Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/ME0wHtqFHrnlQN1hhLWbSdo8mVc.roa
File:                     ME0wHtqFHrnlQN1hhLWbSdo8mVc.roa (raw, json)
Hash identifier:          02n5d1RKt/35lFViJwcPy9XX2k323LShYM895a/IGs4=
Subject key identifier:   30:4D:30:1E:DA:85:1E:B9:E5:40:DD:61:84:B5:9B:49:DA:3C:99:57
Certificate issuer:       /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial:       01824007B9BA9384A4B00AAAE649B35760A4
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/ME0wHtqFHrnlQN1hhLWbSdo8mVc.roa
Signing time:             Wed 27 Jul 2022 14:20:24 +0000
ROA not before:           Wed 27 Jul 2022 14:20:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50926
IP address blocks:        185.70.92.0/22 maxlen: 22
                          188.164.192.0/21 maxlen: 21
                          188.164.192.0/24 maxlen: 24
                          188.164.197.0/24 maxlen: 24
                          188.164.199.0/24 maxlen: 24
                          94.127.186.0/24 maxlen: 24
                          188.164.198.0/24 maxlen: 24
                          94.127.185.0/24 maxlen: 24
                          94.127.184.0/24 maxlen: 24
                          188.164.196.0/24 maxlen: 24
                          188.164.195.0/24 maxlen: 24
                          188.164.194.0/24 maxlen: 24
                          188.164.193.0/24 maxlen: 24
                          94.127.191.0/24 maxlen: 24
                          94.127.190.0/24 maxlen: 24
                          94.127.188.0/24 maxlen: 24
                          94.127.187.0/24 maxlen: 24
                          149.62.172.0/22 maxlen: 22
                          149.62.168.0/21 maxlen: 21
                          149.62.168.0/22 maxlen: 22
                          195.5.116.0/23 maxlen: 23
                          91.200.140.0/22 maxlen: 22
                          188.95.112.0/21 maxlen: 21
                          185.176.9.0/24 maxlen: 24
                          185.176.8.0/24 maxlen: 24
                          185.176.11.0/24 maxlen: 24
                          185.176.10.0/24 maxlen: 24
                          84.246.213.0/24 maxlen: 24
                          84.246.212.0/24 maxlen: 24
                          84.246.211.0/24 maxlen: 24
                          84.246.210.0/24 maxlen: 24
                          84.246.209.0/24 maxlen: 24
                          84.246.208.0/21 maxlen: 21
                          84.246.208.0/24 maxlen: 24
                          109.68.84.0/24 maxlen: 24
                          109.68.82.0/24 maxlen: 24
                          84.246.215.0/24 maxlen: 24
                          109.68.80.0/24 maxlen: 24
                          109.68.80.0/21 maxlen: 21
                          84.246.214.0/24 maxlen: 24
                          91.213.46.0/24 maxlen: 24
                          31.24.152.0/21 maxlen: 21
                          31.24.152.0/24 maxlen: 24
                          31.24.159.0/24 maxlen: 24
                          31.24.158.0/24 maxlen: 24
                          31.24.157.0/24 maxlen: 24
