Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/rXl8f_Afug-EQJA7IonoCz8lVSc.roa
File:                     rXl8f_Afug-EQJA7IonoCz8lVSc.roa (raw, json)
Hash identifier:          mNG2LcCiH1vQ57gqFwkDHCjyXDBYGM06zFsNlWu8CMI=
Subject key identifier:   AD:79:7C:7F:F0:1F:BA:0F:84:40:90:3B:22:89:E8:0B:3F:25:55:27
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       119C9091
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/rXl8f_Afug-EQJA7IonoCz8lVSc.roa
Signing time:             Wed 27 Apr 2022 11:54:20 +0000
ROA not before:           Wed 27 Apr 2022 11:54:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51559
IP address blocks:        95.173.178.0/24 maxlen: 24
                          95.173.177.0/24 maxlen: 24
                          95.173.179.0/24 maxlen: 24
                          95.173.185.0/24 maxlen: 24
                          95.173.184.0/24 maxlen: 24
                          95.173.186.0/24 maxlen: 24
                          95.173.181.0/24 maxlen: 24
                          95.173.180.0/24 maxlen: 24
                          95.173.189.0/24 maxlen: 24
                          95.173.188.0/24 maxlen: 24
                          95.173.190.0/24 maxlen: 24
                          95.173.187.0/24 maxlen: 24
                          95.173.191.0/24 maxlen: 24
                          93.113.62.0/24 maxlen: 24
                          93.113.61.0/24 maxlen: 24
                          93.113.63.0/24 maxlen: 24
                          93.113.60.0/24 maxlen: 24
                          95.173.161.0/24 maxlen: 24
                          95.173.160.0/24 maxlen: 24
                          95.173.163.0/24 maxlen: 24
                          95.173.162.0/24 maxlen: 24
                          95.173.164.0/24 maxlen: 24
                          95.173.166.0/24 maxlen: 24
                          95.173.165.0/24 maxlen: 24
                          95.173.171.0/24 maxlen: 24
                          95.173.172.0/24 maxlen: 24
                          95.173.168.0/24 maxlen: 24
                          95.173.167.0/24 maxlen: 24
                          95.173.170.0/24 maxlen: 24
                          95.173.169.0/24 maxlen: 24
                          31.192.215.0/24 maxlen: 24
                          89.252.160.0/24 maxlen: 24
                          89.252.161.0/24 maxlen: 24
                          89.252.166.0/24 maxlen: 24
                          89.252.163.0/24 maxlen: 24
                          89.252.162.0/24 maxlen: 24
                          89.252.165.0/24 maxlen: 24
                          89.252.164.0/24 maxlen: 24
                          89.252.170.0/24 maxlen: 24
                          89.252.169.0/24 maxlen: 24
                          89.252.172.0/24 maxlen: 24
                          89.252.171.0/24 maxlen: 24
                          89.252.168.0/24 maxlen: 24
                          89.252.167.0/24 maxlen: 24
                          89.252.173.0/24 maxlen: 24
                          89.252.175.0/24 maxlen: 24
                          89.252.174.0/24 maxlen: 24
                          89.252.177.0/24 maxlen: 24
                          89.252.176.0/24 maxlen: 24
                          31.192.208.0/24 maxlen: 24
                          31.192.213.0/24 maxlen: 24
                          31.192.210.0/24 maxlen: 24
                          31.192.209.0/24 maxlen: 24
                          159.253.38.0/24 maxlen: 24
                          159.253.36.0/24 maxlen: 24
                          159.253.35.0/24 maxlen: 24
                          159.253.32.0/24 maxlen: 24
                          159.253.34.0/24 maxlen: 24
                          159.253.33.0/24 maxlen: 24
                          159.253.43.0/24 maxlen: 24
                          159.253.42.0/24 maxlen: 24
                          159.253.44.0/24 maxlen: 24
                          159.253.39.0/24 maxlen: 24
                          159.253.41.0/24 maxlen: 24
                          159.253.40.0/24 maxlen: 24
                          159.253.46.0/24 maxlen: 24
                          159.253.45.0/24 maxlen: 24
                          159.253.47.0/24 maxlen: 24
                          89.43.64.0/24 maxlen: 24
                          89.43.67.0/24 maxlen: 24
                          89.43.66.0/24 maxlen: 24
                          89.43.65.0/24 maxlen: 24
                          89.252.173.119/32 maxlen: 32
