Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-r61wkkcSA_o8em3dWW5YB91I5s.roa
File:                     1-r61wkkcSA_o8em3dWW5YB91I5s.roa (raw, json)
Hash identifier:          sdqqMRQDh54SPkLczL4dt/eEMs3ppsU5yBVL7kOf2kU=
Subject key identifier:   FA:BE:B5:C2:49:1C:48:0F:E8:F1:E9:B7:75:65:B9:60:1F:75:23:9B
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       018505910E29A6854363BB5CF27CFFF56F5C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-r61wkkcSA_o8em3dWW5YB91I5s.roa
Signing time:             Mon 12 Dec 2022 09:01:10 +0000
ROA not before:           Mon 12 Dec 2022 09:01:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29648
IP address blocks:        193.201.228.0/22 maxlen: 24
                          31.173.119.0/24 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          77.233.160.0/19 maxlen: 19
                          77.233.161.0/24 maxlen: 24
                          77.233.164.0/24 maxlen: 24
                          77.233.160.0/24 maxlen: 24
                          77.233.162.0/24 maxlen: 24
                          77.233.166.0/24 maxlen: 24
                          77.233.167.0/24 maxlen: 24
                          77.233.170.0/24 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          31.173.104.0/24 maxlen: 24
                          31.173.105.0/24 maxlen: 24
                          31.173.112.0/24 maxlen: 24
                          31.173.108.0/24 maxlen: 24
                          31.173.109.0/24 maxlen: 24
                          31.173.110.0/24 maxlen: 24
                          31.173.106.0/24 maxlen: 24
                          31.173.111.0/24 maxlen: 24
                          31.173.107.0/24 maxlen: 24
                          31.173.116.0/24 maxlen: 24
                          31.173.113.0/24 maxlen: 24
                          31.173.117.0/24 maxlen: 24
                          31.173.114.0/24 maxlen: 24
                          31.173.118.0/24 maxlen: 24
                          31.173.115.0/24 maxlen: 24
                          77.233.173.0/24 maxlen: 24
                          77.233.178.0/24 maxlen: 24
                          77.233.185.0/24 maxlen: 24
                          77.233.181.0/24 maxlen: 24
                          77.233.180.0/24 maxlen: 24
                          77.233.186.0/24 maxlen: 24
                          77.233.182.0/24 maxlen: 24
                          77.233.188.0/24 maxlen: 24
                          77.233.191.0/24 maxlen: 24
                          77.233.190.0/24 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          188.170.98.0/24 maxlen: 24
                          86.109.192.0/19 maxlen: 19
                          86.109.192.0/20 maxlen: 20
                          188.170.96.0/24 maxlen: 24
                          188.170.97.0/24 maxlen: 24
                          188.170.102.0/24 maxlen: 24
                          86.109.193.0/24 maxlen: 24
                          188.170.103.0/24 maxlen: 24
                          188.170.99.0/24 maxlen: 24
                          188.170.100.0/24 maxlen: 24
                          188.170.104.0/24 maxlen: 24
                          86.109.195.0/24 maxlen: 24
                          188.170.101.0/24 maxlen: 24
                          188.170.105.0/24 maxlen: 24
                          188.170.110.0/24 maxlen: 24
                          188.170.106.0/24 maxlen: 24
                          188.170.111.0/24 maxlen: 24
                          188.170.107.0/24 maxlen: 24
                          86.109.200.0/23 maxlen: 23
                          188.170.108.0/24 maxlen: 24
                          188.170.109.0/24 maxlen: 24
                          188.170.112.0/24 maxlen: 24
                          188.170.114.0/24 maxlen: 24
                          86.109.213.0/24 maxlen: 24
                          188.170.115.0/24 maxlen: 24
                          188.170.116.0/24 maxlen: 24
                          86.109.212.0/24 maxlen: 24
                          86.109.208.0/24 maxlen: 24
                          188.170.118.0/24 maxlen: 24
                          188.170.117.0/24 maxlen: 24
                          188.170.113.0/24 maxlen: 24
                          86.109.210.0/24 maxlen: 24
                          188.170.119.0/24 maxlen: 24
                          188.170.123.0/24 maxlen: 24
                          86.109.216.0/24 maxlen: 24
                          188.170.122.0/24 maxlen: 24
                          86.109.215.0/24 maxlen: 24
                          86.109.218.0/23 maxlen: 23
                          188.170.125.0/24 maxlen: 24
                          188.170.121.0/24 maxlen: 24
                          188.170.120.0/24 maxlen: 24
                          86.109.214.0/24 maxlen: 24
                          188.170.124.0/24 maxlen: 24
                          188.170.127.0/24 maxlen: 24
                          86.109.220.0/24 maxlen: 24
                          188.170.126.0/24 maxlen: 24
                          86.109.223.0/24 maxlen: 24
                          86.109.222.0/24 maxlen: 24
                          78.109.120.0/24 maxlen: 24
