Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7wUifY_DdpB7LU-2rFEvwI72Fsw.roa
File:                     7wUifY_DdpB7LU-2rFEvwI72Fsw.roa (raw, json)
Hash identifier:          XsWAtF+ny8rA60xFbw/O6fxdT70n5FPeJYLcfSulm5A=
Subject key identifier:   EF:05:22:7D:8F:C3:76:90:7B:2D:4F:B6:AC:51:2F:C0:8E:F6:16:CC
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01836A1CBC30014F908C2A8DD8A7238A6797
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7wUifY_DdpB7LU-2rFEvwI72Fsw.roa
Signing time:             Fri 23 Sep 2022 11:30:11 +0000
ROA not before:           Fri 23 Sep 2022 11:30:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.231.0/24 maxlen: 24
                          163.5.233.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.236.0/24 maxlen: 24
                          163.5.234.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.115.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.173.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.196.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.197.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.211.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.214.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.215.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.221.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.124.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.130.0/24 maxlen: 24
                          163.5.132.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.133.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.136.0/24 maxlen: 24
                          163.5.145.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.153.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.158.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:6a:1c:bc:30:01:4f:90:8c:2a:8d:d8:a7:23:8a:67:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Sep 23 11:30:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef05227d8fc376907b2d4fb6ac512fc08ef616cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:d3:a7:71:97:32:6c:e4:49:26:1d:ba:a5:
                    c2:fa:71:6d:5c:d9:80:45:78:0f:ce:54:c5:02:41:
                    6f:05:94:cd:26:2c:a5:9f:b2:91:82:f8:db:cc:50:
                    74:1e:bc:93:5f:b3:af:04:62:ee:d9:cb:61:29:43:
                    94:18:6e:bb:9d:08:e3:a8:7e:94:97:16:c5:4c:33:
                    09:c7:f7:7e:17:9c:09:8a:9b:55:4b:96:fb:39:de:
                    b7:e9:b8:2d:dc:c2:b9:a9:41:e8:c3:d5:93:1e:ee:
                    c1:7f:9b:19:4a:b7:e0:39:18:7b:58:38:04:97:45:
                    aa:8d:23:4f:98:a5:6d:6f:5c:85:6f:ff:ec:9e:12:
                    8c:83:76:14:4c:6b:63:61:7b:d8:c2:34:ba:17:95:
                    fe:f7:f9:8c:d8:73:74:ff:39:f9:69:5a:19:85:95:
                    10:da:72:58:ba:a4:e1:de:44:9f:a4:1d:a4:83:ac:
                    6b:ba:58:e2:0c:07:cf:48:c7:35:30:be:b8:7e:0d:
                    15:7f:22:05:ce:9d:a1:25:1e:d9:ad:ca:c3:23:3e:
                    fd:cd:e1:45:07:a3:08:c0:7f:15:52:7b:0a:13:cb:
                    d6:92:e3:6b:36:6e:a2:c1:2b:dc:a1:33:bd:1a:c7:
                    fa:fc:c7:97:30:f5:f3:12:15:ab:26:92:2c:e2:8d:
                    87:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:05:22:7D:8F:C3:76:90:7B:2D:4F:B6:AC:51:2F:C0:8E:F6:16:CC
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7wUifY_DdpB7LU-2rFEvwI72Fsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.91.0-163.5.99.255
                  163.5.110.0-163.5.189.255
                  163.5.191.0-163.5.255.255
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:95:4c:ca:71:71:b8:ce:e2:27:0a:90:bf:f9:7d:bd:22:ad:
         95:28:93:43:b0:b2:35:3f:18:2b:7b:d5:f4:39:0d:a6:c8:f4:
         e1:18:24:4e:9b:50:7a:7c:d7:6d:67:5e:b0:ac:3a:11:00:f0:
         79:74:0b:c5:d1:58:7d:86:f2:da:7d:06:77:bb:21:d5:c5:a7:
         bb:ad:19:84:b8:77:ce:57:6b:0e:00:b7:f0:23:34:7e:1d:c2:
         ac:58:1c:20:97:cd:bf:a8:e1:38:61:e8:43:bf:8f:d3:a4:6b:
         7f:94:a5:5f:27:57:5c:a9:94:d8:e6:b6:a7:d9:78:d5:51:7f:
         c3:c9:c7:cf:11:0a:60:20:ca:0f:5a:f9:4c:af:15:2b:60:00:
         f7:19:a3:1a:33:b1:a9:8e:e6:14:e9:95:c5:e4:35:45:81:af:
         e8:ad:9d:f1:6e:a1:50:88:c2:53:89:69:b1:97:40:a0:ec:99:
         a3:45:7a:bd:4d:4c:cc:4a:bb:cc:f9:4e:45:3c:71:95:f0:6c:
         69:2d:34:9f:bd:91:cb:3e:12:61:24:33:31:32:f8:f9:e0:5d:
         41:1d:dd:c1:57:5d:a9:3f:f9:0f:50:c6:34:9e:2e:a8:05:8d:
         5c:25:6f:6e:81:81:7e:1a:b8:68:bf:77:4e:8d:a7:eb:70:11:
         cd:3f:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:03 2024 by rpki-client on console-fra.rpki-client.org