a4:3b:72:81:7b:
         c9:f7:11:76:c7:71:42:50:e6:a4:86:89:c5:32:dc:27:30:f1:
         b9:04:ca:92:30:68:12:e1:f7:73:32:5f:c8:ed:da:8f:0d:da:
         5c:e9:df:48:af:95:f5:b9:a9:d8:bc:c6:58:c3:dd:05:69:fe:
         0a:01:30:0a:f0:62:62:89:24:e0:d7:53:36:da:32:9e:f4:92:
         84:3e:ce:08:a4:60:c3:f7:ca:a5:bf:26:9c:4a:a2:75:65:b0:
         9a:35:0a:cb:b7:a6:45:bb:a4:63:38:5c:ed:80:5d:b2:84:31:
         45:a2:70:15:67:43:b3:28:ff:1c:48:62:a0:4c:33:bb:8e:7a:
         1e:1e:fd:9a:60:9c:47:ad:16:72:a1:c8:f3:26:12:53:35:17:
         93:4c:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:36 2024 by rpki-client on console-ams.rpki-client.org