Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OEIcV4W1tP6Mdz_Vm0j_apK7fW0.roa
File:                     OEIcV4W1tP6Mdz_Vm0j_apK7fW0.roa (raw, json)
Hash identifier:          A9oaPn725uM00a6qnhM/v44E2fCq4CWCSyT4H7wmmIQ=
Subject key identifier:   38:42:1C:57:85:B5:B4:FE:8C:77:3F:D5:9B:48:FF:6A:92:BB:7D:6D
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0184E2BD063D858806CEE56B01AC9093CE17
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OEIcV4W1tP6Mdz_Vm0j_apK7fW0.roa
Signing time:             Mon 05 Dec 2022 14:42:29 +0000
ROA not before:           Mon 05 Dec 2022 14:42:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31163
IP address blocks:        85.26.189.0/24 maxlen: 24
                          85.26.187.0/24 maxlen: 24
                          85.26.190.0/24 maxlen: 24
                          85.26.188.0/24 maxlen: 24
                          85.26.191.0/24 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          85.26.179.0/24 maxlen: 24
                          85.26.178.0/24 maxlen: 24
                          85.26.181.0/24 maxlen: 24
                          85.26.184.0/24 maxlen: 24
                          85.26.182.0/24 maxlen: 24
                          85.26.185.0/24 maxlen: 24
                          85.26.180.0/24 maxlen: 24
                          85.26.183.0/24 maxlen: 24
                          85.26.186.0/24 maxlen: 24
                          93.153.128.0/17 maxlen: 24
                          31.173.192.0/24 maxlen: 24
                          31.173.193.0/24 maxlen: 24
                          31.173.196.0/24 maxlen: 24
                          31.173.199.0/24 maxlen: 24
                          31.173.194.0/24 maxlen: 24
                          31.173.197.0/24 maxlen: 24
                          31.173.195.0/24 maxlen: 24
                          31.173.198.0/24 maxlen: 24
                          31.173.201.0/24 maxlen: 24
                          31.173.204.0/24 maxlen: 24
                          31.173.202.0/24 maxlen: 24
                          31.173.205.0/24 maxlen: 24
                          31.173.200.0/24 maxlen: 24
                          31.173.203.0/24 maxlen: 24
                          31.173.206.0/24 maxlen: 24
                          31.173.209.0/24 maxlen: 24
                          31.173.212.0/24 maxlen: 24
                          31.173.207.0/24 maxlen: 24
                          31.173.210.0/24 maxlen: 24
                          31.173.213.0/24 maxlen: 24
                          31.173.208.0/24 maxlen: 24
                          31.173.211.0/24 maxlen: 24
                          31.173.217.0/24 maxlen: 24
                          31.173.215.0/24 maxlen: 24
                          31.173.218.0/24 maxlen: 24
                          31.173.216.0/24 maxlen: 24
                          31.173.219.0/24 maxlen: 24
                          31.173.214.0/24 maxlen: 24
                          31.173.220.0/24 maxlen: 24
                          31.173.223.0/24 maxlen: 24
                          31.173.221.0/24 maxlen: 24
                          31.173.222.0/24 maxlen: 24
                          91.193.212.0/22 maxlen: 24
                          109.106.192.0/24 maxlen: 24
                          109.106.197.0/24 maxlen: 24
                          109.106.195.0/24 maxlen: 24
                          109.106.198.0/24 maxlen: 24
                          109.106.193.0/24 maxlen: 24
                          109.106.196.0/24 maxlen: 24
                          109.106.199.0/24 maxlen: 24
                          109.106.194.0/24 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          109.124.64.0/18 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          86.109.192.0/19 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          188.170.187.0/24 maxlen: 24
                          188.170.190.0/24 maxlen: 24
                          188.170.189.0/24 maxlen: 24
                          188.170.192.0/24 maxlen: 24
                          188.170.191.0/24 maxlen: 24
                          188.170.188.0/24 maxlen: 24
                          188.170.195.0/24 maxlen: 24
                          188.170.198.0/24 maxlen: 24
                          188.170.197.0/24 maxlen: 24
                          188.170.199.0/24 maxlen: 24
                          188.170.194.0/24 maxlen: 24
                          188.170.193.0/24 maxlen: 24
                          188.170.196.0/24 maxlen: 24
                          188.170.211.0/24 maxlen: 24
                          188.170.213.0/24 maxlen: 24
                          188.170.208.0/24 maxlen: 24
                          188.170.210.0/24 maxlen: 24
                          188.170.209.0/24 maxlen: 24
                          188.170.212.0/24 maxlen: 24
