Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/bn--WLBnyOUEGn1JSoRnKdW0RZM.roa
File:                     bn--WLBnyOUEGn1JSoRnKdW0RZM.roa (raw, json)
Hash identifier:          UmnpDZMfJeFPj2VCesBzgT8L1YoMzO7PQ5VeWj426/A=
Subject key identifier:   6E:7F:BE:58:B0:67:C8:E5:04:1A:7D:49:4A:84:67:29:D5:B4:45:93
Certificate issuer:       /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial:       1008A224
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/bn--WLBnyOUEGn1JSoRnKdW0RZM.roa
Signing time:             Sat 01 Jan 2022 15:02:02 +0000
ROA not before:           Sat 01 Jan 2022 15:02:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48582
IP address blocks:        217.147.178.0/24 maxlen: 24
                          217.147.178.0/23 maxlen: 23
                          217.147.177.0/24 maxlen: 24
                          217.147.179.0/24 maxlen: 24
                          217.147.176.0/24 maxlen: 24
                          217.147.176.0/23 maxlen: 23
                          217.147.182.0/24 maxlen: 24
                          217.147.182.0/23 maxlen: 23
                          217.147.181.0/24 maxlen: 24
                          217.147.183.0/24 maxlen: 24
                          217.147.180.0/24 maxlen: 24
                          193.118.192.0/24 maxlen: 24
                          193.118.196.0/24 maxlen: 24
                          193.118.198.0/24 maxlen: 24
                          193.118.194.0/24 maxlen: 24
                          193.118.193.0/24 maxlen: 24
                          193.118.199.0/24 maxlen: 24
                          193.118.201.0/24 maxlen: 24
                          193.118.206.0/24 maxlen: 24
                          193.118.203.0/24 maxlen: 24
                          193.118.202.0/24 maxlen: 24
                          193.118.205.0/24 maxlen: 24
                          193.118.204.0/23 maxlen: 23
                          193.118.204.0/24 maxlen: 24
                          193.118.200.0/22 maxlen: 22
                          193.118.200.0/24 maxlen: 24
                          193.118.210.0/24 maxlen: 24
                          193.118.209.0/24 maxlen: 24
                          193.118.212.0/24 maxlen: 24
                          193.118.211.0/24 maxlen: 24
                          193.118.208.0/24 maxlen: 24
                          193.118.207.0/24 maxlen: 24
                          193.118.213.0/24 maxlen: 24
                          193.118.216.0/22 maxlen: 22
                          193.118.217.0/24 maxlen: 24
                          193.118.216.0/24 maxlen: 24
                          193.118.219.0/24 maxlen: 24
                          193.118.218.0/24 maxlen: 24
                          193.118.215.0/24 maxlen: 24
                          193.118.214.0/23 maxlen: 23
                          193.118.214.0/24 maxlen: 24
                          209.213.48.0/22 maxlen: 22
                          209.213.49.0/24 maxlen: 24
                          209.213.48.0/20 maxlen: 20
                          209.213.48.0/24 maxlen: 24
                          209.213.50.0/24 maxlen: 24
                          193.118.220.0/24 maxlen: 24
                          209.213.51.0/24 maxlen: 24
                          209.213.56.0/22 maxlen: 22
                          209.213.56.0/24 maxlen: 24
                          209.213.55.0/24 maxlen: 24
                          209.213.57.0/24 maxlen: 24
                          209.213.52.0/24 maxlen: 24
                          209.213.52.0/22 maxlen: 22
                          209.213.54.0/24 maxlen: 24
                          209.213.53.0/24 maxlen: 24
