Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1-3SAtvBTLINZENYojYHx-C9VXEg.roa
File:                     1-3SAtvBTLINZENYojYHx-C9VXEg.roa (raw, json)
Hash identifier:          GobDLHW5zv+9xfj+uXTVo/WmXwZn+jqQBUUTKpP4mO4=
Subject key identifier:   FB:74:80:B6:F0:53:2C:83:59:10:D6:28:8D:81:F1:F8:2F:55:5C:48
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       44D1A9F2
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1-3SAtvBTLINZENYojYHx-C9VXEg.roa
Signing time:             Sat 01 Jan 2022 14:06:50 +0000
ROA not before:           Sat 01 Jan 2022 14:06:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35470
IP address blocks:        213.187.240.0/21 maxlen: 24
                          89.31.98.0/23 maxlen: 24
                          89.31.96.0/21 maxlen: 24
                          81.4.84.0/22 maxlen: 24
                          178.18.80.0/20 maxlen: 24
                          31.3.96.0/21 maxlen: 24
                          141.138.192.0/20 maxlen: 24
                          193.138.204.0/22 maxlen: 24
                          141.138.207.0/24 maxlen: 24
                          185.3.208.0/22 maxlen: 24
                          85.10.176.0/22 maxlen: 24
                          185.110.172.0/22 maxlen: 24
                          93.191.128.0/21 maxlen: 24
                          93.191.134.0/24 maxlen: 24
                          83.96.216.0/22 maxlen: 24
                          83.96.236.0/22 maxlen: 24
                          83.96.240.0/22 maxlen: 24
                          83.96.244.0/22 maxlen: 24
                          83.96.252.0/22 maxlen: 24
                          185.110.200.0/22 maxlen: 24
                          79.170.88.0/21 maxlen: 24
                          185.96.4.0/22 maxlen: 24
                          83.96.204.0/22 maxlen: 24
                          83.96.200.0/22 maxlen: 24
                          83.96.212.0/22 maxlen: 24
                          185.21.188.0/22 maxlen: 24
                          37.230.96.0/21 maxlen: 24
                          194.60.207.0/24 maxlen: 24
                          37.34.48.0/21 maxlen: 24
                          85.222.224.0/21 maxlen: 24
                          85.222.224.0/22 maxlen: 24
                          2a02:348:59::/48 maxlen: 48
                          2a02:348:b4::/48 maxlen: 48
                          2a02:348:8f::/48 maxlen: 48
                          2a02:348:c8::/48 maxlen: 48
                          2a02:348:a3::/48 maxlen: 48
                          2a02:348:7e::/48 maxlen: 48
                          2a02:348:81::/48 maxlen: 48
                          2a02:348:1001::/48 maxlen: 48
                          2a02:348:37::/48 maxlen: 48
                          2a02:348:92::/48 maxlen: 48
                          2a02:348:95::/48 maxlen: 48
                          2a02:348:15::/48 maxlen: 48
                          2a02:348:70::/48 maxlen: 48
                          2a02:348:4b::/48 maxlen: 48
                          2a02:348:89::/48 maxlen: 48
                          2a02:348:9a::/48 maxlen: 48
                          2a02:348:78::/48 maxlen: 48
                          2a02:348:53::/48 maxlen: 48
                          2a02:348:b1::/48 maxlen: 48
                          2a02:348:8c::/48 maxlen: 48
                          2a02:348:a0::/48 maxlen: 48
                          2a02:348:7b::/48 maxlen: 48
                          2a02:348:56::/48 maxlen: 48
                          2a02:348:79::/48 maxlen: 48
                          2a02:348:54::/48 maxlen: 48
                          2a02:348:8a::/48 maxlen: 48
