Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/w2pOnrFdQGHYphR6YfaminbeuwQ.roa
File:                     w2pOnrFdQGHYphR6YfaminbeuwQ.roa (raw, json)
Hash identifier:          AyLlAPuO5QdF9/6i9w+suVIYXFdzlIqIs+H1xD7E9MA=
Subject key identifier:   C3:6A:4E:9E:B1:5D:40:61:D8:A6:14:7A:61:F6:A6:8A:76:DE:BB:04
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       0183ADB96BD348C339E21A8A6155BDBA780E
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/w2pOnrFdQGHYphR6YfaminbeuwQ.roa
Signing time:             Thu 06 Oct 2022 14:35:53 +0000
ROA not before:           Thu 06 Oct 2022 14:35:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8717
IP address blocks:        82.147.154.0/24 maxlen: 24
                          89.215.0.0/16 maxlen: 16
                          89.215.8.0/22 maxlen: 22
                          62.221.128.0/19 maxlen: 19
                          62.221.128.0/24 maxlen: 24
                          82.147.128.0/19 maxlen: 19
                          95.140.208.0/20 maxlen: 20
                          213.222.32.0/19 maxlen: 19
                          213.222.59.0/24 maxlen: 24
                          84.242.128.0/18 maxlen: 18
                          89.215.40.0/22 maxlen: 22
                          5.53.128.0/17 maxlen: 17
                          89.215.48.0/22 maxlen: 22
                          176.12.0.0/18 maxlen: 18
                          92.247.168.0/24 maxlen: 24
                          87.227.128.0/17 maxlen: 17
                          217.18.240.0/20 maxlen: 20
                          92.247.0.0/16 maxlen: 16
                          92.247.29.0/24 maxlen: 24
                          217.10.240.0/20 maxlen: 20
                          89.253.128.0/18 maxlen: 18
                          89.186.200.0/21 maxlen: 21
                          213.240.192.0/18 maxlen: 18
                          217.79.32.0/20 maxlen: 20
                          92.247.67.0/24 maxlen: 24
                          213.226.0.0/18 maxlen: 18
                          213.226.9.0/24 maxlen: 24
                          213.226.6.0/24 maxlen: 24
                          213.226.5.0/24 maxlen: 24
                          85.118.64.0/19 maxlen: 19
                          212.91.160.0/19 maxlen: 19
                          212.91.172.0/24 maxlen: 24
                          212.91.186.0/24 maxlen: 24
                          212.91.181.0/24 maxlen: 24
                          212.91.184.0/24 maxlen: 24
                          212.91.185.0/24 maxlen: 24
                          212.91.187.0/24 maxlen: 24
                          213.226.31.0/24 maxlen: 24
                          213.226.35.0/24 maxlen: 24
                          213.226.48.0/24 maxlen: 24
                          213.226.47.0/24 maxlen: 24
                          80.253.48.0/20 maxlen: 20
                          195.24.32.0/19 maxlen: 19
                          85.91.128.0/19 maxlen: 19
                          78.83.146.0/24 maxlen: 24
                          78.83.151.0/24 maxlen: 24
                          78.83.149.0/24 maxlen: 24
                          78.83.150.0/24 maxlen: 24
                          84.252.0.0/18 maxlen: 18
                          78.83.147.0/24 maxlen: 24
                          78.83.148.0/24 maxlen: 24
                          83.97.24.0/21 maxlen: 21
                          78.83.160.0/24 maxlen: 24
                          212.50.0.0/19 maxlen: 19
                          212.50.7.0/24 maxlen: 24
                          77.70.0.0/17 maxlen: 17
                          151.251.237.0/24 maxlen: 24
                          78.83.143.0/24 maxlen: 24
                          78.83.144.0/24 maxlen: 24
                          78.83.145.0/24 maxlen: 24
                          87.97.128.0/17 maxlen: 17
                          78.90.206.0/24 maxlen: 24
                          95.111.0.0/17 maxlen: 17
                          212.104.96.0/19 maxlen: 19
                          87.97.160.0/22 maxlen: 22
                          78.83.210.0/24 maxlen: 24
                          213.191.160.0/19 maxlen: 19
                          78.83.226.0/23 maxlen: 23
                          78.83.225.0/24 maxlen: 24
                          78.83.228.0/24 maxlen: 24
                          217.9.224.0/20 maxlen: 20
