Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/oREv-ILj36y9TH34SwEL4UdL-8Y.roa
File:                     oREv-ILj36y9TH34SwEL4UdL-8Y.roa (raw, json)
Hash identifier:          5ng4SX8124o9EAKaVxzo+7tWKP9C9QWIqYopOnBeXik=
Subject key identifier:   A1:11:2F:F8:82:E3:DF:AC:BD:4C:7D:F8:4B:01:0B:E1:47:4B:FB:C6
Certificate issuer:       /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial:       01334E3F
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/oREv-ILj36y9TH34SwEL4UdL-8Y.roa
Signing time:             Thu 24 Mar 2022 09:59:24 +0000
ROA not before:           Thu 24 Mar 2022 09:59:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29084
IP address blocks:        109.160.98.0/24 maxlen: 24
                          109.160.4.0/22 maxlen: 22
                          109.160.4.0/24 maxlen: 24
                          109.160.5.0/24 maxlen: 24
                          109.160.6.0/24 maxlen: 24
                          109.160.7.0/24 maxlen: 24
                          109.160.13.0/24 maxlen: 24
                          109.160.43.0/24 maxlen: 24
                          109.160.42.0/24 maxlen: 24
                          109.160.42.0/23 maxlen: 23
                          217.174.48.0/24 maxlen: 24
                          217.174.50.0/24 maxlen: 24
                          217.174.48.0/20 maxlen: 20
                          217.174.51.0/24 maxlen: 24
                          217.174.49.0/24 maxlen: 24
                          217.174.57.0/24 maxlen: 24
                          217.174.58.0/24 maxlen: 24
                          217.174.56.0/24 maxlen: 24
                          217.174.54.0/24 maxlen: 24
                          217.174.55.0/24 maxlen: 24
                          217.174.52.0/24 maxlen: 24
                          217.174.53.0/24 maxlen: 24
                          217.174.61.0/24 maxlen: 24
                          217.174.62.0/24 maxlen: 24
                          217.174.59.0/24 maxlen: 24
                          217.174.60.0/24 maxlen: 24
                          217.174.63.0/24 maxlen: 24
                          87.246.35.0/24 maxlen: 24
                          79.132.1.0/24 maxlen: 24
                          79.132.3.0/24 maxlen: 24
                          79.132.0.0/19 maxlen: 19
                          79.132.2.0/24 maxlen: 24
                          79.132.4.0/24 maxlen: 24
                          79.132.0.0/24 maxlen: 24
                          79.132.10.0/24 maxlen: 24
                          79.132.8.0/24 maxlen: 24
                          79.132.6.0/24 maxlen: 24
                          79.132.7.0/24 maxlen: 24
                          79.132.5.0/24 maxlen: 24
                          185.78.36.0/22 maxlen: 22
                          185.78.37.0/24 maxlen: 24
                          185.78.38.0/24 maxlen: 24
                          79.132.11.0/24 maxlen: 24
                          185.78.36.0/24 maxlen: 24
                          79.132.9.0/24 maxlen: 24
                          79.132.17.0/24 maxlen: 24
                          79.132.15.0/24 maxlen: 24
                          79.132.16.0/24 maxlen: 24
                          79.132.13.0/24 maxlen: 24
                          79.132.14.0/24 maxlen: 24
                          185.78.39.0/24 maxlen: 24
                          79.132.12.0/24 maxlen: 24
                          79.132.20.0/24 maxlen: 24
                          79.132.21.0/24 maxlen: 24
                          79.132.18.0/24 maxlen: 24
                          79.132.19.0/24 maxlen: 24
                          79.132.24.0/24 maxlen: 24
                          79.132.22.0/24 maxlen: 24
                          79.132.23.0/24 maxlen: 24