                          2a02:348:8d::/48 maxlen: 48
                          2a02:348:1e::/48 maxlen: 48
                          2a02:348:a1::/48 maxlen: 48
                          2a02:348:7c::/48 maxlen: 48
                          2a02:348:57::/48 maxlen: 48
                          2a02:348:32::/48 maxlen: 48
                          2a02:348:b2::/48 maxlen: 48
                          2a02:348:35::/48 maxlen: 48
                          2a02:348:90::/48 maxlen: 48
                          2a02:348:46::/48 maxlen: 48
                          2a02:348:29::/48 maxlen: 48
                          2a02:348:84::/48 maxlen: 48
                          2a02:348:5f::/48 maxlen: 48
                          2a02:348:ba::/48 maxlen: 48
                          2a02:348:3a::/48 maxlen: 48
                          2a02:348:98::/48 maxlen: 48
                          2a02:348:73::/48 maxlen: 48
                          2a02:348:ac::/48 maxlen: 48
                          2a02:348:87::/48 maxlen: 48
                          2a02:348:62::/48 maxlen: 48
                          2a02:348:9b::/48 maxlen: 48
                          2a02:348:76::/48 maxlen: 48
                          2a02:348:99::/48 maxlen: 48
                          2a02:348:74::/48 maxlen: 48
                          2a02:348:4f::/48 maxlen: 48
                          2a02:348:88::/48 maxlen: 48
                          2a02:348:63::/48 maxlen: 48
                          2a02:348:9c::/48 maxlen: 48
                          2a02:348:77::/48 maxlen: 48
                          2a02:348:55::/48 maxlen: 48
                          2a02:348:8b::/48 maxlen: 48
                          2a02:348:7f::/48 maxlen: 48
                          2a02:348:5a::/48 maxlen: 48
                          2a02:348:5d::/48 maxlen: 48
                          2a02:348:38::/48 maxlen: 48
                          2a02:348:6e::/48 maxlen: 48
                          2a02:348:71::/48 maxlen: 48
                          2a02:348:4c::/48 maxlen: 48
                          2a02:348:82::/48 maxlen: 48
                          2a02:348:85::/48 maxlen: 48
                          2a02:348::/32 maxlen: 32
                          2a02:348:60::/48 maxlen: 48
                          2a02:348:bb::/48 maxlen: 48
                          2a02:348:3b::/48 maxlen: 48
                          2a02:348:96::/48 maxlen: 48
                          2a02:348:b9::/48 maxlen: 48
                          2a02:348:39::/48 maxlen: 48
                          2a02:348:94::/48 maxlen: 48
                          2a02:348:14::/48 maxlen: 48
                          2a02:348:6f::/48 maxlen: 48
                          2a02:348:28::/48 maxlen: 48
                          2a02:348:3::/48 maxlen: 48
                          2a02:348:83::/48 maxlen: 48
                          2a02:348:5e::/48 maxlen: 48
                          2a02:348:61::/48 maxlen: 48
                          2a02:348:bc::/48 maxlen: 48
                          2a02:348:3c::/48 maxlen: 48
                          2a02:348:97::/48 maxlen: 48
                          2a02:348:75::/48 maxlen: 48
                          2a02:348:50::/48 maxlen: 48
                          2a02:348:86::/48 maxlen: 48
                          2a02:348:7d::/48 maxlen: 48
                          2a02:348:58::/48 maxlen: 48
                          2a02:348:33::/48 maxlen: 48
                          2a02:348:b3::/48 maxlen: 48
                          2a02:348:8e::/48 maxlen: 48
                          2a02:348:91::/48 maxlen: 48
                          2a02:348:47::/48 maxlen: 48