                          130.204.0.0/16 maxlen: 16
                          151.251.62.0/23 maxlen: 23
                          85.130.0.0/17 maxlen: 17
                          88.203.204.0/24 maxlen: 24
                          151.251.0.0/16 maxlen: 16
                          195.149.248.0/21 maxlen: 21
                          88.203.237.0/24 maxlen: 24
                          212.36.0.0/19 maxlen: 19
                          212.36.6.0/24 maxlen: 24
                          82.103.103.0/24 maxlen: 24
                          82.103.110.0/23 maxlen: 23
                          85.130.95.0/24 maxlen: 24
                          82.103.109.0/24 maxlen: 24
                          85.130.96.0/23 maxlen: 23
                          37.63.0.0/17 maxlen: 17
                          62.204.128.0/19 maxlen: 19
                          62.204.128.0/24 maxlen: 24
                          62.204.130.0/24 maxlen: 24
                          82.103.120.0/24 maxlen: 24
                          78.90.0.0/16 maxlen: 16
                          82.103.126.0/24 maxlen: 24
                          82.103.127.0/24 maxlen: 24
                          85.130.120.0/23 maxlen: 23
                          89.190.192.0/19 maxlen: 19
                          78.83.0.0/16 maxlen: 16
                          78.83.7.0/24 maxlen: 24
                          82.103.64.0/18 maxlen: 18
                          46.238.0.0/18 maxlen: 18
                          46.238.14.0/24 maxlen: 24
                          82.103.91.0/24 maxlen: 24
                          85.196.128.0/18 maxlen: 18
                          77.236.160.0/19 maxlen: 19
                          77.236.178.0/23 maxlen: 23
                          88.203.147.0/24 maxlen: 24
                          212.95.161.0/24 maxlen: 24
                          212.95.160.0/19 maxlen: 19
                          88.203.128.0/17 maxlen: 17
                          88.203.128.0/24 maxlen: 24
                          88.203.129.0/24 maxlen: 24
                          88.203.128.0/23 maxlen: 23
                          89.215.214.0/24 maxlen: 24
                          84.242.176.0/24 maxlen: 24
                          195.34.96.0/19 maxlen: 19
                          213.169.32.0/19 maxlen: 19
                          195.34.101.0/24 maxlen: 24
                          195.34.122.0/24 maxlen: 24
                          2a01:288::/32 maxlen: 32
                          2a00:4800::/29 maxlen: 29
                          2a01:288:400b::/48 maxlen: 48
                          2a01:288:400c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ad:b9:6b:d3:48:c3:39:e2:1a:8a:61:55:bd:ba:78:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Oct  6 14:35:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c36a4e9eb15d4061d8a6147a61f6a68a76debb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:25:82:31:cd:21:08:b9:3c:76:32:17:5e:
                    6d:a7:8a:78:03:b4:0d:9a:79:95:50:b5:7c:88:38:
                    58:85:46:46:da:45:fb:40:64:b9:95:0d:1b:27:24:
                    cc:40:85:0f:80:d8:88:ee:d2:e3:0f:e8:54:6b:f9:
                    1a:2a:fc:dc:0b:32:5b:4a:de:de:70:0e:73:e8:08:
                    00:88:d0:48:7d:16:fc:d8:1f:b9:c7:53:25:a7:98:
                    d5:06:a5:63:42:ef:ba:30:9a:a2:c0:a5:e0:1c:63:
                    67:95:fd:be:15:cf:0e:c5:e7:9a:b2:09:08:c0:88:
                    cd:8c:03:8e:63:10:cb:7b:55:6e:4d:89:f6:22:6a:
                    08:2f:f1:56:d7:e0:ce:2c:83:93:d6:3c:01:e7:4d:
                    f4:ad:14:04:5f:cb:1c:03:6d:c6:97:37:df:08:12:
                    22:9a:e2:ee:4f:4f:11:6a:34:a5:e2:1c:84:22:25:
                    61:78:0f:bc:ca:bd:88:c7:84:8d:dc:10:f9:e5:e2:
                    ef:50:29:d5:e0:70:61:ab:33:ac:1e:94:65:67:ef:
                    b9:59:d7:22:b1:58:61:96:3f:79:fb:86:68:3b:5e:
                    2c:fc:4e:af:d9:08:a7:e5:3e:ae:e1:4d:4d:c2:c6:
                    82:62:54:68:15:6f:58:1f:b8:a9:ab:b5:32:80:ca:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6A:4E:9E:B1:5D:40:61:D8:A6:14:7A:61:F6:A6:8A:76:DE:BB:04
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/w2pOnrFdQGHYphR6YfaminbeuwQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.53.128.0/17
                  37.63.0.0/17
                  46.238.0.0/18
                  62.204.128.0/19
