Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Wvs6XES4sizTCgP1rKpucHtTgOo.roa
File:                     Wvs6XES4sizTCgP1rKpucHtTgOo.roa (raw, json)
Hash identifier:          JuvgLwHVEMTFX2UIED2qU+Q1y0qEgby6onMjZP7shss=
Subject key identifier:   5A:FB:3A:5C:44:B8:B2:2C:D3:0A:03:F5:AC:AA:6E:70:7B:53:80:EA
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0184C3EFCD70620129F313E13671CF0FDEBC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Wvs6XES4sizTCgP1rKpucHtTgOo.roa
Signing time:             Tue 29 Nov 2022 15:09:43 +0000
ROA not before:           Tue 29 Nov 2022 15:09:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31224
IP address blocks:        109.188.0.0/16 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          85.26.128.0/17 maxlen: 24
                          79.171.8.0/21 maxlen: 24
                          193.201.228.0/22 maxlen: 24
                          178.178.88.0/22 maxlen: 22
                          178.178.92.0/22 maxlen: 22
                          178.23.144.0/21 maxlen: 24
                          109.124.64.0/18 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          94.25.128.0/17 maxlen: 24
                          93.153.128.0/17 maxlen: 24
                          86.109.192.0/19 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          78.25.64.0/18 maxlen: 24
                          31.173.122.0/24 maxlen: 24
                          31.173.125.0/24 maxlen: 24
                          31.173.120.0/24 maxlen: 24
                          31.173.123.0/24 maxlen: 24
                          31.173.121.0/24 maxlen: 24
                          31.173.124.0/24 maxlen: 24
                          31.173.127.0/24 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          31.173.126.0/24 maxlen: 24
                          212.119.160.0/19 maxlen: 24
                          80.247.176.0/20 maxlen: 24
                          91.193.212.0/22 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          128.204.64.0/18 maxlen: 24
                          37.29.44.0/22 maxlen: 22
                          95.137.0.0/17 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          77.233.160.0/19 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          178.176.104.0/21 maxlen: 21
                          83.149.32.0/22 maxlen: 22
                          83.149.36.0/22 maxlen: 22
                          83.149.34.0/24 maxlen: 24
                          83.149.37.0/24 maxlen: 24
                          81.24.128.0/20 maxlen: 24
                          83.149.39.0/24 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          78.41.100.0/22 maxlen: 24
                          31.173.96.0/24 maxlen: 24
                          31.173.97.0/24 maxlen: 24
                          31.173.103.0/24 maxlen: 24
                          31.173.101.0/24 maxlen: 24
                          31.173.102.0/24 maxlen: 24
                          31.173.99.0/24 maxlen: 24
                          31.173.100.0/24 maxlen: 24
                          31.173.100.0/23 maxlen: 23
                          178.176.112.0/24 maxlen: 24
                          178.176.113.0/24 maxlen: 24
                          83.169.192.0/18 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          109.74.112.0/20 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          217.115.80.0/20 maxlen: 24
                          83.222.192.0/19 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          46.229.132.0/22 maxlen: 22
