Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/UlFdViJhk2PQk_KdJcp8D7n26hE.roa
File:                     UlFdViJhk2PQk_KdJcp8D7n26hE.roa (raw, json)
Hash identifier:          Nvc9noMg34O3jtswBTDrgaJ97EoiBXoFN8LHbhxE2n0=
Subject key identifier:   52:51:5D:56:22:61:93:63:D0:93:F2:9D:25:CA:7C:0F:B9:F6:EA:11
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       0183ABF43CC15E041A2DC24130FF544DC004
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/UlFdViJhk2PQk_KdJcp8D7n26hE.roa
Signing time:             Thu 06 Oct 2022 06:20:53 +0000
ROA not before:           Thu 06 Oct 2022 06:20:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12741
IP address blocks:        77.252.0.0/14 maxlen: 14
                          159.205.0.0/16 maxlen: 16
                          193.19.104.0/23 maxlen: 23
                          89.171.0.0/16 maxlen: 16
                          62.87.128.0/17 maxlen: 17
                          178.16.116.0/24 maxlen: 24
                          178.16.121.0/24 maxlen: 24
                          178.16.125.0/24 maxlen: 24
                          62.181.160.0/19 maxlen: 19
                          213.134.128.0/19 maxlen: 19
                          87.204.0.0/15 maxlen: 15
                          62.244.128.0/19 maxlen: 19
                          82.143.128.0/18 maxlen: 18
                          62.89.64.0/18 maxlen: 18
                          77.65.188.0/24 maxlen: 24
                          77.65.193.0/24 maxlen: 24
                          77.65.209.0/24 maxlen: 24
                          213.241.0.0/17 maxlen: 17
                          178.36.0.0/15 maxlen: 15
                          213.238.64.0/18 maxlen: 18
                          213.241.89.0/24 maxlen: 24
                          83.238.0.0/16 maxlen: 16
                          62.233.128.0/17 maxlen: 17
                          213.17.244.0/24 maxlen: 24
                          81.210.0.0/17 maxlen: 17
                          5.226.135.0/24 maxlen: 24
                          213.186.64.0/19 maxlen: 19
                          77.65.134.0/24 maxlen: 24
                          212.106.0.0/19 maxlen: 19
                          77.65.155.0/24 maxlen: 24
                          77.65.171.0/24 maxlen: 24
                          213.146.32.0/19 maxlen: 19
                          78.8.0.0/14 maxlen: 14
                          62.111.128.0/17 maxlen: 17
                          85.128.0.0/17 maxlen: 17
                          37.128.0.0/17 maxlen: 17
                          62.148.64.0/19 maxlen: 19
                          84.40.128.0/17 maxlen: 17
                          81.168.128.0/17 maxlen: 17
                          81.219.0.0/16 maxlen: 16
                          193.91.16.0/20 maxlen: 20
                          195.114.160.0/19 maxlen: 19
                          85.202.54.0/24 maxlen: 24
                          85.202.59.0/24 maxlen: 24
                          213.195.128.0/18 maxlen: 18
                          217.30.128.0/19 maxlen: 19
                          213.17.128.0/17 maxlen: 17
                          5.226.92.0/24 maxlen: 24
                          213.216.64.0/18 maxlen: 18
                          193.192.173.0/24 maxlen: 24
                          93.159.0.0/18 maxlen: 18
                          193.192.181.0/24 maxlen: 24
                          193.192.190.0/24 maxlen: 24
                          193.192.188.0/24 maxlen: 24
                          62.111.250.0/24 maxlen: 24
                          5.226.64.0/18 maxlen: 18
                          87.105.0.0/16 maxlen: 16
                          2001:41b0::/32 maxlen: 32
                          2001:41b0:22b:100::/56 maxlen: 56
                          2001:16b0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ab:f4:3c:c1:5e:04:1a:2d:c2:41:30:ff:54:4d:c0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Oct  6 06:20:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=52515d5622619363d093f29d25ca7c0fb9f6ea11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:65:17:14:14:97:37:b9:d3:7a:71:b2:e6:33:
                    6a:cd:00:ac:2c:c9:e0:d5:a4:a6:c9:b2:b6:a4:fe:
                    f5:2c:11:a9:a3:29:b3:37:09:16:fe:12:ff:55:50:
                    c1:e3:ee:64:78:45:59:05:ab:96:e6:7b:1a:45:31:
                    c8:ce:9f:c2:dd:93:73:70:25:08:70:24:86:0f:b3:
                    d8:36:be:3b:23:02:ec:e5:6c:5b:a7:48:69:e0:4b:
                    36:79:d9:a6:9f:03:fd:a3:8e:95:61:34:64:56:be:
                    99:d9:0f:87:6f:f8:d9:47:4a:90:db:36:26:65:b9:
                    6f:ef:d5:48:14:d2:30:02:06:e0:5e:71:08:7a:c6:
                    a0:0a:05:dc:4e:43:18:16:a5:fc:e0:4f:34:5c:db:
                    64:bb:90:2e:5c:47:77:62:55:cd:33:36:a2:c3:42:
                    b2:43:ac:03:f9:4f:af:1f:f7:df:7d:ff:a3:33:ed:
                    b4:1b:b3:c0:52:35:5e:03:f3:9d:59:15:75:a1:8f:
                    8c:a6:69:4a:75:36:96:41:97:0c:dc:d9:0e:e4:61:
                    ef:5d:9a:1c:46:0f:61:17:ba:54:ad:7d:a0:31:52:
                    2c:b5:be:44:4a:fb:09:3a:8f:f7:7c:33:43:91:fe:
                    59:f9:2d:de:b0:2e:9b:f8:ce:48:d3:60:f0:7d:e8:
                    60:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:51:5D:56:22:61:93:63:D0:93:F2:9D:25:CA:7C:0F:B9:F6:EA:11
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/UlFdViJhk2PQk_KdJcp8D7n26hE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.64.0/18
                  5.226.135.0/24
                  37.128.0.0/17
                  62.87.128.0/17
                  62.89.64.0/18
                  62.111.128.0/17
                  62.148.64.0/19
                  62.181.160.0/19
                  62.233.128.0/17
                  62.244.128.0/19
                  77.65.134.0/24
                  77.65.155.0/24
                  77.65.171.0/24
                  77.65.188.0/24
                  77.65.193.0/24
                  77.65.209.0/24
                  77.252.0.0/14
                  78.8.0.0/14
                  81.168.128.0/17
                  81.210.0.0/17
                  81.219.0.0/16
                  82.143.128.0/18
                  83.238.0.0/16
                  84.40.128.0/17
                  85.128.0.0/17
                  85.202.54.0/24
                  85.202.59.0/24
                  87.105.0.0/16
                  87.204.0.0/15
                  89.171.0.0/16
                  93.159.0.0/18
                  159.205.0.0/16
                  178.16.116.0/24
                  178.16.121.0/24
                  178.16.125.0/24
                  178.36.0.0/15
                  193.19.104.0/23
                  193.91.16.0/20
                  193.192.173.0/24
                  193.192.181.0/24
                  193.192.188.0/24
                  193.192.190.0/24
                  195.114.160.0/19
                  212.106.0.0/19
                  213.17.128.0/17
                  213.134.128.0/19
                  213.146.32.0/19
                  213.186.64.0/19
                  213.195.128.0/18
                  213.216.64.0/18
                  213.238.64.0/18
                  213.241.0.0/17
                  217.30.128.0/19
                IPv6:
                  2001:16b0::/32
                  2001:41b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:ff:46:a2:2c:49:cc:ef:44:69:ce:7b:48:12:cc:12:79:13:
         29:d1:48:5e:89:c2:1b:2d:d8:25:77:92:07:11:ae:63:3b:2e:
         ab:6e:4b:4b:b5:0c:d5:d7:71:e7:53:d7:04:52:e2:db:34:9f:
         db:ff:cc:1e:68:0b:47:72:60:82:65:aa:1d:02:70:2b:03:40:
         91:ee:b5:93:c3:03:01:0c:62:13:97:32:0d:8c:b1:3c:57:71:
         d9:70:0a:05:b3:1c:4e:c7:93:5f:a8:90:3c:b2:fa:8b:63:27:
         a6:b4:52:20:84:91:17:90:4d:e8:3e:c0:30:ef:3b:74:77:7b:
         e8:d3:10:96:1a:5b:08:5a:12:92:1b:57:50:6b:6f:19:b8:15:
         a0:e3:55:c3:54:fb:a5:14:6d:fe:cc:96:04:af:b3:42:16:a2:
         81:57:27:d3:8a:16:3d:64:46:9f:40:de:27:c6:68:52:34:7f:
         23:06:aa:12:7a:3b:c4:76:da:c8:b4:56:08:cd:bc:8c:82:76:
         f8:f4:8d:d7:bb:59:47:61:60:16:49:99:03:c1:20:ba:9c:1e:
         88:89:45:40:81:0f:9f:5d:b7:a6:86:61:85:b8:78:1e:8a:89:
         51:be:ca:45:fa:72:2c:c2:2d:f0:4b:ab:dc:34:b3:58:ff:6d:
         50:81:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org