Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/Ezz5GDCf-i8CuoPn-4mJP69LAkI.roa
File:                     Ezz5GDCf-i8CuoPn-4mJP69LAkI.roa (raw, json)
Hash identifier:          /Ubt5MwfVT0rd8av4lHe6+ImymYYRVunn+vf39FTqE0=
Subject key identifier:   13:3C:F9:18:30:9F:FA:2F:02:BA:83:E7:FB:89:89:3F:AF:4B:02:42
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       0183214FD6D162A0E87C66F9022C53A3C2F1
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/Ezz5GDCf-i8CuoPn-4mJP69LAkI.roa
Signing time:             Fri 09 Sep 2022 08:13:43 +0000
ROA not before:           Fri 09 Sep 2022 08:13:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42695
IP address blocks:        86.107.49.0/24 maxlen: 24
                          86.107.48.0/23 maxlen: 24
                          185.16.84.0/22 maxlen: 24
                          89.46.81.0/24 maxlen: 24
                          89.46.80.0/24 maxlen: 24
                          89.46.83.0/24 maxlen: 24
                          89.46.82.0/24 maxlen: 24
                          89.46.84.0/23 maxlen: 23
                          89.46.86.0/24 maxlen: 24
                          89.46.87.0/24 maxlen: 24
                          185.2.152.0/22 maxlen: 24
                          188.241.198.0/23 maxlen: 24
                          188.241.198.0/24 maxlen: 24
                          188.241.199.0/24 maxlen: 24
                          89.36.90.0/23 maxlen: 23
                          45.114.121.0/24 maxlen: 24
                          45.114.120.0/22 maxlen: 24
                          45.114.123.0/24 maxlen: 24
                          45.114.122.0/24 maxlen: 24
                          141.255.184.0/21 maxlen: 24
                          37.153.138.0/23 maxlen: 24
                          185.52.156.0/22 maxlen: 24
                          89.45.226.0/23 maxlen: 24
                          89.45.226.0/24 maxlen: 24
                          37.153.172.0/23 maxlen: 24
                          188.240.222.0/23 maxlen: 24
                          91.106.192.0/21 maxlen: 24
                          91.123.192.0/20 maxlen: 24
                          89.45.227.0/24 maxlen: 24
                          185.103.48.0/23 maxlen: 23
                          185.103.51.0/24 maxlen: 24
                          185.103.50.0/24 maxlen: 24
                          89.42.140.0/23 maxlen: 24
                          185.62.204.0/22 maxlen: 24
                          185.62.204.0/24 maxlen: 24
                          185.62.206.0/24 maxlen: 24
                          185.62.205.0/24 maxlen: 24
                          185.62.207.0/24 maxlen: 24
                          116.206.168.0/22 maxlen: 24
                          188.240.92.0/22 maxlen: 24
                          31.132.58.0/24 maxlen: 24
                          31.132.56.0/24 maxlen: 24
                          31.132.57.0/24 maxlen: 24
                          77.81.188.0/23 maxlen: 24
                          188.240.18.0/23 maxlen: 24
                          188.95.224.0/21 maxlen: 24
                          46.254.10.0/23 maxlen: 23
                          46.254.8.0/21 maxlen: 24
                          46.254.13.0/24 maxlen: 24
                          46.254.12.0/24 maxlen: 24
                          46.254.15.0/24 maxlen: 24
                          46.254.14.0/24 maxlen: 24
                          188.212.108.0/23 maxlen: 24