                          2a02:348:a2::/48 maxlen: 48
                          2a02:348:80::/48 maxlen: 48
                          2a02:348:5b::/48 maxlen: 48
                          2a02:348:36::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154591218 (0x44d1a9f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Jan  1 14:06:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb7480b6f0532c835910d6288d81f1f82f555c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d3:7f:8c:ee:b0:98:31:f7:27:53:ed:1a:f7:
                    77:c2:14:32:58:3b:3b:a1:0e:15:4f:b8:09:42:e2:
                    24:c6:b0:7e:16:9f:95:ab:45:c7:ff:47:48:a2:86:
                    e8:ca:77:a0:c1:cd:75:bf:c1:d9:27:2e:f7:ad:c0:
                    54:4a:1a:36:d2:dd:39:83:cd:94:fc:a8:7e:91:15:
                    dc:4b:52:c5:e8:be:17:45:6a:7f:a9:3c:f8:b4:d7:
                    a5:cd:3d:e8:e7:75:0c:ea:7c:25:23:10:28:79:ab:
                    af:d3:84:75:e2:9f:af:ad:84:04:b9:9d:21:d1:de:
                    3a:2b:90:df:ba:66:a2:15:d1:f3:90:d4:05:b6:64:
                    e5:a2:28:0a:43:5d:59:a2:03:28:1f:fd:cc:90:91:
                    55:24:8b:59:8f:ba:de:64:e5:7c:20:53:f6:68:d8:
                    be:6c:65:6f:8a:f2:4b:f4:a6:d6:68:e9:b7:6c:3f:
                    b3:6a:b6:26:d0:62:25:7b:1e:4d:6f:5e:06:50:a0:
                    5f:eb:97:bf:ff:98:09:4e:81:6a:d0:aa:ce:1a:5a:
                    ca:22:ac:cf:5b:d6:db:c2:11:c7:64:d4:3f:10:c5:
                    8f:64:f1:d2:59:8f:f9:12:4e:9c:1f:56:72:67:52:
                    88:b2:39:a3:b3:a4:c8:41:40:c1:87:64:0d:b3:b2:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:74:80:B6:F0:53:2C:83:59:10:D6:28:8D:81:F1:F8:2F:55:5C:48
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1-3SAtvBTLINZENYojYHx-C9VXEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.3.96.0/21
                  37.34.48.0/21
                  37.230.96.0/21
                  79.170.88.0/21
                  81.4.84.0/22
                  83.96.200.0/21
                  83.96.212.0-83.96.219.255
                  83.96.236.0-83.96.247.255
                  83.96.252.0/22
                  85.10.176.0/22
                  85.222.224.0/21
                  89.31.96.0/21
                  93.191.128.0/21
                  141.138.192.0/20
                  178.18.80.0/20
                  185.3.208.0/22
                  185.21.188.0/22
                  185.96.4.0/22
                  185.110.172.0/22
                  185.110.200.0/22
                  193.138.204.0/22
                  194.60.207.0/24
                  213.187.240.0/21
                IPv6:
                  2a02:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:d2:c3:02:97:94:ea:64:31:5e:8c:a3:f7:dd:fe:26:fd:33:
         ed:38:04:88:f8:21:23:f8:ee:9b:52:a6:44:1d:3f:38:b0:b6:
         7d:b3:d8:1d:52:5f:e2:b1:ef:f2:8e:60:f9:90:99:2b:00:1b:
         8f:8b:17:85:02:34:07:a6:b9:0c:00:7c:42:be:41:6d:92:90:
         ec:e4:92:f2:8d:e1:ab:d6:5a:e3:ec:76:0e:8e:7e:a5:c4:3f:
         43:cf:fa:76:9c:58:55:4b:67:8f:ca:ba:ab:9c:e3:45:1b:13:
         f5:32:2b:1e:b9:93:0e:04:42:9d:fd:23:b6:d1:6f:0d:bc:0b:
         5e:a5:28:49:3f:7a:3e:25:a7:be:b3:8c:5b:8c:1e:3e:2a:04:
         48:b7:bd:c2:7b:f2:7e:77:3a:96:c1:96:88:9b:bd:d0:ad:cd:
         58:dc:99:8c:eb:d2:40:f8:33:4a:de:da:18:03:38:14:36:e3:
         2c:8a:3b:16:a3:f7:62:5d:7c:f1:fa:a3:f8:6f:04:3c:24:d5:
         54:ee:09:a3:40:66:b8:ab:8b:21:57:ef:5d:0a:a3:2d:c6:80:
         2f:86:d7:bb:37:bd:90:2b:9f:40:4e:cc:c7:32:26:e6:e8:91:
         ac:64:77:ac:91:1d:a7:a6:f7:9c:74:1b:6c:45:55:d6:d7:6b:
         a4:4b:2b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-fra.rpki-client.org