Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/_FphHdmygiXogKVglX7HC2ZOOQQ.roa
File:                     _FphHdmygiXogKVglX7HC2ZOOQQ.roa (raw, json)
Hash identifier:          WjAO7M0L+ry3IN4LX6jsUhR5vYag5yZ9XIYpfAO92kg=
Subject key identifier:   FC:5A:61:1D:D9:B2:82:25:E8:80:A5:60:95:7E:C7:0B:66:4E:39:04
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       05A393C4
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/_FphHdmygiXogKVglX7HC2ZOOQQ.roa
Signing time:             Mon 10 Jan 2022 06:09:00 +0000
ROA not before:           Mon 10 Jan 2022 06:09:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41881
IP address blocks:        95.38.240.0/21 maxlen: 21
                          95.38.253.0/24 maxlen: 24
                          95.38.252.0/24 maxlen: 24
                          95.38.255.0/24 maxlen: 24
                          95.38.254.0/24 maxlen: 24
                          95.38.192.0/21 maxlen: 21
                          95.38.200.0/22 maxlen: 22
                          95.38.204.0/23 maxlen: 23
                          95.38.206.0/24 maxlen: 24
                          95.38.208.0/21 maxlen: 21
                          95.38.216.0/23 maxlen: 23
                          95.38.218.0/23 maxlen: 23
                          95.38.220.0/22 maxlen: 22
                          95.38.225.0/24 maxlen: 24
                          95.38.226.0/23 maxlen: 23
                          95.38.224.0/24 maxlen: 24
                          95.38.228.0/22 maxlen: 22
                          95.38.232.0/21 maxlen: 21
                          95.38.27.0/24 maxlen: 24
                          95.38.28.0/24 maxlen: 24
                          95.38.25.0/24 maxlen: 24
                          95.38.26.0/24 maxlen: 24
                          95.38.31.0/24 maxlen: 24
                          95.38.29.0/24 maxlen: 24
                          95.38.30.0/24 maxlen: 24
                          95.38.34.0/24 maxlen: 24
                          95.38.35.0/24 maxlen: 24
                          95.38.32.0/24 maxlen: 24
                          95.38.33.0/24 maxlen: 24
                          95.38.36.0/23 maxlen: 23
                          95.38.38.0/24 maxlen: 24
                          95.38.41.0/24 maxlen: 24
                          95.38.42.0/24 maxlen: 24
                          95.38.39.0/24 maxlen: 24
                          95.38.40.0/24 maxlen: 24
                          95.38.44.0/24 maxlen: 24
                          95.38.43.0/24 maxlen: 24
                          95.38.44.0/22 maxlen: 22
                          95.38.48.0/24 maxlen: 24
                          95.38.49.0/24 maxlen: 24
                          95.38.46.0/24 maxlen: 24
                          95.38.47.0/24 maxlen: 24
                          95.38.51.0/24 maxlen: 24
                          95.38.50.0/24 maxlen: 24
                          95.38.45.0/24 maxlen: 24
                          95.38.54.0/23 maxlen: 23
                          95.38.56.0/23 maxlen: 23
                          95.38.53.0/24 maxlen: 24
                          95.38.58.0/24 maxlen: 24
                          95.38.52.0/24 maxlen: 24
                          95.38.60.0/24 maxlen: 24
                          95.38.62.0/23 maxlen: 23
                          95.38.61.0/24 maxlen: 24
                          95.38.64.0/24 maxlen: 24
                          95.38.59.0/24 maxlen: 24
                          95.38.69.0/24 maxlen: 24
                          95.38.70.0/24 maxlen: 24
                          95.38.68.0/24 maxlen: 24
                          95.38.71.0/24 maxlen: 24