                  62.221.128.0/19
                  77.70.0.0/17
                  77.236.160.0/19
                  78.83.0.0/16
                  78.90.0.0/16
                  80.253.48.0/20
                  82.103.64.0/18
                  82.147.128.0/19
                  83.97.24.0/21
                  84.242.128.0/18
                  84.252.0.0/18
                  85.91.128.0/19
                  85.118.64.0/19
                  85.130.0.0/17
                  85.196.128.0/18
                  87.97.128.0/17
                  87.227.128.0/17
                  88.203.128.0/17
                  89.186.200.0/21
                  89.190.192.0/19
                  89.215.0.0/16
                  89.253.128.0/18
                  92.247.0.0/16
                  95.111.0.0/17
                  95.140.208.0/20
                  130.204.0.0/16
                  151.251.0.0/16
                  176.12.0.0/18
                  195.24.32.0/19
                  195.34.96.0/19
                  195.149.248.0/21
                  212.36.0.0/19
                  212.50.0.0/19
                  212.91.160.0/19
                  212.95.160.0/19
                  212.104.96.0/19
                  213.169.32.0/19
                  213.191.160.0/19
                  213.222.32.0/19
                  213.226.0.0/18
                  213.240.192.0/18
                  217.9.224.0/20
                  217.10.240.0/20
                  217.18.240.0/20
                  217.79.32.0/20
                IPv6:
                  2a00:4800::/29
                  2a01:288::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:0c:9f:50:0c:5e:9c:fe:b4:c8:fa:bc:f9:5b:08:fc:b6:12:
         2f:11:f2:92:65:6c:2f:69:18:f4:a4:88:00:e1:51:7f:f7:ea:
         b8:1b:7d:3b:cb:54:64:1a:e4:34:f5:7b:63:52:17:8f:70:bd:
         19:f1:13:4d:a1:37:d2:54:b5:42:44:bb:c3:1b:1e:87:a6:bb:
         fb:46:1f:38:5e:90:61:a8:0b:72:4e:8d:31:dd:b1:13:f7:6c:
         6a:de:21:18:df:f5:a3:07:1d:7b:8b:a7:8a:88:f5:93:f0:df:
         1e:f5:9d:2b:9a:3f:dc:5e:81:1c:51:20:64:95:21:d9:d3:fd:
         7f:96:4b:2e:23:80:7d:42:5a:eb:5b:3f:1b:3c:21:fd:fc:f3:
         5d:da:c1:56:a3:8b:14:e0:e0:77:f7:ea:bc:69:1f:58:69:de:
         b7:0e:ac:f4:cd:63:33:fe:6b:b9:50:14:4f:24:6b:52:99:f9:
         f9:29:e3:b9:b9:22:bc:36:50:96:18:30:af:52:be:14:98:cf:
         8f:f4:b7:7b:53:da:32:75:2a:7c:6a:50:57:55:6c:a4:0b:74:
         07:0b:19:4b:a1:a5:0e:16:44:99:df:b1:b7:d5:a9:40:d4:ef:
         12:08:42:4c:46:44:5f:4f:be:c5:8e:29:35:68:b9:f4:c3:e6:
         4c:dd:a7:ab
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAYOtuWvTSMM54hqKYVW9ungOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjIxMDA2MTQzNTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzZhNGU5ZWIxNWQ0MDYxZDhhNjE0N2E2MWY2YTY4YTc2ZGViYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioolgjHNIQi5PHYyF15tp4p4A7QN
mnmVULV8iDhYhUZG2kX7QGS5lQ0bJyTMQIUPgNiI7tLjD+hUa/kaKvzcCzJbSt7e
cA5z6AgAiNBIfRb82B+5x1Mlp5jVBqVjQu+6MJqiwKXgHGNnlf2+Fc8OxeeasgkI
wIjNjAOOYxDLe1VuTYn2ImoIL/FW1+DOLIOT1jwB5030rRQEX8scA23GlzffCBIi
muLuT08RajSl4hyEIiVheA+8yr2Ix4SN3BD55eLvUCnV4HBhqzOsHpRlZ++5Wdci
sVhhlj95+4ZoO14s/E6v2Qin5T6u4U1NwsaCYlRoFW9YH7ipq7UygMpwQQIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFMNqTp6xXUBh2KYUemH2pop23rsEMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvdzJwT25yRmRRR0hZcGhSNllmYW1pbmJldXdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCASgEAgABMIIB
IAMEBwU1gAMEByU/AAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3soAMDAE5T
AwMATloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AADBAVVW4AD
BAVVdkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgDBAVZvsAD
AwBZ1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAMAAMEBcMY
IAMEBcMiYAMEA8OV+AMEBdQkAAMEBdQyAAMEBdRboAMEBdRfoAMEBdRoYAMEBdWp
IAMEBdW/oAMEBdXeIAMEBtXiAAMEBtXwwAMEBNkJ4AMEBNkK8AMEBNkS8AMEBNlP
IDAUBAIAAjAOAwUDKgBIAAMFACoBAogwDQYJKoZIhvcNAQELBQADggEBABEMn1AM
Xpz+tMj6vPlbCPy2Ei8R8pJlbC9pGPSkiADhUX/36rgbfTvLVGQa5DT1e2NSF49w
vRnxE02hN9JUtUJEu8MbHoemu/tGHzhekGGoC3JOjTHdsRP3bGreIRjf9aMHHXuL
p4qI9ZPw3x71nSuaP9xegRxRIGSVIdnT/X+WSy4jgH1CWutbPxs8If38813awVaj
ixTg4Hf36rxpH1hp3rcOrPTNYzP+a7lQFE8ka1KZ+fkp47m5Irw2UJYYMK9SvhSY
z4/0t3tT2jJ1KnxqUFdVbKQLdAcLGUuhpQ4WRJnfsbfVqUDU7xIIQkxGRF9PvsWO
KTVoufTD5kzdp6s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:21 2023 by rpki-client on console-fra.rpki-client.org