Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/YjboPyiul_Zsxle7U3MKx6Xq6Oo.roa
File:                     YjboPyiul_Zsxle7U3MKx6Xq6Oo.roa (raw, json)
Hash identifier:          pI+X/gvUoFqN3uxcqUDkltUgNFbv6KVF3mDnUEqHdGw=
Subject key identifier:   62:36:E8:3F:28:AE:97:F6:6C:C6:57:BB:53:73:0A:C7:A5:EA:E8:EA
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       08503639
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/YjboPyiul_Zsxle7U3MKx6Xq6Oo.roa
Signing time:             Sat 19 Feb 2022 15:50:58 +0000
ROA not before:           Sat 19 Feb 2022 15:50:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59504
IP address blocks:        194.113.104.114/32 maxlen: 32
                          95.215.110.0/23 maxlen: 23
                          95.215.108.0/24 maxlen: 24
                          95.215.108.0/23 maxlen: 23
                          185.197.73.0/24 maxlen: 24
                          185.197.72.0/24 maxlen: 24
                          80.76.42.0/24 maxlen: 24
                          80.76.40.0/24 maxlen: 24
                          185.156.178.0/24 maxlen: 24
                          185.156.178.0/23 maxlen: 23
                          185.156.177.0/24 maxlen: 24
                          185.156.176.0/24 maxlen: 24
                          185.156.176.0/22 maxlen: 22
                          185.156.179.0/24 maxlen: 24
                          193.38.234.0/24 maxlen: 24
                          185.254.190.0/24 maxlen: 24
                          185.254.189.0/24 maxlen: 24
                          194.113.104.0/24 maxlen: 24
                          194.113.107.0/24 maxlen: 24
                          185.177.115.0/24 maxlen: 24
                          185.177.113.0/24 maxlen: 24
                          185.220.35.0/24 maxlen: 24
                          185.220.34.0/24 maxlen: 24
                          185.220.33.0/24 maxlen: 24
                          185.220.32.0/24 maxlen: 24
                          185.230.142.0/24 maxlen: 24
                          185.230.140.0/23 maxlen: 23
                          84.54.36.0/24 maxlen: 24
                          84.54.39.0/24 maxlen: 24
                          185.118.64.0/24 maxlen: 24
                          185.118.64.0/22 maxlen: 22
                          185.118.66.0/24 maxlen: 24
                          185.118.66.0/23 maxlen: 23
                          185.118.65.0/24 maxlen: 24
                          185.246.117.0/24 maxlen: 24
                          185.246.116.0/24 maxlen: 24
                          185.246.119.0/24 maxlen: 24
                          2a05:fb41::/32 maxlen: 32
                          2a0d:60c1::/32 maxlen: 32
                          2a07:14c0:1::/48 maxlen: 48
                          2a0a:4782::/32 maxlen: 32
                          2a0a:4781::/32 maxlen: 32
                          2a0d:7747::/32 maxlen: 32
                          2a05:fb42::/32 maxlen: 32
                          2a0a:4780::/32 maxlen: 32
                          2a0d:60c3::/32 maxlen: 32
                          2a07:14c1::/32 maxlen: 32
                          2a0d:60c0::/32 maxlen: 32
                          2a0a:4783::/32 maxlen: 32
                          2a07:14c7::/32 maxlen: 32
                          2a05:fb44::/32 maxlen: 32
                          2a07:14c6::/32 maxlen: 32
                          2a07:14c0:3000::/36 maxlen: 36
                          2a07:14c0:4000::/36 maxlen: 36
                          2a07:14c0:5000::/36 maxlen: 36
                          2a07:14c0:1000::/36 maxlen: 36
                          2a07:14c0:6000::/36 maxlen: 36
                          2a07:14c0:d000::/36 maxlen: 36
                          2a0c:5241::/32 maxlen: 32
                          2a0d:7740::/32 maxlen: 32
                          2a0c:5247:f000::/36 maxlen: 36
                          2a0c:5247:e000::/36 maxlen: 36
                          2a0c:5247:d000::/36 maxlen: 36
                          2a0c:5247:c000::/36 maxlen: 36
                          2a0c:5247:7000::/36 maxlen: 36
                          2a0c:5245::/32 maxlen: 32
