Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/N3QqIDy_4uA3DyRLlLFB0__Hry4.roa
File:                     N3QqIDy_4uA3DyRLlLFB0__Hry4.roa (raw, json)
Hash identifier:          hHsFh0Ev3SlyEKGM0m8d9n1OKKWkZFuQBsm3ACIz9XM=
Subject key identifier:   37:74:2A:20:3C:BF:E2:E0:37:0F:24:4B:94:B1:41:D3:FF:C7:AF:2E
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       06DEC3B5
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/N3QqIDy_4uA3DyRLlLFB0__Hry4.roa
Signing time:             Fri 13 May 2022 12:34:40 +0000
ROA not before:           Fri 13 May 2022 12:34:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25211
IP address blocks:        94.26.79.0/24 maxlen: 24
                          94.26.90.0/24 maxlen: 24
                          94.26.28.0/24 maxlen: 24
                          94.26.29.0/24 maxlen: 24
                          185.96.253.0/24 maxlen: 24
                          185.96.252.0/24 maxlen: 24
                          185.96.255.0/24 maxlen: 24
                          94.26.76.0/24 maxlen: 24
                          94.26.78.0/24 maxlen: 24
                          94.26.77.0/24 maxlen: 24
                          78.159.130.0/24 maxlen: 24
                          78.159.131.0/24 maxlen: 24
                          78.159.128.0/24 maxlen: 24
                          91.92.35.0/24 maxlen: 24
                          78.159.129.0/24 maxlen: 24
                          78.159.137.0/24 maxlen: 24
                          91.92.40.0/24 maxlen: 24
                          91.92.43.0/24 maxlen: 24
                          78.159.138.0/24 maxlen: 24
                          91.92.44.0/24 maxlen: 24
                          93.152.205.0/24 maxlen: 24
                          93.152.206.0/24 maxlen: 24
                          91.92.41.0/24 maxlen: 24
                          91.92.42.0/24 maxlen: 24
                          78.159.136.0/24 maxlen: 24
                          78.159.139.0/24 maxlen: 24
                          93.152.213.0/24 maxlen: 24
                          91.92.46.0/24 maxlen: 24
                          93.152.209.0/24 maxlen: 24
                          93.152.210.0/24 maxlen: 24
                          91.92.47.0/24 maxlen: 24
                          91.92.45.0/24 maxlen: 24
                          91.92.50.0/24 maxlen: 24
                          93.152.211.0/24 maxlen: 24
                          91.92.51.0/24 maxlen: 24
                          93.152.212.0/24 maxlen: 24
                          93.152.215.0/24 maxlen: 24
                          91.92.53.0/24 maxlen: 24
                          93.152.216.0/24 maxlen: 24
                          93.152.214.0/24 maxlen: 24
                          91.92.52.0/24 maxlen: 24
                          93.152.218.0/24 maxlen: 24
                          78.159.152.0/22 maxlen: 22
                          78.159.149.0/24 maxlen: 24
                          78.159.150.0/24 maxlen: 24
                          93.152.223.0/24 maxlen: 24
                          93.152.220.0/24 maxlen: 24
                          93.152.221.0/24 maxlen: 24
                          78.159.158.0/24 maxlen: 24
                          93.152.225.0/24 maxlen: 24
                          93.152.226.0/24 maxlen: 24
                          93.152.224.0/24 maxlen: 24
                          78.159.157.0/24 maxlen: 24
                          93.152.230.0/24 maxlen: 24
                          93.152.227.0/24 maxlen: 24