                          188.170.214.0/24 maxlen: 24
                          188.170.219.0/24 maxlen: 24
                          188.170.216.0/24 maxlen: 24
                          188.170.215.0/24 maxlen: 24
                          188.170.218.0/24 maxlen: 24
                          188.170.217.0/24 maxlen: 24
                          188.170.224.0/24 maxlen: 24
                          188.170.221.0/24 maxlen: 24
                          188.170.222.0/24 maxlen: 24
                          188.170.220.0/24 maxlen: 24
                          188.170.225.0/24 maxlen: 24
                          188.170.226.0/24 maxlen: 24
                          188.170.223.0/24 maxlen: 24
                          188.170.227.0/24 maxlen: 24
                          128.204.64.0/18 maxlen: 24
                          188.170.171.0/24 maxlen: 24
                          188.170.170.0/24 maxlen: 24
                          188.170.169.0/24 maxlen: 24
                          188.170.172.0/24 maxlen: 24
                          188.170.179.0/24 maxlen: 24
                          188.170.174.0/24 maxlen: 24
                          95.137.0.0/17 maxlen: 24
                          188.170.173.0/24 maxlen: 24
                          188.170.176.0/24 maxlen: 24
                          188.170.175.0/24 maxlen: 24
                          188.170.178.0/24 maxlen: 24
                          188.170.177.0/24 maxlen: 24
                          188.170.182.0/24 maxlen: 24
                          188.170.181.0/24 maxlen: 24
                          188.170.184.0/24 maxlen: 24
                          188.170.183.0/24 maxlen: 24
                          188.170.186.0/24 maxlen: 24
                          188.170.185.0/24 maxlen: 24
                          188.170.180.0/24 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          83.169.232.0/24 maxlen: 24
                          83.169.233.0/24 maxlen: 24
                          83.169.240.0/24 maxlen: 24
                          83.169.237.0/24 maxlen: 24
                          83.169.238.0/24 maxlen: 24
                          83.169.235.0/24 maxlen: 24
                          83.169.234.0/24 maxlen: 24
                          83.169.239.0/24 maxlen: 24
                          83.169.245.0/24 maxlen: 24
                          83.169.246.0/24 maxlen: 24
                          83.169.243.0/24 maxlen: 24
                          83.169.244.0/24 maxlen: 24
                          83.169.241.0/24 maxlen: 24
                          83.169.242.0/24 maxlen: 24
                          83.169.247.0/24 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          109.188.0.0/16 maxlen: 24
                          193.201.228.0/22 maxlen: 24
                          85.26.176.0/23 maxlen: 23
                          94.25.128.0/17 maxlen: 24
                          212.119.160.0/19 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          178.178.3.0/24 maxlen: 24
                          178.178.0.0/24 maxlen: 24
                          178.178.2.0/24 maxlen: 24
                          178.178.4.0/24 maxlen: 24
                          178.178.1.0/24 maxlen: 24
                          178.178.5.0/24 maxlen: 24
                          37.29.123.0/24 maxlen: 24
                          37.29.125.0/24 maxlen: 24
                          37.29.120.0/24 maxlen: 24
                          37.29.119.0/24 maxlen: 24
                          37.29.122.0/24 maxlen: 24
                          37.29.121.0/24 maxlen: 24
                          37.29.124.0/24 maxlen: 24
                          37.29.126.0/24 maxlen: 24
                          37.29.127.0/24 maxlen: 24
                          178.23.144.0/21 maxlen: 24
                          178.176.215.0/24 maxlen: 24
                          178.176.218.0/24 maxlen: 24
                          178.176.217.0/24 maxlen: 24
                          178.176.219.0/24 maxlen: 24
                          178.176.214.0/24 maxlen: 24
                          178.176.216.0/24 maxlen: 24
                          178.176.223.0/24 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          178.176.220.0/24 maxlen: 24
                          178.176.222.0/24 maxlen: 24
                          178.176.221.0/24 maxlen: 24
                          188.170.200.0/22 maxlen: 22
                          188.170.204.0/22 maxlen: 22
                          37.29.112.0/24 maxlen: 24
                          37.29.115.0/24 maxlen: 24
                          37.29.118.0/24 maxlen: 24
                          37.29.117.0/24 maxlen: 24
                          37.29.114.0/24 maxlen: 24
                          37.29.113.0/24 maxlen: 24
                          37.29.116.0/24 maxlen: 24
