Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/JZG84Qx1U-iJaPI8OH0wLbR5lUg.roa
File:                     JZG84Qx1U-iJaPI8OH0wLbR5lUg.roa (raw, json)
Hash identifier:          U2rv+tAQcT7EwT6wuYiqBjoX5Ad88hBwmcbZRt+Yxa4=
Subject key identifier:   25:91:BC:E1:0C:75:53:E8:89:68:F2:3C:38:7D:30:2D:B4:79:95:48
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       01852AEFF1158CBA2ED61D1270C96A6F6304
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/JZG84Qx1U-iJaPI8OH0wLbR5lUg.roa
Signing time:             Mon 19 Dec 2022 15:10:45 +0000
ROA not before:           Mon 19 Dec 2022 15:10:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.228.120.0/24 maxlen: 24
                          185.228.123.0/24 maxlen: 24
                          185.228.122.0/24 maxlen: 24
                          185.228.121.0/24 maxlen: 24
                          185.228.120.0/22 maxlen: 24
                          185.134.40.0/22 maxlen: 24
                          5.181.100.0/22 maxlen: 24
                          45.141.4.0/22 maxlen: 24
                          185.93.120.0/22 maxlen: 24
                          185.113.186.0/24 maxlen: 24
                          185.113.185.0/24 maxlen: 24
                          185.113.184.0/24 maxlen: 24
                          185.113.187.0/24 maxlen: 24
                          188.208.20.0/22 maxlen: 24
                          193.32.236.0/22 maxlen: 24
                          188.208.21.0/24 maxlen: 24
                          89.47.4.0/22 maxlen: 24
                          185.94.48.0/22 maxlen: 24
                          185.93.232.0/22 maxlen: 24
                          176.32.54.0/24 maxlen: 24
                          93.92.224.0/22 maxlen: 24
                          185.119.236.0/22 maxlen: 24
                          176.32.50.0/24 maxlen: 24
                          185.248.96.0/22 maxlen: 24
                          188.241.96.0/21 maxlen: 24
                          185.120.44.0/22 maxlen: 24
                          185.234.186.0/23 maxlen: 23
                          86.106.184.0/22 maxlen: 24
                          185.234.184.0/24 maxlen: 24
                          185.234.185.0/24 maxlen: 24
                          185.44.233.0/24 maxlen: 24
                          185.44.234.0/23 maxlen: 24
                          185.51.108.0/22 maxlen: 24
                          185.240.44.0/22 maxlen: 24
                          86.105.234.0/24 maxlen: 24
                          188.240.204.0/22 maxlen: 24
                          212.104.160.0/19 maxlen: 24
                          5.226.16.0/20 maxlen: 24
                          185.131.188.0/22 maxlen: 24
                          85.117.245.0/24 maxlen: 24
                          193.91.0.0/24 maxlen: 24
                          85.117.244.0/22 maxlen: 24
                          193.91.10.0/24 maxlen: 24
                          185.43.252.0/22 maxlen: 24
                          185.77.168.0/22 maxlen: 24
                          88.98.98.0/24 maxlen: 24
                          86.105.28.0/22 maxlen: 24
                          88.98.96.0/20 maxlen: 24
                          88.98.96.0/23 maxlen: 23
                          88.98.99.0/24 maxlen: 24
                          88.98.104.0/23 maxlen: 24
                          88.98.100.0/22 maxlen: 24
                          88.98.111.0/24 maxlen: 24
                          88.98.110.0/24 maxlen: 24
                          88.98.108.0/23 maxlen: 24
                          88.98.108.0/22 maxlen: 24
                          88.98.106.0/23 maxlen: 24
                          88.98.112.0/20 maxlen: 24
                          141.98.52.0/22 maxlen: 24
                          212.63.116.0/22 maxlen: 24
                          212.63.118.0/24 maxlen: 24
                          212.63.117.0/24 maxlen: 24
                          212.63.116.0/24 maxlen: 24
                          212.63.121.0/24 maxlen: 24
                          212.63.119.0/24 maxlen: 24
                          212.63.123.0/24 maxlen: 24
                          212.63.122.0/24 maxlen: 24
                          185.83.104.0/22 maxlen: 24
                          45.144.12.0/22 maxlen: 24
