Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/uqmV7V8s6hURdXULH3qWdTdccAk.roa
File:                     uqmV7V8s6hURdXULH3qWdTdccAk.roa (raw, json)
Hash identifier:          lh6e7s2/EWL3nQW6DSlTCVpSkaRossYVBUNkJmW8aWY=
Subject key identifier:   BA:A9:95:ED:5F:2C:EA:15:11:75:75:0B:1F:7A:96:75:37:5C:70:09
Certificate issuer:       /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial:       06096CEE
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/uqmV7V8s6hURdXULH3qWdTdccAk.roa
Signing time:             Wed 16 Mar 2022 09:18:08 +0000
ROA not before:           Wed 16 Mar 2022 09:18:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51375
IP address blocks:        95.84.112.0/21 maxlen: 21
                          95.84.120.0/21 maxlen: 21
                          37.131.92.0/24 maxlen: 24
                          95.84.72.0/22 maxlen: 22
                          95.84.80.0/21 maxlen: 21
                          95.84.88.0/21 maxlen: 21
                          95.84.96.0/21 maxlen: 21
                          95.84.104.0/21 maxlen: 21
                          178.132.43.0/24 maxlen: 24
                          178.132.42.0/24 maxlen: 24
                          178.132.41.0/24 maxlen: 24
                          178.132.40.0/24 maxlen: 24
                          46.184.166.0/24 maxlen: 24
                          46.184.165.0/24 maxlen: 24
                          46.184.164.0/24 maxlen: 24
                          46.184.163.0/24 maxlen: 24
                          46.184.162.0/24 maxlen: 24
                          46.184.161.0/24 maxlen: 24
                          46.184.160.0/24 maxlen: 24
                          46.184.172.0/24 maxlen: 24
                          46.184.171.0/24 maxlen: 24
                          46.184.169.0/24 maxlen: 24
                          46.184.168.0/24 maxlen: 24
                          46.184.167.0/24 maxlen: 24
                          46.184.179.0/24 maxlen: 24
                          46.184.178.0/24 maxlen: 24
                          46.184.177.0/24 maxlen: 24
                          46.184.176.0/24 maxlen: 24
                          46.184.175.0/24 maxlen: 24
                          46.184.174.0/24 maxlen: 24
                          46.184.173.0/24 maxlen: 24
                          46.184.183.0/24 maxlen: 24
                          46.184.182.0/24 maxlen: 24
                          46.184.181.0/24 maxlen: 24
                          46.184.180.0/24 maxlen: 24
                          109.63.124.0/24 maxlen: 24
                          46.184.191.0/24 maxlen: 24
                          46.184.190.0/24 maxlen: 24
                          46.184.189.0/24 maxlen: 24
                          109.63.120.0/24 maxlen: 24
                          109.63.53.0/24 maxlen: 24
                          46.184.132.0/24 maxlen: 24
                          46.184.131.0/24 maxlen: 24
                          46.184.130.0/24 maxlen: 24
                          46.184.129.0/24 maxlen: 24
                          46.184.128.0/24 maxlen: 24
                          46.184.139.0/24 maxlen: 24
                          46.184.138.0/24 maxlen: 24
                          46.184.137.0/24 maxlen: 24
                          46.184.136.0/24 maxlen: 24
                          46.184.135.0/24 maxlen: 24
                          46.184.134.0/24 maxlen: 24
                          46.184.133.0/24 maxlen: 24
                          46.184.144.0/24 maxlen: 24
                          46.184.143.0/24 maxlen: 24
                          46.184.142.0/24 maxlen: 24
                          185.36.88.0/24 maxlen: 24
                          46.184.141.0/24 maxlen: 24
                          46.184.140.0/24 maxlen: 24
                          46.184.152.0/24 maxlen: 24