                          188.170.168.0/21 maxlen: 21
                          195.149.111.0/24 maxlen: 24
                          83.149.24.0/24 maxlen: 24
                          83.149.29.0/24 maxlen: 24
                          83.149.30.0/24 maxlen: 24
                          83.149.28.0/24 maxlen: 24
                          83.149.25.0/24 maxlen: 24
                          83.149.31.0/24 maxlen: 24
                          178.176.192.0/24 maxlen: 24
                          178.176.194.0/24 maxlen: 24
                          178.176.193.0/24 maxlen: 24
                          178.176.196.0/24 maxlen: 24
                          178.176.195.0/24 maxlen: 24
                          178.176.198.0/24 maxlen: 24
                          178.176.197.0/24 maxlen: 24
                          178.176.202.0/24 maxlen: 24
                          178.176.203.0/24 maxlen: 24
                          178.176.210.0/24 maxlen: 24
                          178.176.209.0/24 maxlen: 24
                          178.176.212.0/24 maxlen: 24
                          178.176.211.0/24 maxlen: 24
                          178.176.213.0/24 maxlen: 24
                          178.176.208.0/24 maxlen: 24
                          109.74.112.0/20 maxlen: 24
                          217.115.80.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:bd:06:3d:85:88:06:ce:e5:6b:01:ac:90:93:ce:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec  5 14:42:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38421c5785b5b4fe8c773fd59b48ff6a92bb7d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:f0:22:14:d7:1a:81:db:1c:57:89:61:a5:
                    38:02:0b:95:c8:e9:c4:24:9c:40:31:fb:c7:d8:0f:
                    3d:f0:b3:b2:be:1d:da:46:4c:bf:c6:f1:dc:98:f2:
                    9e:64:6b:74:43:ed:26:8f:01:9f:db:5c:37:52:dd:
                    56:ba:02:9c:20:3d:f2:3d:c9:6c:25:9d:f6:74:01:
                    f5:ee:c6:5b:8c:26:8b:ba:22:e3:ec:6b:8d:8d:4b:
                    64:e5:81:5a:f6:0f:f9:58:d2:d1:d2:a6:b7:aa:d9:
                    9c:fc:fe:ab:4b:1d:0e:29:6a:7c:7a:9e:33:84:ab:
                    17:ea:6a:a4:62:c4:71:72:bf:f6:22:9d:30:3c:7e:
                    a7:9f:88:a3:51:68:8a:ea:9f:14:91:83:33:c2:3f:
                    00:a5:6c:f7:8a:4b:e6:13:3d:57:bc:99:63:21:7c:
                    95:f5:68:04:11:40:bf:7d:69:db:98:78:9a:47:39:
                    12:bc:8c:f7:d4:38:4c:e4:e4:7d:96:ea:b7:d0:dd:
                    81:69:db:06:1f:32:c1:19:68:48:36:d1:bc:9e:1f:
                    3b:dc:9c:8e:39:15:96:b7:dc:5e:27:03:44:aa:4a:
                    57:e1:7c:85:dc:f0:de:23:bb:56:9d:db:7c:af:6d:
                    66:d7:6b:a8:d7:1a:be:79:d6:9b:15:f4:7d:a9:4f:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:42:1C:57:85:B5:B4:FE:8C:77:3F:D5:9B:48:FF:6A:92:BB:7D:6D
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OEIcV4W1tP6Mdz_Vm0j_apK7fW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.192.0/19
                  37.29.112.0/20
                  83.149.24.0/23
                  83.149.28.0/22
                  83.169.232.0/22
                  83.169.237.0-83.169.247.255
                  85.26.176.0/20
                  86.109.192.0/19
                  91.193.212.0/22
                  93.153.128.0/17
                  94.25.128.0/17
                  95.137.0.0/17
                  109.74.112.0/20
                  109.106.192.0/21
                  109.124.64.0/18
                  109.188.0.0/16
                  128.204.64.0/18
                  178.23.144.0/21
                  178.176.192.0-178.176.198.255
                  178.176.202.0/23
                  178.176.208.0/20
                  178.178.0.0-178.178.5.255
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.168.0-188.170.227.255
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:72:56:20:76:d3:2f:c7:3e:08:2a:27:12:f5:9e:4a:e8:5e:
         45:ca:52:04:36:ec:72:32:43:05:c6:e1:cf:3c:68:f8:0c:f5:
         0d:37:11:86:66:05:34:8a:55:7a:0b:dd:a7:2f:c2:3d:c4:9f:
         1a:8c:02:63:98:1b:85:94:1c:f4:bc:76:3b:06:93:88:3f:96:
         d1:ae:a6:b4:02:7b:0e:1a:3f:6e:e9:15:5c:c5:7e:af:b4:c0:
         e5:d5:54:40:9b:8c:b5:b1:41:08:c6:52:71:56:6c:06:47:79:
         e8:84:9e:76:d5:3d:c0:32:2e:e0:1d:c9:22:c1:54:e0:a7:55:
         f2:ae:cf:f2:dc:6b:a0:f4:42:59:ad:8b:c6:e1:48:d9:0b:46:
         53:a0:f5:27:59:01:f1:4c:5f:ee:f9:01:ba:68:d2:ea:9c:ec:
         54:69:74:b2:63:b9:0f:40:e1:45:91:d9:ca:19:e7:20:41:dc:
         49:5f:ea:a7:a4:58:6f:52:ff:32:20:a0:d8:c5:4e:64:38:cd:
         65:09:f7:d3:05:30:24:d2:40:3b:10:0e:f9:1d:ce:6a:d1:fe:
         68:08:20:04:48:b0:1f:ef:50:fd:5b:aa:83:f0:c4:ea:63:c9:
         6c:36:b2:fc:13:ae:b4:0d:59:5a:93:23:25:37:67:0f:c8:1e:
         80:ea:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:12 2025 by rpki-client