Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/NJJQBnjPdc0cA6ItzoVmq_LHIzM.roa
File:                     NJJQBnjPdc0cA6ItzoVmq_LHIzM.roa (raw, json)
Hash identifier:          /k4aYbBjIXEOaCtAE5f28dlyFCoMJozvlm2TlruhpzQ=
Subject key identifier:   34:92:50:06:78:CF:75:CD:1C:03:A2:2D:CE:85:66:AB:F2:C7:23:33
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       01852EA902BF1935FA55A42C58DF5BB19AD7
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/NJJQBnjPdc0cA6ItzoVmq_LHIzM.roa
Signing time:             Tue 20 Dec 2022 08:31:46 +0000
ROA not before:           Tue 20 Dec 2022 08:31:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.228.120.0/24 maxlen: 24
                          185.228.123.0/24 maxlen: 24
                          185.228.122.0/24 maxlen: 24
                          185.228.121.0/24 maxlen: 24
                          185.228.120.0/22 maxlen: 24
                          185.134.40.0/22 maxlen: 24
                          5.181.100.0/22 maxlen: 24
                          45.141.4.0/22 maxlen: 24
                          185.93.120.0/22 maxlen: 24
                          185.113.186.0/24 maxlen: 24
                          185.113.185.0/24 maxlen: 24
                          185.113.184.0/24 maxlen: 24
                          185.113.187.0/24 maxlen: 24
                          188.208.20.0/22 maxlen: 24
                          193.32.236.0/22 maxlen: 24
                          188.208.21.0/24 maxlen: 24
                          89.47.4.0/22 maxlen: 24
                          185.94.48.0/22 maxlen: 24
                          185.93.232.0/22 maxlen: 24
                          176.32.54.0/24 maxlen: 24
                          93.92.224.0/22 maxlen: 24
                          185.119.236.0/22 maxlen: 24
                          176.32.50.0/24 maxlen: 24
                          91.221.76.0/23 maxlen: 24
                          91.221.86.0/23 maxlen: 24
                          89.32.194.0/23 maxlen: 24
                          185.248.96.0/22 maxlen: 24
                          188.241.96.0/21 maxlen: 24
                          185.120.44.0/22 maxlen: 24
                          185.234.186.0/23 maxlen: 23
                          86.106.184.0/22 maxlen: 24
                          185.234.184.0/24 maxlen: 24
                          185.234.185.0/24 maxlen: 24
                          185.44.233.0/24 maxlen: 24
                          185.44.234.0/23 maxlen: 24
                          185.51.108.0/22 maxlen: 24
                          185.240.44.0/22 maxlen: 24
                          185.72.52.0/22 maxlen: 24
                          86.105.234.0/24 maxlen: 24
                          188.240.204.0/22 maxlen: 24
                          212.104.160.0/19 maxlen: 24
                          89.37.80.0/22 maxlen: 24
                          5.226.16.0/20 maxlen: 24
                          185.131.188.0/22 maxlen: 24
                          85.117.245.0/24 maxlen: 24
                          193.91.0.0/24 maxlen: 24
                          85.117.244.0/22 maxlen: 24
                          193.91.10.0/24 maxlen: 24
                          185.43.252.0/22 maxlen: 24
                          185.77.168.0/22 maxlen: 24
                          88.98.98.0/24 maxlen: 24
                          86.105.28.0/22 maxlen: 24
                          88.98.96.0/20 maxlen: 24
                          88.98.96.0/23 maxlen: 23
                          88.98.99.0/24 maxlen: 24
                          88.98.104.0/23 maxlen: 24
                          88.98.100.0/22 maxlen: 24
                          88.98.111.0/24 maxlen: 24
                          88.98.110.0/24 maxlen: 24
                          88.98.108.0/23 maxlen: 24
                          88.98.108.0/22 maxlen: 24
                          88.98.106.0/23 maxlen: 24
                          88.98.112.0/20 maxlen: 24
                          141.98.52.0/22 maxlen: 24
                          212.63.116.0/22 maxlen: 24
                          212.63.118.0/24 maxlen: 24
                          212.63.117.0/24 maxlen: 24
                          212.63.116.0/24 maxlen: 24
                          212.63.121.0/24 maxlen: 24
                          212.63.119.0/24 maxlen: 24
                          212.63.123.0/24 maxlen: 24
                          212.63.122.0/24 maxlen: 24
                          185.83.104.0/22 maxlen: 24
                          45.144.12.0/22 maxlen: 24
