Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/2lUKPCRZFA8CASdAv_zxBLZeZz4.roa
File:                     2lUKPCRZFA8CASdAv_zxBLZeZz4.roa (raw, json)
Hash identifier:          yu8OV0Ss3ULLMXdfoSiAjqYj1Y2KujIf20up7tEgvPw=
Subject key identifier:   DA:55:0A:3C:24:59:14:0F:02:01:27:40:BF:FC:F1:04:B6:5E:67:3E
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       4595B198
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/2lUKPCRZFA8CASdAv_zxBLZeZz4.roa
Signing time:             Fri 25 Mar 2022 14:31:55 +0000
ROA not before:           Fri 25 Mar 2022 14:31:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35470
IP address blocks:        213.187.240.0/21 maxlen: 24
                          89.31.98.0/23 maxlen: 24
                          89.31.96.0/21 maxlen: 24
                          81.4.84.0/22 maxlen: 24
                          178.18.80.0/20 maxlen: 24
                          31.3.96.0/21 maxlen: 24
                          85.10.188.0/22 maxlen: 22
                          141.138.192.0/20 maxlen: 24
                          193.138.204.0/22 maxlen: 24
                          141.138.207.0/24 maxlen: 24
                          185.3.208.0/22 maxlen: 24
                          85.10.176.0/22 maxlen: 24
                          85.10.184.0/22 maxlen: 22
                          185.110.172.0/22 maxlen: 24
                          93.191.128.0/21 maxlen: 24
                          93.191.134.0/24 maxlen: 24
                          83.96.216.0/22 maxlen: 24
                          83.96.236.0/22 maxlen: 24
                          83.96.240.0/22 maxlen: 24
                          83.96.244.0/22 maxlen: 24
                          83.96.252.0/22 maxlen: 24
                          185.110.200.0/22 maxlen: 24
                          79.170.88.0/21 maxlen: 24
                          185.96.4.0/22 maxlen: 24
                          83.96.204.0/22 maxlen: 24
                          83.96.200.0/22 maxlen: 24
                          83.96.212.0/22 maxlen: 24
                          185.21.188.0/22 maxlen: 24
                          37.230.96.0/21 maxlen: 24
                          194.60.207.0/24 maxlen: 24
                          37.34.48.0/21 maxlen: 24
                          85.222.224.0/21 maxlen: 24
                          85.222.224.0/22 maxlen: 24
                          2a02:348:59::/48 maxlen: 48
                          2a02:348:b4::/48 maxlen: 48
                          2a02:348:8f::/48 maxlen: 48
                          2a02:348:c8::/48 maxlen: 48
                          2a02:348:a3::/48 maxlen: 48
                          2a02:348:7e::/48 maxlen: 48
                          2a02:348:81::/48 maxlen: 48
                          2a02:348:1001::/48 maxlen: 48
                          2a02:348:37::/48 maxlen: 48
                          2a02:348:92::/48 maxlen: 48
                          2a02:348:95::/48 maxlen: 48
                          2a02:348:15::/48 maxlen: 48
                          2a02:348:70::/48 maxlen: 48
                          2a02:348:4b::/48 maxlen: 48
                          2a02:348:89::/48 maxlen: 48
                          2a02:348:9a::/48 maxlen: 48
                          2a02:348:78::/48 maxlen: 48
                          2a02:348:53::/48 maxlen: 48
                          2a02:348:b1::/48 maxlen: 48
                          2a02:348:8c::/48 maxlen: 48
                          2a02:348:a0::/48 maxlen: 48
                          2a02:348:7b::/48 maxlen: 48
                          2a02:348:56::/48 maxlen: 48
                          2a02:348:79::/48 maxlen: 48
                          2a02:348:54::/48 maxlen: 48
