Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/BSASs8VSUbgGyQwbveV2GhhL_vY.roa
File:                     BSASs8VSUbgGyQwbveV2GhhL_vY.roa (raw, json)
Hash identifier:          NLP3I7oKR/CyEp97eOnuOAA7FuiPtGw9lLrEHm692T8=
Subject key identifier:   05:20:12:B3:C5:52:51:B8:06:C9:0C:1B:BD:E5:76:1A:18:4B:FE:F6
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       018452D4855A4CDD6A563D6FD3BD2E5C9C94
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/BSASs8VSUbgGyQwbveV2GhhL_vY.roa
Signing time:             Mon 07 Nov 2022 16:02:50 +0000
ROA not before:           Mon 07 Nov 2022 16:02:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206067
IP address blocks:        92.40.64.0/20 maxlen: 20
                          92.40.80.0/20 maxlen: 20
                          92.40.96.0/20 maxlen: 20
                          92.40.16.0/20 maxlen: 20
                          92.40.48.0/20 maxlen: 20
                          185.153.236.0/24 maxlen: 24
                          185.153.237.0/24 maxlen: 24
                          185.153.238.0/24 maxlen: 24
                          185.153.239.0/24 maxlen: 24
                          188.31.96.0/20 maxlen: 20
                          188.31.92.0/22 maxlen: 22
                          188.31.112.0/20 maxlen: 20
                          188.31.128.0/19 maxlen: 19
                          188.31.64.0/22 maxlen: 22
                          188.31.68.0/22 maxlen: 22
                          188.31.72.0/22 maxlen: 22
                          188.31.76.0/22 maxlen: 22
                          188.31.80.0/22 maxlen: 22
                          188.31.84.0/22 maxlen: 22
                          188.31.88.0/22 maxlen: 22
                          188.31.208.0/21 maxlen: 21
                          188.31.224.0/20 maxlen: 20
                          188.31.248.0/23 maxlen: 23
                          188.31.251.0/24 maxlen: 24
                          188.31.160.0/20 maxlen: 20
                          188.31.176.0/20 maxlen: 20
                          188.31.192.0/21 maxlen: 21
                          188.30.136.0/21 maxlen: 21
                          188.30.144.0/21 maxlen: 21
                          188.30.160.0/19 maxlen: 19
                          188.30.80.0/22 maxlen: 22
                          188.30.84.0/22 maxlen: 22
                          188.30.96.0/19 maxlen: 19
                          188.30.128.0/21 maxlen: 21
                          188.30.240.0/21 maxlen: 21
                          188.31.0.0/21 maxlen: 21
                          188.31.8.0/21 maxlen: 21
                          188.31.16.0/21 maxlen: 21
                          188.31.24.0/21 maxlen: 21
                          188.31.32.0/19 maxlen: 19
                          188.30.192.0/21 maxlen: 21
                          188.30.200.0/21 maxlen: 21
                          188.30.208.0/20 maxlen: 20
                          188.30.224.0/20 maxlen: 20
                          188.29.184.0/21 maxlen: 21
                          188.29.192.0/20 maxlen: 20
                          188.29.208.0/20 maxlen: 20
                          188.29.224.0/20 maxlen: 20
                          188.29.128.0/19 maxlen: 19
                          188.29.160.0/22 maxlen: 22
                          188.30.32.0/19 maxlen: 19
                          188.30.64.0/22 maxlen: 22
                          188.30.68.0/22 maxlen: 22
                          188.30.76.0/22 maxlen: 22
                          188.30.72.0/22 maxlen: 22
                          188.29.240.0/21 maxlen: 21
                          188.29.248.0/22 maxlen: 22
                          188.30.0.0/21 maxlen: 21
                          188.30.8.0/21 maxlen: 21
                          188.30.16.0/21 maxlen: 21
                          188.30.24.0/21 maxlen: 21
                          94.197.104.0/21 maxlen: 21
                          188.29.0.0/20 maxlen: 20
                          94.197.112.0/21 maxlen: 21
                          188.28.160.0/19 maxlen: 19
                          188.28.192.0/18 maxlen: 18
                          188.29.80.0/20 maxlen: 20
                          188.29.96.0/20 maxlen: 20
                          188.29.112.0/20 maxlen: 20
                          188.29.16.0/20 maxlen: 20
                          188.29.32.0/20 maxlen: 20
                          188.29.48.0/20 maxlen: 20
                          188.29.64.0/20 maxlen: 20
