Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/a_WWX-cfoFs4mKChSVen6F1Uy48.roa
File:                     a_WWX-cfoFs4mKChSVen6F1Uy48.roa (raw, json)
Hash identifier:          iXMpXVdKY7EzI++GzWjst54poKwW5aszFv4BRvBDz+o=
Subject key identifier:   6B:F5:96:5F:E7:1F:A0:5B:38:98:A0:A1:49:57:A7:E8:5D:54:CB:8F
Certificate issuer:       /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial:       1C8BAF78
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/a_WWX-cfoFs4mKChSVen6F1Uy48.roa
Signing time:             Sat 01 Jan 2022 09:03:02 +0000
ROA not before:           Sat 01 Jan 2022 09:03:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34758
IP address blocks:        45.13.89.0/24 maxlen: 24
                          45.13.88.0/22 maxlen: 22
                          45.13.88.0/24 maxlen: 24
                          45.13.91.0/24 maxlen: 24
                          45.13.90.0/24 maxlen: 24
                          31.6.80.0/24 maxlen: 24
                          31.6.80.0/20 maxlen: 20
                          31.6.82.0/24 maxlen: 24
                          31.6.81.0/24 maxlen: 24
                          31.6.84.0/24 maxlen: 24
                          31.6.83.0/24 maxlen: 24
                          31.6.85.0/24 maxlen: 24
                          159.255.157.0/24 maxlen: 24
                          159.255.158.0/24 maxlen: 24
                          31.6.90.0/24 maxlen: 24
                          31.6.91.0/24 maxlen: 24
                          159.255.159.0/24 maxlen: 24
                          31.6.87.0/24 maxlen: 24
                          31.6.88.0/24 maxlen: 24
                          31.6.86.0/24 maxlen: 24
                          31.6.89.0/24 maxlen: 24
                          159.255.156.0/22 maxlen: 22
                          146.255.165.0/24 maxlen: 24
                          146.255.161.0/24 maxlen: 24
                          31.6.94.0/24 maxlen: 24
                          146.255.160.0/21 maxlen: 21
                          31.6.93.0/24 maxlen: 24
                          146.255.163.0/24 maxlen: 24
                          146.255.166.0/24 maxlen: 24
                          146.255.164.0/24 maxlen: 24
                          146.255.162.0/24 maxlen: 24
                          31.6.95.0/24 maxlen: 24
                          31.6.92.0/24 maxlen: 24
                          146.255.160.0/24 maxlen: 24
                          146.255.167.0/24 maxlen: 24
                          185.126.140.0/22 maxlen: 22
                          185.126.141.0/24 maxlen: 24
                          185.126.140.0/24 maxlen: 24
                          185.126.143.0/24 maxlen: 24
                          185.126.142.0/24 maxlen: 24
                          109.234.137.0/24 maxlen: 24
                          109.234.139.0/24 maxlen: 24
                          109.234.138.0/24 maxlen: 24
                          109.234.136.0/24 maxlen: 24
                          109.234.136.0/21 maxlen: 21
                          109.234.141.0/24 maxlen: 24
                          109.234.140.0/24 maxlen: 24
                          109.234.143.0/24 maxlen: 24
                          109.234.142.0/24 maxlen: 24
                          45.93.37.0/24 maxlen: 24
                          45.93.36.0/22 maxlen: 22
                          45.93.36.0/24 maxlen: 24
                          45.93.38.0/24 maxlen: 24
                          45.93.39.0/24 maxlen: 24
                          217.72.34.0/24 maxlen: 24
                          217.72.33.0/24 maxlen: 24
                          217.72.36.0/24 maxlen: 24
                          217.72.35.0/24 maxlen: 24
                          217.72.32.0/24 maxlen: 24
                          217.72.32.0/21 maxlen: 21
                          217.72.37.0/24 maxlen: 24
                          217.72.38.0/24 maxlen: 24
                          217.72.39.0/24 maxlen: 24
                          195.225.227.0/24 maxlen: 24
                          195.225.226.0/24 maxlen: 24
                          195.225.224.0/22 maxlen: 22
                          195.225.225.0/24 maxlen: 24
                          195.225.224.0/24 maxlen: 24
                          92.246.97.0/24 maxlen: 24
                          92.246.98.0/24 maxlen: 24
                          92.246.96.0/24 maxlen: 24
                          92.246.96.0/21 maxlen: 21
                          92.246.101.0/24 maxlen: 24
                          92.246.100.0/24 maxlen: 24
                          92.246.103.0/24 maxlen: 24
                          92.246.102.0/24 maxlen: 24
                          92.246.99.0/24 maxlen: 24
                          92.246.112.0/24 maxlen: 24
                          92.246.115.0/24 maxlen: 24
                          92.246.114.0/24 maxlen: 24
                          92.246.117.0/24 maxlen: 24
                          92.246.116.0/24 maxlen: 24
                          92.246.113.0/24 maxlen: 24
                          92.246.112.0/20 maxlen: 20
