Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/7rXpIFDtmU0W3TRmDOCyKCQ5QxU.roa
File:                     7rXpIFDtmU0W3TRmDOCyKCQ5QxU.roa (raw, json)
Hash identifier:          z2DUOYduLga6xdzqXiw0DbswLjmcIrAww0t+c8HB6i4=
Subject key identifier:   EE:B5:E9:20:50:ED:99:4D:16:DD:34:66:0C:E0:B2:28:24:39:43:15
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       01820B9461AAB25AF2C8E7054EE67C71E99C
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/7rXpIFDtmU0W3TRmDOCyKCQ5QxU.roa
Signing time:             Sun 17 Jul 2022 09:54:09 +0000
ROA not before:           Sun 17 Jul 2022 09:54:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41881
IP address blocks:        95.38.240.0/21 maxlen: 21
                          95.38.253.0/24 maxlen: 24
                          95.38.252.0/24 maxlen: 24
                          95.38.255.0/24 maxlen: 24
                          95.38.254.0/24 maxlen: 24
                          95.38.192.0/21 maxlen: 21
                          95.38.192.0/24 maxlen: 24
                          95.38.199.0/24 maxlen: 24
                          95.38.194.0/24 maxlen: 24
                          95.38.195.0/24 maxlen: 24
                          95.38.193.0/24 maxlen: 24
                          95.38.197.0/24 maxlen: 24
                          95.38.196.0/24 maxlen: 24
                          95.38.200.0/22 maxlen: 22
                          95.38.201.0/24 maxlen: 24
                          95.38.202.0/24 maxlen: 24
                          95.38.200.0/24 maxlen: 24
                          95.38.203.0/24 maxlen: 24
                          95.38.204.0/23 maxlen: 23
                          95.38.206.0/24 maxlen: 24
                          95.38.208.0/21 maxlen: 21
                          95.38.211.0/24 maxlen: 24
                          95.38.210.0/24 maxlen: 24
                          95.38.215.0/24 maxlen: 24
                          95.38.216.0/23 maxlen: 23
                          95.38.218.0/24 maxlen: 24
                          95.38.219.0/24 maxlen: 24
                          95.38.218.0/23 maxlen: 23
                          95.38.220.0/22 maxlen: 22
                          95.38.225.0/24 maxlen: 24
                          95.38.226.0/23 maxlen: 23
                          95.38.224.0/24 maxlen: 24
                          95.38.228.0/22 maxlen: 22
                          95.38.232.0/21 maxlen: 21
                          95.38.27.0/24 maxlen: 24
                          95.38.28.0/24 maxlen: 24
                          95.38.25.0/24 maxlen: 24
                          95.38.26.0/24 maxlen: 24
                          95.38.31.0/24 maxlen: 24
                          95.38.29.0/24 maxlen: 24
                          95.38.30.0/24 maxlen: 24
                          95.38.34.0/24 maxlen: 24
                          95.38.35.0/24 maxlen: 24
                          95.38.32.0/24 maxlen: 24
                          95.38.33.0/24 maxlen: 24
                          95.38.38.0/24 maxlen: 24
                          95.38.36.0/23 maxlen: 23
                          95.38.41.0/24 maxlen: 24
                          95.38.42.0/24 maxlen: 24
                          95.38.39.0/24 maxlen: 24
                          95.38.40.0/24 maxlen: 24
                          95.38.44.0/24 maxlen: 24
                          95.38.43.0/24 maxlen: 24
                          95.38.44.0/22 maxlen: 22
                          95.38.48.0/24 maxlen: 24
                          95.38.49.0/24 maxlen: 24
                          95.38.46.0/24 maxlen: 24
                          95.38.47.0/24 maxlen: 24
                          95.38.51.0/24 maxlen: 24
                          95.38.50.0/24 maxlen: 24
                          95.38.45.0/24 maxlen: 24
                          95.38.54.0/23 maxlen: 23
                          95.38.56.0/23 maxlen: 23
                          95.38.53.0/24 maxlen: 24
                          95.38.58.0/24 maxlen: 24
