Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FLrvJ47BKvVeEeXhA2RlLnbsy58.roa
File:                     FLrvJ47BKvVeEeXhA2RlLnbsy58.roa (raw, json)
Hash identifier:          bCuF4rH3Zh06n2okjY2AcMc1gP/aRUWW6HqBNt9S8Gg=
Subject key identifier:   14:BA:EF:27:8E:C1:2A:F5:5E:11:E5:E1:03:64:65:2E:76:EC:CB:9F
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       0183A42EAE69818E975B591C0EAD8C625E48
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FLrvJ47BKvVeEeXhA2RlLnbsy58.roa
Signing time:             Tue 04 Oct 2022 18:07:46 +0000
ROA not before:           Tue 04 Oct 2022 18:07:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8717
IP address blocks:        82.147.154.0/24 maxlen: 24
                          89.215.0.0/16 maxlen: 16
                          89.215.8.0/22 maxlen: 22
                          62.221.128.0/19 maxlen: 19
                          62.221.128.0/24 maxlen: 24
                          82.147.128.0/19 maxlen: 19
                          95.140.208.0/20 maxlen: 20
                          213.222.32.0/19 maxlen: 19
                          213.222.59.0/24 maxlen: 24
                          84.242.128.0/18 maxlen: 18
                          89.215.40.0/22 maxlen: 22
                          5.53.128.0/17 maxlen: 17
                          89.215.48.0/22 maxlen: 22
                          176.12.0.0/18 maxlen: 18
                          92.247.168.0/24 maxlen: 24
                          87.227.128.0/17 maxlen: 17
                          217.18.240.0/20 maxlen: 20
                          92.247.0.0/16 maxlen: 16
                          92.247.29.0/24 maxlen: 24
                          217.10.240.0/20 maxlen: 20
                          89.253.128.0/18 maxlen: 18
                          89.186.200.0/21 maxlen: 21
                          213.240.192.0/18 maxlen: 18
                          217.79.32.0/20 maxlen: 20
                          92.247.67.0/24 maxlen: 24
                          213.226.0.0/18 maxlen: 18
                          213.226.9.0/24 maxlen: 24
                          213.226.6.0/24 maxlen: 24
                          213.226.5.0/24 maxlen: 24
                          85.118.64.0/19 maxlen: 19
                          212.91.160.0/19 maxlen: 19
                          212.91.172.0/24 maxlen: 24
                          212.91.186.0/24 maxlen: 24
                          212.91.181.0/24 maxlen: 24
                          212.91.184.0/24 maxlen: 24
                          212.91.185.0/24 maxlen: 24
                          212.91.187.0/24 maxlen: 24
                          213.226.31.0/24 maxlen: 24
                          213.226.35.0/24 maxlen: 24
                          213.226.48.0/24 maxlen: 24
                          213.226.47.0/24 maxlen: 24
                          80.253.48.0/20 maxlen: 20
                          195.24.32.0/19 maxlen: 19
                          85.91.128.0/19 maxlen: 19
                          78.83.146.0/24 maxlen: 24
                          78.83.151.0/24 maxlen: 24
                          78.83.149.0/24 maxlen: 24
                          78.83.150.0/24 maxlen: 24
                          84.252.0.0/18 maxlen: 18
                          78.83.147.0/24 maxlen: 24
                          78.83.148.0/24 maxlen: 24
                          83.97.24.0/21 maxlen: 21
                          78.83.160.0/24 maxlen: 24
                          212.50.0.0/19 maxlen: 19
                          212.50.7.0/24 maxlen: 24
                          77.70.0.0/17 maxlen: 17
                          78.83.143.0/24 maxlen: 24
                          78.83.144.0/24 maxlen: 24
                          78.83.145.0/24 maxlen: 24
                          87.97.128.0/17 maxlen: 17