                          92.246.118.0/24 maxlen: 24
                          92.246.125.0/24 maxlen: 24
                          92.246.122.0/24 maxlen: 24
                          92.246.121.0/24 maxlen: 24
                          92.246.124.0/24 maxlen: 24
                          92.246.123.0/24 maxlen: 24
                          92.246.120.0/24 maxlen: 24
                          92.246.119.0/24 maxlen: 24
                          92.246.127.0/24 maxlen: 24
                          92.246.126.0/24 maxlen: 24
                          185.171.39.0/24 maxlen: 24
                          193.238.139.0/24 maxlen: 24
                          193.238.138.0/24 maxlen: 24
                          193.238.136.0/24 maxlen: 24
                          193.238.136.0/22 maxlen: 22
                          193.238.137.0/24 maxlen: 24
                          185.171.38.0/24 maxlen: 24
                          185.171.37.0/24 maxlen: 24
                          185.171.36.0/24 maxlen: 24
                          185.171.36.0/22 maxlen: 22
                          185.23.84.0/22 maxlen: 22
                          185.23.85.0/24 maxlen: 24
                          185.23.84.0/24 maxlen: 24
                          185.23.87.0/24 maxlen: 24
                          185.23.86.0/24 maxlen: 24
                          185.103.81.0/24 maxlen: 24
                          185.103.83.0/24 maxlen: 24
                          185.103.82.0/24 maxlen: 24
                          185.103.80.0/24 maxlen: 24
                          185.103.80.0/22 maxlen: 22
                          2a04:2080::/29 maxlen: 48
                          2a06:c2c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478916472 (0x1c8baf78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
        Validity
            Not Before: Jan  1 09:03:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6bf5965fe71fa05b3898a0a14957a7e85d54cb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:ce:55:27:fa:03:a5:57:a8:97:fe:f3:d3:
                    fb:0e:0f:59:a2:4f:7d:05:5d:d4:4a:63:72:b6:54:
                    2c:be:25:4e:31:d2:81:c7:13:96:cb:8f:60:1d:aa:
                    4a:43:31:e3:d4:16:9a:5d:0a:2d:1f:03:4a:31:68:
                    77:5d:e0:64:8c:56:b5:e7:e1:0a:e9:ca:d5:07:b9:
                    08:a5:19:a2:7d:11:52:3d:3c:01:3d:22:d5:f2:b0:
                    0c:3a:1a:8d:93:b7:82:4e:50:ae:57:88:35:70:b7:
                    97:b9:6e:52:71:b6:3e:f1:b1:d1:7e:d9:55:1d:8e:
                    2f:19:07:61:5e:da:d8:f5:80:62:14:49:24:46:9d:
                    0c:e2:ed:fc:24:f1:b2:57:f7:61:26:43:73:70:59:
                    3e:51:dd:05:1f:17:54:46:a1:f9:93:3f:a1:12:0c:
                    f9:a0:ae:2f:84:3b:98:00:43:49:f1:81:16:f0:11:
                    b0:73:45:b1:6a:e1:6e:1c:6c:27:13:75:16:31:b7:
                    0d:23:bc:7c:cb:99:1a:ad:41:4b:93:d1:14:a9:28:
                    76:d5:bb:1e:ce:9e:40:bd:38:03:d9:11:83:ee:43:
                    fb:2a:0f:fb:e6:16:1e:ec:3e:6c:bf:0b:18:43:be:
                    dd:7a:b2:f7:25:d4:eb:58:ae:22:a2:8d:37:0b:ae:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F5:96:5F:E7:1F:A0:5B:38:98:A0:A1:49:57:A7:E8:5D:54:CB:8F
            X509v3 Authority Key Identifier:
                keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/a_WWX-cfoFs4mKChSVen6F1Uy48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.80.0/20
                  45.13.88.0/22
                  45.93.36.0/22
                  92.246.96.0/21
                  92.246.112.0/20
                  109.234.136.0/21
                  146.255.160.0/21
                  159.255.156.0/22
                  185.23.84.0/22
                  185.103.80.0/22
                  185.126.140.0/22
                  185.171.36.0/22
                  193.238.136.0/22
                  195.225.224.0/22
                  217.72.32.0/21
                IPv6:
                  2a04:2080::/29
                  2a06:c2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:c5:a5:31:bd:7c:5e:7e:87:13:be:c0:a5:33:d0:ff:31:14:
         e9:99:dc:2c:30:ce:7f:48:04:19:56:8e:d9:8e:2c:8c:c6:80:
         9e:22:4c:7a:d1:7a:30:e3:4b:f4:f8:d9:05:25:83:46:c2:ba:
         9a:e8:5e:79:7c:2d:63:9b:86:8c:13:ae:e7:53:b6:7b:c7:28:
         5e:1b:e9:02:c8:8a:85:da:5d:fc:89:fa:a4:ab:a6:aa:33:d1:
         36:d4:e1:31:b2:6b:3b:94:3e:85:7d:51:e7:df:2d:7f:2a:95:
         0b:4c:d1:03:81:d4:ce:b6:12:80:55:e3:d4:51:62:af:87:fe:
         eb:bd:f4:c6:aa:fd:aa:a2:45:63:72:b7:0f:81:2a:41:32:74:
         23:c3:1a:16:17:1e:2c:11:e4:e2:7f:d5:97:7c:7e:34:04:a2:
         2a:cb:9d:74:af:88:02:90:e5:c0:8a:10:16:ab:fa:cc:9d:45:
         82:74:c0:4f:05:6a:78:b0:07:3c:b4:fa:d1:3c:dd:0f:2e:65:
         b2:35:a0:73:2b:89:25:be:f2:65:84:bc:ae:8d:6d:8b:78:3e:
         62:51:50:26:e4:e6:3f:a8:1b:14:a8:06:ef:37:44:29:b1:ad:
         3f:47:4e:45:4d:72:aa:9b:a1:86:e8:25:b8:7c:3d:36:73:9f:
         26:d6:e8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:40 2024 by rpki-client on console-ams.rpki-client.org