                          2a02:348:8a::/48 maxlen: 48
                          2a02:348:8d::/48 maxlen: 48
                          2a02:348:1e::/48 maxlen: 48
                          2a02:348:a1::/48 maxlen: 48
                          2a02:348:7c::/48 maxlen: 48
                          2a02:348:57::/48 maxlen: 48
                          2a02:348:32::/48 maxlen: 48
                          2a02:348:b2::/48 maxlen: 48
                          2a02:348:35::/48 maxlen: 48
                          2a02:348:90::/48 maxlen: 48
                          2a02:348:46::/48 maxlen: 48
                          2a02:348:29::/48 maxlen: 48
                          2a02:348:84::/48 maxlen: 48
                          2a02:348:5f::/48 maxlen: 48
                          2a02:348:ba::/48 maxlen: 48
                          2a02:348:3a::/48 maxlen: 48
                          2a02:348:98::/48 maxlen: 48
                          2a02:348:73::/48 maxlen: 48
                          2a02:348:ac::/48 maxlen: 48
                          2a02:348:87::/48 maxlen: 48
                          2a02:348:62::/48 maxlen: 48
                          2a02:348:9b::/48 maxlen: 48
                          2a02:348:76::/48 maxlen: 48
                          2a02:348:99::/48 maxlen: 48
                          2a02:348:74::/48 maxlen: 48
                          2a02:348:4f::/48 maxlen: 48
                          2a02:348:88::/48 maxlen: 48
                          2a02:348:63::/48 maxlen: 48
                          2a02:348:9c::/48 maxlen: 48
                          2a02:348:77::/48 maxlen: 48
                          2a02:348:55::/48 maxlen: 48
                          2a02:348:8b::/48 maxlen: 48
                          2a02:348:7f::/48 maxlen: 48
                          2a02:348:5a::/48 maxlen: 48
                          2a02:348:5d::/48 maxlen: 48
                          2a02:348:38::/48 maxlen: 48
                          2a02:348:6e::/48 maxlen: 48
                          2a02:348:71::/48 maxlen: 48
                          2a02:348:4c::/48 maxlen: 48
                          2a02:348:82::/48 maxlen: 48
                          2a02:348:85::/48 maxlen: 48
                          2a02:348::/32 maxlen: 32
                          2a02:348:60::/48 maxlen: 48
                          2a02:348:bb::/48 maxlen: 48
                          2a02:348:3b::/48 maxlen: 48
                          2a02:348:96::/48 maxlen: 48
                          2a02:348:b9::/48 maxlen: 48
                          2a02:348:39::/48 maxlen: 48
                          2a02:348:94::/48 maxlen: 48
                          2a02:348:14::/48 maxlen: 48
                          2a02:348:6f::/48 maxlen: 48
                          2a02:348:28::/48 maxlen: 48
                          2a02:348:3::/48 maxlen: 48
                          2a02:348:83::/48 maxlen: 48
                          2a02:348:5e::/48 maxlen: 48
                          2a02:348:61::/48 maxlen: 48
                          2a02:348:bc::/48 maxlen: 48
                          2a02:348:3c::/48 maxlen: 48
                          2a02:348:97::/48 maxlen: 48
                          2a02:348:75::/48 maxlen: 48
                          2a02:348:50::/48 maxlen: 48
                          2a02:348:86::/48 maxlen: 48
                          2a02:348:7d::/48 maxlen: 48
                          2a02:348:58::/48 maxlen: 48
                          2a02:348:33::/48 maxlen: 48
                          2a02:348:b3::/48 maxlen: 48
                          2a02:348:8e::/48 maxlen: 48
                          2a02:348:91::/48 maxlen: 48
                          2a02:348:47::/48 maxlen: 48