                          78.90.206.0/24 maxlen: 24
                          95.111.0.0/17 maxlen: 17
                          212.104.96.0/19 maxlen: 19
                          87.97.160.0/22 maxlen: 22
                          78.83.210.0/24 maxlen: 24
                          213.191.160.0/19 maxlen: 19
                          78.83.226.0/23 maxlen: 23
                          78.83.225.0/24 maxlen: 24
                          78.83.228.0/24 maxlen: 24
                          217.9.224.0/20 maxlen: 20
                          130.204.0.0/16 maxlen: 16
                          151.251.62.0/23 maxlen: 23
                          85.130.0.0/17 maxlen: 17
                          88.203.204.0/24 maxlen: 24
                          151.251.0.0/16 maxlen: 16
                          195.149.248.0/21 maxlen: 21
                          88.203.237.0/24 maxlen: 24
                          212.36.0.0/19 maxlen: 19
                          212.36.6.0/24 maxlen: 24
                          82.103.103.0/24 maxlen: 24
                          82.103.110.0/23 maxlen: 23
                          85.130.95.0/24 maxlen: 24
                          82.103.109.0/24 maxlen: 24
                          85.130.96.0/23 maxlen: 23
                          37.63.0.0/17 maxlen: 17
                          62.204.128.0/19 maxlen: 19
                          62.204.128.0/24 maxlen: 24
                          62.204.130.0/24 maxlen: 24
                          82.103.120.0/24 maxlen: 24
                          78.90.0.0/16 maxlen: 16
                          82.103.126.0/24 maxlen: 24
                          82.103.127.0/24 maxlen: 24
                          85.130.120.0/23 maxlen: 23
                          89.190.192.0/19 maxlen: 19
                          78.83.0.0/16 maxlen: 16
                          78.83.7.0/24 maxlen: 24
                          82.103.64.0/18 maxlen: 18
                          46.238.0.0/18 maxlen: 18
                          46.238.14.0/24 maxlen: 24
                          82.103.91.0/24 maxlen: 24
                          85.196.128.0/18 maxlen: 18
                          77.236.160.0/19 maxlen: 19
                          77.236.178.0/23 maxlen: 23
                          88.203.147.0/24 maxlen: 24
                          212.95.161.0/24 maxlen: 24
                          212.95.160.0/19 maxlen: 19
                          88.203.128.0/17 maxlen: 17
                          88.203.128.0/24 maxlen: 24
                          88.203.129.0/24 maxlen: 24
                          88.203.128.0/23 maxlen: 23
                          89.215.214.0/24 maxlen: 24
                          84.242.176.0/24 maxlen: 24
                          195.34.96.0/19 maxlen: 19
                          213.169.32.0/19 maxlen: 19
                          195.34.101.0/24 maxlen: 24
                          195.34.122.0/24 maxlen: 24
                          2a01:288::/32 maxlen: 32
                          2a00:4800::/29 maxlen: 29
                          2a01:288:400b::/48 maxlen: 48
                          2a01:288:400c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a4:2e:ae:69:81:8e:97:5b:59:1c:0e:ad:8c:62:5e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Oct  4 18:07:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14baef278ec12af55e11e5e10364652e76eccb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:ed:0b:72:dc:22:77:e5:e3:21:0c:e2:b7:
                    cd:fb:19:0f:1e:0c:a7:43:29:e5:fd:e1:2e:3e:4d:
                    6a:b8:a7:28:3d:d9:83:27:44:72:de:d1:1b:f3:7b:
                    44:3c:20:ef:d2:c1:d1:f5:32:63:f5:6e:f2:be:90:
                    bd:42:f9:11:c3:23:23:ce:9a:6c:d2:83:6f:3f:3a:
                    38:44:d5:2e:c1:56:08:8d:1e:33:b4:7c:79:33:99:
                    8e:84:7f:24:2b:f1:ad:ea:56:a9:d9:24:cf:b1:d0:
                    4e:c7:8d:fe:5a:19:46:d4:ca:42:be:cf:4c:d8:d7:
                    8f:f4:ae:10:fe:97:d7:e1:35:a7:f1:0d:1f:bd:d5:
                    a7:03:63:86:80:52:10:83:ae:ac:0a:f4:f1:e5:9a:
                    0d:14:b8:2e:a0:49:dd:2e:50:ec:af:0d:75:1d:80:
                    e1:9f:1f:10:bb:7b:07:81:3b:45:da:d8:bc:b9:5f:
                    11:f3:9b:49:e9:64:b1:86:60:81:27:56:b3:dd:7f:
                    a0:c9:f5:e8:4a:d1:69:da:92:95:a7:2d:dd:32:91:
                    62:2a:b2:68:eb:4e:43:06:f8:4d:c0:31:60:bc:c0:
                    d3:79:bd:7e:a4:67:77:dd:75:c4:5f:f8:24:d7:d5:
                    db:a4:51:10:09:64:ab:53:d7:0a:58:13:c6:37:32:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BA:EF:27:8E:C1:2A:F5:5E:11:E5:E1:03:64:65:2E:76:EC:CB:9F
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FLrvJ47BKvVeEeXhA2RlLnbsy58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.53.128.0/17
                  37.63.0.0/17
                  46.238.0.0/18
                  62.204.128.0/19
                  62.221.128.0/19
                  77.70.0.0/17
                  77.236.160.0/19
                  78.83.0.0/16
                  78.90.0.0/16
                  80.253.48.0/20
                  82.103.64.0/18
                  82.147.128.0/19
                  83.97.24.0/21
                  84.242.128.0/18
                  84.252.0.0/18
                  85.91.128.0/19
                  85.118.64.0/19
                  85.130.0.0/17
                  85.196.128.0/18
                  87.97.128.0/17
                  87.227.128.0/17
                  88.203.128.0/17
                  89.186.200.0/21
                  89.190.192.0/19
                  89.215.0.0/16
                  89.253.128.0/18
                  92.247.0.0/16
                  95.111.0.0/17
                  95.140.208.0/20
                  130.204.0.0/16
                  151.251.0.0/16
                  176.12.0.0/18
                  195.24.32.0/19
                  195.34.96.0/19
                  195.149.248.0/21
                  212.36.0.0/19
                  212.50.0.0/19
                  212.91.160.0/19
                  212.95.160.0/19
                  212.104.96.0/19
                  213.169.32.0/19
                  213.191.160.0/19
                  213.222.32.0/19
                  213.226.0.0/18
                  213.240.192.0/18
                  217.9.224.0/20
                  217.10.240.0/20
                  217.18.240.0/20
                  217.79.32.0/20
                IPv6:
                  2a00:4800::/29
                  2a01:288::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:22:52:86:2c:7a:98:d5:a5:10:bc:dd:32:0d:ff:4c:3a:91:
         f9:db:1e:ca:a9:e5:52:f7:70:40:d0:e8:bc:26:a7:73:62:93:
         5f:45:12:16:8f:51:5e:c3:56:51:b3:e9:48:69:51:b2:28:8e:
         05:0c:60:9b:63:c9:3c:77:62:cf:cd:75:58:ca:3e:5b:60:d1:
         58:63:50:b6:20:e6:78:ce:b5:e4:eb:31:e9:64:f1:da:41:3c:
         a8:e4:dd:95:c4:f2:09:f3:a9:3f:d7:28:24:39:31:b6:f9:41:
         66:7c:6d:91:5d:61:a0:44:e7:81:d5:de:d0:ac:40:6c:07:d8:
         e1:14:d6:1e:4d:e5:b0:66:2c:d1:83:33:11:c8:82:8f:38:e1:
         fb:b1:eb:1f:3f:1c:c3:1f:e9:19:1e:1c:73:bd:c2:d1:5d:85:
         59:74:aa:c3:bc:51:d3:4f:f2:c1:b2:41:cc:3e:37:6b:e2:e1:
         50:14:00:31:d3:cd:f0:80:1f:e8:c8:3c:2c:88:8f:95:9d:aa:
         a5:cc:8c:bd:9f:aa:6f:cc:ae:f1:7b:dc:ab:53:46:82:69:68:
         3d:a9:3a:0e:92:ef:c2:38:e4:3c:8e:d2:55:6e:35:1f:26:94:
         fb:9e:00:af:a2:d1:7c:a7:ed:70:60:6a:83:86:8e:4b:9b:c1:
         76:1f:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:51 2024 by rpki-client on console-ams.rpki-client.org