Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/8H0QEX7nUv0hLMz_1TnPzFDIaoA.roa
File:                     8H0QEX7nUv0hLMz_1TnPzFDIaoA.roa (raw, json)
Hash identifier:          BFCowDG0MKmaJ2UKaLf5S2S9Z00ex4L1E0xcrZsTZHQ=
Subject key identifier:   F0:7D:10:11:7E:E7:52:FD:21:2C:CC:FF:D5:39:CF:CC:50:C8:6A:80
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       3CE60671
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/8H0QEX7nUv0hLMz_1TnPzFDIaoA.roa
Signing time:             Sun 20 Feb 2022 15:59:11 +0000
ROA not before:           Sun 20 Feb 2022 15:59:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197207
IP address blocks:        5.215.0.0/16 maxlen: 18
                          80.242.0.0/20 maxlen: 20
                          5.208.0.0/16 maxlen: 17
                          86.107.0.0/20 maxlen: 20
                          172.80.160.0/19 maxlen: 19
                          130.255.224.0/19 maxlen: 19
                          172.80.192.0/18 maxlen: 24
                          188.229.0.0/17 maxlen: 24
                          5.201.192.0/18 maxlen: 19
                          172.80.128.0/19 maxlen: 19
                          172.80.128.0/18 maxlen: 18
                          130.255.192.0/18 maxlen: 19
                          83.121.0.0/16 maxlen: 17
                          204.18.192.0/18 maxlen: 18
                          5.52.128.0/17 maxlen: 17
                          5.106.128.0/17 maxlen: 17
                          176.65.192.0/19 maxlen: 19
                          176.65.194.0/24 maxlen: 24
                          176.65.193.0/24 maxlen: 24
                          176.65.195.0/24 maxlen: 24
                          5.214.0.0/16 maxlen: 17
                          82.180.224.0/19 maxlen: 19
                          91.133.192.0/18 maxlen: 18
                          83.120.0.0/17 maxlen: 17
                          83.120.0.0/16 maxlen: 19
                          91.133.128.0/18 maxlen: 18
                          91.133.128.0/17 maxlen: 17
                          82.180.192.0/19 maxlen: 19
                          185.5.156.0/22 maxlen: 24
                          185.5.156.0/24 maxlen: 24
                          185.5.157.0/24 maxlen: 24
                          185.5.159.0/24 maxlen: 24
                          69.194.64.0/18 maxlen: 19
                          204.18.0.0/18 maxlen: 18
                          204.18.0.0/16 maxlen: 16
                          46.51.92.0/22 maxlen: 22
                          46.51.98.0/24 maxlen: 24
                          46.51.104.0/24 maxlen: 24
                          46.51.105.0/24 maxlen: 24
                          46.51.108.0/23 maxlen: 23
                          46.51.110.0/23 maxlen: 23
                          46.51.112.0/22 maxlen: 22
                          46.51.116.0/22 maxlen: 22
                          46.51.120.0/22 maxlen: 22
                          46.51.124.0/22 maxlen: 22
                          5.52.0.0/17 maxlen: 17
                          5.52.0.0/16 maxlen: 16
                          5.106.0.0/17 maxlen: 24
                          5.106.4.0/24 maxlen: 24
                          5.106.6.0/23 maxlen: 23
                          5.106.0.0/16 maxlen: 21
                          5.106.6.0/24 maxlen: 24
                          5.106.5.0/24 maxlen: 24
                          5.106.11.0/24 maxlen: 24
                          5.106.10.0/24 maxlen: 24
                          5.106.20.0/24 maxlen: 24
                          204.18.128.0/18 maxlen: 18
                          89.45.48.0/20 maxlen: 24
                          89.45.49.0/24 maxlen: 24
                          204.18.64.0/18 maxlen: 18
                          89.45.54.0/24 maxlen: 24