                          103.57.72.0/22 maxlen: 24
                          103.57.74.0/24 maxlen: 24
                          86.107.242.0/23 maxlen: 24
                          77.81.6.0/23 maxlen: 24
                          103.81.140.0/23 maxlen: 24
                          103.81.142.0/24 maxlen: 24
                          103.81.143.0/24 maxlen: 24
                          89.40.216.0/23 maxlen: 23
                          2a03:d7c0::/29 maxlen: 48
                          2a03:b000:200::/40 maxlen: 40
                          2a03:b000:600::/40 maxlen: 40
                          2a03:b000:800::/40 maxlen: 40
                          2a03:b000:b00::/40 maxlen: 40
                          2a03:b000:900::/40 maxlen: 40
                          2a03:b000:400::/40 maxlen: 40
                          2a03:b000:700::/40 maxlen: 40
                          2a04:f180::/29 maxlen: 48
                          2a06:2980::/29 maxlen: 48
                          2a00:16d8::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:21:4f:d6:d1:62:a0:e8:7c:66:f9:02:2c:53:a3:c2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Sep  9 08:13:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=133cf918309ffa2f02ba83e7fb89893faf4b0242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:2a:f2:c0:f3:25:6f:c7:5a:a3:88:ee:85:
                    50:48:e4:95:5d:7f:6c:a9:81:b2:ec:05:3d:24:10:
                    ad:26:8c:35:dd:42:1e:d9:db:f9:d0:32:a0:e1:79:
                    aa:b8:dc:45:1b:eb:8e:c8:e6:35:94:2a:a1:38:3f:
                    2c:21:08:6f:f6:54:5e:db:59:06:3c:4a:1c:aa:33:
                    49:38:c5:36:60:b0:16:f4:94:7b:a9:b6:66:ba:3a:
                    c6:56:2a:c3:f4:90:f5:88:ac:2f:78:c7:16:96:40:
                    d6:79:66:31:c9:c2:47:d0:2f:15:45:cd:8b:f6:a2:
                    4a:b5:9d:10:a1:1d:07:71:c9:c5:85:b3:58:3b:19:
                    30:5e:3f:9d:33:29:ec:b5:2f:7b:84:75:db:33:df:
                    a7:6c:4c:c5:ef:8d:0b:69:01:a4:53:a7:05:70:a1:
                    78:10:de:72:91:80:80:30:41:78:d5:f0:b9:8f:16:
                    3c:60:26:99:9c:3e:48:b5:e7:5b:60:3e:94:d3:49:
                    f7:0e:2c:83:93:b7:75:a9:18:c9:13:5f:32:e5:87:
                    db:47:d9:fc:bf:86:8f:1c:3c:e2:b7:f1:6e:c2:a0:
                    a3:92:0a:96:89:73:9b:c8:80:71:b7:b4:c6:2a:2d:
                    e3:86:78:0e:aa:bd:c0:7b:c6:36:60:37:11:c0:6e:
                    5e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3C:F9:18:30:9F:FA:2F:02:BA:83:E7:FB:89:89:3F:AF:4B:02:42
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/Ezz5GDCf-i8CuoPn-4mJP69LAkI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.132.56.0-31.132.58.255
                  37.153.138.0/23
                  37.153.172.0/23
                  45.114.120.0/22
                  46.254.8.0/21
                  77.81.6.0/23
                  77.81.188.0/23
                  86.107.48.0/23
                  86.107.242.0/23
                  89.36.90.0/23
                  89.40.216.0/23
                  89.42.140.0/23
                  89.45.226.0/23
                  89.46.80.0/21
                  91.106.192.0/21
                  91.123.192.0/20
                  103.57.72.0/22
                  103.81.140.0/22
                  116.206.168.0/22
                  141.255.184.0/21
                  185.2.152.0/22
                  185.16.84.0/22
                  185.52.156.0/22
                  185.62.204.0/22