                          2a02:348:a2::/48 maxlen: 48
                          2a02:348:80::/48 maxlen: 48
                          2a02:348:5b::/48 maxlen: 48
                          2a02:348:36::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167438232 (0x4595b198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Mar 25 14:31:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=da550a3c2459140f02012740bffcf104b65e673e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:92:53:9f:0a:99:7f:64:46:b5:34:16:97:
                    ea:4a:87:cb:61:e6:05:f6:9f:e9:f7:4d:02:83:db:
                    7b:42:24:cf:f5:ec:83:2b:7a:2b:84:b8:e6:67:df:
                    99:99:52:7e:e2:20:ce:c4:a5:31:58:49:6b:5d:c2:
                    60:18:35:46:b9:04:8a:06:fa:23:57:d5:43:9c:8d:
                    19:1f:43:a7:ac:ed:18:af:09:a4:45:5b:0f:19:c7:
                    e6:ca:c0:49:86:98:1a:f1:15:16:7c:1d:28:6e:b9:
                    e8:a8:e7:bf:9b:aa:c9:1e:6f:6a:c5:2f:6c:3c:b8:
                    85:f7:10:68:35:1e:6c:92:56:9a:22:d4:9d:06:72:
                    05:04:d9:2c:38:de:2e:b2:19:9e:15:cd:f2:fd:2c:
                    2d:76:68:5d:da:2c:e9:8f:1a:9b:68:a5:ef:ba:dc:
                    7b:5f:0a:e5:43:bb:10:5c:d8:7b:85:08:b2:8f:4b:
                    d4:16:3f:c2:e7:a2:05:76:09:03:26:46:8a:20:29:
                    8e:73:60:b3:ce:75:46:7a:fd:79:4b:a8:97:77:2a:
                    df:06:e8:bb:cc:08:4f:13:d1:2f:4b:32:71:5a:00:
                    de:ec:0f:41:65:a8:f4:53:10:37:4f:1c:99:91:fb:
                    46:66:d1:df:18:81:90:01:47:f5:0c:37:a8:98:25:
                    45:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:55:0A:3C:24:59:14:0F:02:01:27:40:BF:FC:F1:04:B6:5E:67:3E
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/2lUKPCRZFA8CASdAv_zxBLZeZz4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.3.96.0/21
                  37.34.48.0/21
                  37.230.96.0/21
                  79.170.88.0/21
                  81.4.84.0/22
                  83.96.200.0/21
                  83.96.212.0-83.96.219.255
                  83.96.236.0-83.96.247.255
                  83.96.252.0/22
                  85.10.176.0/22
                  85.10.184.0/21
                  85.222.224.0/21
                  89.31.96.0/21
                  93.191.128.0/21
                  141.138.192.0/20
                  178.18.80.0/20
                  185.3.208.0/22
                  185.21.188.0/22
                  185.96.4.0/22
                  185.110.172.0/22
                  185.110.200.0/22
                  193.138.204.0/22
                  194.60.207.0/24
                  213.187.240.0/21
                IPv6:
                  2a02:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:90:d6:f9:e4:b6:f6:d8:4a:72:9b:b9:65:61:3f:04:e7:8f:
         8c:0b:e9:e9:24:8d:e1:f8:32:06:3a:91:f4:d9:50:2a:9e:34:
         10:ac:c9:c7:e7:25:8b:f0:a1:9b:58:ba:6d:1e:1e:86:05:75:
         b4:07:4e:b8:df:4c:da:cd:31:bc:7f:d2:95:98:51:0f:7e:89:
         b6:86:18:d0:33:3a:a1:c5:58:18:c4:f9:1e:01:af:12:68:17:
         8e:b8:da:a6:3c:dd:48:e3:b8:a0:7a:3f:10:66:ce:1c:82:1c:
         46:7d:0f:f6:30:96:1d:e5:b1:bb:a9:35:1a:bb:f3:aa:96:58:
         6e:3d:28:64:01:79:0f:3c:0b:0b:60:12:77:cd:42:bf:45:aa:
         43:79:4b:34:3b:f2:da:28:53:38:b9:f4:24:ab:ad:ef:1c:75:
         f5:b9:ec:66:5c:b1:77:50:7e:c6:cc:5a:0a:dd:d4:a4:5f:77:
         90:7b:85:e8:68:29:92:25:0b:38:d2:1e:02:6f:ee:a7:7f:27:
         3a:57:64:fd:87:1e:ee:9f:9d:64:cc:5e:92:72:90:17:62:13:
         43:53:e1:25:c1:4b:3f:ed:b8:93:64:dc:56:92:61:7f:51:79:
         36:f4:e3:d9:b6:ba:b1:b3:7e:cb:c3:51:03:f3:35:66:75:07:
         93:d7:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-fra.rpki-client.org