                          89.199.0.0/17 maxlen: 17
                          89.199.0.0/16 maxlen: 16
                          37.98.0.0/18 maxlen: 24
                          164.138.128.0/19 maxlen: 19
                          164.138.128.0/18 maxlen: 19
                          95.64.0.0/17 maxlen: 24
                          46.51.40.0/22 maxlen: 22
                          46.51.44.0/22 maxlen: 22
                          158.58.0.0/17 maxlen: 19
                          89.199.128.0/17 maxlen: 17
                          46.51.80.0/22 maxlen: 22
                          46.51.84.0/22 maxlen: 22
                          5.213.0.0/16 maxlen: 17
                          46.51.88.0/22 maxlen: 22
                          46.51.0.0/17 maxlen: 17
                          46.51.16.0/22 maxlen: 22
                          46.51.20.0/22 maxlen: 22
                          46.51.24.0/22 maxlen: 22
                          46.51.28.0/22 maxlen: 22
                          85.239.192.0/19 maxlen: 19
                          46.51.34.0/24 maxlen: 24
                          46.51.37.0/24 maxlen: 24
                          46.51.36.0/24 maxlen: 24
                          46.51.38.0/24 maxlen: 24
                          46.51.33.0/24 maxlen: 24
                          46.51.36.0/22 maxlen: 22
                          46.51.32.0/22 maxlen: 22
                          37.63.128.0/18 maxlen: 18
                          89.198.0.0/17 maxlen: 17
                          89.198.0.0/16 maxlen: 16
                          89.198.0.0/15 maxlen: 17
                          5.212.0.0/16 maxlen: 19
                          188.212.48.0/20 maxlen: 20
                          37.63.192.0/18 maxlen: 18
                          89.198.128.0/17 maxlen: 17
                          188.210.192.0/20 maxlen: 20
                          185.22.28.0/24 maxlen: 24
                          185.22.29.0/24 maxlen: 24
                          192.15.128.0/17 maxlen: 17
                          91.251.0.0/17 maxlen: 18
                          83.123.0.0/16 maxlen: 18
                          91.251.0.0/16 maxlen: 18
                          5.22.0.0/17 maxlen: 18
                          5.218.0.0/16 maxlen: 17
                          93.110.64.0/18 maxlen: 18
                          31.2.128.0/17 maxlen: 18
                          5.211.0.0/16 maxlen: 17
                          93.110.0.0/20 maxlen: 20
                          93.110.0.0/16 maxlen: 22
                          83.123.129.0/24 maxlen: 24
                          91.251.128.0/17 maxlen: 18
                          188.122.96.0/19 maxlen: 21
                          86.55.0.0/17 maxlen: 17
                          86.55.0.0/16 maxlen: 16
                          113.203.64.0/18 maxlen: 18
                          5.210.0.0/16 maxlen: 17
                          109.108.160.0/19 maxlen: 19
                          113.203.0.0/18 maxlen: 18
                          113.203.0.0/17 maxlen: 17
                          94.101.240.0/20 maxlen: 20
                          188.209.192.0/20 maxlen: 20
                          37.129.0.0/17 maxlen: 18
                          37.129.0.0/16 maxlen: 18
                          37.129.128.0/17 maxlen: 18
                          192.15.0.0/17 maxlen: 17
                          192.15.0.0/16 maxlen: 16
                          86.55.128.0/17 maxlen: 17
                          188.210.64.0/20 maxlen: 20
                          5.217.0.0/16 maxlen: 18
                          188.229.116.0/24 maxlen: 24
                          86.107.208.0/20 maxlen: 20
                          188.229.24.0/23 maxlen: 23
                          188.229.24.0/24 maxlen: 24
                          172.80.253.0/24 maxlen: 24