                          2a0a:4785::/32 maxlen: 32
                          2a07:14c0::/48 maxlen: 48
                          2a05:fb45::/32 maxlen: 32
                          2a07:14c2::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139474489 (0x8503639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Feb 19 15:50:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6236e83f28ae97f66cc657bb53730ac7a5eae8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:7e:e0:e7:7b:c4:50:00:c5:48:50:21:56:
                    ed:fc:1d:a6:05:df:6b:98:2d:43:fc:a2:27:98:0c:
                    23:d5:8a:e5:21:d5:d4:59:26:18:55:3e:c3:f5:39:
                    c8:69:bb:85:0c:07:8a:96:ce:5d:34:d7:3e:f4:aa:
                    79:fc:5e:a6:c0:1b:13:c6:ad:ab:7e:c3:d2:3e:5e:
                    84:a5:b1:00:5e:b0:06:76:d6:2f:51:05:99:1f:53:
                    22:0f:a7:0f:37:a5:d3:f5:d0:6e:0c:13:d1:e0:75:
                    0f:79:fc:a4:68:5a:e1:d1:75:ee:45:09:b4:6b:84:
                    2e:51:19:57:9e:58:08:c4:c1:0a:69:d6:77:35:30:
                    61:9a:f5:fd:c0:ad:c7:55:7c:7d:3c:b9:46:e1:20:
                    53:74:c6:26:e0:d9:84:2a:25:8f:0c:92:61:3c:79:
                    dc:28:89:8d:36:ee:a4:6b:f8:f6:ce:3f:7b:0a:96:
                    76:a7:53:f4:bc:82:96:f1:03:c9:d1:06:5d:42:d0:
                    5c:6f:17:58:14:b4:90:94:28:51:1a:24:b3:7a:18:
                    04:3f:b5:d9:68:42:b5:0b:95:91:71:ce:9c:95:b8:
                    98:d8:db:36:ec:ac:3a:32:e0:c4:37:88:0b:e6:aa:
                    18:79:ea:7f:0e:d2:e6:bd:f1:33:f8:73:4a:d0:b2:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:36:E8:3F:28:AE:97:F6:6C:C6:57:BB:53:73:0A:C7:A5:EA:E8:EA
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/YjboPyiul_Zsxle7U3MKx6Xq6Oo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.76.40.0/24
                  80.76.42.0/24
                  84.54.36.0/24
                  84.54.39.0/24
                  95.215.108.0/22
                  185.118.64.0/22
                  185.156.176.0/22
                  185.177.113.0/24
                  185.177.115.0/24
                  185.197.72.0/23
                  185.220.32.0/22
                  185.230.140.0-185.230.142.255
                  185.246.116.0/23
                  185.246.119.0/24
                  185.254.189.0-185.254.190.255
                  193.38.234.0/24
                  194.113.104.0/24
                  194.113.107.0/24
                IPv6:
                  2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
                  2a05:fb44::/31
                  2a07:14c0::/47
                  2a07:14c0:1000::/36
                  2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
                  2a07:14c0:d000::/36
                  2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:14c6::/31
                  2a0a:4780::/30
                  2a0a:4785::/32
                  2a0c:5241::/32
                  2a0c:5245::/32
                  2a0c:5247:7000::/36
                  2a0c:5247:c000::/34
                  2a0d:60c0::/31
                  2a0d:60c3::/32
                  2a0d:7740::/32
                  2a0d:7747::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:29:ec:6b:9a:62:00:0c:3f:a8:07:29:b3:07:26:d8:f0:8c:
         5d:71:c9:da:8a:73:91:22:c9:61:ce:03:a6:0f:96:c1:ce:24:
         10:6b:2d:70:5f:73:91:38:7d:35:53:22:b7:54:5d:9e:c7:3e:
         e7:0c:2f:cc:b4:d3:6e:93:2a:ac:a1:fa:3c:be:e9:04:9e:01:
         b9:a3:e0:87:19:5c:0c:c6:c1:54:87:ce:20:a5:93:b6:50:97:
         6c:d0:97:89:60:81:74:57:08:4f:02:1e:72:01:77:ae:e8:64:
         61:9c:a4:11:8a:da:88:11:58:16:b7:5e:63:29:50:c8:99:25:
         df:34:c3:87:2c:e2:50:5e:e4:74:1a:80:47:4c:e8:2c:90:08:
         00:9a:29:c1:f7:c1:12:4e:54:3f:31:7c:7a:3a:2b:23:9e:dd:
         ae:51:f9:ba:26:ad:4d:2a:12:27:b2:34:65:10:4e:36:83:5c:
         4f:c5:50:9e:ce:05:bc:99:c8:29:45:94:a3:e0:4f:08:43:d3:
         2c:4c:f3:7f:0a:15:e8:ef:ca:a0:2f:04:71:57:be:66:8b:97:
         27:e7:06:67:69:1d:97:d1:48:f4:c2:f9:0b:3e:56:04:83:34:
         14:c1:34:13:33:d6:0a:cc:d4:c1:26:3a:03:e4:4c:18:f4:a0:
         15:ec:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org