Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PcLnn-v9Q9IW7Fkbh0o4T9VAucI.roa
File:                     PcLnn-v9Q9IW7Fkbh0o4T9VAucI.roa (raw, json)
Hash identifier:          SuXjF0pLuAV+CknNzBrAIPLJFJO1kLjNb3X9jrSb/Vc=
Subject key identifier:   3D:C2:E7:9F:EB:FD:43:D2:16:EC:59:1B:87:4A:38:4F:D5:40:B9:C2
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       064454B9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PcLnn-v9Q9IW7Fkbh0o4T9VAucI.roa
Signing time:             Sat 01 Jan 2022 06:52:39 +0000
ROA not before:           Sat 01 Jan 2022 06:52:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201942
IP address blocks:        91.235.41.0/24 maxlen: 24
                          91.235.40.0/24 maxlen: 24
                          185.201.152.0/22 maxlen: 22
                          185.204.244.0/22 maxlen: 22
                          45.137.160.0/22 maxlen: 22
                          45.147.104.0/22 maxlen: 22
                          185.224.220.0/22 maxlen: 22
                          185.245.32.0/23 maxlen: 23
                          45.147.116.0/22 maxlen: 22
                          185.107.152.0/22 maxlen: 22
                          185.124.108.0/22 maxlen: 22
                          212.80.208.0/22 maxlen: 22
                          185.228.160.0/23 maxlen: 23
                          185.228.162.0/24 maxlen: 24
                          185.232.8.0/22 maxlen: 22
                          193.26.152.0/22 maxlen: 22
                          109.230.250.0/24 maxlen: 24
                          93.92.228.0/22 maxlen: 22
                          31.170.100.0/22 maxlen: 22
                          185.163.168.0/22 maxlen: 22
                          185.220.240.0/22 maxlen: 22
                          185.227.176.0/22 maxlen: 22
                          185.220.248.0/22 maxlen: 22
                          185.106.124.0/22 maxlen: 22
                          185.210.232.0/22 maxlen: 22
                          185.150.78.0/23 maxlen: 24
                          81.21.228.0/22 maxlen: 22
                          109.230.194.0/24 maxlen: 24
                          185.210.152.0/22 maxlen: 22
                          95.214.144.0/22 maxlen: 22
                          185.224.184.0/22 maxlen: 22
                          185.218.16.0/22 maxlen: 22
                          185.197.216.0/22 maxlen: 22
                          185.227.204.0/24 maxlen: 24
                          185.221.16.0/22 maxlen: 22
                          185.221.20.0/22 maxlen: 22
                          185.200.228.0/22 maxlen: 22
                          185.163.232.0/22 maxlen: 22
                          185.166.36.0/22 maxlen: 22
                          185.230.48.0/22 maxlen: 22
                          194.38.56.0/22 maxlen: 22
                          185.230.52.0/22 maxlen: 22
                          185.230.64.0/22 maxlen: 22
                          85.115.192.0/22 maxlen: 22
                          185.239.255.0/24 maxlen: 24
                          93.189.123.0/24 maxlen: 24
                          93.189.120.0/24 maxlen: 24
                          193.17.180.0/22 maxlen: 22