                          172.80.255.0/24 maxlen: 24
                          172.80.254.0/24 maxlen: 24
                          5.209.0.0/16 maxlen: 17
                          89.196.0.0/16 maxlen: 17
                          5.250.0.0/17 maxlen: 18
                          83.122.0.0/16 maxlen: 18
                          5.216.0.0/16 maxlen: 17
                          2a02:4540:c000::/43 maxlen: 43
                          2a02:4540:7000::/43 maxlen: 43
                          2a02:4540:e000::/43 maxlen: 43
                          2a02:4540::100/120 maxlen: 120
                          2a02:4544:e0::/46 maxlen: 46
                          2a02:4540:7044::/46 maxlen: 46
                          2a02:4545:e0::/56 maxlen: 56
                          2a02:4540:c4::/46 maxlen: 46
                          2a02:4545:e0::/46 maxlen: 46
                          2a02:4540:c030::/44 maxlen: 44
                          2a02:4540:e030::/44 maxlen: 44
                          2a02:4540::/42 maxlen: 42
                          2a02:4540:9010::/49 maxlen: 49
                          2a02:4540:7040::/48 maxlen: 48
                          2a02:4540:60::/44 maxlen: 44
                          2a02:4540:7040::/49 maxlen: 49
                          2a02:4544:e0:300::/112 maxlen: 112
                          2a02:4540:e010::/44 maxlen: 44
                          2a02:4540:5010::/44 maxlen: 44
                          2a02:4540:9010::/44 maxlen: 44
                          2a02:4540:e020::/64 maxlen: 64
                          2a02:4540:e040::/46 maxlen: 46
                          2a02:4540:9040::/46 maxlen: 46
                          2a02:4540:c040::/46 maxlen: 46
                          2a02:4540:5040::/46 maxlen: 46
                          2a02:4540:7040::/46 maxlen: 46
                          2a02:4540:c0::/46 maxlen: 46
                          2a02:4544:e0:500::/112 maxlen: 112
                          2a02:4540:40::/44 maxlen: 44
                          2a02:4544:e4::/46 maxlen: 46
                          2a02:4540:70::/44 maxlen: 44
                          2a02:4540:7048::/46 maxlen: 46
                          2a02:4540:6fc0::/64 maxlen: 64
                          2a02:4540:c020::/44 maxlen: 44
                          2a02:4545:e0::b/128 maxlen: 128
                          2a02:4545:e0::c/128 maxlen: 128
                          2a02:4540:9000::/49 maxlen: 49
                          2a02:4545:e0::/48 maxlen: 48
                          2a02:4540:50::/44 maxlen: 44
                          2a02:4544:e8::/46 maxlen: 46
                          2a02:4540:e000::/44 maxlen: 44
                          2a02:4540:9000::/44 maxlen: 44
                          2a02:4540:5000::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021707889 (0x3ce60671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: Feb 20 15:59:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f07d10117ee752fd212cccffd539cfcc50c86a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:18:5b:a3:14:38:e4:1c:cb:4a:45:09:67:
                    0a:f3:62:aa:f4:12:60:ed:4f:32:c3:a8:ec:97:c9:
                    96:0f:fc:e6:f3:2f:ae:b1:94:b0:8e:d0:df:36:a8:
                    a5:9e:2d:15:75:88:41:6f:d1:94:1b:cc:76:dc:3f:
                    4e:3f:73:e1:68:99:d8:64:fb:d3:67:23:0c:a3:94:
                    db:ad:81:4f:2b:73:40:b7:f2:06:09:e5:0b:69:1e:
                    5e:07:9f:8b:95:a1:55:e5:dd:92:32:0f:ff:93:45:
                    91:d9:fd:7b:16:60:17:7d:93:4f:45:fb:c6:90:71:
                    6d:c7:90:37:c8:4a:8d:dd:93:b4:b9:42:39:1c:2d:
                    0e:38:77:04:55:57:69:63:5f:51:bd:d6:06:90:db:
                    76:cc:38:9f:25:35:1c:d9:2b:c3:5c:0c:bd:50:63:
                    03:62:85:2e:56:3d:fc:04:7a:ae:b5:05:49:c8:d7:
                    f7:f4:eb:e2:bb:e6:b4:66:82:e1:71:a0:26:f3:1c:
                    25:05:b2:72:74:07:a0:48:30:1d:21:ef:3d:1a:46:
                    dd:e2:73:b1:c1:ae:09:9a:2a:b5:b7:f8:a8:60:3e:
                    32:5f:e2:e0:57:48:10:20:42:0b:06:21:b3:47:8d:
                    08:1a:4a:5d:51:54:a0:ab:ad:83:bd:19:5b:d5:a2:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7D:10:11:7E:E7:52:FD:21:2C:CC:FF:D5:39:CF:CC:50:C8:6A:80
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/8H0QEX7nUv0hLMz_1TnPzFDIaoA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.22.0.0/17
                  5.52.0.0/16
                  5.106.0.0/16
                  5.201.192.0/18
                  5.208.0.0-5.218.255.255
                  5.250.0.0/17
                  31.2.128.0/17
                  37.63.128.0/17
                  37.98.0.0/18
                  37.129.0.0/16
                  46.51.0.0/17
                  69.194.64.0/18
                  80.242.0.0/20
                  82.180.192.0/18
                  83.120.0.0/14
                  85.239.192.0/19
                  86.55.0.0/16
                  86.107.0.0/20
                  86.107.208.0/20
                  89.45.48.0/20
                  89.196.0.0/16
                  89.198.0.0/15
                  91.133.128.0/17
                  91.251.0.0/16
                  93.110.0.0/16
                  94.101.240.0/20
                  95.64.0.0/17
                  109.108.160.0/19
                  113.203.0.0/17
                  130.255.192.0/18
                  158.58.0.0/17
                  164.138.128.0/18
                  172.80.128.0/17
                  176.65.192.0/19
                  185.5.156.0/22
                  185.22.28.0/23
                  188.122.96.0/19
                  188.209.192.0/20
                  188.210.64.0/20
                  188.210.192.0/20
                  188.212.48.0/20
                  188.229.0.0/17
                  192.15.0.0/16
                  204.18.0.0/16
                IPv6:
                  2a02:4540::/41
                  2a02:4540:c0::/45
                  2a02:4540:5000::/43
                  2a02:4540:5040::/46
                  2a02:4540:6fc0::/64
                  2a02:4540:7000::/43
                  2a02:4540:7040::-2a02:4540:704b:ffff:ffff:ffff:ffff:ffff
                  2a02:4540:9000::/43
                  2a02:4540:9040::/46
                  2a02:4540:c000::-2a02:4540:c043:ffff:ffff:ffff:ffff:ffff
                  2a02:4540:e000::-2a02:4540:e020:0:ffff:ffff:ffff:ffff
                  2a02:4540:e030::-2a02:4540:e043:ffff:ffff:ffff:ffff:ffff
                  2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
                  2a02:4545:e0::/46

    Signature Algorithm: sha256WithRSAEncryption
         59:2f:f3:91:d2:5a:53:9c:32:c5:f4:81:81:f2:1c:fb:69:6f:
         1e:52:b9:36:fa:e1:47:ae:fb:8e:51:6e:5a:39:64:52:8a:44:
         bf:f2:34:19:10:c7:58:a3:cf:0a:0f:ef:23:86:5b:a2:d1:98:
         7c:77:69:5c:ac:d5:20:1b:e6:96:40:65:c4:03:f7:83:98:4b:
         64:2f:ca:59:7b:0d:f4:78:76:95:79:36:b3:89:19:79:45:09:
         f0:d1:04:61:37:6f:15:ac:8b:c9:7a:db:0f:e4:a4:33:e2:07:
         38:e6:43:2d:81:bd:1d:ed:c1:ac:26:d6:8c:65:21:e7:5e:85:
         50:b3:dc:d3:10:eb:68:ce:d6:fd:ab:a9:16:d1:c0:ed:05:c7:
         63:e8:42:0a:87:e5:a2:88:4b:1e:a2:24:fa:38:71:92:d4:6a:
         33:ed:26:9d:c3:14:c2:8e:29:f7:8e:ad:a5:38:e3:66:ce:3a:
         29:be:0e:ad:5b:f1:28:81:0e:78:a5:f1:ee:a4:39:0d:85:a3:
         24:68:d3:95:97:dd:ab:fc:f7:74:2b:88:9e:8b:2d:8b:af:68:
         fd:54:51:c7:0b:ff:2e:20:6c:9a:0b:8e:a1:72:03:d6:f3:12:
         e7:12:d0:29:02:a8:d0:bd:ab:7c:93:59:88:77:ad:9d:2c:8b:
         45:07:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:27 2024 by rpki-client on console-ams.rpki-client.org