                  185.103.48.0/22
                  188.95.224.0/21
                  188.212.108.0/23
                  188.240.18.0/23
                  188.240.92.0/22
                  188.240.222.0/23
                  188.241.198.0/23
                IPv6:
                  2a00:16d8::/32
                  2a03:b000:200::/40
                  2a03:b000:400::/40
                  2a03:b000:600::-2a03:b000:9ff:ffff:ffff:ffff:ffff:ffff
                  2a03:b000:b00::/40
                  2a03:d7c0::/29
                  2a04:f180::/29
                  2a06:2980::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:b7:57:77:31:fa:33:20:e5:a8:05:81:a9:5e:bb:27:f7:
         d3:22:6f:88:03:1b:22:18:62:f9:cb:f7:76:ea:0f:b4:e6:02:
         6a:9b:ef:df:0f:fa:f8:2b:e3:39:12:ce:db:e7:22:b4:b2:cd:
         03:57:94:95:50:8e:ce:a5:a9:64:f9:f7:e4:0a:68:27:cf:00:
         0a:80:00:5e:b8:4d:7b:fd:53:67:85:f6:ca:a5:d5:56:58:31:
         08:43:02:db:c8:dc:e3:14:61:a6:45:57:72:fb:4f:ae:ea:dc:
         bf:7e:b3:43:1e:20:67:62:bb:75:5e:5c:fe:97:14:20:d9:ff:
         f0:ec:9d:c8:aa:07:5f:9c:7f:3b:f1:5a:f5:e5:47:c4:23:db:
         2b:e3:ad:d9:af:65:0d:ef:a8:43:9d:a0:9a:a7:59:a4:b2:c0:
         70:8a:21:99:30:38:16:25:c6:5d:26:54:3f:16:50:e6:15:8c:
         94:ea:f0:06:40:64:d4:3a:e7:5b:f2:c6:28:d2:85:61:f2:7a:
         43:8f:c6:a7:63:b2:d6:1c:2b:64:f7:45:8e:be:05:25:ff:93:
         71:d9:58:7f:f7:04:af:2a:35:d5:18:86:56:a5:c3:1d:bf:db:
         16:ce:a9:42:ee:40:b7:a5:a4:0f:58:ac:02:6c:82:a6:bf:d7:
         c0:ed:82:c9
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgISAYMhT9bRYqDofGb5AixTo8LxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjkyNmY4YzYwM2FhYjc5Y2I0NmE4ODNiZjYzMjU2NGEz
ZmFhYmYwHhcNMjIwOTA5MDgxMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzNjZjkxODMwOWZmYTJmMDJiYTgzZTdmYjg5ODkzZmFmNGIwMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Mq8sDzJW/HWqOI7oVQSOSVXX9s
qYGy7AU9JBCtJow13UIe2dv50DKg4XmquNxFG+uOyOY1lCqhOD8sIQhv9lRe21kG
PEocqjNJOMU2YLAW9JR7qbZmujrGVirD9JD1iKwveMcWlkDWeWYxycJH0C8VRc2L
9qJKtZ0QoR0HccnFhbNYOxkwXj+dMynstS97hHXbM9+nbEzF740LaQGkU6cFcKF4
EN5ykYCAMEF41fC5jxY8YCaZnD5ItedbYD6U00n3DiyDk7d1qRjJE18y5YfbR9n8
v4aPHDzit/FuwqCjkgqWiXObyIBxt7TGKi3jhngOqr3Ae8Y2YDcRwG5e5QIDAQAB
o4IDGzCCAxcwHQYDVR0OBBYEFBM8+Rgwn/ovArqD5/uJiT+vSwJCMB8GA1UdIwQY
MBaAFO25JvjGA6q3nLRqiDv2MlZKP6q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2Mt
M2JkMTk3OGJmMmY2LzEvRXp6NUdEQ2YtaThDdW9Qbi00bUpQNjlMQWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2MtM2JkMTk3OGJmMmY2
LzEvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCByQQCAAEwgcIw
DAMEAx+EOAMEAB+EOgMEASWZigMEASWZrAMEAi1yeAMEAy7+CAMEAU1RBgMEAU1R
vAMEAVZrMAMEAVZr8gMEAVkkWgMEAVko2AMEAVkqjAMEAVkt4gMEA1kuUAMEA1tq
wAMEBFt7wAMEAmc5SAMEAmdRjAMEAnTOqAMEA43/uAMEArkCmAMEArkQVAMEArk0
nAMEArk+zAMEArlnMAMEA7xf4AMEAbzUbAMEAbzwEgMEArzwXAMEAbzw3gMEAbzx
xjBMBAIAAjBGAwUAKgAW2AMGACoDsAACAwYAKgOwAAQwEAMGASoDsAAGAwYBKgOw
AAgDBgAqA7AACwMFAyoD18ADBQMqBPGAAwUDKgYpgDANBgkqhkiG9w0BAQsFAAOC
AQEAHb23V3cx+jMg5agFgaleuyf30yJviAMbIhhi+cv3duoPtOYCapvv3w/6+Cvj
ORLO2+citLLNA1eUlVCOzqWpZPn35ApoJ88ACoAAXrhNe/1TZ4X2yqXVVlgxCEMC
28jc4xRhpkVXcvtPrurcv36zQx4gZ2K7dV5c/pcUINn/8OydyKoHX5x/O/Fa9eVH
xCPbK+Ot2a9lDe+oQ52gmqdZpLLAcIohmTA4FiXGXSZUPxZQ5hWMlOrwBkBk1Drn
W/LGKNKFYfJ6Q4/Gp2Oy1hwrZPdFjr4FJf+TcdlYf/cEryo11RiGVqXDHb/bFs6p
Qu5At6WkD1isAmyCpr/XwO2CyQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:35 2023 by rpki-client on console-ams.rpki-client.org