                          83.229.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c3:ef:cd:70:62:01:29:f3:13:e1:36:71:cf:0f:de:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Nov 29 15:09:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5afb3a5c44b8b22cd30a03f5acaa6e707b5380ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:56:26:eb:27:8d:ee:59:ff:83:41:f2:07:
                    99:75:8a:d9:d5:94:da:5a:7d:33:af:4c:41:f9:ff:
                    67:49:99:3b:5e:07:35:da:b5:96:46:ed:6a:e2:ef:
                    83:a5:f4:ef:61:b1:80:25:f6:ca:05:c5:ef:94:4b:
                    bf:76:2d:1d:f3:34:87:4c:7d:5a:85:d8:94:47:70:
                    75:80:01:d6:6e:f9:ae:35:04:3b:05:b2:d6:e1:26:
                    94:29:f8:60:6e:81:20:fe:f4:40:c8:e1:87:13:60:
                    cb:a4:db:8c:9f:fa:7c:c5:46:1a:b8:6d:f4:4f:8c:
                    b5:8e:19:30:4f:b9:28:21:0d:6a:b5:91:46:26:a1:
                    04:cc:71:39:77:80:54:55:01:2d:21:8f:f8:01:b4:
                    fd:a7:49:9c:75:31:9d:7e:af:08:79:50:0c:4c:ac:
                    29:11:bd:33:0e:af:62:ee:51:77:02:63:aa:50:ee:
                    6f:84:6e:65:e0:fb:70:aa:bf:55:b3:22:db:c4:8f:
                    7d:58:eb:c7:b1:7e:64:ce:70:58:5e:0c:e7:ef:44:
                    57:47:34:d6:5a:3e:59:bd:02:3a:14:a3:40:42:90:
                    59:80:45:15:e8:83:80:48:7d:cd:44:12:66:6e:0e:
                    a4:a3:51:85:b2:c6:21:c1:71:e8:60:c1:e1:82:cb:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FB:3A:5C:44:B8:B2:2C:D3:0A:03:F5:AC:AA:6E:70:7B:53:80:EA
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Wvs6XES4sizTCgP1rKpucHtTgOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.96.0/23
                  31.173.99.0-31.173.103.255
                  31.173.120.0/21
                  37.29.44.0/22
                  46.229.132.0/22
                  77.233.160.0/19
                  78.25.64.0/18
                  78.41.100.0/22
                  79.171.8.0/21
                  80.247.176.0/20
                  81.24.128.0/20
                  83.149.32.0/21
                  83.169.192.0/18
                  83.222.192.0/19
                  83.229.128.0/17
                  85.26.128.0/17
                  86.109.192.0/19
                  91.193.212.0/22
                  93.153.128.0/17
                  94.25.128.0/17
                  95.137.0.0/17
                  109.74.112.0/20
                  109.124.64.0/18
                  109.188.0.0/16
                  128.204.64.0/18
                  178.23.144.0/21
                  178.176.104.0-178.176.113.255
                  178.178.88.0/21
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:3b:8a:4e:9d:de:b9:60:da:32:46:05:be:2c:d2:7e:10:fa:
         32:50:97:c5:db:95:3a:b8:60:31:74:47:24:76:8a:79:2f:f4:
         05:00:0c:95:d1:65:c7:96:33:3b:15:45:d2:49:d2:02:8b:49:
         84:e8:6c:29:16:97:10:c6:0c:6c:fe:e2:25:a6:d0:0b:35:83:
         ae:01:e4:79:39:48:d4:40:56:9b:63:ee:5e:a2:11:b0:4d:05:
         ea:8f:74:53:2d:e7:25:68:8b:20:4c:15:30:bb:36:f8:7f:78:
         96:bd:eb:89:5e:e9:0c:92:ed:9e:90:f2:b2:50:33:96:5d:28:
         fe:e2:02:e8:d1:8c:28:db:b5:49:1b:83:3f:ab:28:6f:68:b1:
         91:2f:90:94:aa:82:fb:18:37:a5:0b:b0:6a:6f:f6:0a:42:b8:
         49:03:73:81:78:e4:b3:73:dc:0e:9f:dc:5b:43:65:65:cb:64:
         31:fa:a7:59:c4:46:ba:e3:21:b1:39:ef:26:b1:62:1a:bd:a6:
         38:de:a6:d9:bd:4a:04:e5:27:96:33:d2:de:70:2f:8b:6f:63:
         05:ab:cf:20:e5:2e:cc:db:3a:38:e9:e2:30:16:c6:1b:1a:33:
         26:d5:0c:77:02:b8:b1:c4:57:8d:8e:22:f5:ff:1c:33:79:7d:
         89:0f:9e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org