                          89.43.30.0/24 maxlen: 24
                          89.43.29.0/24 maxlen: 24
                          89.43.31.0/24 maxlen: 24
                          89.43.28.0/24 maxlen: 24
                          89.252.131.0/24 maxlen: 24
                          89.252.128.0/24 maxlen: 24
                          89.252.130.0/24 maxlen: 24
                          89.252.129.0/24 maxlen: 24
                          89.252.139.0/24 maxlen: 24
                          89.252.135.0/24 maxlen: 24
                          89.252.134.0/24 maxlen: 24
                          89.252.137.0/24 maxlen: 24
                          89.252.136.0/24 maxlen: 24
                          89.252.133.0/24 maxlen: 24
                          89.252.145.0/24 maxlen: 24
                          89.252.142.0/24 maxlen: 24
                          89.252.141.0/24 maxlen: 24
                          89.252.144.0/24 maxlen: 24
                          89.252.143.0/24 maxlen: 24
                          89.252.140.0/24 maxlen: 24
                          89.252.146.0/24 maxlen: 24
                          89.252.147.0/24 maxlen: 24
                          89.252.152.0/24 maxlen: 24
                          89.252.149.0/24 maxlen: 24
                          89.252.148.0/24 maxlen: 24
                          89.252.150.0/24 maxlen: 24
                          89.252.156.0/24 maxlen: 24
                          89.252.155.0/24 maxlen: 24
                          89.252.158.0/24 maxlen: 24
                          94.102.2.0/24 maxlen: 24
                          94.102.1.0/24 maxlen: 24
                          94.102.4.0/24 maxlen: 24
                          94.102.3.0/24 maxlen: 24
                          94.102.0.0/24 maxlen: 24
                          94.102.6.0/24 maxlen: 24
                          94.102.5.0/24 maxlen: 24
                          94.102.7.0/24 maxlen: 24
                          94.102.9.0/24 maxlen: 24
                          94.102.8.0/24 maxlen: 24
                          94.102.11.0/24 maxlen: 24
                          94.102.10.0/24 maxlen: 24
                          185.95.85.0/24 maxlen: 24
                          185.95.84.0/24 maxlen: 24
                          94.102.15.0/24 maxlen: 24
                          94.102.13.0/24 maxlen: 24
                          94.102.14.0/24 maxlen: 24
                          185.95.87.0/24 maxlen: 24
                          185.95.86.0/24 maxlen: 24
                          93.115.78.0/24 maxlen: 24
                          93.115.77.0/24 maxlen: 24
                          93.115.76.0/24 maxlen: 24
                          93.115.79.0/24 maxlen: 24
                          2a03:2100:28::/48 maxlen: 48
                          2a03:2100:3::/48 maxlen: 48
                          2a03:2100:17::/48 maxlen: 48
                          2a03:2100::/48 maxlen: 48
                          2a03:2100:11::/48 maxlen: 48
                          2a03:2100:14::/48 maxlen: 48
                          2a03:2100:25::/48 maxlen: 48
                          2a03:2100:e::/48 maxlen: 48
                          2a03:2100:22::/48 maxlen: 48
                          2a03:2100:b::/48 maxlen: 48
                          2a03:2100:1f::/48 maxlen: 48
                          2a03:2100:8::/48 maxlen: 48
                          2a03:2100:19::/48 maxlen: 48
                          2a03:2100:1c::/48 maxlen: 48
                          2a03:2100:2d::/48 maxlen: 48
                          2a03:2100:16::/48 maxlen: 48
                          2a03:2100:2a::/48 maxlen: 48
                          2a03:2100:5::/48 maxlen: 48
                          2a03:2100::/32 maxlen: 48
                          2a03:2100:13::/48 maxlen: 48
                          2a03:2100:27::/48 maxlen: 48
                          2a03:2100:2::/48 maxlen: 48
                          2a03:2100:10::/48 maxlen: 48
                          2a03:2100:21::/48 maxlen: 48
                          2a03:2100:24::/48 maxlen: 48
                          2a03:2100:1e::/48 maxlen: 48
                          2a03:2100:d::/48 maxlen: 48
                          2a03:2100:1b::/48 maxlen: 48
                          2a03:2100:2f::/48 maxlen: 48
                          2a03:2100:a::/48 maxlen: 48
                          2a03:2100:18::/48 maxlen: 48
                          2a03:2100:29::/48 maxlen: 48
