Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PY3rDZvqoUp1IcbKcJJqtSJLCl0.roa
File:                     PY3rDZvqoUp1IcbKcJJqtSJLCl0.roa (raw, json)
Hash identifier:          1kDF7cGEnd8ke+xSVUIyrhJ9f7/wvdXyUS65WiZ5smI=
Subject key identifier:   3D:8D:EB:0D:9B:EA:A1:4A:75:21:C6:CA:70:92:6A:B5:22:4B:0A:5D
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38DA737C
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PY3rDZvqoUp1IcbKcJJqtSJLCl0.roa
Signing time:             Tue 17 May 2022 05:48:36 +0000
ROA not before:           Tue 17 May 2022 05:48:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8717
IP address blocks:        78.83.146.0/24 maxlen: 24
                          78.83.151.0/24 maxlen: 24
                          78.83.149.0/24 maxlen: 24
                          78.83.150.0/24 maxlen: 24
                          78.83.147.0/24 maxlen: 24
                          78.83.148.0/24 maxlen: 24
                          82.147.154.0/24 maxlen: 24
                          83.97.24.0/21 maxlen: 21
                          78.83.160.0/24 maxlen: 24
                          89.215.8.0/22 maxlen: 22
                          212.50.7.0/24 maxlen: 24
                          62.221.128.0/24 maxlen: 24
                          78.83.143.0/24 maxlen: 24
                          78.83.144.0/24 maxlen: 24
                          95.140.208.0/20 maxlen: 20
                          78.83.145.0/24 maxlen: 24
                          213.222.59.0/24 maxlen: 24
                          87.97.160.0/22 maxlen: 22
                          89.215.40.0/22 maxlen: 22
                          78.83.210.0/24 maxlen: 24
                          89.215.48.0/22 maxlen: 22
                          78.83.226.0/23 maxlen: 23
                          217.9.224.0/20 maxlen: 20
                          151.251.62.0/23 maxlen: 23
                          195.149.248.0/21 maxlen: 21
                          92.247.168.0/24 maxlen: 24
                          88.203.237.0/24 maxlen: 24
                          212.36.6.0/24 maxlen: 24
                          82.103.103.0/24 maxlen: 24
                          82.103.110.0/23 maxlen: 23
                          82.103.109.0/24 maxlen: 24
                          62.204.128.0/24 maxlen: 24
                          62.204.130.0/24 maxlen: 24
                          82.103.120.0/24 maxlen: 24
                          82.103.126.0/24 maxlen: 24
                          82.103.127.0/24 maxlen: 24
                          217.18.240.0/20 maxlen: 20
                          130.204.70.0/24 maxlen: 24
                          46.238.14.0/24 maxlen: 24
                          82.103.91.0/24 maxlen: 24
                          92.247.29.0/24 maxlen: 24
                          217.10.240.0/20 maxlen: 20
                          77.236.178.0/23 maxlen: 23
                          89.186.200.0/21 maxlen: 21
                          217.79.32.0/20 maxlen: 20
                          212.95.161.0/24 maxlen: 24
                          92.247.67.0/24 maxlen: 24
                          88.203.128.0/23 maxlen: 23
                          89.215.214.0/24 maxlen: 24
                          213.226.9.0/24 maxlen: 24
                          213.226.6.0/24 maxlen: 24
                          213.226.5.0/24 maxlen: 24
                          84.242.176.0/24 maxlen: 24
                          195.34.101.0/24 maxlen: 24
                          212.91.172.0/24 maxlen: 24
                          212.91.186.0/24 maxlen: 24
                          212.91.181.0/24 maxlen: 24
                          212.91.185.0/24 maxlen: 24
                          195.34.122.0/24 maxlen: 24
                          212.91.187.0/24 maxlen: 24
                          213.226.31.0/24 maxlen: 24
                          213.226.35.0/24 maxlen: 24
                          213.226.48.0/24 maxlen: 24
                          213.226.47.0/24 maxlen: 24
                          80.253.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 953840508 (0x38da737c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:48:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d8deb0d9beaa14a7521c6ca70926ab5224b0a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:08:6e:a1:6e:65:cb:2e:d3:2a:7e:31:8e:bb:
                    40:18:85:da:81:6a:00:53:50:0f:7c:70:63:7a:c3:
                    87:8d:cf:eb:81:28:b9:20:0d:29:3f:d0:d0:80:1a:
                    e6:55:ac:67:f6:06:2a:c8:e2:b6:7e:f1:97:7b:b8:
                    ef:5c:6a:c1:33:47:c2:6c:df:4c:58:11:78:2f:e1:
                    d3:fc:32:52:68:a0:ba:95:93:62:3c:37:62:e0:f6:
                    68:7c:d4:90:3c:67:4a:cf:9f:21:4b:fc:e0:51:c9:
                    4c:a2:08:ae:de:1c:52:24:49:44:e8:1f:23:58:7e:
                    8d:18:71:91:f0:cc:6f:fc:7c:bb:ac:59:55:0e:a3:
                    18:5f:b3:f4:79:b3:61:33:68:8b:aa:1f:a2:27:bc:
                    3b:41:cb:8f:f4:70:ef:f6:7d:95:49:9b:9a:10:3b:
                    00:4e:db:45:d8:c1:8d:54:7c:30:52:ed:5a:12:9d:
                    ba:31:07:04:b1:ab:0e:0a:58:69:eb:86:0f:f6:6f:
                    ea:ed:1e:3e:41:51:e4:12:54:88:5f:d4:ef:41:21:
                    27:c1:11:68:bc:a0:1c:16:a7:40:ad:4f:74:6d:54:
                    ca:f7:39:86:43:b7:43:39:fd:7d:c1:2a:56:0f:81:
                    60:52:7b:fd:d1:fb:26:6f:13:1c:39:4b:0d:cd:68:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8D:EB:0D:9B:EA:A1:4A:75:21:C6:CA:70:92:6A:B5:22:4B:0A:5D
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PY3rDZvqoUp1IcbKcJJqtSJLCl0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.238.14.0/24
                  62.204.128.0/24
                  62.204.130.0/24
                  62.221.128.0/24
                  77.236.178.0/23
                  78.83.143.0-78.83.151.255
                  78.83.160.0/24
                  78.83.210.0/24
                  78.83.226.0/23
                  80.253.48.0/20
                  82.103.91.0/24
                  82.103.103.0/24
                  82.103.109.0-82.103.111.255
                  82.103.120.0/24
                  82.103.126.0/23
                  82.147.154.0/24
                  83.97.24.0/21
                  84.242.176.0/24
                  87.97.160.0/22
                  88.203.128.0/23
                  88.203.237.0/24
                  89.186.200.0/21
                  89.215.8.0/22
                  89.215.40.0/22
                  89.215.48.0/22
                  89.215.214.0/24
                  92.247.29.0/24
                  92.247.67.0/24
                  92.247.168.0/24
                  95.140.208.0/20
                  130.204.70.0/24
                  151.251.62.0/23
                  195.34.101.0/24
                  195.34.122.0/24
                  195.149.248.0/21
                  212.36.6.0/24
                  212.50.7.0/24
                  212.91.172.0/24
                  212.91.181.0/24
                  212.91.185.0-212.91.187.255
                  212.95.161.0/24
                  213.222.59.0/24
                  213.226.5.0-213.226.6.255
                  213.226.9.0/24
                  213.226.31.0/24
                  213.226.35.0/24
                  213.226.47.0-213.226.48.255
                  217.9.224.0/20
                  217.10.240.0/20
                  217.18.240.0/20
                  217.79.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:7b:16:81:90:39:9e:cd:30:26:d9:72:61:b0:69:5c:b2:
         c2:74:75:c0:db:fc:83:d7:73:7b:5e:c6:4c:39:5f:63:c8:13:
         b2:8c:81:19:cf:6f:9e:29:4d:79:2d:af:fc:02:d7:a7:3a:45:
         56:19:ff:f7:2e:4f:14:5b:94:fb:fa:19:62:68:fa:ff:70:44:
         1e:aa:d6:11:ea:66:5e:d6:f9:11:d2:8d:03:eb:36:4d:4c:db:
         1b:88:b5:f6:f9:97:e2:e8:be:5a:a3:09:03:c3:5e:7a:37:b5:
         02:c2:2e:11:22:42:f9:8d:d1:dc:e7:3b:3e:f8:94:c8:aa:64:
         64:00:56:27:9d:ab:79:6d:0a:69:f7:97:3e:c3:5b:a2:b2:91:
         f5:8a:93:b3:7e:79:47:e0:fb:7a:b4:33:69:c2:13:d0:98:a5:
         5f:c3:d9:bd:aa:c3:ad:7f:6e:da:37:30:ed:82:b1:8f:8d:a6:
         06:2f:eb:26:1b:23:67:78:5e:50:c7:4f:0a:18:fd:54:61:c4:
         cc:3b:f9:5e:10:f4:df:72:e3:ab:6c:5b:ee:0e:eb:ce:d9:03:
         84:bd:c3:b3:20:ee:30:03:63:62:25:c9:ac:3d:7c:58:05:3f:
         bf:43:46:32:5c:34:b0:be:3f:5c:f9:ba:f2:3f:f3:4a:39:31:
         5d:10:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:19 2023 by rpki-client on console-fra.rpki-client.org