Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/YnH_A38vfcuhyC6DZ3K8mMModtY.roa
File:                     YnH_A38vfcuhyC6DZ3K8mMModtY.roa (raw, json)
Hash identifier:          ky5HjUO1TIDPg0ySvkzYov893BdwUcN6nzHGHJZSPG4=
Subject key identifier:   62:71:FF:03:7F:2F:7D:CB:A1:C8:2E:83:67:72:BC:98:C3:28:76:D6
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       0182648E9E97A8EB19B7323DD0E5E8C135B0
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/YnH_A38vfcuhyC6DZ3K8mMModtY.roa
Signing time:             Wed 03 Aug 2022 16:34:04 +0000
ROA not before:           Wed 03 Aug 2022 16:34:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25211
IP address blocks:        94.26.79.0/24 maxlen: 24
                          94.26.89.0/24 maxlen: 24
                          94.26.90.0/24 maxlen: 24
                          94.26.28.0/24 maxlen: 24
                          94.26.29.0/24 maxlen: 24
                          185.96.253.0/24 maxlen: 24
                          185.96.252.0/24 maxlen: 24
                          185.96.255.0/24 maxlen: 24
                          94.26.76.0/24 maxlen: 24
                          94.26.78.0/24 maxlen: 24
                          94.26.77.0/24 maxlen: 24
                          94.190.195.0/24 maxlen: 24
                          91.92.33.0/24 maxlen: 24
                          78.159.128.0/24 maxlen: 24
                          91.92.34.0/24 maxlen: 24
                          91.92.35.0/24 maxlen: 24
                          78.159.129.0/24 maxlen: 24
                          78.159.137.0/24 maxlen: 24
                          91.92.40.0/24 maxlen: 24
                          91.92.43.0/24 maxlen: 24
                          78.159.138.0/24 maxlen: 24
                          91.92.44.0/24 maxlen: 24
                          93.152.205.0/24 maxlen: 24
                          93.152.206.0/24 maxlen: 24
                          91.92.41.0/24 maxlen: 24
                          91.92.42.0/24 maxlen: 24
                          78.159.136.0/24 maxlen: 24
                          78.159.139.0/24 maxlen: 24
                          93.152.213.0/24 maxlen: 24
                          91.92.46.0/24 maxlen: 24
                          93.152.209.0/24 maxlen: 24
                          91.92.47.0/24 maxlen: 24
                          91.92.45.0/24 maxlen: 24
                          93.152.207.0/24 maxlen: 24
                          91.92.50.0/24 maxlen: 24
                          91.92.49.0/24 maxlen: 24
                          91.92.51.0/24 maxlen: 24
                          93.152.212.0/24 maxlen: 24
                          93.152.210.0/24 maxlen: 24
                          93.152.219.0/24 maxlen: 24
                          93.152.215.0/24 maxlen: 24
                          91.92.53.0/24 maxlen: 24
                          93.152.214.0/24 maxlen: 24
                          91.92.52.0/24 maxlen: 24
                          93.152.218.0/24 maxlen: 24
                          78.159.152.0/22 maxlen: 22
                          93.152.217.0/24 maxlen: 24
                          78.159.149.0/24 maxlen: 24
                          78.159.150.0/24 maxlen: 24
                          93.152.225.0/24 maxlen: 24
                          93.152.222.0/24 maxlen: 24
                          93.152.223.0/24 maxlen: 24
                          93.152.224.0/24 maxlen: 24
                          93.152.220.0/24 maxlen: 24
                          93.152.221.0/24 maxlen: 24
                          78.159.158.0/24 maxlen: 24
                          78.159.159.0/24 maxlen: 24
                          93.152.226.0/24 maxlen: 24
                          78.159.156.0/24 maxlen: 24
