Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/IFNnyaQzAbf2hwOUi4rAmyqHexw.roa
File:                     IFNnyaQzAbf2hwOUi4rAmyqHexw.roa (raw, json)
Hash identifier:          TjuHcFEo5HFlNhC8F6v7NqNSiIOlldH/sTmyuJTmOdM=
Subject key identifier:   20:53:67:C9:A4:33:01:B7:F6:87:03:94:8B:8A:C0:9B:2A:87:7B:1C
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       0188D7C872C85AEF1FF36DAD9691E5C8D824
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/IFNnyaQzAbf2hwOUi4rAmyqHexw.roa
Signing time:             Tue 20 Jun 2023 07:50:17 +0000
ROA not before:           Tue 20 Jun 2023 07:50:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29286
IP address blocks:        88.202.4.0/24 maxlen: 24
                          88.202.9.0/24 maxlen: 24
                          88.202.8.0/24 maxlen: 24
                          88.202.5.0/24 maxlen: 24
                          88.202.7.0/24 maxlen: 24
                          88.202.6.0/24 maxlen: 24
                          88.202.18.0/24 maxlen: 24
                          84.254.135.0/24 maxlen: 24
                          84.254.133.0/24 maxlen: 24
                          84.254.139.0/24 maxlen: 24
                          84.254.138.0/24 maxlen: 24
                          84.254.143.0/24 maxlen: 24
                          84.254.141.0/24 maxlen: 24
                          84.254.140.0/24 maxlen: 24
                          84.254.152.0/24 maxlen: 24
                          84.254.150.0/24 maxlen: 24
                          84.254.149.0/24 maxlen: 24
                          84.254.151.0/24 maxlen: 24
                          84.254.148.0/24 maxlen: 24
                          84.254.159.0/24 maxlen: 24
                          84.254.157.0/24 maxlen: 24
                          84.254.156.0/24 maxlen: 24
                          84.254.158.0/24 maxlen: 24
                          84.254.153.0/24 maxlen: 24
                          84.254.155.0/24 maxlen: 24
                          84.254.154.0/24 maxlen: 24
                          84.254.163.0/24 maxlen: 24
                          84.254.160.0/24 maxlen: 24
                          84.254.162.0/24 maxlen: 24
                          84.254.161.0/24 maxlen: 24
                          84.254.166.0/24 maxlen: 24
                          84.254.171.0/24 maxlen: 24
                          84.254.170.0/24 maxlen: 24
                          84.254.172.0/24 maxlen: 24
                          84.254.167.0/24 maxlen: 24
                          84.254.169.0/24 maxlen: 24
                          84.254.168.0/24 maxlen: 24
                          84.254.174.0/24 maxlen: 24
                          84.254.173.0/24 maxlen: 24
                          84.254.175.0/24 maxlen: 24
                          176.227.132.0/24 maxlen: 24
                          176.227.128.0/24 maxlen: 24
                          176.227.130.0/24 maxlen: 24
                          176.227.139.0/24 maxlen: 24
                          176.227.138.0/24 maxlen: 24
                          176.227.135.0/24 maxlen: 24
                          176.227.137.0/24 maxlen: 24
                          176.227.134.0/24 maxlen: 24
                          84.254.132.0/24 maxlen: 24
                          176.227.142.0/24 maxlen: 24
                          84.254.129.0/24 maxlen: 24
                          84.254.128.0/24 maxlen: 24
                          176.227.143.0/24 maxlen: 24
                          176.227.141.0/24 maxlen: 24
                          176.227.140.0/24 maxlen: 24
                          84.254.190.0/24 maxlen: 24
                          95.210.136.0/24 maxlen: 24
                          95.210.138.0/24 maxlen: 24
                          95.210.140.0/24 maxlen: 24
                          95.210.143.0/24 maxlen: 24
                          95.210.142.0/24 maxlen: 24
                          95.210.152.0/24 maxlen: 24