                          188.28.0.0/20 maxlen: 20
                          92.41.128.0/20 maxlen: 20
                          188.28.16.0/20 maxlen: 20
                          92.41.144.0/21 maxlen: 21
                          92.41.156.0/22 maxlen: 22
                          94.196.144.0/20 maxlen: 20
                          188.28.32.0/20 maxlen: 20
                          92.41.160.0/21 maxlen: 21
                          188.28.48.0/20 maxlen: 20
                          92.41.80.0/22 maxlen: 22
                          92.41.84.0/22 maxlen: 22
                          92.41.88.0/22 maxlen: 22
                          92.41.92.0/22 maxlen: 22
                          188.28.112.0/20 maxlen: 20
                          94.196.224.0/19 maxlen: 19
                          188.28.128.0/19 maxlen: 19
                          92.41.251.0/24 maxlen: 24
                          92.41.176.0/20 maxlen: 20
                          188.28.64.0/20 maxlen: 20
                          188.28.80.0/20 maxlen: 20
                          92.41.208.0/20 maxlen: 20
                          188.28.96.0/20 maxlen: 20
                          92.41.224.0/20 maxlen: 20
                          94.196.208.0/20 maxlen: 20
                          92.40.160.0/21 maxlen: 21
                          92.40.168.0/23 maxlen: 23
                          92.40.170.0/23 maxlen: 23
                          92.40.172.0/23 maxlen: 23
                          92.40.174.0/23 maxlen: 23
                          92.40.176.0/23 maxlen: 23
                          92.40.178.0/23 maxlen: 23
                          92.40.186.0/23 maxlen: 23
                          92.40.180.0/23 maxlen: 23
                          92.40.182.0/23 maxlen: 23
                          92.40.184.0/23 maxlen: 23
                          92.40.188.0/23 maxlen: 23
                          92.40.190.0/23 maxlen: 23
                          92.40.192.0/23 maxlen: 23
                          92.40.194.0/23 maxlen: 23
                          92.40.196.0/23 maxlen: 23
                          92.40.198.0/23 maxlen: 23
                          92.40.200.0/23 maxlen: 23
                          92.40.202.0/23 maxlen: 23
                          92.40.204.0/23 maxlen: 23
                          92.40.210.0/23 maxlen: 23
                          92.40.212.0/23 maxlen: 23
                          92.40.208.0/23 maxlen: 23
                          92.40.112.0/20 maxlen: 20
                          92.41.16.0/20 maxlen: 20
                          94.196.0.0/18 maxlen: 18
                          92.41.32.0/20 maxlen: 20
                          92.41.48.0/20 maxlen: 20
                          92.41.64.0/20 maxlen: 20
                          92.40.216.0/23 maxlen: 23
                          92.40.218.0/23 maxlen: 23
                          92.40.245.0/24 maxlen: 24
                          92.40.248.0/24 maxlen: 24
                          92.41.0.0/20 maxlen: 20
                          2a04:4a45:b::/48 maxlen: 48
                          2a04:4a45:d::/48 maxlen: 48
                          2a04:4a45:a::/48 maxlen: 48
                          2a04:4a45:f::/48 maxlen: 48
                          2a04:4a45:c::/48 maxlen: 48
                          2a04:4a45:9::/48 maxlen: 48
                          2a04:4a43:9500::/40 maxlen: 40
                          2a04:4a43:4000::/34 maxlen: 34
                          2a04:4a43:4000::/39 maxlen: 39
                          2a04:4a43:4900::/40 maxlen: 40
                          2a04:4a43:4c00::/40 maxlen: 40
                          2a04:4a43:9600::/40 maxlen: 40
                          2a04:4a43:4f00::/40 maxlen: 40
                          2a04:4a43:5200::/40 maxlen: 40
                          2a04:4a43:5500::/40 maxlen: 40
                          2a04:4a43:4200::/39 maxlen: 39
                          2a04:4a43:5400::/40 maxlen: 40
                          2a04:4a43:5100::/40 maxlen: 40
                          2a04:4a43:4e00::/40 maxlen: 40
                          2a04:4a43:9800::/40 maxlen: 40
                          2a04:4a43:4400::/40 maxlen: 40
                          2a04:4a43:5700::/40 maxlen: 40
                          2a04:4a43:4600::/40 maxlen: 40
                          2a04:4a43:5800::/40 maxlen: 40
                          2a04:4a43:4700::/40 maxlen: 40
                          2a04:4a43:5000::/40 maxlen: 40