                          45.90.52.0/22 maxlen: 24
                          185.158.52.0/22 maxlen: 24
                          91.245.200.0/21 maxlen: 24
                          185.131.13.0/24 maxlen: 24
                          185.131.12.0/22 maxlen: 24
                          85.217.132.0/24 maxlen: 24
                          85.217.129.0/24 maxlen: 24
                          85.217.139.0/24 maxlen: 24
                          85.217.138.0/24 maxlen: 24
                          85.217.137.0/24 maxlen: 24
                          85.217.136.0/24 maxlen: 24
                          85.217.135.0/24 maxlen: 24
                          85.217.134.0/24 maxlen: 24
                          85.217.133.0/24 maxlen: 24
                          85.217.141.0/24 maxlen: 24
                          85.217.143.0/24 maxlen: 24
                          85.217.142.0/24 maxlen: 24
                          85.217.152.0/24 maxlen: 24
                          85.217.151.0/24 maxlen: 24
                          85.217.150.0/24 maxlen: 24
                          85.217.147.0/24 maxlen: 24
                          85.217.146.0/24 maxlen: 24
                          85.217.155.0/24 maxlen: 24
                          85.217.154.0/24 maxlen: 24
                          85.217.153.0/24 maxlen: 24
                          85.217.159.0/24 maxlen: 24
                          85.217.158.0/24 maxlen: 24
                          85.217.157.0/24 maxlen: 24
                          85.217.156.0/24 maxlen: 24
                          185.130.24.0/23 maxlen: 24
                          185.75.200.0/22 maxlen: 24
                          194.8.140.0/22 maxlen: 24
                          194.49.0.0/22 maxlen: 24
                          185.130.26.0/23 maxlen: 24
                          185.123.136.0/22 maxlen: 24
                          45.157.56.0/22 maxlen: 24
                          185.48.84.0/22 maxlen: 24
                          185.176.84.0/22 maxlen: 24
                          185.210.16.0/22 maxlen: 24
                          79.142.184.0/22 maxlen: 24
                          185.162.172.0/23 maxlen: 24
                          185.162.175.0/24 maxlen: 24
                          185.162.174.0/24 maxlen: 24
                          195.82.105.0/24 maxlen: 24
                          195.82.104.0/24 maxlen: 24
                          195.82.106.0/24 maxlen: 24
                          195.82.124.0/24 maxlen: 24
                          195.82.123.0/24 maxlen: 24
                          195.82.122.0/24 maxlen: 24
                          195.82.121.0/24 maxlen: 24
                          195.82.120.0/24 maxlen: 24
                          185.216.216.0/22 maxlen: 22
                          185.216.218.0/23 maxlen: 23
                          185.216.217.0/24 maxlen: 24
                          139.28.76.0/22 maxlen: 22
                          185.196.200.0/23 maxlen: 24
                          185.196.203.0/24 maxlen: 24
                          185.196.202.0/24 maxlen: 24
                          185.229.96.0/22 maxlen: 24
                          91.242.144.0/22 maxlen: 24
                          185.229.44.0/22 maxlen: 24
                          185.202.188.0/22 maxlen: 24
                          2a06:8840::/29 maxlen: 29
                          2a06:8f40::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2a:ef:f1:15:8c:ba:2e:d6:1d:12:70:c9:6a:6f:63:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Dec 19 15:10:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2591bce10c7553e88968f23c387d302db4799548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:d4:63:c0:31:b1:e0:1e:36:30:6a:e7:a7:
                    21:11:b9:2f:9c:56:44:c0:ea:f8:61:e9:d7:14:c1:
                    54:6b:4e:60:6b:88:a0:a0:f7:e5:82:75:c6:59:2d:
                    00:d2:a0:a4:f7:7d:96:b9:3b:b0:87:a6:54:51:af:
                    b8:d2:0f:37:84:ec:a8:45:9c:1c:73:84:be:06:ec:
                    ae:42:39:d5:ed:54:3a:46:52:99:88:04:f9:43:33:
                    cf:62:8e:ac:11:eb:f0:c1:7b:69:fd:23:e2:cb:40:
                    66:d7:d8:3a:5e:2c:71:3a:f0:01:7a:6d:a6:43:59:
                    54:b0:2c:56:2c:6f:a1:63:f4:c7:ca:33:88:18:37:
                    38:25:ae:db:e7:29:b4:76:8a:ce:59:27:ea:a0:2d:
                    2b:2a:af:0e:59:98:41:27:36:7a:05:b9:5f:74:1e:
                    cf:80:e2:59:0e:46:2a:f8:26:08:05:2d:95:bc:0d:
                    1b:03:a2:b0:da:82:85:99:48:90:69:e8:6d:b9:c1:
                    67:15:77:a3:25:92:1c:17:0e:8d:04:04:0b:42:5a:
                    52:19:ac:20:88:36:46:46:81:91:34:1d:28:df:0a:
                    63:4b:ad:9a:d8:07:c9:93:53:09:52:fd:b6:e5:e0:
                    a5:5a:0e:e9:2a:32:91:20:a2:39:68:d4:6b:69:1e:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:91:BC:E1:0C:75:53:E8:89:68:F2:3C:38:7D:30:2D:B4:79:95:48
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/JZG84Qx1U-iJaPI8OH0wLbR5lUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.100.0/22
                  5.226.16.0/20
                  45.90.52.0/22
                  45.141.4.0/22
                  45.144.12.0/22
                  45.157.56.0/22
                  79.142.184.0/22
                  85.117.244.0/22
                  85.217.129.0/24
                  85.217.132.0-85.217.139.255
                  85.217.141.0-85.217.143.255
                  85.217.146.0/23
                  85.217.150.0-85.217.159.255
                  86.105.28.0/22
                  86.105.234.0/24
                  86.106.184.0/22
                  88.98.96.0/19
                  89.47.4.0/22
                  91.242.144.0/22
                  91.245.200.0/21
                  93.92.224.0/22
                  139.28.76.0/22
                  141.98.52.0/22
                  176.32.50.0/24
                  176.32.54.0/24
                  185.43.252.0/22
                  185.44.233.0-185.44.235.255
                  185.48.84.0/22
                  185.51.108.0/22
                  185.75.200.0/22
                  185.77.168.0/22
                  185.83.104.0/22
                  185.93.120.0/22
                  185.93.232.0/22
                  185.94.48.0/22
                  185.113.184.0/22
                  185.119.236.0/22
                  185.120.44.0/22
                  185.123.136.0/22
                  185.130.24.0/22
                  185.131.12.0/22
                  185.131.188.0/22
                  185.134.40.0/22
                  185.158.52.0/22
                  185.162.172.0/22
                  185.176.84.0/22
                  185.196.200.0/22
                  185.202.188.0/22
                  185.210.16.0/22
                  185.216.216.0/22
                  185.228.120.0/22
                  185.229.44.0/22
                  185.229.96.0/22
                  185.234.184.0/22
                  185.240.44.0/22
                  185.248.96.0/22
                  188.208.20.0/22
                  188.240.204.0/22
                  188.241.96.0/21
                  193.32.236.0/22
                  193.91.0.0/24
                  193.91.10.0/24
                  194.8.140.0/22
                  194.49.0.0/22
                  195.82.104.0-195.82.106.255
                  195.82.120.0-195.82.124.255
                  212.63.116.0/22
                  212.63.121.0-212.63.123.255
                  212.104.160.0/19
                IPv6:
                  2a06:8840::/29
                  2a06:8f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:53:93:ea:ec:0a:55:32:03:52:88:88:a9:b8:e1:89:c2:02:
         14:d0:42:1e:9a:8f:fe:87:12:84:5f:de:8c:92:cb:d0:29:bc:
         81:0a:3a:a7:31:a4:02:2e:56:ef:e4:c4:44:fc:99:db:42:0c:
         61:1b:95:99:a8:35:c7:ad:b5:d5:b4:f4:99:c3:c4:59:08:ec:
         67:96:22:25:b1:2d:3a:bb:c4:1a:5a:d6:04:94:9e:ab:14:aa:
         63:ab:89:4f:16:4f:43:77:fc:a2:84:96:69:5e:75:1d:ad:85:
         0f:bd:22:dd:28:b9:92:a1:28:00:7d:ff:2c:da:2e:7e:41:7b:
         a8:7a:8d:bc:54:03:96:2c:3b:41:d5:46:9a:0d:8b:8a:f8:ce:
         15:77:4a:26:a6:d8:d0:87:68:47:ec:00:40:fe:85:7c:b6:f8:
         11:0e:0a:70:7e:45:e4:86:a7:f5:18:17:72:68:b7:29:9e:2e:
         fa:57:fc:9f:b3:fb:3d:96:37:11:64:fb:df:1a:aa:00:c2:5c:
         fa:74:48:17:7f:ef:a1:bc:01:c9:00:e8:0c:16:12:ec:6f:62:
         aa:44:c8:56:fa:46:77:40:2d:c8:e1:e5:da:95:30:6a:e5:62:
         2f:4e:80:6f:c7:2e:0d:7f:ec:66:94:1d:2c:67:32:b5:6c:13:
         aa:4d:2b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org