                          95.38.52.0/24 maxlen: 24
                          95.38.60.0/24 maxlen: 24
                          95.38.62.0/23 maxlen: 23
                          95.38.61.0/24 maxlen: 24
                          95.38.64.0/24 maxlen: 24
                          95.38.59.0/24 maxlen: 24
                          95.38.69.0/24 maxlen: 24
                          95.38.70.0/24 maxlen: 24
                          95.38.68.0/24 maxlen: 24
                          95.38.71.0/24 maxlen: 24
                          95.38.65.0/24 maxlen: 24
                          95.38.66.0/23 maxlen: 23
                          95.38.76.0/24 maxlen: 24
                          95.38.74.0/23 maxlen: 23
                          95.38.74.0/24 maxlen: 24
                          95.38.75.0/24 maxlen: 24
                          95.38.78.0/23 maxlen: 23
                          95.38.77.0/24 maxlen: 24
                          95.38.72.0/24 maxlen: 24
                          95.38.73.0/24 maxlen: 24
                          95.38.0.0/21 maxlen: 21
                          95.38.11.0/24 maxlen: 24
                          95.38.10.0/24 maxlen: 24
                          95.38.8.0/24 maxlen: 24
                          95.38.9.0/24 maxlen: 24
                          95.38.13.0/24 maxlen: 24
                          95.38.14.0/24 maxlen: 24
                          95.38.12.0/24 maxlen: 24
                          95.38.17.0/24 maxlen: 24
                          95.38.15.0/24 maxlen: 24
                          95.38.16.0/20 maxlen: 20
                          95.38.16.0/24 maxlen: 24
                          95.38.20.0/24 maxlen: 24
                          95.38.21.0/24 maxlen: 24
                          95.38.18.0/24 maxlen: 24
                          95.38.19.0/24 maxlen: 24
                          95.38.24.0/24 maxlen: 24
                          95.38.22.0/24 maxlen: 24
                          95.38.23.0/24 maxlen: 24
                          95.38.160.0/21 maxlen: 21
                          95.38.172.0/23 maxlen: 23
                          95.38.171.0/24 maxlen: 24
                          95.38.170.0/24 maxlen: 24
                          95.38.168.0/22 maxlen: 22
                          95.38.168.0/23 maxlen: 23
                          95.38.169.0/24 maxlen: 24
                          95.38.174.0/24 maxlen: 24
                          95.38.175.0/24 maxlen: 24
                          95.38.176.0/20 maxlen: 20
                          95.38.82.0/23 maxlen: 23
                          95.38.81.0/24 maxlen: 24
                          95.38.84.0/23 maxlen: 23
                          95.38.84.0/24 maxlen: 24
                          95.38.85.0/24 maxlen: 24
                          95.38.80.0/24 maxlen: 24
                          95.38.90.0/24 maxlen: 24
                          95.38.88.0/22 maxlen: 22
                          95.38.88.0/24 maxlen: 24
                          95.38.89.0/24 maxlen: 24
                          95.38.91.0/24 maxlen: 24
                          95.38.86.0/24 maxlen: 24
                          95.38.87.0/24 maxlen: 24
                          95.38.93.0/24 maxlen: 24
                          95.38.94.0/23 maxlen: 23
                          95.38.92.0/24 maxlen: 24
                          95.38.96.0/23 maxlen: 23
                          95.38.96.0/21 maxlen: 21
                          95.38.98.0/23 maxlen: 23
                          95.38.98.0/24 maxlen: 24
                          95.38.102.0/23 maxlen: 23
                          95.38.104.0/22 maxlen: 22
                          95.38.99.0/24 maxlen: 24
                          95.38.100.0/23 maxlen: 23
                          95.38.109.0/24 maxlen: 24
                          95.38.110.0/23 maxlen: 23
                          95.38.108.0/24 maxlen: 24
                          95.38.117.0/24 maxlen: 24
                          95.38.118.0/24 maxlen: 24
                          95.38.116.0/23 maxlen: 23