                          85.31.60.0/22 maxlen: 22
                          45.159.76.0/22 maxlen: 22
                          185.223.80.0/22 maxlen: 22
                          194.41.118.0/24 maxlen: 24
                          185.105.232.0/22 maxlen: 22
                          194.35.40.0/24 maxlen: 24
                          185.217.12.0/22 maxlen: 22
                          185.223.220.0/22 maxlen: 22
                          185.176.188.0/22 maxlen: 22
                          185.166.172.0/22 maxlen: 22
                          193.35.88.0/22 maxlen: 22
                          185.119.48.0/22 maxlen: 22
                          185.179.228.0/22 maxlen: 22
                          185.179.232.0/22 maxlen: 22
                          185.129.104.0/22 maxlen: 22
                          185.250.180.0/22 maxlen: 22
                          185.128.52.0/22 maxlen: 24
                          185.118.52.0/23 maxlen: 23
                          185.118.54.0/23 maxlen: 23
                          185.226.8.0/22 maxlen: 22
                          185.212.84.0/22 maxlen: 22
                          212.115.44.0/22 maxlen: 22
                          185.105.12.0/22 maxlen: 22
                          185.202.204.0/22 maxlen: 22
                          45.81.152.0/22 maxlen: 22
                          185.196.42.0/24 maxlen: 24
                          185.196.43.0/24 maxlen: 24
                          185.196.40.0/22 maxlen: 22
                          185.239.253.0/24 maxlen: 24
                          185.239.252.0/24 maxlen: 24
                          185.175.152.0/22 maxlen: 22
                          185.222.188.0/22 maxlen: 22
                          185.226.28.0/22 maxlen: 22
                          185.199.44.0/22 maxlen: 22
                          185.209.72.0/22 maxlen: 22
                          185.199.52.0/22 maxlen: 22
                          185.91.108.0/22 maxlen: 22
                          88.135.64.0/22 maxlen: 22
                          185.162.52.0/22 maxlen: 22
                          185.216.28.0/22 maxlen: 22
                          185.189.64.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105141433 (0x64454b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  1 06:52:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3dc2e79febfd43d216ec591b874a384fd540b9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:c3:17:d2:a6:af:4f:16:fb:d9:6d:32:51:
                    8b:21:f6:1d:b4:42:2a:92:3d:94:e9:fe:e8:36:5b:
                    43:c1:16:aa:aa:32:5f:6c:12:e1:c4:f8:f9:4f:42:
                    d2:a8:01:6c:72:dc:34:65:8e:b6:11:ee:0f:de:5b:
                    71:4a:dd:72:49:aa:29:a6:4a:8e:03:b8:2e:91:ce:
                    ca:1d:de:17:ae:7c:2c:f8:2e:d1:c9:8a:26:cb:da:
                    f4:c8:5c:aa:e2:f3:1f:e5:c8:0b:5c:b8:86:c7:a3:
                    d1:4d:cc:d1:22:83:98:15:1c:2a:1d:e0:73:b4:04:
                    e3:39:1d:93:c8:cd:a9:5d:96:f3:f0:19:e6:51:b3:
                    78:4e:bd:9c:67:13:d4:a8:b7:e5:fa:3a:20:33:48:
                    52:d4:5a:a6:ca:c8:4a:d4:cc:06:8d:03:53:1e:0d:
                    b5:2a:06:e8:c5:9e:9f:3b:f3:41:9d:21:b5:5c:2c:
                    19:a9:f7:ee:ff:82:d9:a2:d2:2d:1c:75:d0:06:7b:
                    36:ac:c1:63:5f:fc:03:9f:bb:97:28:94:c4:b3:46:
                    fb:b0:90:a2:82:75:60:53:c1:ee:94:dd:32:8f:a0:
                    c8:fe:cd:65:c6:bb:df:be:24:3c:9f:72:14:7f:af:
                    35:e0:1d:ea:b0:ba:55:1b:8e:e1:4c:cf:2d:6b:6f:
                    8c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C2:E7:9F:EB:FD:43:D2:16:EC:59:1B:87:4A:38:4F:D5:40:B9:C2
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PcLnn-v9Q9IW7Fkbh0o4T9VAucI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.170.100.0/22
                  45.81.152.0/22
                  45.137.160.0/22
                  45.147.104.0/22
                  45.147.116.0/22
                  45.159.76.0/22
                  81.21.228.0/22
                  85.31.60.0/22
                  85.115.192.0/22
                  88.135.64.0/22
                  91.235.40.0/23
                  93.92.228.0/22
                  93.189.120.0/24
                  93.189.123.0/24
                  95.214.144.0/22
                  109.230.194.0/24
                  109.230.250.0/24
                  185.91.108.0/22
                  185.105.12.0/22
                  185.105.232.0/22
                  185.106.124.0/22
                  185.107.152.0/22
                  185.118.52.0/22
                  185.119.48.0/22
                  185.124.108.0/22
                  185.128.52.0/22
                  185.129.104.0/22
                  185.150.78.0/23
                  185.162.52.0/22
                  185.163.168.0/22
                  185.163.232.0/22
                  185.166.36.0/22
                  185.166.172.0/22
                  185.175.152.0/22
                  185.176.188.0/22
                  185.179.228.0-185.179.235.255
                  185.189.64.0/22
                  185.196.40.0/22
                  185.197.216.0/22
                  185.199.44.0/22
                  185.199.52.0/22
                  185.200.228.0/22
                  185.201.152.0/22
                  185.202.204.0/22
                  185.204.244.0/22
                  185.209.72.0/22
                  185.210.152.0/22
                  185.210.232.0/22
                  185.212.84.0/22
                  185.216.28.0/22
                  185.217.12.0/22
                  185.218.16.0/22
                  185.220.240.0/22
                  185.220.248.0/22
                  185.221.16.0/21
                  185.222.188.0/22
                  185.223.80.0/22
                  185.223.220.0/22
                  185.224.184.0/22
                  185.224.220.0/22
                  185.226.8.0/22
                  185.226.28.0/22
                  185.227.176.0/22
                  185.227.204.0/24
                  185.228.160.0-185.228.162.255
                  185.230.48.0/21
                  185.230.64.0/22
                  185.232.8.0/22
                  185.239.252.0/23
                  185.239.255.0/24
                  185.245.32.0/23
                  185.250.180.0/22
                  193.17.180.0/22
                  193.26.152.0/22
                  193.35.88.0/22
                  194.35.40.0/24
                  194.38.56.0/22
