Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hRJcxUvRvWwxWJUMHGOMG-9tnXw.roa
File:                     hRJcxUvRvWwxWJUMHGOMG-9tnXw.roa (raw, json)
Hash identifier:          RcLRilQAcUDMwiCz1Xr8knmf0KuNf0wfnhtEYaIJtN8=
Subject key identifier:   85:12:5C:C5:4B:D1:BD:6C:31:58:95:0C:1C:63:8C:1B:EF:6D:9D:7C
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0184F1F518F0D54A4AA73CBC644691A2CE7F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hRJcxUvRvWwxWJUMHGOMG-9tnXw.roa
Signing time:             Thu 08 Dec 2022 13:38:02 +0000
ROA not before:           Thu 08 Dec 2022 13:38:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31208
IP address blocks:        195.16.96.0/19 maxlen: 24
                          178.178.84.0/22 maxlen: 22
                          178.178.82.0/24 maxlen: 24
                          178.178.80.0/23 maxlen: 23
                          193.201.228.0/22 maxlen: 24
                          178.178.131.0/24 maxlen: 24
                          178.178.130.0/24 maxlen: 24
                          178.178.129.0/24 maxlen: 24
                          178.178.132.0/24 maxlen: 24
                          178.178.128.0/24 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          178.176.230.0/23 maxlen: 23
                          212.119.160.0/19 maxlen: 24
                          37.28.186.0/24 maxlen: 24
                          188.170.50.0/24 maxlen: 24
                          37.28.184.0/24 maxlen: 24
                          188.170.48.0/24 maxlen: 24
                          37.28.185.0/24 maxlen: 24
                          188.170.49.0/24 maxlen: 24
                          188.170.54.0/24 maxlen: 24
                          188.170.55.0/24 maxlen: 24
                          37.28.187.0/24 maxlen: 24
                          188.170.56.0/24 maxlen: 24
                          188.170.52.0/24 maxlen: 24
                          188.170.57.0/24 maxlen: 24
                          188.170.53.0/24 maxlen: 24
                          188.170.62.0/24 maxlen: 24
                          188.170.63.0/24 maxlen: 24
                          188.170.59.0/24 maxlen: 24
                          188.170.60.0/24 maxlen: 24
                          188.170.61.0/24 maxlen: 24
                          37.29.75.0/24 maxlen: 24
                          37.29.74.0/24 maxlen: 24
                          37.29.73.0/24 maxlen: 24
                          37.29.72.0/24 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          128.204.72.0/24 maxlen: 24
                          128.204.73.0/24 maxlen: 24
                          178.176.58.0/24 maxlen: 24
                          178.176.56.0/24 maxlen: 24
                          178.176.57.0/24 maxlen: 24
                          178.176.62.0/24 maxlen: 24
                          178.176.63.0/24 maxlen: 24
                          178.176.59.0/24 maxlen: 24
                          178.176.60.0/24 maxlen: 24
                          178.176.61.0/24 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          83.149.41.0/24 maxlen: 24