                          95.38.65.0/24 maxlen: 24
                          95.38.66.0/23 maxlen: 23
                          95.38.76.0/24 maxlen: 24
                          95.38.74.0/23 maxlen: 23
                          95.38.74.0/24 maxlen: 24
                          95.38.75.0/24 maxlen: 24
                          95.38.78.0/23 maxlen: 23
                          95.38.77.0/24 maxlen: 24
                          95.38.72.0/24 maxlen: 24
                          95.38.73.0/24 maxlen: 24
                          95.38.0.0/21 maxlen: 21
                          95.38.11.0/24 maxlen: 24
                          95.38.10.0/24 maxlen: 24
                          95.38.8.0/24 maxlen: 24
                          95.38.9.0/24 maxlen: 24
                          95.38.13.0/24 maxlen: 24
                          95.38.14.0/24 maxlen: 24
                          95.38.12.0/24 maxlen: 24
                          95.38.17.0/24 maxlen: 24
                          95.38.15.0/24 maxlen: 24
                          95.38.16.0/20 maxlen: 20
                          95.38.16.0/24 maxlen: 24
                          95.38.20.0/24 maxlen: 24
                          95.38.21.0/24 maxlen: 24
                          95.38.18.0/24 maxlen: 24
                          95.38.19.0/24 maxlen: 24
                          95.38.24.0/24 maxlen: 24
                          95.38.22.0/24 maxlen: 24
                          95.38.23.0/24 maxlen: 24
                          95.38.160.0/21 maxlen: 21
                          95.38.172.0/23 maxlen: 23
                          95.38.168.0/22 maxlen: 22
                          95.38.174.0/24 maxlen: 24
                          95.38.175.0/24 maxlen: 24
                          95.38.176.0/20 maxlen: 20
                          95.38.82.0/23 maxlen: 23
                          95.38.81.0/24 maxlen: 24
                          95.38.84.0/23 maxlen: 23
                          95.38.84.0/24 maxlen: 24
                          95.38.85.0/24 maxlen: 24
                          95.38.80.0/24 maxlen: 24
                          95.38.90.0/24 maxlen: 24
                          95.38.88.0/22 maxlen: 22
                          95.38.88.0/24 maxlen: 24
                          95.38.89.0/24 maxlen: 24
                          95.38.91.0/24 maxlen: 24
                          95.38.86.0/24 maxlen: 24
                          95.38.87.0/24 maxlen: 24
                          95.38.93.0/24 maxlen: 24
                          95.38.94.0/23 maxlen: 23
                          95.38.92.0/24 maxlen: 24
                          95.38.96.0/23 maxlen: 23
                          95.38.96.0/21 maxlen: 21
                          95.38.98.0/23 maxlen: 23
                          95.38.102.0/23 maxlen: 23
                          95.38.104.0/22 maxlen: 22
                          95.38.100.0/23 maxlen: 23
                          95.38.109.0/24 maxlen: 24
                          95.38.110.0/23 maxlen: 23
                          95.38.108.0/24 maxlen: 24
                          95.38.117.0/24 maxlen: 24
                          95.38.116.0/23 maxlen: 23
                          95.38.118.0/24 maxlen: 24
                          95.38.116.0/24 maxlen: 24
                          95.38.112.0/21 maxlen: 21
                          95.38.124.0/24 maxlen: 24
                          95.38.125.0/24 maxlen: 24
                          95.38.123.0/24 maxlen: 24
                          95.38.121.0/24 maxlen: 24
                          95.38.122.0/24 maxlen: 24
                          95.38.119.0/24 maxlen: 24