                          95.210.157.0/24 maxlen: 24
                          95.210.156.0/24 maxlen: 24
                          95.210.169.0/24 maxlen: 24
                          95.210.255.0/24 maxlen: 24
                          95.210.254.0/24 maxlen: 24
                          5.61.197.0/24 maxlen: 24
                          5.61.199.0/24 maxlen: 24
                          5.61.198.0/24 maxlen: 24
                          5.61.193.0/24 maxlen: 24
                          5.61.195.0/24 maxlen: 24
                          95.210.11.0/24 maxlen: 24
                          95.210.10.0/24 maxlen: 24
                          95.210.7.0/24 maxlen: 24
                          95.210.12.0/24 maxlen: 24
                          95.210.13.0/24 maxlen: 24
                          95.210.79.0/24 maxlen: 24
                          95.210.82.0/24 maxlen: 24
                          95.210.81.0/24 maxlen: 24
                          95.210.83.0/24 maxlen: 24
                          95.210.94.0/24 maxlen: 24
                          95.210.93.0/24 maxlen: 24
                          95.210.105.0/24 maxlen: 24
                          95.210.104.0/24 maxlen: 24
                          95.210.110.0/24 maxlen: 24
                          95.210.109.0/24 maxlen: 24
                          95.210.108.0/24 maxlen: 24
                          95.210.107.0/24 maxlen: 24
                          95.210.128.0/24 maxlen: 24
                          95.210.37.0/24 maxlen: 24
                          95.210.36.0/24 maxlen: 24
                          95.210.35.0/24 maxlen: 24
                          95.210.34.0/24 maxlen: 24
                          95.210.43.0/24 maxlen: 24
                          95.210.40.0/24 maxlen: 24
                          95.210.42.0/24 maxlen: 24
                          95.210.41.0/24 maxlen: 24
                          95.210.55.0/24 maxlen: 24
                          95.210.61.0/24 maxlen: 24
                          95.210.63.0/24 maxlen: 24
                          95.210.71.0/24 maxlen: 24
                          95.210.68.0/24 maxlen: 24
                          95.210.70.0/24 maxlen: 24
                          95.210.69.0/24 maxlen: 24
                          95.210.78.0/24 maxlen: 24
                          95.210.75.0/24 maxlen: 24
                          95.210.77.0/24 maxlen: 24
                          95.210.76.0/24 maxlen: 24
                          95.210.73.0/24 maxlen: 24
                          95.210.72.0/24 maxlen: 24
                          88.202.116.0/22 maxlen: 22
                          5.175.64.0/20 maxlen: 20
                          88.202.68.0/23 maxlen: 23
                          88.202.70.0/23 maxlen: 23
                          88.202.76.0/23 maxlen: 23
                          88.202.72.0/22 maxlen: 22
                          213.209.164.0/24 maxlen: 24
                          213.209.163.0/24 maxlen: 24
                          213.209.161.0/24 maxlen: 24
                          213.209.162.0/24 maxlen: 24
                          213.209.169.0/24 maxlen: 24
                          213.209.170.0/24 maxlen: 24
                          88.202.0.0/17 maxlen: 17
                          88.202.0.0/18 maxlen: 18
                          84.254.164.0/23 maxlen: 23
                          84.254.176.0/21 maxlen: 21
                          84.254.184.0/22 maxlen: 22
                          176.227.128.0/20 maxlen: 20
                          84.254.128.0/18 maxlen: 18
                          84.254.188.0/23 maxlen: 23
                          95.210.192.0/20 maxlen: 20
                          95.210.192.0/19 maxlen: 19
                          95.210.224.0/20 maxlen: 20
                          95.210.160.0/19 maxlen: 19
                          95.210.240.0/21 maxlen: 21
