Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ODzASSI35XgnQ4fNEoDmTLu6o8U.roa
File:                     ODzASSI35XgnQ4fNEoDmTLu6o8U.roa (raw, json)
Hash identifier:          Ph4TRI51RqcVajLLx5FpcQwlyhyD94J/CAS/plT3lGY=
Subject key identifier:   38:3C:C0:49:22:37:E5:78:27:43:87:CD:12:80:E6:4C:BB:BA:A3:C5
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       018360190F3E3D1A112514556667413073D6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ODzASSI35XgnQ4fNEoDmTLu6o8U.roa
Signing time:             Wed 21 Sep 2022 12:49:58 +0000
ROA not before:           Wed 21 Sep 2022 12:49:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8717
IP address blocks:        82.147.154.0/24 maxlen: 24
                          89.215.0.0/16 maxlen: 16
                          89.215.8.0/22 maxlen: 22
                          62.221.128.0/19 maxlen: 19
                          62.221.128.0/24 maxlen: 24
                          82.147.128.0/19 maxlen: 19
                          95.140.208.0/20 maxlen: 20
                          213.222.32.0/19 maxlen: 19
                          213.222.59.0/24 maxlen: 24
                          84.242.128.0/18 maxlen: 18
                          89.215.40.0/22 maxlen: 22
                          5.53.128.0/17 maxlen: 17
                          89.215.48.0/22 maxlen: 22
                          176.12.0.0/18 maxlen: 18
                          92.247.168.0/24 maxlen: 24
                          87.227.128.0/17 maxlen: 17
                          217.18.240.0/20 maxlen: 20
                          92.247.0.0/16 maxlen: 16
                          92.247.29.0/24 maxlen: 24
                          217.10.240.0/20 maxlen: 20
                          89.253.128.0/18 maxlen: 18
                          89.186.200.0/21 maxlen: 21
                          213.240.192.0/18 maxlen: 18
                          217.79.32.0/20 maxlen: 20
                          92.247.67.0/24 maxlen: 24
                          213.226.0.0/18 maxlen: 18
                          213.226.9.0/24 maxlen: 24
                          213.226.6.0/24 maxlen: 24
                          213.226.5.0/24 maxlen: 24
                          85.118.64.0/19 maxlen: 19
                          212.91.160.0/19 maxlen: 19
                          212.91.172.0/24 maxlen: 24
                          212.91.186.0/24 maxlen: 24
                          212.91.181.0/24 maxlen: 24
                          212.91.184.0/24 maxlen: 24
                          212.91.185.0/24 maxlen: 24
                          212.91.187.0/24 maxlen: 24
                          213.226.31.0/24 maxlen: 24
                          213.226.35.0/24 maxlen: 24
                          213.226.48.0/24 maxlen: 24
                          213.226.47.0/24 maxlen: 24
                          80.253.48.0/20 maxlen: 20
                          195.24.32.0/19 maxlen: 19
                          85.91.128.0/19 maxlen: 19
                          78.83.146.0/24 maxlen: 24
                          78.83.151.0/24 maxlen: 24
                          78.83.149.0/24 maxlen: 24
                          78.83.150.0/24 maxlen: 24
                          84.252.0.0/18 maxlen: 18
                          78.83.147.0/24 maxlen: 24
                          78.83.148.0/24 maxlen: 24
                          83.97.24.0/21 maxlen: 21
                          78.83.160.0/24 maxlen: 24
                          212.50.0.0/19 maxlen: 19
                          212.50.7.0/24 maxlen: 24
                          77.70.0.0/17 maxlen: 17
                          78.83.143.0/24 maxlen: 24
                          78.83.144.0/24 maxlen: 24
                          78.83.145.0/24 maxlen: 24
