Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eeMzdZ6XJFjIyb9qwAPOpSzeOf8.roa
File:                     eeMzdZ6XJFjIyb9qwAPOpSzeOf8.roa (raw, json)
Hash identifier:          EydhBesEL//XJyIjthuWpUx4DKbQioQAPX8+FT7P69E=
Subject key identifier:   79:E3:33:75:9E:97:24:58:C8:C9:BF:6A:C0:03:CE:A5:2C:DE:39:FF
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       018506171B007171BF96D36AE7E34A3C9A68
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eeMzdZ6XJFjIyb9qwAPOpSzeOf8.roa
Signing time:             Mon 12 Dec 2022 11:27:35 +0000
ROA not before:           Mon 12 Dec 2022 11:27:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31208
IP address blocks:        178.178.84.0/22 maxlen: 22
                          178.178.82.0/24 maxlen: 24
                          178.178.80.0/23 maxlen: 23
                          178.178.131.0/24 maxlen: 24
                          178.178.130.0/24 maxlen: 24
                          178.178.129.0/24 maxlen: 24
                          178.178.132.0/24 maxlen: 24
                          178.178.128.0/24 maxlen: 24
                          178.176.230.0/23 maxlen: 23
                          37.28.186.0/24 maxlen: 24
                          188.170.50.0/24 maxlen: 24
                          37.28.184.0/24 maxlen: 24
                          188.170.48.0/24 maxlen: 24
                          37.28.185.0/24 maxlen: 24
                          188.170.49.0/24 maxlen: 24
                          188.170.54.0/24 maxlen: 24
                          188.170.55.0/24 maxlen: 24
                          37.28.187.0/24 maxlen: 24
                          188.170.56.0/24 maxlen: 24
                          188.170.52.0/24 maxlen: 24
                          188.170.57.0/24 maxlen: 24
                          188.170.53.0/24 maxlen: 24
                          188.170.62.0/24 maxlen: 24
                          188.170.63.0/24 maxlen: 24
                          188.170.59.0/24 maxlen: 24
                          188.170.60.0/24 maxlen: 24
                          188.170.61.0/24 maxlen: 24
                          37.29.75.0/24 maxlen: 24
                          37.29.74.0/24 maxlen: 24
                          37.29.73.0/24 maxlen: 24
                          37.29.72.0/24 maxlen: 24
                          128.204.72.0/24 maxlen: 24
                          128.204.73.0/24 maxlen: 24
                          178.176.58.0/24 maxlen: 24
                          178.176.56.0/24 maxlen: 24
                          178.176.57.0/24 maxlen: 24
                          178.176.62.0/24 maxlen: 24
                          178.176.63.0/24 maxlen: 24
                          178.176.59.0/24 maxlen: 24
                          178.176.60.0/24 maxlen: 24
                          178.176.61.0/24 maxlen: 24
                          83.149.41.0/24 maxlen: 24
                          83.149.44.0/23 maxlen: 23
                          83.149.40.0/24 maxlen: 24
                          83.149.42.0/23 maxlen: 23
                          83.149.46.0/23 maxlen: 23
                          83.169.212.0/24 maxlen: 24
                          83.169.208.0/24 maxlen: 24
                          83.169.213.0/24 maxlen: 24
                          83.169.209.0/24 maxlen: 24
                          83.169.210.0/24 maxlen: 24
                          83.169.211.0/24 maxlen: 24
                          83.169.214.0/24 maxlen: 24
                          83.169.215.0/24 maxlen: 24
                          178.178.135.0/24 maxlen: 24
                          178.178.134.0/24 maxlen: 24
                          178.178.137.0/24 maxlen: 24