                          46.184.157.0/24 maxlen: 24
                          46.184.156.0/24 maxlen: 24
                          46.184.155.0/24 maxlen: 24
                          46.184.154.0/24 maxlen: 24
                          46.184.153.0/24 maxlen: 24
                          46.184.159.0/24 maxlen: 24
                          46.184.158.0/24 maxlen: 24
                          37.131.41.0/24 maxlen: 24
                          37.131.40.0/24 maxlen: 24
                          37.131.64.0/24 maxlen: 24
                          37.131.67.0/24 maxlen: 24
                          37.131.65.0/24 maxlen: 24
                          37.131.70.0/24 maxlen: 24
                          37.131.68.0/24 maxlen: 24
                          37.131.77.0/24 maxlen: 24
                          37.131.75.0/24 maxlen: 24
                          37.131.74.0/24 maxlen: 24
                          37.131.73.0/24 maxlen: 24
                          37.131.72.0/24 maxlen: 24
                          37.131.84.0/24 maxlen: 24
                          37.131.82.0/24 maxlen: 24
                          37.131.79.0/24 maxlen: 24
                          37.131.91.0/24 maxlen: 24
                          37.131.89.0/24 maxlen: 24
                          37.131.88.0/24 maxlen: 24
                          37.131.1.0/24 maxlen: 24
                          37.131.0.0/24 maxlen: 24
                          37.131.11.0/24 maxlen: 24
                          37.131.10.0/24 maxlen: 24
                          37.131.9.0/24 maxlen: 24
                          37.131.8.0/24 maxlen: 24
                          37.131.7.0/24 maxlen: 24
                          37.131.6.0/24 maxlen: 24
                          37.131.17.0/24 maxlen: 24
                          37.131.16.0/24 maxlen: 24
                          37.131.13.0/24 maxlen: 24
                          37.131.12.0/24 maxlen: 24
                          37.131.24.0/24 maxlen: 24
                          46.184.253.0/24 maxlen: 24
                          46.184.252.0/24 maxlen: 24
                          37.131.19.0/24 maxlen: 24
                          37.131.29.0/24 maxlen: 24
                          37.131.28.0/24 maxlen: 24
                          37.131.27.0/24 maxlen: 24
                          46.184.255.0/24 maxlen: 24
                          37.131.26.0/24 maxlen: 24
                          46.184.254.0/24 maxlen: 24
                          37.131.32.0/24 maxlen: 24
                          46.42.86.0/23 maxlen: 23
                          46.42.96.0/21 maxlen: 21
                          46.42.92.0/22 maxlen: 22
                          94.76.24.0/24 maxlen: 24
                          46.42.104.0/21 maxlen: 21
                          87.237.199.0/24 maxlen: 24
                          87.237.194.0/24 maxlen: 24
                          87.237.197.0/24 maxlen: 24
                          87.237.196.0/24 maxlen: 24
                          87.237.195.0/24 maxlen: 24
                          94.76.29.0/24 maxlen: 24
                          46.42.112.0/22 maxlen: 22
                          185.143.125.0/24 maxlen: 24
                          94.76.30.0/24 maxlen: 24
                          185.143.124.0/24 maxlen: 24
                          94.76.28.0/24 maxlen: 24
                          94.76.27.0/24 maxlen: 24
                          94.76.26.0/24 maxlen: 24
                          94.76.25.0/24 maxlen: 24
                          94.76.37.0/24 maxlen: 24
                          94.76.38.0/24 maxlen: 24
                          94.76.36.0/24 maxlen: 24
                          94.76.35.0/24 maxlen: 24
                          46.42.116.0/23 maxlen: 23
                          185.143.127.0/24 maxlen: 24
                          94.76.32.0/24 maxlen: 24