                          79.132.30.0/24 maxlen: 24
                          79.132.31.0/24 maxlen: 24
                          79.132.29.0/24 maxlen: 24
                          79.132.27.0/24 maxlen: 24
                          79.132.28.0/24 maxlen: 24
                          79.132.25.0/24 maxlen: 24
                          79.132.26.0/24 maxlen: 24
                          212.70.150.0/24 maxlen: 24
                          212.70.157.0/24 maxlen: 24
                          78.108.242.0/24 maxlen: 24
                          84.54.187.0/24 maxlen: 24
                          37.209.173.0/24 maxlen: 24
                          84.54.190.0/24 maxlen: 24
                          84.54.188.0/24 maxlen: 24
                          37.209.174.0/24 maxlen: 24
                          84.54.189.0/24 maxlen: 24
                          83.222.168.0/24 maxlen: 24
                          83.222.175.0/24 maxlen: 24
                          83.222.182.0/24 maxlen: 24
                          84.54.137.0/24 maxlen: 24
                          84.54.138.0/24 maxlen: 24
                          84.54.136.0/24 maxlen: 24
                          84.54.139.0/24 maxlen: 24
                          84.54.134.0/24 maxlen: 24
                          84.54.135.0/24 maxlen: 24
                          84.54.133.0/24 maxlen: 24
                          84.54.141.0/24 maxlen: 24
                          84.54.142.0/24 maxlen: 24
                          84.54.144.0/24 maxlen: 24
                          84.54.145.0/24 maxlen: 24
                          84.54.143.0/24 maxlen: 24
                          84.54.151.0/24 maxlen: 24
                          84.54.152.0/24 maxlen: 24
                          84.54.149.0/24 maxlen: 24
                          84.54.146.0/24 maxlen: 24
                          84.54.147.0/24 maxlen: 24
                          84.54.158.0/24 maxlen: 24
                          84.54.159.0/24 maxlen: 24
                          84.54.157.0/24 maxlen: 24
                          84.54.156.0/24 maxlen: 24
                          84.54.153.0/24 maxlen: 24
                          84.54.154.0/24 maxlen: 24
                          84.54.160.0/24 maxlen: 24
                          84.54.161.0/24 maxlen: 24
                          84.54.166.0/24 maxlen: 24
                          84.54.165.0/24 maxlen: 24
                          84.54.163.0/24 maxlen: 24
                          84.54.164.0/24 maxlen: 24
                          84.54.162.0/24 maxlen: 24
                          84.54.169.0/24 maxlen: 24
                          84.54.167.0/24 maxlen: 24
                          84.54.168.0/24 maxlen: 24
                          84.54.172.0/24 maxlen: 24
                          84.54.170.0/24 maxlen: 24
                          84.54.171.0/24 maxlen: 24
                          84.54.179.0/24 maxlen: 24
                          84.54.177.0/24 maxlen: 24
                          84.54.178.0/24 maxlen: 24
                          84.54.173.0/24 maxlen: 24
                          84.54.176.0/24 maxlen: 24
                          84.54.174.0/24 maxlen: 24
                          84.54.175.0/24 maxlen: 24
                          37.209.170.0/24 maxlen: 24
                          84.54.180.0/24 maxlen: 24
                          37.209.169.0/24 maxlen: 24
                          84.54.183.0/24 maxlen: 24
                          84.54.181.0/24 maxlen: 24
                          84.54.182.0/24 maxlen: 24
                          37.209.168.0/21 maxlen: 21
                          37.209.171.0/24 maxlen: 24
                          37.209.172.0/24 maxlen: 24
                          37.209.168.0/24 maxlen: 24
                          84.54.186.0/24 maxlen: 24