                          95.210.252.0/23 maxlen: 23
                          95.210.248.0/22 maxlen: 22
                          5.61.192.0/21 maxlen: 21
                          95.210.0.0/22 maxlen: 22
                          95.210.8.0/21 maxlen: 21
                          95.210.0.0/16 maxlen: 16
                          213.209.184.0/22 maxlen: 22
                          95.210.96.0/21 maxlen: 24
                          95.210.112.0/22 maxlen: 22
                          95.210.116.0/22 maxlen: 22
                          185.28.64.0/24 maxlen: 24
                          95.210.32.0/23 maxlen: 23
                          95.210.44.0/23 maxlen: 23
                          185.28.65.0/24 maxlen: 24
                          95.210.46.0/23 maxlen: 23
                          95.210.48.0/22 maxlen: 22
                          95.210.64.0/20 maxlen: 20
                          88.202.85.0/24 maxlen: 24
                          88.202.81.0/24 maxlen: 24
                          88.202.84.0/24 maxlen: 24
                          88.202.79.0/24 maxlen: 24
                          88.202.88.0/24 maxlen: 24
                          88.202.90.0/24 maxlen: 24
                          88.202.87.0/24 maxlen: 24
                          88.202.86.0/24 maxlen: 24
                          88.202.96.0/24 maxlen: 24
                          88.202.95.0/24 maxlen: 24
                          88.202.98.0/24 maxlen: 24
                          88.202.97.0/24 maxlen: 24
                          88.202.93.0/24 maxlen: 24
                          88.202.105.0/24 maxlen: 24
                          88.202.103.0/24 maxlen: 24
                          88.202.102.0/24 maxlen: 24
                          88.202.104.0/24 maxlen: 24
                          88.202.99.0/24 maxlen: 24
                          88.202.101.0/24 maxlen: 24
                          88.202.100.0/24 maxlen: 24
                          88.202.112.0/24 maxlen: 24
                          88.202.106.0/24 maxlen: 24
                          88.202.107.0/24 maxlen: 24
                          88.202.123.0/24 maxlen: 24
                          88.202.122.0/24 maxlen: 24
                          88.202.121.0/24 maxlen: 24
                          88.202.30.0/24 maxlen: 24
                          88.202.32.0/24 maxlen: 24
                          5.175.64.0/24 maxlen: 24
                          88.202.51.0/24 maxlen: 24
                          88.202.47.0/24 maxlen: 24
                          88.202.46.0/24 maxlen: 24
                          88.202.48.0/24 maxlen: 24
                          5.175.68.0/24 maxlen: 24
                          5.175.71.0/24 maxlen: 24
                          5.175.70.0/24 maxlen: 24
                          5.175.67.0/24 maxlen: 24
                          5.175.69.0/24 maxlen: 24
                          88.202.55.0/24 maxlen: 24
                          5.175.66.0/24 maxlen: 24
                          5.175.65.0/24 maxlen: 24
                          5.175.74.0/24 maxlen: 24
                          5.175.78.0/24 maxlen: 24
                          5.175.77.0/24 maxlen: 24
                          88.202.64.0/24 maxlen: 24
                          88.202.61.0/24 maxlen: 24
                          5.175.76.0/24 maxlen: 24
                          88.202.63.0/24 maxlen: 24
                          5.175.75.0/24 maxlen: 24
                          88.202.62.0/24 maxlen: 24
                          5.175.73.0/24 maxlen: 24
                          5.175.72.0/24 maxlen: 24
                          88.202.66.0/24 maxlen: 24
                          5.175.79.0/24 maxlen: 24
                          213.209.160.0/19 maxlen: 19
                          213.209.172.0/22 maxlen: 24
                          2a00:ca0:201e::/48 maxlen: 48
                          2a00:ca0:2008::/48 maxlen: 48
                          2a00:ca0:2005::/48 maxlen: 48
