Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9prT9iFdEpsanYaLoiYxIofALQI.roa
File:                     9prT9iFdEpsanYaLoiYxIofALQI.roa (raw, json)
Hash identifier:          z60jRjUSPWkCnhchQx/bnKUCYxmUGzxRWNWwd6LW7p4=
Subject key identifier:   F6:9A:D3:F6:21:5D:12:9B:1A:9D:86:8B:A2:26:31:22:87:C0:2D:02
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       39124840
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9prT9iFdEpsanYaLoiYxIofALQI.roa
Signing time:             Mon 23 May 2022 07:32:29 +0000
ROA not before:           Mon 23 May 2022 07:32:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8717
IP address blocks:        82.147.154.0/24 maxlen: 24
                          89.215.0.0/16 maxlen: 16
                          89.215.8.0/22 maxlen: 22
                          62.221.128.0/19 maxlen: 19
                          62.221.128.0/24 maxlen: 24
                          82.147.128.0/19 maxlen: 19
                          95.140.208.0/20 maxlen: 20
                          213.222.32.0/19 maxlen: 19
                          213.222.59.0/24 maxlen: 24
                          84.242.128.0/18 maxlen: 18
                          89.215.40.0/22 maxlen: 22
                          5.53.128.0/17 maxlen: 17
                          89.215.48.0/22 maxlen: 22
                          176.12.0.0/18 maxlen: 18
                          92.247.168.0/24 maxlen: 24
                          87.227.128.0/17 maxlen: 17
                          217.18.240.0/20 maxlen: 20
                          92.247.0.0/16 maxlen: 16
                          92.247.29.0/24 maxlen: 24
                          217.10.240.0/20 maxlen: 20
                          89.253.128.0/18 maxlen: 18
                          89.186.200.0/21 maxlen: 21
                          213.240.192.0/18 maxlen: 18
                          217.79.32.0/20 maxlen: 20
                          92.247.67.0/24 maxlen: 24
                          213.226.0.0/18 maxlen: 18
                          213.226.9.0/24 maxlen: 24
                          213.226.6.0/24 maxlen: 24
                          213.226.5.0/24 maxlen: 24
                          85.118.64.0/19 maxlen: 19
                          212.91.160.0/19 maxlen: 19
                          212.91.172.0/24 maxlen: 24
                          212.91.186.0/24 maxlen: 24
                          212.91.181.0/24 maxlen: 24
                          212.91.185.0/24 maxlen: 24
                          212.91.187.0/24 maxlen: 24
                          213.226.31.0/24 maxlen: 24
                          213.226.35.0/24 maxlen: 24
                          213.226.48.0/24 maxlen: 24
                          213.226.47.0/24 maxlen: 24
                          80.253.48.0/20 maxlen: 20
                          195.24.32.0/19 maxlen: 19
                          85.91.128.0/19 maxlen: 19
                          78.83.146.0/24 maxlen: 24
                          78.83.151.0/24 maxlen: 24
                          78.83.149.0/24 maxlen: 24
                          78.83.150.0/24 maxlen: 24
                          84.252.0.0/18 maxlen: 18
                          78.83.147.0/24 maxlen: 24
                          78.83.148.0/24 maxlen: 24
                          83.97.24.0/21 maxlen: 21
                          78.83.160.0/24 maxlen: 24
                          212.50.0.0/19 maxlen: 19
                          212.50.7.0/24 maxlen: 24
                          77.70.0.0/17 maxlen: 17
                          78.83.143.0/24 maxlen: 24
                          78.83.144.0/24 maxlen: 24
                          78.83.145.0/24 maxlen: 24
                          87.97.128.0/17 maxlen: 17
                          95.111.0.0/17 maxlen: 17
                          212.104.96.0/19 maxlen: 19
                          87.97.160.0/22 maxlen: 22
                          78.83.210.0/24 maxlen: 24
                          213.191.160.0/19 maxlen: 19
                          78.83.226.0/23 maxlen: 23
                          217.9.224.0/20 maxlen: 20
                          130.204.0.0/16 maxlen: 16
                          151.251.62.0/23 maxlen: 23
                          85.130.0.0/17 maxlen: 17
                          151.251.0.0/16 maxlen: 16
                          195.149.248.0/21 maxlen: 21
                          88.203.237.0/24 maxlen: 24
                          212.36.0.0/19 maxlen: 19
                          212.36.6.0/24 maxlen: 24
                          82.103.103.0/24 maxlen: 24
                          82.103.110.0/23 maxlen: 23
                          82.103.109.0/24 maxlen: 24
                          37.63.0.0/17 maxlen: 17
                          62.204.128.0/19 maxlen: 19
                          62.204.128.0/24 maxlen: 24
                          62.204.130.0/24 maxlen: 24
                          82.103.120.0/24 maxlen: 24
                          78.90.0.0/16 maxlen: 16
                          82.103.126.0/24 maxlen: 24
                          82.103.127.0/24 maxlen: 24
                          89.190.192.0/19 maxlen: 19
                          78.83.0.0/16 maxlen: 16
                          82.103.64.0/18 maxlen: 18
                          46.238.0.0/18 maxlen: 18