                          178.178.133.0/24 maxlen: 24
                          178.178.136.0/24 maxlen: 24
                          178.178.143.0/24 maxlen: 24
                          178.178.142.0/24 maxlen: 24
                          46.229.136.0/22 maxlen: 22
                          46.229.141.0/24 maxlen: 24
                          46.229.140.0/24 maxlen: 24
                          46.229.143.0/24 maxlen: 24
                          46.229.142.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:06:17:1b:00:71:71:bf:96:d3:6a:e7:e3:4a:3c:9a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec 12 11:27:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79e333759e972458c8c9bf6ac003cea52cde39ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:13:45:d8:70:62:9d:a1:1a:40:7c:07:f7:54:
                    8e:92:be:0a:9b:70:6e:b4:97:6b:2b:95:f9:d2:92:
                    ae:52:02:bc:de:88:d9:b2:9d:27:32:79:1e:0c:57:
                    b2:40:48:34:19:27:ce:24:98:06:8e:e4:3e:2f:31:
                    12:68:9f:85:6a:46:85:1f:7f:9d:e3:0d:36:8a:1a:
                    2f:6c:e6:f7:f0:58:91:e3:25:52:5b:95:25:07:99:
                    89:af:b4:06:b9:db:cd:b1:21:da:8b:45:af:02:d3:
                    74:de:45:86:02:e3:5b:12:49:7b:c9:63:19:d5:22:
                    a6:48:35:a0:cd:e5:56:ee:41:ae:43:86:2a:53:5e:
                    18:ff:ec:e9:6d:c9:fd:ac:cb:3f:f7:4f:e6:9f:8d:
                    5b:c1:80:d2:7d:09:9d:95:fc:d9:61:36:30:3a:9a:
                    b2:05:01:ca:48:a2:a0:bb:78:8b:ab:2d:17:6c:71:
                    6d:a6:c5:c1:be:8d:0a:00:65:68:61:87:b4:61:d2:
                    29:b8:6f:13:77:bd:f5:30:e6:d3:8a:4f:6d:83:ba:
                    b6:97:25:34:bd:7a:3e:0e:6d:70:25:74:e2:dd:f9:
                    16:af:a7:4c:02:be:fc:57:ce:b1:9a:16:ac:7b:6c:
                    b7:b1:f8:30:eb:2c:28:8d:d8:a7:3d:c5:fe:22:65:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E3:33:75:9E:97:24:58:C8:C9:BF:6A:C0:03:CE:A5:2C:DE:39:FF
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eeMzdZ6XJFjIyb9qwAPOpSzeOf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.28.184.0/22
                  37.29.72.0/22
                  46.229.136.0/21
                  83.149.40.0/21
                  83.169.208.0/21
                  128.204.72.0/23
                  178.176.56.0/21
                  178.176.230.0/23
                  178.178.80.0-178.178.82.255
                  178.178.84.0/22
                  178.178.128.0-178.178.137.255
                  178.178.142.0/23
                  188.170.48.0-188.170.50.255
                  188.170.52.0-188.170.57.255
                  188.170.59.0-188.170.63.255

    Signature Algorithm: sha256WithRSAEncryption
         86:aa:9d:7f:60:16:48:c9:f9:ed:c0:ee:61:db:f0:80:c5:4e:
         4a:ea:fb:81:c9:84:d7:d6:56:76:56:b3:15:82:42:5e:37:83:
         2f:06:43:78:88:6b:f8:2c:90:78:cc:a3:9a:22:5b:e2:61:50:
         13:fe:57:43:84:39:f6:13:36:a2:bf:1d:62:64:d7:2e:e6:7c:
         57:06:f1:33:75:35:a5:ee:69:bd:2d:6a:09:b8:49:45:3f:66:
         10:fe:7a:39:30:0f:6c:35:54:5c:d9:2e:2f:55:d1:db:f9:e8:
         01:60:a7:4f:f2:30:73:b8:6d:6a:6b:93:7a:6d:08:b4:b7:31:
         54:5d:f3:45:26:be:72:7d:16:68:09:50:eb:0f:3b:14:fb:73:
         0f:08:27:5f:fa:df:cc:e9:24:0a:09:c0:07:68:36:25:bb:e3:
         b9:fa:7c:24:6e:c3:54:c8:40:1f:10:f1:4d:7b:fb:ba:2b:8e:
         54:b1:65:70:43:9a:8e:0a:68:b9:53:24:2d:77:f9:ee:e7:5d:
         1a:65:95:dd:d2:02:6c:b1:3c:0a:3a:db:57:cf:31:bd:d3:dd:
         b0:88:57:e5:af:2d:48:5c:17:d1:a8:db:c9:26:7c:72:9d:14:
         08:97:3b:75:89:4f:17:de:09:87:c1:4a:fa:4a:d5:f8:8e:59:
         7e:5e:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:46 2025 by rpki-client