                          2a04:4a43:5300::/40 maxlen: 40
                          2a04:4a43:5600::/40 maxlen: 40
                          2a04:4a43:9700::/40 maxlen: 40
                          2a04:4a43:4a00::/40 maxlen: 40
                          2a04:4a43:4d00::/40 maxlen: 40
                          2a04:4a43:4500::/40 maxlen: 40
                          2a04:4a43:4800::/40 maxlen: 40
                          2a04:4a43:4b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:52:d4:85:5a:4c:dd:6a:56:3d:6f:d3:bd:2e:5c:9c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Nov  7 16:02:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=052012b3c55251b806c90c1bbde5761a184bfef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:fc:3b:74:0a:a4:e1:d2:ef:04:24:bc:e4:
                    e1:67:ce:70:68:74:57:08:62:00:10:1d:32:ef:ab:
                    49:dd:24:d6:a8:24:2c:20:11:be:0d:f2:be:48:5a:
                    a7:5b:28:c3:fa:2f:fc:bd:d9:72:5b:62:46:f4:69:
                    c9:38:16:42:08:9b:99:b9:7d:90:61:7b:a6:e1:f6:
                    00:a5:ab:a9:96:00:b5:f9:f0:33:6f:09:6f:b5:72:
                    c6:27:dd:97:6b:8a:5f:ba:08:4f:82:02:64:de:77:
                    92:ff:0b:9d:4d:58:98:49:75:94:3a:66:bb:f5:47:
                    20:60:84:17:56:41:d8:9b:c8:50:8c:5a:db:2d:c8:
                    a6:14:93:e0:6b:bb:98:fa:78:10:36:b9:6c:34:9b:
                    23:5d:2c:63:d8:c8:d8:ff:66:b8:c3:93:0f:c7:9d:
                    b9:6e:95:37:26:8e:d0:33:7e:be:2d:b8:19:2d:30:
                    41:de:a4:07:58:a9:c1:8b:ce:3b:7a:6a:b0:40:dd:
                    dc:a6:0a:c3:2f:2f:13:53:23:04:04:7d:1f:cb:eb:
                    20:d3:cb:cf:20:c1:e2:4d:67:26:ed:46:b6:20:88:
                    7d:43:fe:75:f0:ea:16:e0:e2:43:cb:87:12:04:f3:
                    fe:3e:56:3a:70:9e:0b:1b:1e:88:c2:0a:3b:b9:38:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:20:12:B3:C5:52:51:B8:06:C9:0C:1B:BD:E5:76:1A:18:4B:FE:F6
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/BSASs8VSUbgGyQwbveV2GhhL_vY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.40.16.0/20
                  92.40.48.0-92.40.127.255
                  92.40.160.0-92.40.205.255
                  92.40.208.0-92.40.213.255
                  92.40.216.0/22
                  92.40.245.0/24
                  92.40.248.0/24
                  92.41.0.0-92.41.95.255
                  92.41.128.0-92.41.151.255
                  92.41.156.0-92.41.167.255
                  92.41.176.0/20
                  92.41.208.0-92.41.239.255
                  92.41.251.0/24
                  94.196.0.0/18
                  94.196.144.0/20
                  94.196.208.0-94.196.255.255
                  94.197.104.0-94.197.119.255
                  185.153.236.0/22
                  188.28.0.0-188.29.163.255
                  188.29.184.0-188.29.251.255
                  188.30.0.0-188.30.87.255
                  188.30.96.0-188.30.151.255
                  188.30.160.0-188.30.247.255
                  188.31.0.0-188.31.199.255
                  188.31.208.0/21
                  188.31.224.0/20
                  188.31.248.0/23
                  188.31.251.0/24
                IPv6:
                  2a04:4a43:4000::/34
                  2a04:4a43:9500::-2a04:4a43:98ff:ffff:ffff:ffff:ffff:ffff
                  2a04:4a45:9::-2a04:4a45:d:ffff:ffff:ffff:ffff:ffff
                  2a04:4a45:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:f7:fd:4e:36:fe:b3:b6:ce:fb:7c:c4:f1:29:59:14:a0:45:
         4b:96:7c:44:c2:54:cc:e7:c5:f6:86:0b:e1:e2:c2:72:e0:f4:
         05:c9:fb:62:5e:b3:0a:00:23:6d:c5:b4:af:74:31:4a:dc:02:
         3e:aa:34:30:7b:31:d1:d6:bb:2e:07:68:55:4b:49:d8:ed:29:
         d0:b2:b4:c0:c8:cc:1c:e0:11:27:65:a4:d4:15:84:02:ae:0c:
         0d:82:ba:47:5b:1e:6a:10:60:00:a3:9c:92:d9:f6:8e:d2:1f:
         7d:fb:c6:06:1e:f7:1b:4e:04:eb:48:36:25:d9:44:0e:b5:d4:
         4e:88:0f:df:a7:b0:d1:99:8a:a0:f6:36:db:ca:c7:82:a6:5f:
         1a:4b:38:cd:1c:47:91:c2:21:4b:00:e8:c1:0e:09:4a:e0:c3:
         64:9d:c4:bf:13:2f:96:a2:19:1e:e7:51:3c:8b:69:65:63:10:
         90:af:94:09:84:09:10:e9:0f:d6:ed:1d:b9:0a:e1:2b:49:67:
         e3:d2:b9:8d:c5:fa:eb:00:d0:01:cb:a9:8e:1e:17:ef:73:8e:
         01:f6:79:a6:19:e3:07:35:78:e4:44:4f:6a:15:68:2f:36:61:
         21:9b:19:19:c5:a0:6c:1d:a7:78:c8:74:94:ee:30:7b:d4:29:
         f3:58:47:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:41 2024 by rpki-client on console-ams.rpki-client.org