                          46.238.14.0/24 maxlen: 24
                          82.103.91.0/24 maxlen: 24
                          85.196.128.0/18 maxlen: 18
                          77.236.160.0/19 maxlen: 19
                          77.236.178.0/23 maxlen: 23
                          212.95.161.0/24 maxlen: 24
                          212.95.160.0/19 maxlen: 19
                          88.203.128.0/17 maxlen: 17
                          88.203.128.0/23 maxlen: 23
                          89.215.214.0/24 maxlen: 24
                          84.242.176.0/24 maxlen: 24
                          195.34.96.0/19 maxlen: 19
                          213.169.32.0/19 maxlen: 19
                          195.34.101.0/24 maxlen: 24
                          195.34.122.0/24 maxlen: 24
                          2a01:288::/32 maxlen: 32
                          2a00:4800::/29 maxlen: 29
                          2a01:288:400b::/48 maxlen: 48
                          2a01:288:400c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 957499456 (0x39124840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 23 07:32:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f69ad3f6215d129b1a9d868ba226312287c02d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:7e:9a:ca:07:c3:37:0a:98:9a:cf:f5:e5:
                    c3:88:77:29:64:97:e7:09:06:67:b5:af:ab:64:7b:
                    f8:0e:b6:44:e3:20:4a:a1:71:59:f1:bd:8d:11:78:
                    8b:a1:ba:02:36:58:38:d4:64:56:7b:26:b5:2e:1d:
                    e0:c6:e2:8c:24:29:4c:94:eb:15:03:64:45:97:d0:
                    f1:cc:01:02:68:db:8a:b4:ff:b5:7b:c9:a6:02:06:
                    3d:89:6e:60:e6:d4:42:bc:81:13:16:84:f3:d9:44:
                    ba:fa:b0:8c:dd:d8:c3:79:40:df:19:64:de:b7:6a:
                    22:d7:52:14:92:63:ef:a4:aa:51:81:b4:38:7d:fc:
                    97:e6:fd:13:c7:dd:4d:96:df:bc:48:5c:b9:4a:9d:
                    73:ac:0d:ba:6f:5b:19:5b:2d:f9:ff:7e:ab:7f:a4:
                    3d:eb:f7:58:bf:9e:75:79:4b:47:09:f2:e5:5f:22:
                    b9:49:a2:6a:19:c2:0a:f7:6d:40:2f:46:36:35:da:
                    3e:ee:81:63:04:a5:99:eb:b9:b6:ef:78:7d:11:2c:
                    31:47:d4:88:ee:0b:ae:79:5e:35:96:c9:ec:e2:40:
                    00:87:73:69:7c:e0:e7:b2:28:2c:f2:d6:a0:eb:7c:
                    32:24:c7:43:65:71:20:4d:a6:e3:fc:0b:1d:6d:fd:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9A:D3:F6:21:5D:12:9B:1A:9D:86:8B:A2:26:31:22:87:C0:2D:02
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9prT9iFdEpsanYaLoiYxIofALQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.53.128.0/17
                  37.63.0.0/17
                  46.238.0.0/18
                  62.204.128.0/19
                  62.221.128.0/19
                  77.70.0.0/17
                  77.236.160.0/19
                  78.83.0.0/16
                  78.90.0.0/16
                  80.253.48.0/20
                  82.103.64.0/18
                  82.147.128.0/19
                  83.97.24.0/21
                  84.242.128.0/18
                  84.252.0.0/18
                  85.91.128.0/19
                  85.118.64.0/19
                  85.130.0.0/17
                  85.196.128.0/18
                  87.97.128.0/17
                  87.227.128.0/17
                  88.203.128.0/17
                  89.186.200.0/21
                  89.190.192.0/19
                  89.215.0.0/16
                  89.253.128.0/18
                  92.247.0.0/16
                  95.111.0.0/17
                  95.140.208.0/20
                  130.204.0.0/16
                  151.251.0.0/16
                  176.12.0.0/18
                  195.24.32.0/19
                  195.34.96.0/19
                  195.149.248.0/21
                  212.36.0.0/19
                  212.50.0.0/19
                  212.91.160.0/19
                  212.95.160.0/19
                  212.104.96.0/19
                  213.169.32.0/19
                  213.191.160.0/19
                  213.222.32.0/19
                  213.226.0.0/18
                  213.240.192.0/18
                  217.9.224.0/20
                  217.10.240.0/20
                  217.18.240.0/20
                  217.79.32.0/20
                IPv6:
                  2a00:4800::/29
                  2a01:288::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:7d:76:f6:e3:44:20:75:6e:94:a5:fc:37:b2:7d:94:be:3c:
         13:ba:f4:af:dc:13:cb:66:3d:b7:d3:c2:cd:23:ed:39:5b:4b:
         b1:06:a4:e3:b3:10:dc:c4:10:74:a0:cc:ee:f1:a1:e4:16:0d:
         e9:69:f7:28:f6:c1:0f:5e:da:d8:1b:85:0b:52:10:8a:be:a8:
         28:86:87:36:90:f4:a8:93:90:54:48:e4:6a:3f:5d:cd:44:31:
         b9:24:d9:72:f8:e8:e2:dd:57:81:e2:76:88:af:39:1b:86:a5:
         32:d2:13:f4:96:2d:fd:39:e7:6c:e4:12:0c:ef:1c:b0:56:89:
         71:d5:bd:88:f9:7c:f2:44:76:1e:2c:51:e2:36:37:ff:41:ee:
         46:dc:7d:fe:7c:74:68:96:9d:d1:43:1f:4c:75:b1:4b:9b:5d:
         28:53:2f:5d:3a:34:00:27:d3:f9:13:d5:2d:2f:28:f7:d8:9e:
         15:cc:b3:49:79:ab:7b:51:5c:d8:e6:6f:0d:7d:42:f0:e7:67:
         64:88:12:c4:b4:09:6a:c8:6f:e7:b1:da:38:d5:ed:68:5a:36:
         61:6e:ae:ab:92:13:e1:0b:d5:41:1b:45:a7:2a:98:17:76:ac:
         6f:be:08:d4:8e:79:7f:75:90:bd:44:b0:e6:8a:3b:52:79:19:
         78:d2:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-ams.rpki-client.org