                          83.149.44.0/23 maxlen: 23
                          83.149.40.0/24 maxlen: 24
                          83.149.42.0/23 maxlen: 23
                          195.78.116.0/23 maxlen: 24
                          83.149.46.0/23 maxlen: 23
                          83.169.212.0/24 maxlen: 24
                          83.169.208.0/24 maxlen: 24
                          83.169.213.0/24 maxlen: 24
                          83.169.209.0/24 maxlen: 24
                          83.169.210.0/24 maxlen: 24
                          83.169.211.0/24 maxlen: 24
                          83.169.214.0/24 maxlen: 24
                          83.169.215.0/24 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          178.178.135.0/24 maxlen: 24
                          178.178.134.0/24 maxlen: 24
                          178.178.137.0/24 maxlen: 24
                          178.178.133.0/24 maxlen: 24
                          178.178.136.0/24 maxlen: 24
                          178.178.143.0/24 maxlen: 24
                          178.178.142.0/24 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          217.115.80.0/20 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          46.229.136.0/22 maxlen: 22
                          46.229.141.0/24 maxlen: 24
                          46.229.140.0/24 maxlen: 24
                          46.229.143.0/24 maxlen: 24
                          46.229.142.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f1:f5:18:f0:d5:4a:4a:a7:3c:bc:64:46:91:a2:ce:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec  8 13:38:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=85125cc54bd1bd6c3158950c1c638c1bef6d9d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:98:f1:86:cb:cd:72:b8:6e:fd:d5:54:b7:
                    db:d0:e1:71:38:20:74:8e:e0:70:73:f3:2f:b0:00:
                    c7:62:a6:f0:67:79:0d:bc:0c:d9:34:4f:5e:b1:d9:
                    59:00:f8:91:fa:25:0f:68:a1:ab:ef:55:31:bf:e4:
                    bc:53:8f:91:87:83:93:6d:cd:df:da:42:02:96:cc:
                    ad:25:d8:06:ce:1e:47:6e:03:83:4a:9c:c2:5e:26:
                    3b:bb:1f:05:03:99:1c:74:23:be:33:d1:cb:a9:08:
                    5c:6b:09:d6:66:0d:d6:c1:e9:19:d4:33:a7:15:c8:
                    c6:32:51:0b:c3:15:f7:33:c8:0c:cc:71:a6:19:64:
                    e4:46:59:fe:fe:64:42:e9:e7:f8:c2:93:a3:53:48:
                    66:41:ea:33:2b:eb:2d:6d:39:c8:dc:18:68:de:71:
                    4a:4f:ef:50:1a:fe:44:93:14:d2:b5:fe:bf:af:83:
                    e1:b3:83:4e:01:30:6c:ae:f6:60:42:4b:9b:8c:72:
                    8c:60:ce:98:e6:cd:c4:d6:89:e8:53:ea:e1:7c:68:
                    d8:ad:74:fe:8a:1f:6d:16:1e:69:e1:d8:bb:c1:e5:
                    19:58:fe:43:28:45:e8:ef:76:c6:69:0c:83:1a:39:
                    b2:e3:a9:30:65:af:cf:de:23:d4:1f:57:c3:f9:a5:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:12:5C:C5:4B:D1:BD:6C:31:58:95:0C:1C:63:8C:1B:EF:6D:9D:7C
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hRJcxUvRvWwxWJUMHGOMG-9tnXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.28.184.0/22
                  37.29.72.0/22
