Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_m_d_GI_6MgDcOG8I7hFx7UVCkw.roa
File:                     _m_d_GI_6MgDcOG8I7hFx7UVCkw.roa (raw, json)
Hash identifier:          JhaeNpASm6sWTCLV+9l/z1zKPCKI9gYsVUVYmFn3mFg=
Subject key identifier:   FE:6F:DD:FC:62:3F:E8:C8:03:70:E1:BC:23:B8:45:C7:B5:15:0A:4C
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       018476335117B98D93B9421A5D6250624D43
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_m_d_GI_6MgDcOG8I7hFx7UVCkw.roa
Signing time:             Mon 14 Nov 2022 12:53:05 +0000
ROA not before:           Mon 14 Nov 2022 12:53:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25159
IP address blocks:        109.188.0.0/16 maxlen: 24
                          46.29.192.0/21 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          85.26.128.0/17 maxlen: 24
                          79.171.8.0/21 maxlen: 24
                          193.201.228.0/22 maxlen: 24
                          178.23.144.0/21 maxlen: 24
                          109.124.64.0/18 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          94.25.128.0/17 maxlen: 24
                          93.153.128.0/17 maxlen: 24
                          86.109.192.0/19 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          78.25.64.0/18 maxlen: 24
                          188.170.25.0/24 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          188.170.32.0/21 maxlen: 21
                          188.170.40.0/21 maxlen: 21
                          37.28.176.0/21 maxlen: 21
                          212.119.160.0/19 maxlen: 24
                          80.247.176.0/20 maxlen: 24
                          91.193.212.0/22 maxlen: 24
                          178.177.0.0/18 maxlen: 18
                          178.177.3.0/24 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          128.204.64.0/18 maxlen: 24
                          37.29.32.0/21 maxlen: 21
                          95.137.0.0/17 maxlen: 24
                          178.176.52.0/22 maxlen: 22
                          178.176.72.0/21 maxlen: 21
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          77.233.160.0/19 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          31.173.0.0/21 maxlen: 21
                          31.173.8.0/21 maxlen: 21
                          178.176.0.0/19 maxlen: 19
                          81.24.128.0/20 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          178.176.32.0/21 maxlen: 21
                          78.41.100.0/22 maxlen: 24
                          178.176.40.0/21 maxlen: 21
                          31.173.72.0/21 maxlen: 21
                          31.173.80.0/21 maxlen: 21
                          31.173.88.0/21 maxlen: 21
                          188.170.0.0/19 maxlen: 19
                          188.170.24.0/24 maxlen: 24
                          31.173.16.0/21 maxlen: 21
                          31.173.24.0/21 maxlen: 21
                          31.173.32.0/19 maxlen: 19
                          83.169.192.0/18 maxlen: 24
                          31.173.60.0/24 maxlen: 24
                          31.173.64.0/21 maxlen: 21
                          188.162.0.0/16 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          109.74.112.0/20 maxlen: 24
                          46.232.200.0/21 maxlen: 24
                          62.64.0.0/19 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          217.115.80.0/20 maxlen: 24
                          83.222.192.0/19 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          83.229.128.0/17 maxlen: 24
                          46.229.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:76:33:51:17:b9:8d:93:b9:42:1a:5d:62:50:62:4d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Nov 14 12:53:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe6fddfc623fe8c80370e1bc23b845c7b5150a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7e:de:8e:70:6e:aa:7c:5c:d9:4d:89:46:8e:
                    42:c5:b1:a5:b5:e6:29:64:ea:11:fe:f2:27:4e:21:
                    5d:88:be:1f:db:44:b9:db:89:d6:7d:3f:5f:a2:88:
                    a1:cc:16:46:4b:e3:0d:5e:dc:73:ce:08:9f:a6:1c:
                    1d:ef:c1:29:71:0a:54:8f:95:55:f8:3b:68:34:8c:
                    0b:5c:f5:e6:8c:b8:e1:91:3c:fe:8a:e3:f1:a5:fc:
                    59:cd:46:eb:6f:e4:89:7a:2a:60:42:3d:07:f9:78:
                    f7:5c:7d:c6:70:6c:df:4b:26:84:09:79:c2:a6:fd:
                    8f:9a:0e:59:5e:ef:ac:ad:44:4d:64:58:3b:3f:1c:
                    45:b5:1d:30:5d:1e:c2:10:ab:39:ea:6b:28:2c:18:
                    df:f4:21:93:ad:20:e3:76:d6:12:f8:c1:e2:7c:f9:
                    33:71:33:7a:59:c6:b0:3c:8d:3d:f9:4e:6f:6c:0a:
                    51:47:91:4b:86:87:71:32:4a:28:ec:83:0c:ea:f5:
                    04:28:5d:02:ea:65:e9:5c:43:2c:e8:53:8d:2f:7d:
                    b8:72:e9:fb:93:dc:74:9b:e3:d3:a4:e8:15:df:b7:
                    cc:56:bd:0a:05:ad:41:8f:b7:3f:06:2b:d4:1e:75:
                    a2:2d:29:74:bd:cf:c4:4b:e9:9a:dd:af:d9:c9:8a:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6F:DD:FC:62:3F:E8:C8:03:70:E1:BC:23:B8:45:C7:B5:15:0A:4C
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_m_d_GI_6MgDcOG8I7hFx7UVCkw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.0.0-31.173.95.255
                  37.28.176.0/21
                  37.29.32.0/21
                  46.29.192.0/21
                  46.229.128.0/20
                  46.232.200.0/21
                  62.64.0.0/19
                  77.233.160.0/19
                  78.25.64.0/18
                  78.41.100.0/22
                  79.171.8.0/21
                  80.247.176.0/20
                  81.24.128.0/20
                  83.169.192.0/18
                  83.222.192.0/19
                  83.229.128.0/17
                  85.26.128.0/17
                  86.109.192.0/19
                  91.193.212.0/22
                  93.153.128.0/17
                  94.25.128.0/17
                  95.137.0.0/17
                  109.74.112.0/20
                  109.124.64.0/18
                  109.188.0.0/16
                  128.204.64.0/18
                  178.23.144.0/21
                  178.176.0.0-178.176.47.255
                  178.176.52.0/22
                  178.176.72.0/21
                  178.177.0.0/18
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.0.0-188.170.47.255
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:b0:16:23:fe:32:7f:c8:6f:82:67:0d:55:af:80:cc:17:77:
         50:8b:80:6b:9c:11:be:bd:39:5e:b4:67:3c:67:81:cb:67:39:
         ae:3a:10:f9:46:fd:ea:69:90:66:ab:aa:95:b2:c1:1d:1d:8b:
         0a:76:6d:a9:90:52:3c:d1:41:0c:1b:69:40:12:49:58:44:6e:
         f6:10:c8:a8:84:12:6b:9e:a0:7b:4c:01:61:c7:9e:ff:dc:4f:
         b5:5d:1d:ad:52:b7:27:63:7e:be:65:8f:74:c2:9f:ca:e2:8a:
         78:60:af:de:74:2f:d2:52:5f:75:76:59:b7:27:92:4e:58:6b:
         2f:75:58:2a:d3:04:cc:10:24:7f:d8:97:48:e3:22:99:8c:55:
         49:8d:e7:a8:a0:14:e4:eb:42:cf:50:43:16:00:78:00:61:b5:
         6e:0b:4e:89:79:34:85:43:bf:dc:bb:a8:1e:b4:0c:86:9a:ed:
         87:7d:31:7a:04:6c:39:7f:f5:f4:64:df:f4:5c:39:ef:83:0d:
         1f:b1:c1:68:25:39:91:e0:cc:13:68:a1:20:f7:0e:5f:db:ea:
         98:1b:74:52:52:49:5a:c2:85:d5:79:c3:31:66:dd:58:c0:54:
         9e:c5:b6:34:ab:41:6d:60:12:ee:90:45:0e:e4:da:61:30:01:
         c7:3d:f5:0c
-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgISAYR2M1EXuY2TuUIaXWJQYk1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTE0MTI1MzA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTZmZGRmYzYyM2ZlOGM4MDM3MGUxYmMyM2I4NDVjN2I1MTUwYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA637ejnBuqnxc2U2JRo5CxbGlteYp
ZOoR/vInTiFdiL4f20S524nWfT9fooihzBZGS+MNXtxzzgifphwd78EpcQpUj5VV
+DtoNIwLXPXmjLjhkTz+iuPxpfxZzUbrb+SJeipgQj0H+Xj3XH3GcGzfSyaECXnC
pv2Pmg5ZXu+srURNZFg7PxxFtR0wXR7CEKs56msoLBjf9CGTrSDjdtYS+MHifPkz
cTN6WcawPI09+U5vbApRR5FLhodxMkoo7IMM6vUEKF0C6mXpXEMs6FONL324cun7
k9x0m+PTpOgV37fMVr0KBa1Bj7c/BivUHnWiLSl0vc/ES+ma3a/ZyYopyQIDAQAB
o4IDTDCCA0gwHQYDVR0OBBYEFP5v3fxiP+jIA3DhvCO4Rce1FQpMMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvX21fZF9HSV82TWdEY09HOEk3aEZ4N1VWQ2t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYAYIKwYBBQUHAQcBAf8EggFPMIIBSzCCAUcEAgABMIIB
PzALAwMAH60DBAUfrUADBAMlHLADBAMlHSADBAMuHcADBAQu5YADBAMu6MgDBAU+
QAADBAVN6aADBAZOGUADBAJOKWQDBANPqwgDBARQ97ADBARRGIADBAZTqcADBAVT
3sADBAdT5YADBAdVGoADBAVWbcADBAJbwdQDBAddmYADBAdeGYADBAdfiQADBARt
SnADBAZtfEADAwBtvAMEBoDMQAMEA7IXkDALAwMEsrADBASysCADBAKysDQDBAOy
sEgDBAaysQADBAK5AyADBAK50owDBAO8XqgDAwC8ojALAwMBvKoDBAS8qiADBALB
yeQDBAXDBYADBAXDEGADBAHDTnQDBADDlW8DBAXD5kADBAXUDqADBAXULEADBAXU
RWADBAXUd6ADBAXVmqADBAXVqCADBAbV80ADBATZc1AwDQYJKoZIhvcNAQELBQAD
ggEBAEywFiP+Mn/Ib4JnDVWvgMwXd1CLgGucEb69OV60ZzxngctnOa46EPlG/epp
kGarqpWywR0diwp2bamQUjzRQQwbaUASSVhEbvYQyKiEEmueoHtMAWHHnv/cT7Vd
Ha1Stydjfr5lj3TCn8riinhgr950L9JSX3V2Wbcnkk5Yay91WCrTBMwQJH/Yl0jj
IpmMVUmN56igFOTrQs9QQxYAeABhtW4LTol5NIVDv9y7qB60DIaa7Yd9MXoEbDl/
9fRk3/RcOe+DDR+xwWglOZHgzBNooSD3Dl/b6pgbdFJSSVrChdV5wzFm3VjAVJ7F
tjSrQW1gEu6QRQ7k2mEwAcc99Qw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org