Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/8KIaT3ylXknTzgB8XzACtz1Wgj4.roa
File:                     8KIaT3ylXknTzgB8XzACtz1Wgj4.roa (raw, json)
Hash identifier:          C8LB87mInPtt0vPhqWTts9X8Kx2xXagrXWg9fC9d7pQ=
Subject key identifier:   F0:A2:1A:4F:7C:A5:5E:49:D3:CE:00:7C:5F:30:02:B7:3D:56:82:3E
Certificate issuer:       /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial:       089C92F9
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/8KIaT3ylXknTzgB8XzACtz1Wgj4.roa
Signing time:             Fri 04 Feb 2022 10:38:15 +0000
ROA not before:           Fri 04 Feb 2022 10:38:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6752
IP address blocks:        80.80.84.0/22 maxlen: 22
                          80.80.92.0/22 maxlen: 22
                          185.87.36.0/22 maxlen: 22
                          185.33.0.0/22 maxlen: 22
                          194.158.64.0/22 maxlen: 22
                          194.158.64.0/19 maxlen: 19
                          194.158.64.0/24 maxlen: 24
                          194.158.68.0/22 maxlen: 22
                          194.158.72.0/23 maxlen: 23
                          194.158.72.0/22 maxlen: 22
                          194.158.76.0/22 maxlen: 22
                          185.87.40.0/22 maxlen: 22
                          185.87.44.0/22 maxlen: 22
                          188.241.26.0/23 maxlen: 23
                          91.187.64.0/19 maxlen: 19
                          91.187.64.0/22 maxlen: 22
                          91.187.68.0/22 maxlen: 22
                          91.187.76.0/22 maxlen: 22
                          91.187.72.0/22 maxlen: 22
                          91.187.84.0/22 maxlen: 22
                          91.187.80.0/22 maxlen: 22
                          91.187.88.0/22 maxlen: 22
                          89.150.4.0/22 maxlen: 22
                          89.150.2.0/23 maxlen: 23
                          89.150.8.0/22 maxlen: 22
                          89.150.12.0/22 maxlen: 22
                          91.187.92.0/22 maxlen: 22
                          185.194.56.0/22 maxlen: 22
                          46.172.224.0/19 maxlen: 19
                          46.172.232.0/22 maxlen: 22
                          185.4.52.0/22 maxlen: 22
                          185.132.200.0/22 maxlen: 22
                          109.111.96.0/22 maxlen: 22
                          109.111.96.0/19 maxlen: 19
                          109.111.100.0/22 maxlen: 22
                          109.111.104.0/22 maxlen: 22
                          109.111.108.0/22 maxlen: 22
                          109.111.112.0/22 maxlen: 22
                          109.111.116.0/22 maxlen: 22
                          85.94.164.0/22 maxlen: 22
                          109.111.124.0/22 maxlen: 22
                          109.111.120.0/22 maxlen: 22
                          85.94.160.0/19 maxlen: 19
                          85.94.160.0/22 maxlen: 22
                          85.94.168.0/22 maxlen: 22
                          85.94.172.0/22 maxlen: 22
                          85.94.176.0/22 maxlen: 22
                          85.94.184.0/22 maxlen: 22
                          85.94.180.0/22 maxlen: 22
                          194.158.80.0/22 maxlen: 22
                          194.158.84.0/22 maxlen: 22
                          194.158.88.0/22 maxlen: 22
                          194.158.92.0/22 maxlen: 22
                          85.94.188.0/22 maxlen: 22