                          209.213.58.0/24 maxlen: 24
                          209.213.63.0/24 maxlen: 24
                          209.213.62.0/24 maxlen: 24
                          209.213.59.0/24 maxlen: 24
                          209.213.60.0/22 maxlen: 22
                          209.213.61.0/24 maxlen: 24
                          209.213.60.0/24 maxlen: 24
                          193.118.138.0/24 maxlen: 24
                          193.118.137.0/24 maxlen: 24
                          193.118.136.0/24 maxlen: 24
                          193.118.139.0/24 maxlen: 24
                          193.118.138.0/23 maxlen: 23
                          193.118.133.0/24 maxlen: 24
                          193.118.135.0/24 maxlen: 24
                          193.118.134.0/23 maxlen: 23
                          193.118.134.0/24 maxlen: 24
                          193.118.140.0/24 maxlen: 24
                          193.118.142.0/24 maxlen: 24
                          193.118.141.0/24 maxlen: 24
                          193.118.144.0/24 maxlen: 24
                          193.118.143.0/24 maxlen: 24
                          193.118.144.0/22 maxlen: 22
                          193.118.145.0/24 maxlen: 24
                          193.118.152.0/24 maxlen: 24
                          193.118.151.0/24 maxlen: 24
                          193.118.150.0/23 maxlen: 23
                          193.118.150.0/24 maxlen: 24
                          193.118.152.0/23 maxlen: 23
                          193.118.147.0/24 maxlen: 24
                          193.118.149.0/24 maxlen: 24
                          193.118.148.0/24 maxlen: 24
                          193.118.146.0/24 maxlen: 24
                          193.118.154.0/24 maxlen: 24
                          193.118.153.0/24 maxlen: 24
                          193.118.156.0/24 maxlen: 24
                          193.118.155.0/24 maxlen: 24
                          193.118.158.0/24 maxlen: 24
                          193.118.157.0/24 maxlen: 24
                          193.118.159.0/24 maxlen: 24
                          193.118.128.0/24 maxlen: 24
                          193.118.128.0/23 maxlen: 23
                          193.118.130.0/24 maxlen: 24
                          193.118.129.0/24 maxlen: 24
                          193.118.132.0/24 maxlen: 24
                          193.118.132.0/23 maxlen: 23
                          193.118.131.0/24 maxlen: 24
                          138.43.4.0/24 maxlen: 24
                          138.43.10.0/24 maxlen: 24
                          138.43.6.0/24 maxlen: 24
                          138.43.8.0/24 maxlen: 24
                          138.43.7.0/24 maxlen: 24
                          138.43.9.0/24 maxlen: 24
                          138.43.5.0/24 maxlen: 24
                          138.43.11.0/24 maxlen: 24
                          138.43.15.0/24 maxlen: 24
                          138.43.14.0/24 maxlen: 24
                          138.43.13.0/24 maxlen: 24
                          138.43.12.0/24 maxlen: 24
                          138.43.31.0/24 maxlen: 24
                          138.43.28.0/22 maxlen: 22
                          138.43.29.0/24 maxlen: 24
                          138.43.28.0/24 maxlen: 24
                          138.43.30.0/24 maxlen: 24
                          138.43.26.0/24 maxlen: 24
                          185.170.161.0/24 maxlen: 24
                          185.170.163.0/24 maxlen: 24
                          185.170.162.0/24 maxlen: 24
                          63.142.4.0/24 maxlen: 24
                          63.142.1.0/24 maxlen: 24