                  46.229.136.0/21
                  83.149.40.0/21
                  83.169.208.0/21
                  128.204.72.0/23
                  178.176.56.0/21
                  178.176.230.0/23
                  178.178.80.0-178.178.82.255
                  178.178.84.0/22
                  178.178.128.0-178.178.137.255
                  178.178.142.0/23
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.48.0-188.170.50.255
                  188.170.52.0-188.170.57.255
                  188.170.59.0-188.170.63.255
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:ca:2c:e3:5d:73:7b:e4:1c:70:7e:1a:1e:9b:c3:32:be:46:
         d5:89:c3:0c:91:b4:0e:f5:59:4f:1b:0b:5f:79:97:f6:eb:ec:
         a0:c5:99:ad:3d:7f:c3:c8:d4:97:86:3d:c5:96:41:f8:2e:05:
         6b:e0:a9:2a:1c:a7:20:2e:f4:fc:1e:6e:4e:d0:cd:a7:b7:b3:
         47:c4:47:de:ea:22:bc:37:30:4b:3e:5c:1a:dc:48:a8:bb:3b:
         06:c7:ef:de:59:0d:27:c1:d4:7f:ca:84:2f:81:b0:74:51:ef:
         e0:45:d5:a8:b5:a8:43:dd:45:5b:90:b7:80:99:18:91:b8:6d:
         e8:ac:09:96:2a:14:fb:ab:ef:a5:ed:53:6c:80:d8:55:94:b8:
         b9:85:ac:f0:dd:cd:c2:1e:cf:68:c2:ac:b7:ea:1f:c4:db:b7:
         c7:4f:31:6d:1e:66:2a:b5:a3:f2:cf:3c:11:8e:1a:d3:14:67:
         45:1c:18:34:c0:f3:63:42:07:8e:2c:97:f2:27:39:98:d1:a9:
         35:9f:5f:b9:b3:32:a4:c2:2a:99:73:b4:20:b4:80:c2:8c:9e:
         92:0f:5f:21:ff:84:4a:c5:dc:c4:45:32:4f:59:56:96:25:a4:
         7b:1f:ab:c0:89:1c:c9:7e:a9:03:93:a1:0e:4d:a8:fd:e4:48:
         ca:fd:5f:8c
-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgISAYTx9Rjw1UpKpzy8ZEaRos5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTMzODAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTEyNWNjNTRiZDFiZDZjMzE1ODk1MGMxYzYzOGMxYmVmNmQ5ZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0GY8YbLzXK4bv3VVLfb0OFxOCB0
juBwc/MvsADHYqbwZ3kNvAzZNE9esdlZAPiR+iUPaKGr71Uxv+S8U4+Rh4OTbc3f
2kIClsytJdgGzh5HbgODSpzCXiY7ux8FA5kcdCO+M9HLqQhcawnWZg3WwekZ1DOn
FcjGMlELwxX3M8gMzHGmGWTkRln+/mRC6ef4wpOjU0hmQeozK+stbTnI3Bho3nFK
T+9QGv5EkxTStf6/r4Phs4NOATBsrvZgQkubjHKMYM6Y5s3E1onoU+rhfGjYrXT+
ih9tFh5p4di7weUZWP5DKEXo73bGaQyDGjmy46kwZa/P3iPUH1fD+aUCQQIDAQAB
o4IC9jCCAvIwHQYDVR0OBBYEFIUSXMVL0b1sMViVDBxjjBvvbZ18MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvaFJKY3hVdlJ2V3d4V0pVTUhHT01HLTl0blh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCgYIKwYBBQUHAQcBAf8EgfowgfcwgfQEAgABMIHtAwQC
JRy4AwQCJR1IAwQDLuWIAwQDU5UoAwQDU6nQAwQBgMxIAwQDsrA4AwQBsrDmMAwD
BASyslADBACyslIDBAKyslQwDAMEB7KygAMEAbKyiAMEAbKyjgMEArkDIAMEArnS
jAMEA7xeqAMDALyiMAwDBAS8qjADBAC8qjIwDAMEAryqNAMEAbyqODAMAwQAvKo7
AwQGvKoAAwQCwcnkAwQFwwWAAwQFwxBgAwQBw050AwQAw5VvAwQFw+ZAAwQF1A6g
AwQF1CxAAwQF1EVgAwQF1HegAwQF1ZqgAwQF1aggAwQG1fNAAwQE2XNQMA0GCSqG
SIb3DQEBCwUAA4IBAQCGyizjXXN75Bxwfhoem8MyvkbVicMMkbQO9VlPGwtfeZf2
6+ygxZmtPX/DyNSXhj3FlkH4LgVr4KkqHKcgLvT8Hm5O0M2nt7NHxEfe6iK8NzBL
Plwa3EiouzsGx+/eWQ0nwdR/yoQvgbB0Ue/gRdWotahD3UVbkLeAmRiRuG3orAmW
KhT7q++l7VNsgNhVlLi5hazw3c3CHs9owqy36h/E27fHTzFtHmYqtaPyzzwRjhrT
FGdFHBg0wPNjQgeOLJfyJzmY0ak1n1+5szKkwiqZc7QgtIDCjJ6SD18h/4RKxdzE
RTJPWVaWJaR7H6vAiRzJfqkDk6EOTaj95EjK/V+M
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:47 2025 by rpki-client