                          31.24.156.0/24 maxlen: 24
                          31.24.155.0/24 maxlen: 24
                          31.24.154.0/24 maxlen: 24
                          91.142.208.0/20 maxlen: 20
                          185.222.156.0/22 maxlen: 22
                          5.175.42.0/24 maxlen: 24
                          5.175.41.0/24 maxlen: 24
                          5.175.40.0/24 maxlen: 24
                          5.175.40.0/21 maxlen: 21
                          5.175.44.0/24 maxlen: 24
                          5.175.43.0/24 maxlen: 24
                          5.175.47.0/24 maxlen: 24
                          5.175.46.0/24 maxlen: 24
                          31.24.43.0/24 maxlen: 24
                          31.24.40.0/24 maxlen: 24
                          31.24.40.0/21 maxlen: 21
                          31.24.46.0/24 maxlen: 24
                          31.24.45.0/24 maxlen: 24
                          2a00:5ac0:100::/40 maxlen: 40
                          2a00:5ac0::/44 maxlen: 44
                          2a0a:680::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:40:07:b9:ba:93:84:a4:b0:0a:aa:e6:49:b3:57:60:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
        Validity
            Not Before: Jul 27 14:20:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=304d301eda851eb9e540dd6184b59b49da3c9957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:88:c3:fd:99:97:b8:6c:6e:6c:c7:3b:b9:ad:
                    b6:d7:ce:9a:06:e8:c1:b3:e2:54:cd:2b:49:cf:3c:
                    80:ac:58:34:d6:01:2a:ab:17:d5:6e:8c:df:ac:a6:
                    c1:a4:51:0d:e9:96:2a:7f:86:aa:cd:8d:a0:06:e4:
                    d7:bc:3e:ec:21:3b:d5:7f:b5:1f:6e:27:25:d3:28:
                    ab:4e:3a:ad:62:5d:f4:97:3a:5f:26:f9:91:eb:ec:
                    ef:22:16:db:0b:2b:4a:fd:c4:7c:c6:ea:34:2f:76:
                    4e:4f:38:16:27:8c:74:cc:7c:68:fb:8e:48:1c:40:
                    ff:54:4f:20:8c:91:67:45:80:89:c4:fe:9e:91:57:
                    5c:f1:96:63:6d:33:a3:41:0a:21:88:ef:7f:45:72:
                    7e:12:00:ac:07:6b:9a:01:a5:82:02:c6:4f:6d:56:
                    c4:45:a3:32:96:b9:32:e6:13:6f:d2:35:2a:bc:0b:
                    1d:2a:b2:df:08:84:91:46:82:b5:3e:51:13:e8:8c:
                    65:85:26:42:05:ea:dd:96:0a:2e:81:5f:30:96:e7:
                    f3:9e:c7:8c:f1:3d:6e:c3:6e:21:00:cc:90:4b:05:
                    61:88:57:b1:e2:e4:4e:58:52:29:47:b6:49:9f:68:
                    a0:8b:8b:6a:97:64:68:a7:50:69:4a:01:1e:7a:3e:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4D:30:1E:DA:85:1E:B9:E5:40:DD:61:84:B5:9B:49:DA:3C:99:57
            X509v3 Authority Key Identifier:
                keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/ME0wHtqFHrnlQN1hhLWbSdo8mVc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.175.40.0/21
                  31.24.40.0/21
                  31.24.152.0/21
                  84.246.208.0/21
                  91.142.208.0/20
                  91.200.140.0/22
                  91.213.46.0/24
                  94.127.184.0-94.127.188.255
                  94.127.190.0/23