                          63.142.3.0/24 maxlen: 24
                          63.142.2.0/24 maxlen: 24
                          63.142.0.0/24 maxlen: 24
                          63.142.5.0/24 maxlen: 24
                          63.142.6.0/24 maxlen: 24
                          63.142.6.0/23 maxlen: 23
                          63.142.11.0/24 maxlen: 24
                          63.142.8.0/24 maxlen: 24
                          63.142.7.0/24 maxlen: 24
                          63.142.10.0/24 maxlen: 24
                          63.142.9.0/24 maxlen: 24
                          63.142.15.0/24 maxlen: 24
                          63.142.14.0/23 maxlen: 23
                          63.142.14.0/24 maxlen: 24
                          63.142.12.0/24 maxlen: 24
                          63.142.13.0/24 maxlen: 24
                          2a0b:2900:61c0::/42 maxlen: 42
                          2a0b:2900:3140::/42 maxlen: 42
                          2a0b:2900:1140::/42 maxlen: 42
                          2a0b:2900:11c0::/42 maxlen: 42
                          2a0b:2900:2140::/42 maxlen: 42
                          2a0b:2900:31c0::/42 maxlen: 42
                          2a0b:2900:32c0::/42 maxlen: 42
                          2a0b:2900:3240::/42 maxlen: 42
                          2a0b:2900:6140::/42 maxlen: 42
                          2a0b:2900:12c0::/42 maxlen: 42
                          2a0b:2900:21c0::/42 maxlen: 42
                          2a0b:2900:216c::/48 maxlen: 48
                          2a0b:2900:1f00::/40 maxlen: 40
                          2a0b:2900:7f::/48 maxlen: 48
                          2a0b:2900:1100::/42 maxlen: 42
                          2a0b:2900:3200::/42 maxlen: 42
                          2a0b:2900:6100::/42 maxlen: 42
                          2a0b:2900:3100::/42 maxlen: 42
                          2a0b:2900:3280::/42 maxlen: 42
                          2a0b:2900:2180::/42 maxlen: 42
                          2a0b:2900:3180::/42 maxlen: 42
                          2a0b:2900:1180::/42 maxlen: 42
                          2a0b:2900:6180::/42 maxlen: 42
                          2a0b:2900:2100::/42 maxlen: 42
                          2a0b:2900:5234::/47 maxlen: 47
                          2a0b:2900:52b4::/47 maxlen: 47
                          2a0b:2900:3180::/41 maxlen: 41
                          2a0b:2900:2180::/41 maxlen: 41
                          2a0b:2900:1080::/41 maxlen: 42
                          2a0b:2900:2300::/41 maxlen: 42
                          2a0b:2900:1200::/41 maxlen: 42
                          2a0b:2900:4280::/41 maxlen: 41
                          2a0b:2900:4200::/41 maxlen: 41
                          2a0b:2900:1100::/41 maxlen: 41
                          2a0b:2900:2200::/41 maxlen: 42
                          2a0b:2900:6280::/41 maxlen: 41
                          2a0b:2900:2380::/41 maxlen: 42
                          2a0b:2900:1280::/41 maxlen: 42
                          2a0b:2900:4180::/41 maxlen: 41
                          2a0b:2900:6200::/41 maxlen: 41
                          2a0b:2900:5280::/41 maxlen: 41
                          2a0b:2900:4100::/41 maxlen: 41
                          2a0b:2900:1180::/41 maxlen: 41
                          2a0b:2900:5200::/41 maxlen: 41
                          2a0b:2900:2100::/41 maxlen: 41
                          2a0b:2900:2280::/41 maxlen: 42
                          2a0b:2900:1000::/41 maxlen: 42
                          2a0b:2900:3200::/41 maxlen: 41
                          2a0b:2900:3100::/41 maxlen: 41
                          2a0b:2900:3280::/41 maxlen: 41

