Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n7Jzz-S_q1ILutRhA5_TbFTqMwY.roa
File:                     n7Jzz-S_q1ILutRhA5_TbFTqMwY.roa (raw, json)
Hash identifier:          gtuHFxEK/gG4DTxsx7LF+Hqa81WhqJzNvMhHSLEBFkI=
Subject key identifier:   9F:B2:73:CF:E4:BF:AB:52:0B:BA:D4:61:03:9F:D3:6C:54:EA:33:06
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       018476334F8C448A97C46D5A3951C927EF24
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n7Jzz-S_q1ILutRhA5_TbFTqMwY.roa
Signing time:             Mon 14 Nov 2022 12:53:04 +0000
ROA not before:           Mon 14 Nov 2022 12:53:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20632
IP address blocks:        109.188.0.0/16 maxlen: 24
                          84.204.230.0/24 maxlen: 24
                          46.29.192.0/21 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          85.26.128.0/17 maxlen: 24
                          84.204.160.0/20 maxlen: 20
                          84.204.176.0/21 maxlen: 21
                          79.171.8.0/21 maxlen: 24
                          84.204.188.0/22 maxlen: 22
                          84.204.192.0/18 maxlen: 18
                          193.201.228.0/22 maxlen: 24
                          217.195.64.0/19 maxlen: 19
                          178.23.144.0/21 maxlen: 24
                          109.124.64.0/18 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          84.204.0.0/17 maxlen: 17
                          94.25.128.0/17 maxlen: 24
                          93.153.128.0/17 maxlen: 24
                          86.109.192.0/19 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          78.25.64.0/18 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          212.119.160.0/19 maxlen: 24
                          80.247.176.0/20 maxlen: 24
                          91.193.212.0/22 maxlen: 24
                          84.204.132.0/22 maxlen: 22
                          84.204.138.0/24 maxlen: 24
                          84.204.136.0/24 maxlen: 24
                          84.204.139.0/24 maxlen: 24
                          84.204.140.0/22 maxlen: 22
                          84.204.144.0/20 maxlen: 20
                          195.5.128.0/19 maxlen: 24
                          82.140.64.0/18 maxlen: 18
                          128.204.64.0/18 maxlen: 24
                          82.140.93.0/24 maxlen: 24
                          95.137.0.0/17 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          77.233.160.0/19 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          82.196.64.0/19 maxlen: 19
                          81.24.128.0/20 maxlen: 24
                          78.41.100.0/22 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          83.169.192.0/18 maxlen: 24
                          213.172.0.0/19 maxlen: 19
                          188.162.0.0/16 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          109.74.112.0/20 maxlen: 24
                          46.232.200.0/21 maxlen: 24
                          62.64.0.0/19 maxlen: 24
                          195.144.224.0/19 maxlen: 19
                          81.3.128.0/18 maxlen: 18
                          213.243.64.0/18 maxlen: 24
                          213.182.160.0/19 maxlen: 19
                          217.115.80.0/20 maxlen: 24
                          83.222.192.0/19 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          46.229.128.0/20 maxlen: 24
                          83.229.128.0/17 maxlen: 24
                          46.47.192.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:76:33:4f:8c:44:8a:97:c4:6d:5a:39:51:c9:27:ef:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Nov 14 12:53:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9fb273cfe4bfab520bbad461039fd36c54ea3306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:07:5f:eb:a4:2f:25:de:0f:3b:59:1f:ff:
                    c9:97:7d:dd:23:41:be:16:19:bf:29:a5:87:cc:4f:
                    14:ea:e4:05:2e:e7:6c:db:2b:f7:e0:e5:58:17:22:
                    b8:8a:bc:d5:c1:86:81:a1:25:97:fa:45:ae:57:ca:
                    7e:2c:10:bc:50:41:c3:74:75:1e:8a:45:ae:e8:2c:
                    77:36:80:e4:d6:dd:ee:a9:72:51:83:5e:e5:a3:c1:
                    15:f8:d6:a6:61:1d:22:33:56:78:2e:49:91:d1:0f:
                    d4:7b:dd:e2:d8:40:df:91:94:4c:6e:32:48:21:ec:
                    5f:ef:94:ed:cc:6b:cc:6c:32:8b:62:9c:74:cb:94:
                    c9:8a:bc:f4:bf:5c:76:0d:7f:cf:d6:a7:dc:c8:a2:
                    f1:73:bd:88:af:f3:2e:b2:7c:0d:9e:70:02:62:c4:
                    9f:7c:75:a9:a4:07:d4:f7:18:79:39:90:52:6a:2e:
                    98:51:d3:a4:8b:2e:f2:dd:a8:de:13:15:1d:4f:b2:
                    cf:ef:95:f1:a3:87:2f:43:37:cc:46:0c:99:16:bc:
                    fe:81:5f:34:7d:65:44:7f:dd:8a:c1:fe:4f:11:af:
                    b8:3e:d9:12:fa:2c:06:11:3b:56:dc:4d:cd:3c:1c:
                    86:64:30:91:64:23:ae:e6:66:6f:ef:ce:bc:33:49:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B2:73:CF:E4:BF:AB:52:0B:BA:D4:61:03:9F:D3:6C:54:EA:33:06
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n7Jzz-S_q1ILutRhA5_TbFTqMwY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.29.192.0/21
                  46.47.192.0/18
                  46.229.128.0/20
                  46.232.200.0/21
                  62.64.0.0/19
                  77.233.160.0/19
                  78.25.64.0/18
                  78.41.100.0/22
                  79.171.8.0/21
                  80.247.176.0/20
                  81.3.128.0/18
                  81.24.128.0/20
                  82.140.64.0/18
                  82.196.64.0/19
                  83.169.192.0/18
                  83.222.192.0/19
                  83.229.128.0/17
                  84.204.0.0/17
                  84.204.132.0-84.204.136.255
                  84.204.138.0-84.204.183.255
                  84.204.188.0-84.204.255.255
                  85.26.128.0/17
                  86.109.192.0/19
                  91.193.212.0/22
                  93.153.128.0/17
                  94.25.128.0/17
                  95.137.0.0/17
                  109.74.112.0/20
                  109.124.64.0/18
                  109.188.0.0/16
                  128.204.64.0/18
                  178.23.144.0/21
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.144.224.0/19
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.172.0.0/19
                  213.182.160.0/19
                  213.243.64.0/18
                  217.115.80.0/20
                  217.195.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:15:ea:e3:7c:12:f7:3d:a6:91:2f:3d:85:c7:77:9b:a7:
         64:fe:1d:66:6f:e4:7e:1a:b2:8d:67:d8:5a:b4:a1:23:00:84:
         39:dc:f7:82:79:08:dc:dd:2e:96:31:f6:f9:cb:fa:84:ce:e1:
         98:3e:e5:7a:d0:c4:e2:29:4d:8f:cc:d1:29:2e:e6:f9:48:20:
         2f:35:31:6b:0c:b9:ae:a4:a0:d8:8d:e5:33:f0:d4:19:9b:35:
         01:f0:e5:bf:f0:e3:e9:00:2a:ce:4c:b5:44:7c:42:73:75:9a:
         79:33:1a:c6:23:ed:41:22:09:b3:7c:f8:f4:30:63:3c:ea:29:
         de:71:cc:f0:be:28:64:6b:65:0b:d2:3e:30:77:c6:61:04:d3:
         0c:73:d9:eb:97:58:b3:1f:55:15:34:c0:7f:73:fe:9b:af:9b:
         cc:2c:6a:18:bc:97:9a:d6:ff:41:04:84:85:11:95:93:64:a6:
         55:97:8b:d3:11:4a:d5:17:1c:c4:d1:eb:d4:f1:18:8b:e9:63:
         c8:cb:c1:b9:89:ad:23:52:57:74:19:db:01:ab:ac:50:b5:00:
         00:7c:ea:23:9a:4c:b1:22:32:20:05:1c:dd:72:d2:ec:36:29:
         aa:32:22:59:46:6d:05:f9:1d:a4:e8:9d:fb:7d:90:92:f5:f9:
         30:33:e2:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:28 2025 by rpki-client