Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eiqj7rUJE-SmG0rrUcWUqvGoQkQ.roa
File:                     eiqj7rUJE-SmG0rrUcWUqvGoQkQ.roa (raw, json)
Hash identifier:          ZyXy2HDzgXjyw3QbhnD8dhKZI7KB0z+RoGh5Ko/OanU=
Subject key identifier:   7A:2A:A3:EE:B5:09:13:E4:A6:1B:4A:EB:51:C5:94:AA:F1:A8:42:44
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0184E2AF50D37F675CF165798E670B9493FC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eiqj7rUJE-SmG0rrUcWUqvGoQkQ.roa
Signing time:             Mon 05 Dec 2022 14:27:31 +0000
ROA not before:           Mon 05 Dec 2022 14:27:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31208
IP address blocks:        109.188.0.0/16 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          178.178.84.0/22 maxlen: 22
                          178.178.82.0/24 maxlen: 24
                          193.201.228.0/22 maxlen: 24
                          178.178.80.0/23 maxlen: 23
                          178.178.130.0/24 maxlen: 24
                          178.178.129.0/24 maxlen: 24
                          178.178.132.0/24 maxlen: 24
                          178.178.131.0/24 maxlen: 24
                          178.23.144.0/21 maxlen: 24
                          178.178.128.0/24 maxlen: 24
                          109.124.64.0/18 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          93.153.128.0/17 maxlen: 24
                          94.25.128.0/17 maxlen: 24
                          86.109.192.0/19 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          178.176.230.0/23 maxlen: 23
                          212.119.160.0/19 maxlen: 24
                          37.28.186.0/24 maxlen: 24
                          188.170.50.0/24 maxlen: 24
                          37.28.184.0/24 maxlen: 24
                          37.28.185.0/24 maxlen: 24
                          188.170.49.0/24 maxlen: 24
                          188.170.48.0/24 maxlen: 24
                          188.170.55.0/24 maxlen: 24
                          188.170.52.0/24 maxlen: 24
                          188.170.57.0/24 maxlen: 24
                          188.170.54.0/24 maxlen: 24
                          37.28.187.0/24 maxlen: 24
                          188.170.56.0/24 maxlen: 24
                          188.170.53.0/24 maxlen: 24
                          91.193.212.0/22 maxlen: 24
                          188.170.63.0/24 maxlen: 24
                          188.170.60.0/24 maxlen: 24
                          188.170.62.0/24 maxlen: 24
                          188.170.59.0/24 maxlen: 24
                          188.170.61.0/24 maxlen: 24
                          37.29.74.0/24 maxlen: 24
                          37.29.73.0/24 maxlen: 24
                          37.29.75.0/24 maxlen: 24
                          37.29.72.0/24 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          128.204.64.0/18 maxlen: 24
                          95.137.0.0/17 maxlen: 24
                          178.176.56.0/24 maxlen: 24
                          178.176.58.0/24 maxlen: 24
                          178.176.57.0/24 maxlen: 24
                          178.176.62.0/24 maxlen: 24
                          178.176.59.0/24 maxlen: 24
                          178.176.61.0/24 maxlen: 24
                          178.176.63.0/24 maxlen: 24
                          178.176.60.0/24 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          83.149.41.0/24 maxlen: 24
                          83.149.44.0/23 maxlen: 23
                          83.149.42.0/23 maxlen: 23
                          83.149.40.0/24 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          83.149.46.0/23 maxlen: 23
                          83.169.212.0/24 maxlen: 24
                          83.169.209.0/24 maxlen: 24
                          83.169.210.0/24 maxlen: 24
                          83.169.208.0/24 maxlen: 24
                          83.169.213.0/24 maxlen: 24
                          83.169.211.0/24 maxlen: 24
                          83.169.215.0/24 maxlen: 24
                          83.169.214.0/24 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          109.74.112.0/20 maxlen: 24
                          178.178.135.0/24 maxlen: 24