                          2a00:ca0:2002::/48 maxlen: 48
                          2a00:ca0:2003::/48 maxlen: 48
                          2a00:ca0:2000::/48 maxlen: 48
                          2a00:ca0:2012::/48 maxlen: 48
                          2a00:ca0:200c::/48 maxlen: 48
                          2a00:ca0:200f::/48 maxlen: 48
                          2a00:ca0:2006::/48 maxlen: 48
                          2a00:ca0:200a::/48 maxlen: 48
                          2a00:ca0:2004::/48 maxlen: 48
                          2a00:ca0:2001::/48 maxlen: 48
                          2a00:ca0:2016::/48 maxlen: 48
                          2a00:ca0::/32 maxlen: 32
                          2a00:ca0:2013::/48 maxlen: 48
                          2a00:ca0:2017::/48 maxlen: 48
                          2a00:ca0:200e::/48 maxlen: 48
                          2a00:ca0:201d::/48 maxlen: 48
                          2a00:ca0:201a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d7:c8:72:c8:5a:ef:1f:f3:6d:ad:96:91:e5:c8:d8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Jun 20 07:50:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=205367c9a43301b7f68703948b8ac09b2a877b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:40:70:ec:02:ac:0e:22:c7:5b:af:4b:c5:
                    26:40:69:62:c3:47:5c:08:db:32:a3:60:33:70:bd:
                    50:13:9e:85:cd:13:24:7e:a4:aa:2f:12:05:9f:f0:
                    00:b2:8a:ea:89:65:ae:c3:f9:ef:85:f1:7d:d4:88:
                    86:11:0f:f7:a4:23:f7:05:42:3d:99:ab:b6:82:73:
                    ff:1e:94:18:e9:87:26:f6:b3:03:e9:ab:97:6f:66:
                    54:68:01:17:ed:88:e2:e2:9a:ae:e9:a4:65:7f:20:
                    b2:5f:38:86:98:cc:ea:b0:c1:91:62:19:1e:a6:7c:
                    68:7f:69:05:9f:0c:85:06:a1:d5:70:80:33:fd:87:
                    5c:81:ee:62:8a:cb:fc:3b:3c:8d:e5:4f:5a:37:81:
                    91:96:85:df:de:f2:ab:6d:2e:31:b3:aa:e4:68:87:
                    df:b6:9d:48:ab:ac:9f:4d:04:4f:4e:b3:66:86:c8:
                    e2:50:68:6a:d9:3d:fa:ac:e6:cc:27:ee:9f:64:96:
                    87:13:74:73:93:02:60:c1:12:02:63:87:4e:f9:32:
                    b0:65:8c:9b:c0:1e:41:50:0e:4b:3b:a8:39:7b:b2:
                    cb:9c:ae:e8:f9:87:f4:ed:c8:e2:29:b5:5d:19:f5:
                    1c:4b:fe:99:3c:5a:dd:cf:df:8a:a6:d7:1c:18:a0:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:53:67:C9:A4:33:01:B7:F6:87:03:94:8B:8A:C0:9B:2A:87:7B:1C
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/IFNnyaQzAbf2hwOUi4rAmyqHexw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.61.192.0/21
                  5.175.64.0/20
                  84.254.128.0/18
                  88.202.0.0/17
                  95.210.0.0/16
                  176.227.128.0/20
                  185.28.64.0/23
                  213.209.160.0/19
                IPv6:
                  2a00:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:58:9b:97:c7:ee:c3:cc:c5:78:85:18:7a:a2:b4:86:9b:38:
         90:67:5a:23:5f:87:6a:9d:e3:eb:94:1e:b8:a8:16:e9:0a:ea:
         96:08:96:4d:e7:b7:33:f6:df:84:15:e0:cd:fe:73:f6:e0:16:
         4d:e1:d3:d4:e7:92:6f:3b:0d:f1:f5:ba:99:bc:f6:fb:44:8c:
         d2:ce:98:34:d5:af:c1:5e:62:a1:20:31:58:05:b5:f6:ce:23:
         7d:2d:18:0b:a4:ca:2e:37:d5:66:a2:3b:40:b6:3c:51:2b:60:
         2f:80:77:cf:2b:07:ba:0b:8d:a1:14:4f:05:11:27:82:77:e5:
         56:09:07:32:6a:df:5e:87:fb:aa:7a:a8:40:9a:d7:14:d6:9f:
         88:ae:a6:27:7e:56:4c:c2:8f:b0:40:74:7c:ce:a4:94:57:88:
         db:c2:81:34:1b:8a:fe:37:ef:2c:7b:1d:ba:e5:8b:e9:7a:81:
         7a:42:0f:99:52:6e:a4:d8:6b:a4:92:87:b3:b8:50:f8:8e:37:
         38:27:a6:53:53:91:79:d6:3f:6b:b9:27:58:63:43:42:25:5a:
         a7:b0:e5:0e:ab:f8:41:a7:bf:58:55:ee:0b:0c:4d:61:a2:61:
         d8:76:b0:03:6e:01:fa:5f:49:8a:49:01:7e:6d:38:aa:98:11:
         3d:a5:cc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:05 2025 by rpki-client