                          87.97.128.0/17 maxlen: 17
                          95.111.0.0/17 maxlen: 17
                          212.104.96.0/19 maxlen: 19
                          87.97.160.0/22 maxlen: 22
                          78.83.210.0/24 maxlen: 24
                          213.191.160.0/19 maxlen: 19
                          78.83.226.0/23 maxlen: 23
                          78.83.225.0/24 maxlen: 24
                          78.83.228.0/24 maxlen: 24
                          217.9.224.0/20 maxlen: 20
                          130.204.0.0/16 maxlen: 16
                          151.251.62.0/23 maxlen: 23
                          85.130.0.0/17 maxlen: 17
                          88.203.204.0/24 maxlen: 24
                          151.251.0.0/16 maxlen: 16
                          195.149.248.0/21 maxlen: 21
                          88.203.237.0/24 maxlen: 24
                          212.36.0.0/19 maxlen: 19
                          212.36.6.0/24 maxlen: 24
                          82.103.103.0/24 maxlen: 24
                          82.103.110.0/23 maxlen: 23
                          85.130.95.0/24 maxlen: 24
                          82.103.109.0/24 maxlen: 24
                          85.130.96.0/23 maxlen: 23
                          37.63.0.0/17 maxlen: 17
                          62.204.128.0/19 maxlen: 19
                          62.204.128.0/24 maxlen: 24
                          62.204.130.0/24 maxlen: 24
                          82.103.120.0/24 maxlen: 24
                          78.90.0.0/16 maxlen: 16
                          82.103.126.0/24 maxlen: 24
                          82.103.127.0/24 maxlen: 24
                          85.130.120.0/23 maxlen: 23
                          89.190.192.0/19 maxlen: 19
                          78.83.0.0/16 maxlen: 16
                          78.83.7.0/24 maxlen: 24
                          82.103.64.0/18 maxlen: 18
                          46.238.0.0/18 maxlen: 18
                          46.238.14.0/24 maxlen: 24
                          82.103.91.0/24 maxlen: 24
                          85.196.128.0/18 maxlen: 18
                          77.236.160.0/19 maxlen: 19
                          77.236.178.0/23 maxlen: 23
                          88.203.147.0/24 maxlen: 24
                          212.95.161.0/24 maxlen: 24
                          212.95.160.0/19 maxlen: 19
                          88.203.128.0/17 maxlen: 17
                          88.203.128.0/24 maxlen: 24
                          88.203.129.0/24 maxlen: 24
                          88.203.128.0/23 maxlen: 23
                          89.215.214.0/24 maxlen: 24
                          84.242.176.0/24 maxlen: 24
                          195.34.96.0/19 maxlen: 19
                          213.169.32.0/19 maxlen: 19
                          195.34.101.0/24 maxlen: 24
                          195.34.122.0/24 maxlen: 24
                          2a01:288::/32 maxlen: 32
                          2a00:4800::/29 maxlen: 29
                          2a01:288:400b::/48 maxlen: 48
                          2a01:288:400c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:60:19:0f:3e:3d:1a:11:25:14:55:66:67:41:30:73:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Sep 21 12:49:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=383cc0492237e578274387cd1280e64cbbbaa3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:52:47:41:fd:80:f3:d3:cb:6a:6d:0d:23:
                    66:11:00:cb:f5:c4:e3:a7:c6:ac:d1:0c:00:c9:73:
                    44:dd:10:6e:e2:db:78:e4:e4:6b:bc:3c:9a:03:2a:
                    14:6f:72:f3:84:7c:e2:39:10:cf:ea:4d:da:c0:22:
                    9a:4e:13:4f:b0:01:ef:aa:07:36:82:ce:93:19:de:
                    74:d5:fc:af:a3:39:b8:d5:3e:de:ab:ae:fa:19:17:
                    b8:62:e7:98:a8:15:8f:25:50:ce:5e:01:c7:f8:fb:
                    73:89:ca:56:62:b3:03:6a:31:6f:17:4b:73:b2:ad:
                    66:49:8e:71:3d:66:b1:43:01:d9:6d:d0:d9:f9:af:
                    56:6c:fb:b7:a1:3f:ab:50:7c:3b:9c:43:cc:6e:06:
                    82:f8:bb:17:91:63:60:07:33:7e:46:b4:2a:28:db:
                    9b:c7:0c:35:e3:63:ff:d2:57:4a:60:9f:2f:ca:57:
                    e0:93:1c:ea:e4:df:a0:39:73:bf:1d:9b:98:15:11:
                    64:8c:c3:2a:19:4a:f0:08:cf:f4:f3:88:14:6a:41:
                    6e:45:93:49:67:be:fd:19:2d:72:fd:25:dd:20:ba:
                    2e:d6:b9:60:3c:92:2a:52:de:ef:c9:43:10:6c:e9:
                    46:23:03:0c:16:ec:a4:16:93:e1:0d:a9:27:68:57:
                    33:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3C:C0:49:22:37:E5:78:27:43:87:CD:12:80:E6:4C:BB:BA:A3:C5
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ODzASSI35XgnQ4fNEoDmTLu6o8U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.53.128.0/17
                  37.63.0.0/17
                  46.238.0.0/18
                  62.204.128.0/19
                  62.221.128.0/19
                  77.70.0.0/17
                  77.236.160.0/19
                  78.83.0.0/16
                  78.90.0.0/16
                  80.253.48.0/20
                  82.103.64.0/18
                  82.147.128.0/19
                  83.97.24.0/21
                  84.242.128.0/18
                  84.252.0.0/18
                  85.91.128.0/19
                  85.118.64.0/19
                  85.130.0.0/17
                  85.196.128.0/18
                  87.97.128.0/17
                  87.227.128.0/17
                  88.203.128.0/17
                  89.186.200.0/21
                  89.190.192.0/19
                  89.215.0.0/16
                  89.253.128.0/18
                  92.247.0.0/16
                  95.111.0.0/17
                  95.140.208.0/20
                  130.204.0.0/16
                  151.251.0.0/16
                  176.12.0.0/18
                  195.24.32.0/19
                  195.34.96.0/19
                  195.149.248.0/21
                  212.36.0.0/19
                  212.50.0.0/19
                  212.91.160.0/19
                  212.95.160.0/19
                  212.104.96.0/19
                  213.169.32.0/19
                  213.191.160.0/19
                  213.222.32.0/19
                  213.226.0.0/18
                  213.240.192.0/18
                  217.9.224.0/20
                  217.10.240.0/20
                  217.18.240.0/20
                  217.79.32.0/20
                IPv6:
                  2a00:4800::/29
                  2a01:288::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:56:72:d7:3c:4f:f4:da:5c:1a:8d:a0:a5:b2:d3:87:8b:
         fa:4f:b1:d1:d6:93:79:17:d0:f2:ad:93:db:91:4b:53:c4:92:
         28:af:01:27:9e:ec:80:b5:5b:1b:01:14:9a:96:b1:79:e5:3d:
         51:db:7b:64:5d:03:cb:1d:87:00:b7:f9:96:98:c9:7d:09:b3:
         ef:49:29:95:64:68:9c:d5:3e:1d:57:1c:af:c0:00:cf:11:39:
         d8:b2:6b:b8:32:cf:f7:61:16:23:3d:90:dd:d3:a6:f1:a8:b2:
         b8:1b:c6:49:1a:06:61:ff:ea:23:b0:0e:44:21:28:df:52:9a:
         94:1b:81:e6:9f:f1:38:19:e8:e9:42:6e:19:5c:af:24:80:f0:
         93:96:42:13:47:06:b6:8c:5e:89:6b:9d:fd:c9:b4:08:18:ca:
         7a:bd:4d:c9:d1:de:20:ff:01:10:76:71:4a:55:05:07:6c:ee:
         c1:85:f4:b8:08:8f:45:49:37:4a:5f:f5:04:3d:7d:83:7b:fb:
         58:90:73:03:fb:e3:eb:88:56:3b:db:42:3a:e8:06:20:c1:0c:
         3e:f1:26:4e:f0:91:15:91:08:46:d8:4b:eb:87:f9:f1:f0:ae:
         94:ea:23:3e:da:3f:38:a1:3b:7c:5b:23:a9:ee:95:45:11:a8:
         cf:5f:ac:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:19 2023 by rpki-client on console-fra.rpki-client.org