                          178.178.137.0/24 maxlen: 24
                          178.178.134.0/24 maxlen: 24
                          178.178.133.0/24 maxlen: 24
                          178.178.136.0/24 maxlen: 24
                          178.178.143.0/24 maxlen: 24
                          178.178.142.0/24 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          217.115.80.0/20 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          46.229.136.0/22 maxlen: 22
                          46.229.140.0/24 maxlen: 24
                          46.229.143.0/24 maxlen: 24
                          46.229.141.0/24 maxlen: 24
                          46.229.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:af:50:d3:7f:67:5c:f1:65:79:8e:67:0b:94:93:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec  5 14:27:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a2aa3eeb50913e4a61b4aeb51c594aaf1a84244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:84:48:10:bc:90:51:63:81:ee:13:87:8e:
                    dd:f7:06:a1:7a:39:de:75:1c:27:3c:61:7a:fa:f7:
                    ee:f6:d6:d2:8f:fa:20:b1:e5:de:fd:41:71:d7:a6:
                    5f:0b:8d:9a:16:57:cf:dc:e8:3c:e4:a7:87:42:43:
                    db:f9:b9:21:fe:2c:fe:ce:0f:a1:5c:f0:dc:79:30:
                    c4:ed:32:67:9e:12:83:df:47:2c:38:f9:3f:f5:48:
                    f9:77:cf:c6:ea:d1:53:9f:e7:c8:78:56:51:46:f8:
                    01:cd:3e:be:47:81:01:19:e6:c4:c3:dc:d2:4e:6e:
                    ed:8f:7b:42:6b:02:2e:7b:e5:d8:dd:5d:1c:ec:23:
                    33:97:d6:55:7c:e8:35:39:77:3d:38:b2:e1:a6:3b:
                    8b:4b:ff:23:53:1a:21:0c:66:36:87:53:e8:b8:fa:
                    c6:cf:1a:b3:8a:2f:46:89:36:06:e9:19:e7:da:ba:
                    9a:5e:bc:77:f6:c0:08:57:f6:b0:83:e6:9b:f9:b1:
                    99:f4:d1:9b:cd:80:4a:27:80:b8:a8:dc:5c:f2:90:
                    d4:ce:50:e0:97:e4:6c:bf:f8:39:f8:eb:6d:cb:d2:
                    3b:be:eb:a7:d7:14:a3:fe:2e:de:b4:54:4e:cb:fb:
                    8f:72:bd:5a:2f:f3:b8:35:eb:b1:0a:1a:a8:e6:a9:
                    5c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:A3:EE:B5:09:13:E4:A6:1B:4A:EB:51:C5:94:AA:F1:A8:42:44
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eiqj7rUJE-SmG0rrUcWUqvGoQkQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.28.184.0/22
                  37.29.72.0/22
                  46.229.136.0/21
                  83.149.40.0/21
                  83.169.208.0/21
                  86.109.192.0/19
                  91.193.212.0/22
                  93.153.128.0/17
                  94.25.128.0/17
                  95.137.0.0/17
                  109.74.112.0/20
                  109.124.64.0/18
                  109.188.0.0/16
                  128.204.64.0/18
                  178.23.144.0/21
                  178.176.56.0/21
                  178.176.230.0/23
                  178.178.80.0-178.178.82.255
                  178.178.84.0/22
                  178.178.128.0-178.178.137.255
                  178.178.142.0/23
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.48.0-188.170.50.255
                  188.170.52.0-188.170.57.255
                  188.170.59.0-188.170.63.255
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:07:ed:ec:bc:7f:94:0c:12:00:81:38:10:79:c6:55:43:09:
         db:ba:a7:ed:7b:f6:62:9a:b5:5b:be:13:7c:9f:2d:4f:cd:2b:
         95:6c:5b:31:8b:ca:81:29:24:fa:f3:d7:bc:90:0e:ee:2e:46:
         dc:c0:6d:c6:27:1b:9c:ce:8c:fd:bb:7a:0f:cf:ff:ac:1b:a3:
         23:95:e3:a3:fc:9f:a8:c5:06:95:37:67:e3:5c:ac:b1:39:76:
         b2:ee:55:9b:49:2c:ab:76:bd:c2:20:c7:d1:f5:95:e3:f3:fa:
         96:8a:37:e5:41:90:90:0d:19:ec:21:b2:8f:36:6b:70:e6:a7:
         c4:dc:d3:9e:4f:bb:37:c9:55:f3:bc:43:b4:3b:5c:17:0d:af:
         a3:94:25:eb:fb:33:8b:ab:18:6e:f0:1e:fe:02:d6:b9:d7:43:
         2d:31:8c:c2:41:df:3c:05:dc:1b:de:bd:15:1b:6d:55:d9:eb:
         60:e9:3a:12:d2:db:93:84:76:3f:03:61:db:84:b5:14:b6:4b:
         9a:ee:7a:d8:d1:ab:5e:d2:14:42:1b:1a:22:e4:24:ab:ec:2b:
         b2:82:25:19:da:43:8e:7e:3b:1e:5b:cf:15:c0:fe:ef:a5:d4:
         02:7b:c5:2c:01:8b:98:6c:7d:bd:9e:28:53:9a:e7:8d:00:48:
         38:23:ce:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org