                          95.38.116.0/24 maxlen: 24
                          95.38.112.0/21 maxlen: 21
                          95.38.124.0/24 maxlen: 24
                          95.38.125.0/24 maxlen: 24
                          95.38.123.0/24 maxlen: 24
                          95.38.121.0/24 maxlen: 24
                          95.38.122.0/24 maxlen: 24
                          95.38.119.0/24 maxlen: 24
                          95.38.120.0/24 maxlen: 24
                          95.38.128.0/24 maxlen: 24
                          95.38.126.0/23 maxlen: 23
                          95.38.129.0/24 maxlen: 24
                          95.38.128.0/20 maxlen: 20
                          95.38.128.0/23 maxlen: 23
                          95.38.128.0/22 maxlen: 22
                          185.20.162.0/24 maxlen: 24
                          185.20.163.0/24 maxlen: 24
                          185.20.160.0/24 maxlen: 24
                          185.20.161.0/24 maxlen: 24
                          2a01:bd80::/29 maxlen: 29
                          2a00:52e0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0b:94:61:aa:b2:5a:f2:c8:e7:05:4e:e6:7c:71:e9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Jul 17 09:54:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eeb5e92050ed994d16dd34660ce0b22824394315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:17:c2:b1:ab:1a:db:16:42:0c:10:de:98:7f:
                    fa:5e:26:80:13:1d:21:c3:87:65:f4:cc:28:38:ba:
                    ef:50:19:bd:50:8c:af:5d:67:3b:f0:46:49:48:19:
                    33:d9:4f:72:dd:79:f3:04:2f:61:cc:36:95:ae:78:
                    51:b7:9f:13:b3:b4:d7:ec:0c:97:33:ae:fc:26:b3:
                    3b:f5:36:dd:2c:43:88:db:c1:1a:89:c0:7e:8d:3f:
                    d5:c5:4d:2c:4c:99:1a:2c:42:8b:e5:19:7f:15:f1:
                    cc:be:66:6f:9c:33:88:a5:e7:81:29:e1:6b:fd:30:
                    7d:51:83:df:cf:15:b6:07:c7:14:87:6f:18:5c:84:
                    f6:7d:f7:78:0c:4a:c6:ba:c0:87:d0:33:90:fa:5d:
                    5d:41:99:19:c4:6f:42:04:a8:34:22:a0:86:7e:4f:
                    6d:14:09:8e:16:3b:17:e7:7d:c2:af:f8:f0:79:a0:
                    59:13:ee:b4:26:8e:ab:27:80:ce:95:ac:c6:9b:4e:
                    7d:3e:ff:9b:17:3a:2a:d8:6c:52:3e:c6:d0:ab:94:
                    37:be:91:ab:31:42:e0:29:dd:2b:fe:a5:8f:76:40:
                    5f:8b:51:18:50:4f:8f:6e:4c:3a:1e:95:4e:66:12:
                    bd:36:75:19:15:71:ac:4d:8b:58:e4:05:99:dd:6d:
                    fc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B5:E9:20:50:ED:99:4D:16:DD:34:66:0C:E0:B2:28:24:39:43:15
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/7rXpIFDtmU0W3TRmDOCyKCQ5QxU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.38.0.0-95.38.143.255
                  95.38.160.0-95.38.206.255
                  95.38.208.0-95.38.247.255
                  95.38.252.0/22
                  185.20.160.0/22
                IPv6:
                  2a00:52e0::/32
                  2a01:bd80::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:b3:d2:03:4c:79:44:75:06:ec:98:21:29:73:3f:d5:c2:8e:
         62:e9:fd:38:6d:a2:62:6c:62:72:cd:ff:4d:20:f3:c2:c4:f5:
         15:07:06:c0:31:b5:14:90:69:d6:83:f6:c0:cd:d2:ff:e7:1d:
         4a:38:50:41:ca:7c:a3:31:89:2d:8e:5b:1c:c2:09:54:2b:a4:
         0a:cb:2b:88:6e:a9:b6:e6:b7:6c:53:1a:46:b2:9c:9d:fe:41:
         1b:b7:59:19:7c:9b:55:40:3f:4a:50:14:07:ec:1b:dc:72:20:
         33:79:e8:d3:58:6f:d6:89:79:f6:9c:73:33:20:89:e9:e2:69:
         ad:20:33:2b:b8:16:72:a7:52:0c:47:82:4d:c4:f0:57:32:b7:
         46:69:57:cc:f9:1c:08:a7:ea:c2:57:b9:65:f1:65:7d:e3:06:
         81:99:7b:84:e5:d0:ee:bb:d7:08:44:6f:8f:0b:91:6a:40:03:
         e1:68:3d:96:22:e9:85:fb:aa:c4:65:e2:69:58:dc:c4:47:be:
         e5:22:29:18:7a:7c:28:f4:04:e6:71:c0:3a:a9:9a:1e:4d:26:
         27:b7:ee:89:4d:74:30:a9:01:1a:21:97:b6:95:28:e4:cb:be:
         c2:fe:32:ed:89:f3:f3:81:fc:bb:99:22:7b:87:75:0e:dd:30:
         f0:92:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org