                          84.54.185.0/24 maxlen: 24
                          84.54.128.0/24 maxlen: 24
                          84.54.128.0/18 maxlen: 18
                          84.54.130.0/24 maxlen: 24
                          84.54.131.0/24 maxlen: 24
                          84.54.129.0/24 maxlen: 24
                          84.54.132.0/24 maxlen: 24
                          2a02:1c0::/29 maxlen: 29
                          2a02:1c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20139583 (0x1334e3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
        Validity
            Not Before: Mar 24 09:59:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a1112ff882e3dfacbd4c7df84b010be1474bfbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:2d:c8:6a:27:9d:50:b1:06:bf:5c:0b:69:
                    e9:bb:25:1d:b3:ae:6d:66:42:60:09:3f:f4:8d:b3:
                    60:88:17:c9:da:51:f3:62:c2:3e:29:9a:16:8c:16:
                    38:1a:5d:da:87:89:24:9a:24:c9:b4:97:68:03:6e:
                    08:4d:36:00:8b:47:cf:d4:2f:17:9d:80:40:d6:e0:
                    09:04:41:3c:78:19:e6:a4:cd:68:0a:39:df:21:e9:
                    f4:64:42:28:71:0e:43:12:32:73:ea:bf:dd:c1:0c:
                    37:0d:af:89:fb:01:7c:84:1a:cf:89:4b:d4:eb:23:
                    25:ed:61:ab:c1:d7:3b:22:c9:71:13:03:ec:32:5f:
                    30:bf:2b:1f:1d:d4:59:01:d6:3b:21:9c:68:84:90:
                    a3:f9:2c:e0:1e:97:ea:7c:fa:27:2c:40:57:0c:e8:
                    eb:39:68:88:ec:12:34:16:2b:12:7a:56:86:91:78:
                    3b:18:c3:91:f6:ae:3c:6e:d8:74:59:2e:4e:8f:0c:
                    02:7d:53:a8:06:c1:e7:48:f3:35:50:ce:4b:11:81:
                    81:28:87:02:4f:1a:f6:a7:7a:f1:e7:13:31:a4:d8:
                    35:4f:4d:09:23:96:96:b5:80:6a:b9:2e:79:93:ef:
                    36:5e:84:1f:90:fb:4e:52:d7:ae:d3:ab:be:23:c4:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:11:2F:F8:82:E3:DF:AC:BD:4C:7D:F8:4B:01:0B:E1:47:4B:FB:C6
            X509v3 Authority Key Identifier:
                keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/oREv-ILj36y9TH34SwEL4UdL-8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.168.0/21
                  78.108.242.0/24
                  79.132.0.0/19
                  83.222.168.0/24
                  83.222.175.0/24
                  83.222.182.0/24
                  84.54.128.0/18
                  87.246.35.0/24
                  109.160.4.0/22
                  109.160.13.0/24
                  109.160.42.0/23
                  109.160.98.0/24
                  185.78.36.0/22
                  212.70.150.0/24
                  212.70.157.0/24
                  217.174.48.0/20
                IPv6:
                  2a02:1c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:15:61:b0:e1:3b:83:db:3d:22:4b:ec:d9:85:9a:be:67:1a:
         8d:1e:78:ce:be:ba:5d:80:7e:1e:f4:4a:08:ee:81:71:49:d4:
         75:72:56:d4:d3:33:6b:13:01:31:61:e0:fa:4c:57:e4:fe:b7:
         74:75:26:7e:23:b1:ce:53:a6:b1:83:2f:08:c9:6d:3d:c1:51:
         26:7c:8d:98:72:8a:a5:82:50:19:78:d1:2b:55:48:fe:fb:dd:
         8d:23:0e:bf:b4:38:93:1c:95:ee:1f:c3:b7:f2:ea:ee:99:03:
         17:00:c1:08:ec:0e:da:24:8f:8c:24:01:c5:8d:08:56:02:da:
         3b:57:1d:2b:26:6b:4a:e4:1f:4a:a4:76:08:1c:52:e4:b1:8e:
         65:26:a0:89:1a:8f:f7:30:96:bf:c7:3f:08:0b:04:60:aa:e1:
         4e:d8:4c:4e:4c:ad:b7:79:b2:9b:38:ac:13:7f:36:15:08:25:
         c8:d3:ec:e7:a6:5a:ff:c5:2d:3f:d0:2f:ab:df:4f:0f:c3:86:
         d4:44:d6:07:af:12:73:1d:7a:a5:44:c2:8a:a9:23:b9:04:93:
         ab:45:19:1a:f0:0b:a2:17:bd:b1:cf:47:ec:03:c4:4e:3f:2e:
         a3:19:93:2e:22:59:19:dd:c4:81:d4:00:39:6a:af:49:ee:d8:
         31:31:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org