                          95.38.120.0/24 maxlen: 24
                          95.38.128.0/24 maxlen: 24
                          95.38.126.0/23 maxlen: 23
                          95.38.129.0/24 maxlen: 24
                          95.38.128.0/20 maxlen: 20
                          95.38.128.0/22 maxlen: 22
                          95.38.128.0/23 maxlen: 23
                          185.20.162.0/24 maxlen: 24
                          185.20.163.0/24 maxlen: 24
                          185.20.160.0/24 maxlen: 24
                          185.20.161.0/24 maxlen: 24
                          2a01:bd80::/29 maxlen: 29
                          2a00:52e0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94606276 (0x5a393c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Jan 10 06:09:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc5a611dd9b28225e880a560957ec70b664e3904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:2f:c5:65:9f:11:6e:75:f5:f1:97:c1:c7:
                    2f:95:ac:10:17:dc:ce:d2:94:0d:7f:cb:fe:4e:3c:
                    76:a1:d4:93:e2:b0:4f:2d:f3:47:56:5f:8d:e5:21:
                    16:11:61:4f:a0:86:01:a9:25:26:53:aa:3f:62:26:
                    6b:35:fb:71:e7:76:55:f2:38:53:2c:7a:7f:4a:15:
                    b6:89:80:71:df:e7:94:0e:9b:e6:38:90:11:ab:1c:
                    c2:7f:e5:d2:d2:b2:3d:cf:1f:09:e7:9c:76:52:b2:
                    11:8d:d6:22:2a:2f:1c:49:a6:25:5e:d4:9d:e0:3e:
                    e1:be:a8:45:a8:82:be:62:dc:07:a4:53:8a:c3:0c:
                    fe:48:dd:85:f0:c8:d1:89:f2:ef:ed:53:33:b9:db:
                    f0:d2:c6:d8:6b:63:93:ff:e6:75:64:73:2d:b2:79:
                    9e:9c:10:57:ad:7c:c3:31:6f:8e:ae:d1:5a:4a:b2:
                    94:5b:47:7d:6b:fe:8c:cc:44:69:d5:a2:88:e4:cb:
                    66:7c:69:24:e1:94:c4:b6:4b:99:c6:84:aa:3c:1f:
                    66:6e:16:6f:11:e5:44:6d:41:eb:3f:a4:23:2a:21:
                    8c:9b:dc:3b:bf:88:70:d3:b7:47:f9:ae:ae:c7:f5:
                    c3:49:0f:a1:38:72:36:4c:82:5e:36:22:6a:30:bb:
                    4a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5A:61:1D:D9:B2:82:25:E8:80:A5:60:95:7E:C7:0B:66:4E:39:04
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/_FphHdmygiXogKVglX7HC2ZOOQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.38.0.0-95.38.143.255
                  95.38.160.0-95.38.206.255
                  95.38.208.0-95.38.247.255
                  95.38.252.0/22
                  185.20.160.0/22
                IPv6:
                  2a00:52e0::/32
                  2a01:bd80::/29

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:fc:05:4a:6d:2b:ab:d5:a7:14:52:ea:45:7b:b7:32:c4:
         f0:45:e3:ab:b2:f1:bf:36:e2:38:db:c3:93:a8:57:ee:c0:4c:
         08:08:21:78:f7:d0:0e:71:71:3b:14:d2:cd:45:44:4b:31:40:
         a2:58:16:9e:8b:2f:db:eb:e3:2e:26:4f:94:68:1d:f4:96:83:
         88:13:be:a6:01:1e:4a:a1:b8:25:66:64:55:eb:6e:79:db:7b:
         b8:0a:09:cc:2e:11:b6:76:22:f0:a7:54:8c:25:8f:61:95:fc:
         cc:ba:23:a0:fd:ef:b5:13:a6:ee:52:1a:a5:8e:d1:c3:23:bc:
         e1:cf:db:c4:a1:ba:1d:95:64:a2:8f:31:70:df:91:36:ad:65:
         1b:52:69:38:b5:07:2e:67:0b:c9:c7:dc:27:ea:ba:9d:d7:77:
         22:96:80:54:36:3a:8d:66:9e:88:bf:13:1c:50:c6:58:a5:32:
         a7:d1:6c:be:6c:88:4f:d4:af:8e:6c:fd:f3:1f:54:1a:0b:05:
         35:90:76:6b:68:91:df:b6:55:13:14:07:46:da:fc:bd:42:25:
         19:2e:9c:7c:7a:74:d7:2e:d9:e3:0b:b1:e7:a2:1a:ce:74:58:
         a9:cc:11:f3:51:24:90:c5:e9:75:99:ec:5b:a3:a5:54:c0:0a:
         0d:e7:b6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:45 2024 by rpki-client on console-ams.rpki-client.org