                  194.41.118.0/24
                  212.80.208.0/22
                  212.115.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:8d:bc:57:49:27:f6:be:ad:bc:d5:73:0f:0a:2b:5a:0c:
         2b:32:b9:32:67:a6:d0:35:2a:9a:f8:96:0a:80:d0:fa:fa:e4:
         ff:ae:0a:e2:87:32:29:a6:7c:c1:84:15:45:76:0c:58:09:88:
         bc:af:52:32:b3:ec:73:84:a2:be:3d:05:69:89:57:07:ba:5a:
         b4:b5:77:6f:d7:39:a3:2f:20:52:9f:50:22:38:df:21:57:43:
         8a:35:97:1c:11:d2:4b:0e:3b:69:38:e2:85:52:94:40:c2:aa:
         63:1a:53:a9:98:08:79:f5:20:d5:d9:65:d0:be:0f:6a:0e:6d:
         71:b2:17:50:f8:f4:1e:9a:1a:01:ff:66:91:5f:dd:68:71:78:
         8f:86:1e:63:aa:72:df:11:7d:b1:95:af:d4:d5:ca:8a:20:cd:
         36:0b:ca:70:23:e6:07:c6:18:c5:43:72:19:9a:d8:df:f0:1b:
         08:c2:60:7f:ce:15:e9:e0:45:18:50:36:58:dc:13:04:72:e8:
         e2:36:1b:be:1f:e1:2b:56:4e:d3:37:cc:23:42:85:99:97:e9:
         c8:f8:f4:57:03:f3:44:f6:94:67:dc:ff:f3:80:e6:57:04:ff:
         5e:6d:9b:c5:d9:1d:a7:26:d0:8c:b3:a1:f9:91:00:00:c5:42:
         26:f1:6c:ba
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIEBkRUuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDY3ODRjMTA1MDg1YjlkNmFkNWY3M2EwM2IyMGQ5YTVjMTE0Y2FmMB4XDTIyMDEw
MTA2NTIzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2RjMmU3OWZlYmZk
NDNkMjE2ZWM1OTFiODc0YTM4NGZkNTQwYjljMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlNwxfSpq9PFvvZbTJRiyH2HbRCKpI9lOn+6DZbQ8EWqqoy
X2wS4cT4+U9C0qgBbHLcNGWOthHuD95bcUrdckmqKaZKjgO4LpHOyh3eF658LPgu
0cmKJsva9MhcquLzH+XIC1y4hsej0U3M0SKDmBUcKh3gc7QE4zkdk8jNqV2W8/AZ
5lGzeE69nGcT1Ki35fo6IDNIUtRapsrIStTMBo0DUx4NtSoG6MWenzvzQZ0htVws
Gan37v+C2aLSLRx10AZ7NqzBY1/8A5+7lyiUxLNG+7CQooJ1YFPB7pTdMo+gyP7N
Zca7374kPJ9yFH+vNeAd6rC6VRuO4UzPLWtvjEECAwEAAaOCA/0wggP5MB0GA1Ud
DgQWBBQ9wuef6/1D0hbsWRuHSjhP1UC5wjAfBgNVHSMEGDAWgBRgZ4TBBQhbnWrV
9zoDsg2aXBFMrzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8x
L1BjTG5uLXY5UTlJVzdGa2JoMG80VDlWQXVjSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8xL1lHZUV3UVVJVzUx
cTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AhEGCCsGAQUFBwEHAQH/BIICADCCAfwwggH4BAIAATCCAfADBAIfqmQDBAItUZgD
BAItiaADBAItk2gDBAItk3QDBAItn0wDBAJRFeQDBAJVHzwDBAJVc8ADBAJYh0AD
BAFb6ygDBAJdXOQDBABdvXgDBABdvXsDBAJf1pADBABt5sIDBABt5voDBAK5W2wD
BAK5aQwDBAK5aegDBAK5anwDBAK5a5gDBAK5djQDBAK5dzADBAK5fGwDBAK5gDQD
BAK5gWgDBAG5lk4DBAK5ojQDBAK5o6gDBAK5o+gDBAK5piQDBAK5pqwDBAK5r5gD
BAK5sLwwDAMEArmz5AMEArmz6AMEArm9QAMEArnEKAMEArnF2AMEArnHLAMEArnH
NAMEArnI5AMEArnJmAMEArnKzAMEArnM9AMEArnRSAMEArnSmAMEArnS6AMEArnU
VAMEArnYHAMEArnZDAMEArnaEAMEArnc8AMEArnc+AMEA7ndEAMEArnevAMEArnf
UAMEArnf3AMEArnguAMEArng3AMEArniCAMEArniHAMEArnjsAMEALnjzDAMAwQF
ueSgAwQAueSiAwQDueYwAwQCueZAAwQCuegIAwQBue/8AwQAue//AwQBufUgAwQC
ufq0AwQCwRG0AwQCwRqYAwQCwSNYAwQAwiMoAwQCwiY4AwQAwil2AwQC1FDQAwQC
1HMsMA0GCSqGSIb3DQEBCwUAA4IBAQAosY28V0kn9r6tvNVzDworWgwrMrkyZ6bQ
NSqa+JYKgND6+uT/rgrihzIppnzBhBVFdgxYCYi8r1Iys+xzhKK+PQVpiVcHulq0
tXdv1zmjLyBSn1AiON8hV0OKNZccEdJLDjtpOOKFUpRAwqpjGlOpmAh59SDV2WXQ
vg9qDm1xshdQ+PQemhoB/2aRX91ocXiPhh5jqnLfEX2xla/U1cqKIM02C8pwI+YH
xhjFQ3IZmtjf8BsIwmB/zhXp4EUYUDZY3BMEcujiNhu+H+ErVk7TN8wjQoWZl+nI
+PRXA/NE9pRn3P/zgOZXBP9ebZvF2R2nJtCMs6H5kQAAxUIm8Wy6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org