                          212.102.107.0/24 maxlen: 24
                          45.141.234.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115262389 (0x6dec3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: May 13 12:34:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37742a203cbfe2e0370f244b94b141d3ffc7af2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:b0:92:53:38:3b:39:af:57:af:2a:32:d8:
                    c6:a6:a8:e0:b0:85:6b:83:99:6a:b6:ed:9b:9d:85:
                    02:c4:e0:23:17:81:a9:0d:c0:30:67:e7:c6:e7:0c:
                    6c:50:91:32:a7:5d:71:79:c5:b1:e3:1a:7a:4f:fb:
                    f1:cf:19:86:98:84:d2:1b:dd:4d:ca:3a:de:2a:32:
                    14:97:d8:22:a2:9f:1a:01:09:70:95:3b:51:f7:a5:
                    8d:05:f3:d5:f8:3b:26:f9:90:56:3d:9b:5e:1f:46:
                    8d:fc:b9:48:1c:11:9f:48:80:0f:3b:79:79:a4:d1:
                    8f:8b:2b:96:96:b3:7e:e8:11:5e:24:6b:c5:45:81:
                    95:0f:c8:5a:e1:db:1b:06:12:ab:e9:e3:84:09:23:
                    19:34:50:a5:c8:22:49:81:32:d4:52:b2:78:f7:9f:
                    d0:8f:34:f0:1c:8c:96:5b:7e:67:39:06:94:e9:3f:
                    db:cc:a8:9e:68:2a:b5:64:c2:7e:08:35:3e:6b:2f:
                    05:9d:0c:9a:5c:b8:fe:82:87:3e:fe:d4:fb:10:16:
                    04:49:05:df:32:d6:1e:e0:99:87:0c:7a:94:d3:f8:
                    fd:fc:6e:b5:0d:ac:52:0c:b2:d0:bc:cd:13:8a:01:
                    df:f5:4b:bc:d4:cf:25:09:24:f8:9d:ff:c2:c1:47:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:74:2A:20:3C:BF:E2:E0:37:0F:24:4B:94:B1:41:D3:FF:C7:AF:2E
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/N3QqIDy_4uA3DyRLlLFB0__Hry4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.234.0/24
                  78.159.128.0/22
                  78.159.136.0/22
                  78.159.149.0-78.159.150.255
                  78.159.152.0/22
                  78.159.157.0-78.159.158.255
                  91.92.35.0/24
                  91.92.40.0/21
                  91.92.50.0-91.92.53.255
                  93.152.205.0-93.152.206.255
                  93.152.209.0-93.152.216.255
                  93.152.218.0/24
                  93.152.220.0/23
                  93.152.223.0-93.152.227.255
                  93.152.230.0/24
                  94.26.28.0/23
                  94.26.76.0/22
                  94.26.90.0/24
                  185.96.252.0/23
                  185.96.255.0/24
                  212.102.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:07:6f:6a:2d:80:f7:0b:c5:83:8d:4f:27:01:9d:12:9b:8a:
         e5:84:1f:ef:5a:56:6c:6d:5c:be:c9:5e:d2:44:9b:c3:85:26:
         70:49:a0:1b:5f:85:11:6c:8f:05:d1:3e:63:59:d0:de:83:c2:
         eb:7f:2e:0c:fc:c9:58:b9:f7:4f:3f:9b:c4:38:ae:da:08:07:
         e6:e4:17:77:0c:ca:d8:10:dd:c2:6b:5e:82:2c:fa:cd:c1:25:
         df:f0:b3:23:39:53:0e:f5:59:8f:66:e7:6a:3e:02:9e:3a:38:
         22:a8:33:9a:b2:49:3a:2d:f6:0e:63:bb:f3:6e:bd:34:73:09:
         bf:46:2f:de:6a:d6:35:7d:31:c7:cf:e2:7a:01:9e:4c:68:fa:
         39:b4:1b:06:96:61:2a:c0:97:ea:26:1d:15:70:cf:bf:dd:73:
         3a:bc:41:53:d4:26:09:33:aa:bb:ab:4a:dd:e6:d7:de:0f:b7:
         58:f2:38:13:77:04:c3:ec:cf:f5:33:ee:12:c2:d3:00:7e:6b:
         ad:5c:be:32:53:d6:ff:5b:7f:77:89:de:26:48:43:c4:b3:a8:
         bf:a6:d7:2f:79:79:8a:d6:10:ab:d9:73:cf:57:03:ea:68:89:
         f2:d4:5d:32:42:b7:8c:04:75:eb:1c:10:bc:aa:b4:3f:3e:04:
         74:e6:60:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org