                          2a03:2100:2c::/48 maxlen: 48
                          2a03:2100:7::/48 maxlen: 48
                          2a03:2100:26::/48 maxlen: 48
                          2a03:2100:1::/48 maxlen: 48
                          2a03:2100:4::/48 maxlen: 48
                          2a03:2100:15::/48 maxlen: 48
                          2a03:2100:23::/48 maxlen: 48
                          2a03:2100:12::/48 maxlen: 48
                          2a03:2100:20::/48 maxlen: 48
                          2a03:2100:f::/48 maxlen: 48
                          2a03:2100:2e::/48 maxlen: 48
                          2a03:2100:9::/48 maxlen: 48
                          2a03:2100:c::/48 maxlen: 48
                          2a03:2100:1d::/48 maxlen: 48
                          2a03:2100:2b::/48 maxlen: 48
                          2a03:2100:6::/48 maxlen: 48
                          2a02:f80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295473297 (0x119c9091)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Apr 27 11:54:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ad797c7ff01fba0f8440903b2289e80b3f255527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:28:0d:35:be:dd:ec:69:99:84:ef:98:36:
                    9c:14:50:4a:5c:40:cc:d2:bd:7e:d2:4c:0a:23:bb:
                    00:8c:36:fb:ec:70:65:1f:61:0e:a4:a2:c6:e2:5e:
                    13:03:62:99:dc:68:ef:89:83:d0:17:4f:3d:d9:e5:
                    18:72:d6:c5:cd:19:fb:a7:0f:65:f5:3d:8c:16:6d:
                    ec:f0:9b:82:a1:a9:81:98:a4:63:a5:40:22:78:16:
                    12:c4:8a:71:34:5b:93:36:1e:c0:6f:c0:ac:88:b0:
                    ba:97:68:7f:fb:94:a1:0b:f5:99:a6:a8:17:f5:95:
                    08:cf:92:d2:e6:60:8f:32:68:f0:72:23:09:2c:88:
                    3e:6c:c1:f9:4e:98:3a:c1:e1:0e:f0:04:78:39:35:
                    2c:86:fa:b9:49:19:84:0e:e7:b0:f5:51:3c:2a:82:
                    6b:af:f2:b8:14:18:20:cb:90:e3:80:5a:d9:ec:a0:
                    cc:1d:5a:1e:17:bb:47:12:38:b0:98:00:a1:6b:8f:
                    0f:fb:c7:65:4a:d7:bf:11:b2:26:29:a6:90:d5:73:
                    9b:4e:20:2a:6e:43:51:04:9a:ef:d1:c2:6e:40:63:
                    bc:a8:d8:5b:fb:13:4c:51:86:9e:66:26:e2:af:fa:
                    34:60:9b:31:74:f3:e1:b2:00:07:9f:f0:e3:9c:9d:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:79:7C:7F:F0:1F:BA:0F:84:40:90:3B:22:89:E8:0B:3F:25:55:27
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/rXl8f_Afug-EQJA7IonoCz8lVSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.192.208.0-31.192.210.255
                  31.192.213.0/24
                  31.192.215.0/24
                  89.43.28.0/22
                  89.43.64.0/22
                  89.252.128.0/22
                  89.252.133.0-89.252.137.255
                  89.252.139.0-89.252.150.255
                  89.252.152.0/24
                  89.252.155.0-89.252.156.255
                  89.252.158.0/24
                  89.252.160.0-89.252.177.255
                  93.113.60.0/22
                  93.115.76.0/22
                  94.102.0.0-94.102.11.255
                  94.102.13.0-94.102.15.255
                  95.173.160.0-95.173.172.255
                  95.173.177.0-95.173.181.255
                  95.173.184.0/21
                  159.253.32.0-159.253.36.255
                  159.253.38.0-159.253.47.255
                  185.95.84.0/22
                IPv6:
                  2a02:f80::/32
                  2a03:2100::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:06:31:b7:f5:59:56:e5:0e:e2:75:7b:85:d4:4d:36:0f:38:
         f8:05:7f:91:50:01:fa:7d:82:c0:fc:a4:dd:e3:50:60:31:da:
         5b:a2:b9:af:ac:91:ee:f0:4b:9e:ff:00:55:f1:a7:ba:a7:bb:
         dd:b3:b8:f8:89:a5:e5:db:70:c3:50:85:b1:7a:84:c7:82:44:
         b5:9f:3b:52:28:c9:69:86:ea:11:e4:13:00:f8:a2:11:f6:ee:
         ad:b9:3f:ca:b5:c2:08:d2:54:aa:ac:4e:90:c2:71:b6:43:bc:
         85:44:f6:ef:af:f0:09:b0:98:27:70:f5:33:06:8d:3a:d4:34:
         43:b4:1e:36:8f:99:a5:a2:76:c4:1e:d0:71:20:00:9b:ff:db:
         79:13:c2:8b:44:c3:e0:a9:68:17:06:a1:9b:18:08:4a:da:5a:
         ad:a9:37:50:39:3e:77:29:42:b3:ea:77:c3:ec:38:f8:d8:14:
         b4:36:ab:5d:93:4e:7b:82:8d:ec:e9:c4:00:f4:3e:c2:3b:83:
         56:94:d2:2b:d8:25:b4:70:12:cd:87:d9:8e:22:ea:a8:78:a6:
         e3:15:9a:a3:61:fe:f2:28:6b:d9:01:55:50:18:62:79:94:77:
         08:23:ab:6d:e0:d0:91:34:da:25:c5:2a:e4:2c:52:27:f6:cd:
         e5:db:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org