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269001252 (0x1008a224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
        Validity
            Not Before: Jan  1 15:02:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e7fbe58b067c8e5041a7d494a846729d5b44593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:6f:99:84:b2:a1:0e:a5:29:31:8b:7f:c9:
                    c9:c2:00:c9:cc:ef:d6:70:93:b5:33:2c:dd:97:b3:
                    3f:86:6d:1f:9f:3b:40:b7:7a:ee:9d:6f:f8:df:2f:
                    15:c8:bd:73:8d:8b:a7:e9:5e:2a:91:4b:ca:06:42:
                    5c:af:37:fd:04:be:e1:04:c2:69:b9:1c:ee:37:7c:
                    c0:ba:73:c7:cb:a9:92:48:a3:1a:c8:dc:68:65:05:
                    94:92:2d:37:7e:f3:99:a0:d0:40:f9:e3:73:2e:ab:
                    17:84:88:56:ae:08:8a:40:7c:f1:13:f2:cb:2c:92:
                    34:83:1e:b7:f0:5e:1c:5f:98:d5:a5:bb:c9:23:05:
                    16:56:95:92:72:ce:69:c2:92:c8:35:8f:1a:5c:08:
                    3d:50:86:17:c9:a5:64:fc:16:98:a7:c6:de:7f:40:
                    82:92:2c:18:69:94:b8:eb:05:1b:d7:76:06:03:08:
                    aa:ab:03:f6:e8:7f:50:01:bb:69:1b:d7:89:ce:83:
                    30:cb:41:5c:21:0b:4c:85:53:bb:43:6e:02:96:d0:
                    7e:cf:e3:ba:af:7a:1d:11:af:35:56:50:5e:95:8b:
                    46:38:fc:f3:6e:34:3c:18:62:73:1f:bc:90:34:8a:
                    7d:9f:ae:0a:a4:fa:3c:ad:bb:07:cb:02:33:0e:81:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7F:BE:58:B0:67:C8:E5:04:1A:7D:49:4A:84:67:29:D5:B4:45:93
            X509v3 Authority Key Identifier:
                keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/bn--WLBnyOUEGn1JSoRnKdW0RZM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.0.0/20
                  138.43.4.0-138.43.15.255
                  138.43.26.0/24
                  138.43.28.0/22
                  185.170.161.0-185.170.163.255
                  193.118.128.0/19
                  193.118.192.0-193.118.194.255
                  193.118.196.0/24
                  193.118.198.0-193.118.220.255
                  209.213.48.0/20
                  217.147.176.0/21
                IPv6:
                  2a0b:2900:7f::/48
                  2a0b:2900:1000::-2a0b:2900:12ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:1f00::/40
                  2a0b:2900:2100::-2a0b:2900:23ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:3100::-2a0b:2900:32ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:4100::-2a0b:2900:42ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:5200::/40
                  2a0b:2900:6100::-2a0b:2900:62ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         69:ce:f4:1c:ec:e5:2a:2e:21:77:21:01:d4:1e:fb:a5:f3:aa:
         9f:86:79:f1:ff:8a:a1:df:4b:94:81:e8:71:7f:83:b3:11:a9:
         cc:74:99:ed:99:8d:78:13:c4:dc:34:27:bd:f6:c0:af:ba:fe:
         70:7d:6e:59:e8:4a:99:4a:18:5c:66:c6:79:31:f2:37:4f:9e:
         84:f2:bc:af:ee:69:e4:50:15:cf:ce:d8:ae:18:4a:42:b5:33:
         66:42:6e:a2:95:1a:ae:6d:8f:5a:e6:3d:a9:f3:dc:54:90:49:
         9c:ca:6a:b8:bf:81:8f:22:c7:38:ba:75:b0:04:cb:1b:64:50:
         d1:d7:7d:22:24:73:ef:7a:86:b8:23:38:57:86:c9:66:ed:fd:
         6a:74:ca:dc:9c:a0:44:69:f0:b9:0a:88:c1:c6:e3:27:6b:63:
         8c:c8:b2:1b:8c:91:6c:94:a2:af:9b:71:07:3c:3f:e5:52:58:
         90:39:8f:b6:3b:f3:87:d4:85:cb:a2:05:dd:f6:e9:27:5d:00:
         26:bc:f3:e4:86:3c:37:a3:68:c7:f3:fd:b3:82:17:b6:7e:e8:
         ac:8a:06:31:aa:1f:aa:31:56:0b:9f:9f:26:d3:0d:05:e6:56:
         9d:c2:59:2b:53:2f:54:e5:c3:8a:88:e0:39:93:a6:fa:81:54:
         0e:ff:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:43 2023 by rpki-client on console-fra.rpki-client.org