                          78.159.157.0/24 maxlen: 24
                          93.152.230.0/24 maxlen: 24
                          93.152.227.0/24 maxlen: 24
                          212.102.105.0/24 maxlen: 24
                          45.141.232.0/24 maxlen: 24
                          45.141.233.0/24 maxlen: 24
                          45.141.234.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:64:8e:9e:97:a8:eb:19:b7:32:3d:d0:e5:e8:c1:35:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Aug  3 16:34:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6271ff037f2f7dcba1c82e836772bc98c32876d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:be:07:b5:56:e1:67:4c:c5:5e:43:2d:ff:
                    f2:ac:48:8d:8e:c1:50:d2:85:3c:e0:70:2f:14:7f:
                    d5:85:b7:16:79:52:9a:79:10:b8:d9:a0:e5:60:e9:
                    d4:5f:62:14:0c:51:25:74:a1:f9:7f:2c:43:7a:c6:
                    9a:1c:af:a1:1e:18:68:f8:dd:e3:df:1f:2b:73:b9:
                    c8:19:bb:33:49:4e:7d:85:b7:ee:d0:cb:2d:7d:33:
                    a2:01:75:3a:48:f6:4e:e4:9a:23:d3:44:04:c0:5a:
                    de:cb:14:96:d2:8b:ee:99:27:02:1a:93:8a:fd:15:
                    e8:78:70:62:d6:a9:08:a0:7f:bc:1c:79:1f:d4:bf:
                    66:b7:8b:b6:a7:92:6f:bf:03:37:2e:03:9c:4d:77:
                    31:66:8f:d7:dd:16:35:51:0d:34:cc:e7:f5:1a:26:
                    b0:ee:69:92:c2:31:17:a9:06:01:59:9d:40:f2:10:
                    ac:0a:0a:ce:76:6a:30:b4:de:04:3e:78:25:df:4a:
                    47:e5:76:15:ca:76:8f:6e:45:01:1e:36:84:d2:fc:
                    c2:18:27:30:8f:36:32:f6:d1:44:69:eb:21:8f:a9:
                    06:62:3e:9c:1f:6f:4b:9a:fa:f8:e8:23:85:d9:ef:
                    77:36:97:26:a5:5f:04:3c:57:eb:c0:63:b3:99:b9:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:71:FF:03:7F:2F:7D:CB:A1:C8:2E:83:67:72:BC:98:C3:28:76:D6
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/YnH_A38vfcuhyC6DZ3K8mMModtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.232.0-45.141.234.255
                  78.159.128.0/23
                  78.159.136.0/22
                  78.159.149.0-78.159.150.255
                  78.159.152.0/21
                  91.92.33.0-91.92.35.255
                  91.92.40.0/21
                  91.92.49.0-91.92.53.255
                  93.152.205.0-93.152.207.255
                  93.152.209.0-93.152.210.255
                  93.152.212.0/22
                  93.152.217.0-93.152.227.255
                  93.152.230.0/24
                  94.26.28.0/23
                  94.26.76.0/22
                  94.26.89.0-94.26.90.255
                  94.190.195.0/24
                  185.96.252.0/23
                  185.96.255.0/24
                  212.102.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:31:d1:75:dd:10:55:80:54:59:25:d9:59:5b:6c:ec:5b:43:
         41:5d:ea:13:40:6d:e2:91:bc:85:33:32:f1:18:40:c3:e4:0a:
         b4:1e:ec:2c:a9:52:d5:15:8b:c3:2e:52:41:d7:9e:78:7e:44:
         7a:86:c4:16:4c:aa:69:70:44:6e:c9:ba:b3:52:3e:7b:57:d5:
         85:f7:8e:f9:c2:5c:5e:ab:ac:b2:d1:e7:57:3d:45:8e:79:9c:
         10:5e:7e:1a:19:7c:57:43:d6:36:cd:15:f5:cf:d4:3f:89:a8:
         56:43:d6:0f:23:d2:b3:e7:8d:0b:0e:16:e8:c2:1e:24:08:0e:
         6f:e4:19:90:ea:59:3a:97:5f:c2:9c:d0:3b:09:d8:b4:7a:11:
         50:1e:77:19:c8:a7:ce:ac:ff:ba:8f:be:53:b7:0f:97:dd:2c:
         1a:c7:85:dd:2a:21:90:d7:1a:d6:14:8a:ef:9c:38:75:f8:68:
         2d:82:a5:cb:a7:ce:c0:31:2e:69:d7:99:fb:85:3b:fe:8e:81:
         90:fb:eb:e6:70:fc:fc:e3:41:14:4e:cb:88:0f:7c:a2:c6:00:
         04:5e:b8:54:1b:31:ef:2a:33:3d:0f:38:b6:6c:54:40:70:5e:
         68:7b:3d:f0:f9:c2:d8:e9:12:66:71:28:83:2c:2e:71:36:f5:
         e4:5f:f7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org