                          185.143.126.0/24 maxlen: 24
                          46.42.120.0/21 maxlen: 21
                          94.76.39.0/24 maxlen: 24
                          46.42.64.0/21 maxlen: 21
                          46.42.72.0/21 maxlen: 21
                          188.116.240.0/24 maxlen: 24
                          188.116.246.0/24 maxlen: 24
                          188.116.245.0/24 maxlen: 24
                          188.116.244.0/24 maxlen: 24
                          188.116.253.0/24 maxlen: 24
                          188.116.252.0/24 maxlen: 24
                          188.116.249.0/24 maxlen: 24
                          188.116.248.0/24 maxlen: 24
                          188.116.247.0/24 maxlen: 24
                          188.116.255.0/24 maxlen: 24
                          188.116.254.0/24 maxlen: 24
                          93.188.192.0/21 maxlen: 24
                          37.131.96.0/21 maxlen: 21
                          37.131.104.0/21 maxlen: 21
                          95.84.64.0/24 maxlen: 24
                          95.84.65.0/24 maxlen: 24
                          37.131.112.0/21 maxlen: 21
                          37.131.120.0/21 maxlen: 21
                          178.132.40.0/21 maxlen: 21
                          46.184.192.0/19 maxlen: 19
                          109.63.48.0/21 maxlen: 21
                          109.63.56.0/21 maxlen: 21
                          46.184.128.0/21 maxlen: 21
                          109.63.64.0/21 maxlen: 21
                          109.63.64.0/19 maxlen: 19
                          46.184.136.0/21 maxlen: 21
                          37.131.48.0/21 maxlen: 21
                          37.131.56.0/21 maxlen: 21
                          37.131.64.0/19 maxlen: 19
                          46.184.224.0/20 maxlen: 20
                          37.131.0.0/19 maxlen: 19
                          46.184.240.0/21 maxlen: 21
                          46.184.254.0/23 maxlen: 23
                          46.42.85.0/24 maxlen: 24
                          46.42.84.0/24 maxlen: 24
                          46.42.81.0/24 maxlen: 24
                          94.76.0.0/21 maxlen: 21
                          46.42.80.0/24 maxlen: 24
                          94.76.8.0/21 maxlen: 21
                          46.42.87.0/24 maxlen: 24
                          46.42.86.0/24 maxlen: 24
                          94.76.16.0/21 maxlen: 21
                          46.42.100.0/24 maxlen: 24
                          46.42.103.0/24 maxlen: 24
                          46.42.102.0/24 maxlen: 24
                          46.42.101.0/24 maxlen: 24
                          46.42.118.0/24 maxlen: 24
                          94.76.40.0/21 maxlen: 21
                          46.42.119.0/24 maxlen: 24
                          94.76.48.0/21 maxlen: 21
                          46.42.72.0/24 maxlen: 24
                          188.116.216.0/21 maxlen: 21
                          188.116.224.0/21 maxlen: 21
                          188.116.232.0/21 maxlen: 21
                          109.63.0.0/21 maxlen: 21
                          109.63.8.0/21 maxlen: 21
                          109.63.16.0/21 maxlen: 21
                          109.63.32.0/21 maxlen: 21
                          94.76.56.0/21 maxlen: 21
                          188.116.192.0/21 maxlen: 21
                          188.116.200.0/21 maxlen: 21
                          188.116.208.0/21 maxlen: 21
                          93.188.192.0/24 maxlen: 24
                          2a02:2578::/32 maxlen: 48
                          2a02:2578:1920::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101281006 (0x6096cee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
        Validity
