Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6fqgXyEQg053NJdIIvIRTBLiuuI.roa
File:                     6fqgXyEQg053NJdIIvIRTBLiuuI.roa (raw, json)
Hash identifier:          LA4v/TDIOs6muRpFRUyn+lFwqH02IQZ2kjonJNy9rKI=
Subject key identifier:   E9:FA:A0:5F:21:10:83:4E:77:34:97:48:22:F2:11:4C:12:E2:BA:E2
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018559541A10C1CE9DABADD68430F4D563B1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6fqgXyEQg053NJdIIvIRTBLiuuI.roa
Signing time:             Wed 28 Dec 2022 15:22:41 +0000
ROA not before:           Wed 28 Dec 2022 15:22:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.231.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.234.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.101.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.108.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.31.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.37.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.39.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.221.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.130.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.153.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:59:54:1a:10:c1:ce:9d:ab:ad:d6:84:30:f4:d5:63:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Dec 28 15:22:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9faa05f2110834e7734974822f2114c12e2bae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:1f:a2:bd:d2:32:0a:38:d9:1f:b5:59:c9:
                    28:b1:6e:57:13:4b:ae:c1:27:1d:21:e3:89:79:09:
                    a1:7d:e3:ee:f1:04:f1:8a:5a:80:b2:80:43:36:5a:
                    63:b1:97:cb:60:af:f6:bf:d0:27:1b:05:01:3c:0b:
                    93:a4:03:c7:42:e8:55:37:7f:c0:03:36:d8:a1:24:
                    7d:34:39:af:9a:27:cc:37:30:77:0d:a7:5a:f3:97:
                    7e:85:91:9e:62:42:ce:64:b5:f4:49:be:2f:26:01:
                    07:b3:fc:66:7e:8e:8d:dc:fb:b5:74:b4:1d:d2:ca:
                    b7:63:55:45:79:46:0a:64:19:78:a3:23:d9:c9:6a:
                    fd:a9:3e:53:8e:68:e9:29:64:cc:69:80:cf:8e:ab:
                    04:40:7e:44:54:3a:e0:b5:d7:ec:27:1d:ca:62:8b:
                    3d:4b:b2:3d:34:ea:fe:5c:9a:a1:52:0c:4b:bf:ff:
                    1a:50:61:3d:11:91:ce:3c:ad:cc:c5:a0:1a:85:57:
                    e5:33:3e:9a:74:d4:9e:dc:b0:c7:37:8a:2d:e4:1c:
                    c1:ff:eb:4c:3a:50:f6:4f:a6:ec:51:ea:b3:34:6b:
                    5e:a1:e5:ec:e2:ef:fc:f4:c7:1d:01:96:5d:e4:3a:
                    a8:53:a3:af:ef:d6:ce:1f:45:48:f9:af:ce:7c:6b:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FA:A0:5F:21:10:83:4E:77:34:97:48:22:F2:11:4C:12:E2:BA:E2
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6fqgXyEQg053NJdIIvIRTBLiuuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0-163.5.39.255
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.91.0-163.5.106.255
                  163.5.108.0/22
                  163.5.113.0-163.5.114.255
                  163.5.116.0-163.5.120.255
                  163.5.122.0/23
                  163.5.125.0-163.5.131.255
                  163.5.134.0/23
                  163.5.137.0-163.5.142.255
                  163.5.144.0/24
                  163.5.146.0-163.5.157.255
                  163.5.159.0-163.5.172.255
                  163.5.174.0-163.5.189.255
                  163.5.191.0-163.5.194.255
                  163.5.199.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.220.0-163.5.222.255
                  163.5.224.0-163.5.232.255
                  163.5.234.0/23
                  163.5.237.0-163.5.255.255
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ed:a5:6c:bf:ba:49:46:dc:14:18:61:ec:8c:c2:78:5a:8d:
         c8:d9:76:f3:68:3e:09:c8:8b:56:85:b7:89:13:08:f3:66:a8:
         3d:e6:c8:cb:d4:6d:50:20:b7:7e:c6:ed:29:1b:50:47:80:f1:
         86:8a:81:f6:c0:33:14:06:13:11:8a:e4:78:16:f5:f2:0a:33:
         45:71:f3:19:5a:9c:55:93:6f:96:d3:f2:d0:92:83:7c:f4:bf:
         0a:c5:d5:e8:93:6b:e3:e2:42:74:7c:63:00:3b:14:f6:db:e8:
         36:2e:bc:a0:e8:94:45:82:80:82:78:b7:88:b3:da:be:7e:60:
         2f:5b:45:63:b0:e3:4b:cd:bb:38:d4:74:fb:8c:5b:27:89:a5:
         97:a6:25:85:a3:a7:12:66:d6:ad:70:86:4d:b8:77:0e:0f:94:
         be:0b:ed:3f:fb:11:bb:c8:49:91:b0:c7:9b:6c:ce:e1:ba:33:
         ab:4b:bd:91:69:16:56:f7:e7:8c:0e:1e:51:09:7a:78:ad:46:
         6a:07:76:2b:98:b4:a6:5b:23:e0:6b:66:e2:0a:05:15:e5:b1:
         15:a0:38:82:38:f2:c8:cf:3b:b3:6c:02:c4:8d:69:ce:af:0d:
         d4:c7:e9:41:fc:8a:7f:6d:95:aa:e7:0b:3b:15:c8:a0:fa:0c:
         6e:ef:31:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org