                          45.90.52.0/22 maxlen: 24
                          185.158.52.0/22 maxlen: 24
                          91.245.200.0/21 maxlen: 24
                          185.185.52.0/22 maxlen: 24
                          185.16.120.0/22 maxlen: 24
                          185.131.13.0/24 maxlen: 24
                          185.131.12.0/22 maxlen: 24
                          85.217.132.0/24 maxlen: 24
                          85.217.129.0/24 maxlen: 24
                          85.217.139.0/24 maxlen: 24
                          85.217.138.0/24 maxlen: 24
                          85.217.137.0/24 maxlen: 24
                          85.217.136.0/24 maxlen: 24
                          85.217.135.0/24 maxlen: 24
                          85.217.134.0/24 maxlen: 24
                          85.217.133.0/24 maxlen: 24
                          85.217.141.0/24 maxlen: 24
                          85.217.143.0/24 maxlen: 24
                          85.217.142.0/24 maxlen: 24
                          85.217.152.0/24 maxlen: 24
                          85.217.151.0/24 maxlen: 24
                          85.217.150.0/24 maxlen: 24
                          85.217.147.0/24 maxlen: 24
                          85.217.146.0/24 maxlen: 24
                          85.217.159.0/24 maxlen: 24
                          85.217.155.0/24 maxlen: 24
                          185.156.248.0/22 maxlen: 24
                          85.217.154.0/24 maxlen: 24
                          85.217.153.0/24 maxlen: 24
                          85.217.158.0/24 maxlen: 24
                          85.217.157.0/24 maxlen: 24
                          85.217.156.0/24 maxlen: 24
                          185.130.24.0/23 maxlen: 24
                          185.75.200.0/22 maxlen: 24
                          194.8.140.0/22 maxlen: 24
                          194.49.0.0/22 maxlen: 24
                          89.36.40.0/22 maxlen: 24
                          89.42.236.0/23 maxlen: 24
                          185.130.26.0/23 maxlen: 24
                          185.123.136.0/22 maxlen: 24
                          45.157.56.0/22 maxlen: 24
                          185.48.84.0/22 maxlen: 24
                          185.176.84.0/22 maxlen: 24
                          185.210.16.0/22 maxlen: 24
                          79.142.184.0/22 maxlen: 24
                          185.162.172.0/23 maxlen: 24
                          185.162.175.0/24 maxlen: 24
                          185.162.174.0/24 maxlen: 24
                          195.82.105.0/24 maxlen: 24
                          195.82.104.0/24 maxlen: 24
                          195.82.106.0/24 maxlen: 24
                          195.82.124.0/24 maxlen: 24
                          195.82.123.0/24 maxlen: 24
                          195.82.122.0/24 maxlen: 24
                          195.82.121.0/24 maxlen: 24
                          195.82.120.0/24 maxlen: 24
                          185.216.216.0/22 maxlen: 22
                          185.216.218.0/23 maxlen: 23
                          185.216.217.0/24 maxlen: 24
                          139.28.76.0/22 maxlen: 22
                          185.196.200.0/23 maxlen: 24
                          185.196.203.0/24 maxlen: 24
                          185.196.202.0/24 maxlen: 24
                          185.229.96.0/22 maxlen: 24
                          91.242.144.0/22 maxlen: 24
                          185.229.44.0/22 maxlen: 24
                          185.202.188.0/22 maxlen: 24
                          2a06:8840::/29 maxlen: 29
                          2a06:8f40::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2e:a9:02:bf:19:35:fa:55:a4:2c:58:df:5b:b1:9a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Dec 20 08:31:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3492500678cf75cd1c03a22dce8566abf2c72333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:7b:66:0c:45:41:f2:92:6a:85:4a:16:5b:
                    2c:c9:00:20:c8:7e:06:0e:ba:f1:c1:32:65:4e:c2:
                    48:ac:00:fc:86:48:8d:87:f8:a9:c7:ae:c5:a1:23:
                    ea:23:8f:43:d4:25:e2:93:e5:06:dc:a3:37:ea:e0:
                    21:1a:cc:7f:c2:6e:c6:05:68:8f:09:f8:c1:a4:04:
                    18:46:c7:28:05:21:1c:8e:bd:b4:5f:fc:e0:51:f0:
                    7a:d1:f0:21:98:68:08:25:bf:8c:6c:de:e6:f8:68:
                    01:91:25:f1:6f:31:df:a7:da:b6:d7:27:35:59:73:
                    bc:54:cb:0d:b0:9a:e0:bd:80:f6:0e:db:d3:61:d1:
                    f4:36:0f:7e:f5:0e:19:59:ed:86:c6:a7:98:9d:e4:
                    8b:d8:34:ea:74:36:ef:0f:9b:54:71:41:ce:cc:35:
                    27:05:aa:e2:1f:19:4e:0c:76:44:00:ef:10:77:cd:
                    93:7f:1b:5d:c2:f5:b4:18:c4:27:74:ad:a3:45:cf:
                    e8:b5:09:5e:5e:b5:6d:d7:f9:f3:e2:13:39:21:da:
                    bb:7c:19:b2:40:c6:6a:c0:c6:88:f2:19:0a:90:5d:
                    1a:83:77:f9:e5:93:6c:4e:b6:d9:a4:97:b9:6e:53:
                    54:5c:d1:f3:70:8c:52:2f:ca:a0:83:c9:c9:1a:30:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:92:50:06:78:CF:75:CD:1C:03:A2:2D:CE:85:66:AB:F2:C7:23:33
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/NJJQBnjPdc0cA6ItzoVmq_LHIzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.100.0/22
                  5.226.16.0/20
                  45.90.52.0/22
                  45.141.4.0/22
                  45.144.12.0/22
                  45.157.56.0/22
                  79.142.184.0/22
                  85.117.244.0/22
                  85.217.129.0/24
                  85.217.132.0-85.217.139.255
                  85.217.141.0-85.217.143.255
                  85.217.146.0/23
                  85.217.150.0-85.217.159.255
                  86.105.28.0/22
                  86.105.234.0/24
                  86.106.184.0/22
                  88.98.96.0/19
                  89.32.194.0/23
                  89.36.40.0/22
                  89.37.80.0/22
                  89.42.236.0/23
                  89.47.4.0/22
                  91.221.76.0/23
                  91.221.86.0/23
                  91.242.144.0/22
                  91.245.200.0/21
                  93.92.224.0/22
                  139.28.76.0/22
                  141.98.52.0/22
                  176.32.50.0/24
                  176.32.54.0/24
                  185.16.120.0/22
                  185.43.252.0/22
                  185.44.233.0-185.44.235.255
                  185.48.84.0/22
                  185.51.108.0/22
                  185.72.52.0/22
                  185.75.200.0/22
                  185.77.168.0/22
                  185.83.104.0/22
                  185.93.120.0/22
                  185.93.232.0/22
                  185.94.48.0/22
                  185.113.184.0/22
                  185.119.236.0/22
                  185.120.44.0/22
                  185.123.136.0/22
                  185.130.24.0/22
                  185.131.12.0/22
                  185.131.188.0/22
                  185.134.40.0/22
                  185.156.248.0/22
                  185.158.52.0/22
                  185.162.172.0/22
                  185.176.84.0/22
                  185.185.52.0/22
                  185.196.200.0/22
                  185.202.188.0/22
                  185.210.16.0/22
                  185.216.216.0/22
                  185.228.120.0/22
                  185.229.44.0/22
                  185.229.96.0/22
                  185.234.184.0/22
                  185.240.44.0/22
                  185.248.96.0/22
                  188.208.20.0/22
                  188.240.204.0/22
                  188.241.96.0/21
                  193.32.236.0/22
                  193.91.0.0/24
                  193.91.10.0/24
                  194.8.140.0/22
                  194.49.0.0/22
                  195.82.104.0-195.82.106.255
                  195.82.120.0-195.82.124.255
                  212.63.116.0/22
                  212.63.121.0-212.63.123.255
                  212.104.160.0/19
                IPv6:
                  2a06:8840::/29
                  2a06:8f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:3a:78:de:23:b1:04:15:f5:41:bc:90:3f:9b:ba:cb:13:
         65:da:91:bd:29:18:50:00:40:3d:e4:20:af:83:84:13:6d:bc:
         04:48:d7:d5:da:e6:cf:10:bf:50:ed:cd:39:37:8c:92:c9:d9:
         13:1e:ca:33:6b:e5:56:ea:7d:7c:7c:9f:4d:5c:ad:a9:96:72:
         bc:de:75:62:60:a1:5d:a0:cf:b3:10:8e:05:c2:08:1a:d3:9f:
         3b:2f:f0:aa:67:d3:92:9b:c0:1d:d1:83:d2:94:18:28:0c:91:
         0c:9f:dd:c3:72:9e:8b:1b:98:6b:d9:62:49:af:6a:33:66:ca:
         c3:27:86:af:99:47:c5:24:73:af:a6:e6:d8:52:c0:4e:e8:61:
         d4:cc:a2:1f:aa:9f:c0:20:d8:cc:22:d6:7f:a5:23:0f:18:09:
         4e:a5:6e:f6:d3:30:d5:98:7b:06:7e:56:6e:6c:4b:88:a3:61:
         46:08:1e:06:67:17:31:2a:ae:6b:2f:ca:00:7d:9f:9c:06:24:
         27:e5:a0:28:c4:60:28:87:b6:69:a4:e2:c6:02:48:f7:11:c8:
         9e:25:68:7e:e5:e1:b3:5f:eb:d5:4e:43:bc:7e:38:5c:1c:00:
         b8:bc:3c:ae:a2:72:8d:0e:89:bd:aa:68:62:71:04:de:2b:23:
         1e:55:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org