                          78.109.121.0/24 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          178.176.98.0/24 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          178.176.96.0/24 maxlen: 24
                          178.176.97.0/24 maxlen: 24
                          178.176.102.0/24 maxlen: 24
                          178.176.103.0/24 maxlen: 24
                          178.176.99.0/24 maxlen: 24
                          178.176.100.0/24 maxlen: 24
                          178.176.101.0/24 maxlen: 24
                          178.176.118.0/24 maxlen: 24
                          178.176.114.0/24 maxlen: 24
                          178.176.115.0/24 maxlen: 24
                          178.176.116.0/24 maxlen: 24
                          178.176.117.0/24 maxlen: 24
                          178.176.122.0/24 maxlen: 24
                          178.176.123.0/24 maxlen: 24
                          178.176.119.0/24 maxlen: 24
                          178.176.124.0/24 maxlen: 24
                          178.176.120.0/24 maxlen: 24
                          178.176.125.0/24 maxlen: 24
                          178.176.121.0/24 maxlen: 24
                          178.176.126.0/24 maxlen: 24
                          178.176.127.0/24 maxlen: 24
                          83.169.217.0/24 maxlen: 24
                          83.169.218.0/24 maxlen: 24
                          83.169.219.0/24 maxlen: 24
                          83.169.220.0/24 maxlen: 24
                          83.169.221.0/24 maxlen: 24
                          83.169.222.0/24 maxlen: 24
                          83.169.223.0/24 maxlen: 24
                          188.94.168.0/24 maxlen: 24
                          188.94.172.0/24 maxlen: 24
                          188.94.169.0/24 maxlen: 24
                          188.94.170.0/24 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          188.94.171.0/24 maxlen: 24
                          188.94.173.0/24 maxlen: 24
                          188.94.174.0/24 maxlen: 24
                          188.94.175.0/24 maxlen: 24
                          217.115.80.0/20 maxlen: 20
                          217.115.81.0/24 maxlen: 24
                          217.115.80.0/24 maxlen: 24
                          217.115.91.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:05:91:0e:29:a6:85:43:63:bb:5c:f2:7c:ff:f5:6f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec 12 09:01:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fabeb5c2491c480fe8f1e9b77565b9601f75239b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5e:93:2c:22:45:bf:fa:0c:2b:f7:47:bd:d4:
                    4d:72:bf:26:af:95:d2:01:2f:22:c0:6d:ce:c3:00:
                    29:16:ae:32:fd:41:9c:f9:ea:d5:55:11:f4:79:c8:
                    9f:60:91:e6:9f:7d:50:d7:10:e3:05:a2:1d:19:e7:
                    4f:64:4e:f4:d4:f6:65:98:01:e6:a5:2d:d5:f2:57:
                    c0:e1:b4:ab:a5:17:9c:70:2f:9a:dc:69:75:8f:3a:
                    a3:da:c3:df:17:4a:84:ef:2c:c0:39:d3:09:0a:97:
                    86:fe:34:8c:91:cd:ec:e2:9c:d1:c6:c4:e6:36:cf:
                    1c:72:62:54:42:15:7e:4b:a2:40:fe:ae:ef:3d:a1:
                    d1:25:0f:ec:80:66:a2:b8:17:be:8d:05:1c:8e:0b:
                    f8:45:47:f3:0b:46:94:a1:05:a9:00:73:71:6c:79:
                    f8:a0:9b:bc:5c:ed:30:0f:e0:a9:a3:d6:55:75:48:
                    2c:be:af:3d:7b:5d:52:d8:64:58:f8:ab:55:84:28:
                    90:fa:73:34:c1:fa:9e:5e:11:21:81:24:a5:22:85:
                    44:cc:bb:e9:2d:c5:10:b2:2e:b1:95:c1:fa:5b:ae:
                    a2:f2:79:d8:2f:e7:69:55:67:4b:7a:91:7a:05:a2:
                    49:f7:42:20:13:1d:8a:01:6f:d0:a7:37:2a:0c:e3:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BE:B5:C2:49:1C:48:0F:E8:F1:E9:B7:75:65:B9:60:1F:75:23:9B
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-r61wkkcSA_o8em3dWW5YB91I5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.104.0-31.173.119.255
                  77.233.160.0/19
                  78.109.120.0/23
                  83.169.217.0-83.169.223.255
                  86.109.192.0/19
                  178.176.96.0/21
                  178.176.114.0-178.176.127.255
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.96.0/19
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:8f:b3:8e:4c:27:93:4b:8c:02:41:16:f5:73:2e:8d:06:79:
         86:fc:81:f2:a7:75:9c:4e:c2:82:c9:72:7e:77:0b:e8:dd:6a:
         1f:fb:76:7c:14:a1:70:f5:4b:f3:4c:6e:c2:82:75:8a:72:e4:
         0a:55:cc:3c:11:90:20:de:78:60:86:17:48:64:b2:6c:06:6a:
         c7:d0:1b:98:90:85:87:a4:96:5e:d9:a9:9e:07:4c:4e:f0:2f:
         c0:1b:69:00:8d:5b:dc:ef:01:a1:85:84:fd:db:63:a1:84:f1:
         d4:57:1a:77:a6:8f:b4:e2:f5:74:fa:ba:21:94:5e:dc:ff:d8:
         7b:2e:87:2b:c9:f1:ba:20:76:36:e6:b8:b9:5b:4c:d6:0d:b6:
         f2:55:d5:f8:fb:91:41:6e:f2:f4:be:85:a2:26:ce:72:40:89:
         61:5e:b0:81:1d:7c:b7:bd:f7:0b:ed:be:ec:86:71:be:47:4c:
         e3:7a:e8:09:2a:fa:8b:7e:c9:66:d4:95:10:de:00:8c:41:19:
         d1:9b:59:1d:20:32:5d:e0:89:02:c2:fc:6a:1c:b2:1c:d9:b5:
         58:a6:6b:be:0a:0f:63:04:57:61:47:70:fe:5b:66:55:28:7c:
         35:5d:06:d4:df:57:3f:5e:50:1b:4f:8d:80:98:b0:d4:0f:70:
         41:1e:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:56 2025 by rpki-client