            Not Before: Mar 16 09:18:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=baa995ed5f2cea151175750b1f7a9675375c7009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:fb:c0:a2:37:35:46:d9:04:14:c8:f2:53:
                    73:e0:db:96:b6:b0:0e:48:f0:1d:d0:14:41:f5:c8:
                    56:d4:36:ce:ad:30:fd:5e:f3:f3:5b:c3:99:3e:ce:
                    7f:9e:e9:37:b7:be:8d:54:0b:8d:e0:00:73:fc:3f:
                    1b:68:fa:52:36:41:7c:ef:07:57:1c:16:60:ca:da:
                    a1:c4:af:21:72:32:1e:b2:5b:67:7b:2d:be:15:5d:
                    ff:d9:d0:ba:f5:32:b9:ee:e1:f8:27:7e:ae:5f:6b:
                    2b:fa:eb:d8:f1:28:b2:38:35:be:ca:1b:ed:9e:88:
                    dc:ea:1a:31:ac:8b:58:26:2a:8f:7c:7e:73:af:ac:
                    9e:0d:f6:66:00:d6:a7:64:14:6f:5a:cb:9b:21:7d:
                    bb:17:6f:61:d8:2d:20:3f:95:1d:92:f1:d9:09:e7:
                    75:3d:72:e9:b5:25:5f:d9:20:ae:1c:60:5e:e0:3c:
                    da:ca:70:80:f2:67:3c:36:3b:e9:58:02:6f:e9:d7:
                    c3:da:d3:59:d8:84:a9:86:94:33:00:fc:15:9a:89:
                    ac:48:2f:d2:f4:ee:38:69:44:24:30:22:26:66:42:
                    ef:64:90:17:95:30:ec:c7:3b:ef:c3:6c:e6:4e:85:
                    60:f6:ae:dc:46:69:fc:4b:16:4d:98:aa:9f:53:d8:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A9:95:ED:5F:2C:EA:15:11:75:75:0B:1F:7A:96:75:37:5C:70:09
            X509v3 Authority Key Identifier:
                keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/uqmV7V8s6hURdXULH3qWdTdccAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.131.0.0-37.131.32.255
                  37.131.40.0/23
                  37.131.48.0-37.131.127.255
                  46.42.64.0-46.42.81.255
                  46.42.84.0/22
                  46.42.92.0-46.42.127.255
                  46.184.128.0-46.184.144.255
                  46.184.152.0-46.184.169.255
                  46.184.171.0-46.184.183.255
                  46.184.189.0-46.184.247.255
                  46.184.252.0/22
                  87.237.194.0-87.237.197.255
                  87.237.199.0/24
                  93.188.192.0/21
                  94.76.0.0-94.76.30.255
                  94.76.32.0/24
                  94.76.35.0-94.76.63.255
                  95.84.64.0/23
                  95.84.72.0/22
                  95.84.80.0-95.84.127.255
                  109.63.0.0-109.63.23.255
                  109.63.32.0/21
                  109.63.48.0-109.63.95.255
                  109.63.120.0/24
                  109.63.124.0/24
                  178.132.40.0/21
                  185.36.88.0/24
                  185.143.124.0/22
                  188.116.192.0-188.116.240.255
                  188.116.244.0-188.116.249.255
                  188.116.252.0/22
                IPv6:
                  2a02:2578::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:5f:55:77:3d:8b:87:66:e4:4b:83:aa:74:e5:35:d8:f6:c5:
         5a:d9:55:4a:77:bf:1c:93:30:53:b2:3e:d8:62:e3:65:c0:d0:
         a3:20:72:4f:d8:01:37:2c:92:91:a2:66:4f:7f:de:3e:33:81:
         ff:80:67:7d:9f:b0:96:d1:fc:8e:d0:f8:7c:7c:c5:a4:ac:82:
         cb:7f:ff:ed:4c:d0:04:a5:a3:a2:f5:12:39:6c:bb:3e:68:27:
         ec:a7:e2:c4:68:c1:fb:10:3a:f7:9c:f1:ef:b5:79:93:4c:40:
         9d:ba:09:68:b7:7f:87:09:e7:cf:68:47:32:1a:08:51:f9:31:
         9d:88:2b:b3:0a:83:6d:53:8e:98:6c:47:01:5e:b2:eb:c5:03:
         30:9f:11:01:35:fc:8e:12:2b:a2:e1:c8:be:13:5f:69:6d:13:
         ce:d0:83:a8:c5:b6:4f:f6:44:be:7d:11:f3:2b:53:f6:18:81:
         f2:a1:67:14:e0:1e:8d:4c:22:ce:70:22:3b:f2:21:39:d1:34:
         0b:b4:ba:a1:7a:f2:66:f3:c6:3a:2d:7b:27:b8:aa:46:f9:d7:
         77:dc:f7:08:c9:4e:7c:5f:28:f7:65:86:a1:7c:aa:fc:2e:5f:
         b1:5f:88:35:dd:a6:aa:9d:b6:5e:12:0b:71:1e:e2:06:0f:38:
         d1:be:83:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:36 2024 by rpki-client on console-ams.rpki-client.org