                          46.175.156.0/22 maxlen: 22
                          2a02:8060::/31 maxlen: 31

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144478969 (0x89c92f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
        Validity
            Not Before: Feb  4 10:38:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f0a21a4f7ca55e49d3ce007c5f3002b73d56823e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:20:54:38:9a:b0:bc:52:a3:50:1b:35:55:
                    5b:c4:68:22:01:ab:ee:f1:42:06:eb:5e:63:cf:c3:
                    a6:90:80:eb:64:cc:13:ec:52:71:5c:82:f3:b4:1f:
                    22:87:7b:a8:87:68:60:81:06:ef:db:f1:fb:20:e4:
                    fe:a1:4c:25:25:b9:e1:f5:50:34:44:b0:c3:48:ae:
                    db:81:13:04:7f:cf:6f:6c:3b:8e:4d:7e:7d:e2:97:
                    a6:e9:f8:17:2c:99:1b:ea:2a:06:8a:20:c3:20:6e:
                    f6:4b:b9:d9:ad:a5:66:4f:29:c9:b0:58:c3:45:15:
                    e9:5f:29:de:61:52:13:8a:4f:99:e9:1e:9a:45:c6:
                    21:20:e6:7e:b4:a2:9c:a7:96:3d:2c:46:67:08:fc:
                    53:aa:b3:02:d5:28:99:a8:a6:50:0e:9c:a5:69:7f:
                    c9:f9:ef:9a:85:ac:81:26:22:79:2b:34:47:3f:e6:
                    20:dc:6e:b5:d8:d6:e7:16:49:be:1f:5b:ec:73:7b:
                    c5:21:c3:0e:8b:f8:75:02:27:5b:c3:7b:7c:83:40:
                    ea:09:db:16:7d:ba:8d:eb:7c:6f:59:28:89:dd:a8:
                    28:b9:39:df:8e:02:f5:71:df:94:71:b7:c7:a0:51:
                    5f:fb:5d:85:06:87:b4:4f:ff:7d:69:0a:4c:67:29:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A2:1A:4F:7C:A5:5E:49:D3:CE:00:7C:5F:30:02:B7:3D:56:82:3E
            X509v3 Authority Key Identifier:
                keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/8KIaT3ylXknTzgB8XzACtz1Wgj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.172.224.0/19
                  46.175.156.0/22
                  80.80.84.0/22
                  80.80.92.0/22
                  85.94.160.0/19
                  89.150.2.0-89.150.15.255
                  91.187.64.0/19
                  109.111.96.0/19
                  185.4.52.0/22
                  185.33.0.0/22
                  185.87.36.0-185.87.47.255
                  185.132.200.0/22
                  185.194.56.0/22
                  188.241.26.0/23
                  194.158.64.0/19
                IPv6:
                  2a02:8060::/31

    Signature Algorithm: sha256WithRSAEncryption
         05:f7:b0:04:e9:82:3a:e6:2d:0b:36:d7:03:8c:de:88:49:83:
         59:73:c1:f8:43:17:20:b0:e6:c1:90:97:2e:91:7f:cd:69:7d:
         46:52:08:64:a7:4b:cb:60:b3:35:d0:21:be:c5:0b:3b:80:0e:
         a6:10:22:d4:10:a7:54:f8:14:3b:2d:e2:0d:98:9a:81:85:4e:
         7a:2c:d3:cb:b1:a0:c4:76:8c:2d:ce:8f:44:1b:17:47:21:46:
         fa:74:2b:82:02:39:f1:10:b3:c0:0c:39:e5:2b:ee:cb:20:12:
         d0:7e:95:d2:34:f9:0b:08:48:19:19:24:6e:c4:4f:cb:38:11:
         37:4f:66:82:67:f4:8e:86:c0:6e:94:37:f7:27:2f:56:12:d8:
         62:b5:e6:27:49:90:14:88:a5:b6:07:4c:2e:cb:e8:5c:04:ce:
         c8:7b:35:ef:77:76:ec:79:21:0d:19:59:8a:55:f6:21:55:ce:
         aa:85:00:68:1f:f6:65:38:3e:dc:01:c8:a6:24:d3:32:9a:1a:
         20:19:3d:b3:13:7f:0c:01:eb:f6:92:71:5a:28:25:dd:f5:d7:
         5f:f3:97:b3:a6:cf:d2:dc:81:86:0a:73:78:34:ad:41:8f:bb:
         68:46:4e:0f:b7:ad:45:ef:cf:6c:be:d8:d2:b7:47:90:bd:7e:
         bb:c7:c3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:36 2024 by rpki-client on console-fra.rpki-client.org