                  109.68.80.0/21
                  149.62.168.0/21
                  185.70.92.0/22
                  185.176.8.0/22
                  185.222.156.0/22
                  188.95.112.0/21
                  188.164.192.0/21
                  195.5.116.0/23
                IPv6:
                  2a00:5ac0::/44
                  2a00:5ac0:100::/40
                  2a0a:680::/29

    Signature Algorithm: sha256WithRSAEncryption
         0c:68:5c:41:72:d6:b0:b4:62:96:29:54:bc:ba:c3:59:de:ce:
         3d:79:04:13:bd:a1:3b:73:44:cd:4d:9e:32:47:d7:ca:e9:38:
         23:c9:aa:cc:0c:f6:af:93:74:21:eb:64:b3:76:02:4d:15:16:
         00:ce:cd:f5:dc:bd:8d:53:e4:66:3b:b8:fa:ae:cf:5e:c8:7b:
         54:97:8e:70:c7:35:0c:b6:d5:43:0f:ee:9f:f8:09:d5:ce:7d:
         86:af:91:03:c3:50:db:72:c3:25:22:30:ae:99:53:84:41:79:
         ea:56:d1:5e:4b:02:5f:d9:d4:57:6b:15:32:0c:3f:89:ba:5d:
         aa:ea:90:52:3f:6d:08:40:8c:5f:5f:af:5f:66:8f:c5:dc:e8:
         04:82:31:c1:10:03:05:e7:ea:3e:9f:21:9b:a6:58:5d:07:3d:
         a3:ff:34:7c:e2:49:1b:f8:88:ba:e3:82:b7:5f:95:1e:56:91:
         9e:b0:d1:f0:d2:7c:a8:bc:1f:03:76:53:df:83:c7:b6:5b:5f:
         61:97:8a:fe:ca:0a:d2:65:b1:c3:52:23:07:ad:61:a1:ff:bc:
         6e:fe:ac:98:29:ab:b0:18:39:18:26:59:0b:7c:4c:f5:e5:06:
         64:60:d9:02:7b:5d:12:da:38:3c:4b:5b:b5:25:a6:be:a6:9e:
         ac:8c:29:28
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAYJAB7m6k4SksAqq5kmzV2CkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDJhMjM0ZTIyNGJmODc5OTZmMmYwZGY1NTllYWQ4ODJm
OWU2NTEwHhcNMjIwNzI3MTQyMDI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDRkMzAxZWRhODUxZWI5ZTU0MGRkNjE4NGI1OWI0OWRhM2M5OTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYjD/ZmXuGxubMc7ua22186aBujB
s+JUzStJzzyArFg01gEqqxfVbozfrKbBpFEN6ZYqf4aqzY2gBuTXvD7sITvVf7Uf
bicl0yirTjqtYl30lzpfJvmR6+zvIhbbCytK/cR8xuo0L3ZOTzgWJ4x0zHxo+45I
HED/VE8gjJFnRYCJxP6ekVdc8ZZjbTOjQQohiO9/RXJ+EgCsB2uaAaWCAsZPbVbE
RaMylrky5hNv0jUqvAsdKrLfCISRRoK1PlET6IxlhSZCBerdlgougV8wlufznseM
8T1uw24hAMyQSwVhiFex4uROWFIpR7ZJn2igi4tql2Rop1BpSgEeej64lQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFDBNMB7ahR655UDdYYS1m0naPJlXMB8GA1UdIwQY
MBaAFMLSojTiJL+HmW8vDfVZ6tiC+eZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kMWVlNGItZTg4YS00ZTQxLWE2MTYt
NGIyNDhkYTZjOTZjLzEvTUUwd0h0cUZIcm5sUU4xaGhMV2JTZG84bVZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kMWVlNGItZTg4YS00ZTQxLWE2MTYtNGIyNDhkYTZjOTZj
LzEvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljB0BAIAATBuAwQDBa8o
AwQDHxgoAwQDHxiYAwQDVPbQAwQEW47QAwQCW8iMAwQAW9UuMAwDBANef7gDBABe
f7wDBAFef74DBANtRFADBAOVPqgDBAK5RlwDBAK5sAgDBAK53pwDBAO8X3ADBAO8
pMADBAHDBXQwHgQCAAIwGAMHBCoAWsAAAAMGACoAWsABAwUDKgoGgDANBgkqhkiG
9w0BAQsFAAOCAQEADGhcQXLWsLRililUvLrDWd7OPXkEE72hO3NEzU2eMkfXyuk4
I8mqzAz2r5N0Ietks3YCTRUWAM7N9dy9jVPkZju4+q7PXsh7VJeOcMc1DLbVQw/u
n/gJ1c59hq+RA8NQ23LDJSIwrplThEF56lbRXksCX9nUV2sVMgw/ibpdquqQUj9t
CECMX1+vX2aPxdzoBIIxwRADBefqPp8hm6ZYXQc9o/80fOJJG/iIuuOCt1+VHlaR
nrDR8NJ8qLwfA3ZT34PHtltfYZeK/soK0mWxw1IjB61hof+8bv6smCmrsBg5GCZZ
C3xM9eUGZGDZAntdEto4PEtbtSWmvqaerIwpKA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-fra.rpki-client.org