Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ey1EjgGe9OkWDryYSs66zanhRZI.roa
File:                     Ey1EjgGe9OkWDryYSs66zanhRZI.roa (raw, json)
Hash identifier:          JyrdGHVVoa7TQngAz3TT5KUOveIbDa61Md2JZGVSrGI=
Subject key identifier:   13:2D:44:8E:01:9E:F4:E9:16:0E:BC:98:4A:CE:BA:CD:A9:E1:45:92
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0182E42CAD73CD60F837D708C1995B73E901
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ey1EjgGe9OkWDryYSs66zanhRZI.roa
Signing time:             Sun 28 Aug 2022 11:18:29 +0000
ROA not before:           Sun 28 Aug 2022 11:18:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.231.0/24 maxlen: 24
                          163.5.232.0/24 maxlen: 24
                          163.5.233.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.236.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.234.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.173.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.196.0/24 maxlen: 24
                          163.5.197.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.211.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.214.0/24 maxlen: 24
                          163.5.215.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.221.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.130.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.132.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.133.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.136.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.145.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.153.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.158.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e4:2c:ad:73:cd:60:f8:37:d7:08:c1:99:5b:73:e9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Aug 28 11:18:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=132d448e019ef4e9160ebc984acebacda9e14592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:51:37:0e:9e:05:c1:31:b8:07:63:39:d3:61:
                    43:ca:5a:b0:24:a0:38:7a:5b:74:09:4c:51:f2:c6:
                    a6:27:41:cc:ef:d0:6d:4e:86:2b:7b:c0:ef:e7:5a:
                    24:4c:8a:71:59:0f:50:34:ab:4c:81:3f:54:97:06:
                    53:fb:17:42:b9:a3:ba:df:7e:69:bc:d6:25:cf:20:
                    7a:d2:f6:a2:94:1a:9d:45:b6:53:96:db:7c:31:e1:
                    df:82:c8:65:bb:61:c4:ec:c2:f2:db:75:d1:af:05:
                    7e:55:66:c1:75:d2:90:56:c6:bd:ec:0d:99:5e:8d:
                    65:35:56:d1:4e:1e:d7:94:a7:31:bf:e8:12:63:72:
                    c2:e9:e7:d7:18:e4:cd:a9:6f:ac:18:9d:39:76:a4:
                    24:88:84:7b:b7:5d:b2:cc:68:59:59:70:ac:e8:bf:
                    73:6e:c6:18:40:5c:e5:c6:06:58:54:97:11:b3:69:
                    34:99:f9:85:11:e7:4b:45:83:3c:43:79:06:11:45:
                    eb:9d:20:cc:b3:33:8c:ae:c5:27:9b:5b:ca:05:40:
                    00:4d:8c:77:98:0d:b3:e6:a3:1b:a2:9f:a2:e3:58:
                    28:19:ac:d1:32:16:81:08:2b:6c:a6:b6:10:e8:c4:
                    88:5f:87:9d:4d:bd:0c:de:9d:e1:e3:2e:b2:16:b9:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2D:44:8E:01:9E:F4:E9:16:0E:BC:98:4A:CE:BA:CD:A9:E1:45:92
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ey1EjgGe9OkWDryYSs66zanhRZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.125.0/24
                  163.5.127.0-163.5.189.255
                  163.5.191.0-163.5.249.255
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:8b:8d:80:5c:11:5c:14:7b:19:99:65:40:73:31:19:00:15:
         98:38:bb:36:a8:30:3c:dc:34:01:52:9f:73:e7:5d:7d:b6:84:
         eb:69:cd:43:f2:1a:ac:e3:45:8c:f3:d2:96:45:f0:ed:e5:bd:
         e7:6c:93:c9:63:5d:f9:58:65:bd:10:46:ec:05:b4:d5:10:93:
         59:d3:b6:0c:70:1f:b3:4b:76:3b:8a:e6:a7:0a:0e:3d:74:bc:
         bc:00:b8:30:11:6f:25:ee:50:a6:16:3b:37:15:16:d2:83:ca:
         29:49:06:c7:44:a0:ea:42:a5:8b:0b:1e:60:85:57:92:c5:16:
         13:4a:f2:16:e8:3f:5a:c1:b6:5a:cd:6f:05:c9:ad:ee:d0:89:
         9c:32:7e:c4:6b:6d:49:cb:1a:69:6e:75:59:a2:c2:7a:56:52:
         27:18:a2:4d:34:df:fc:80:6e:f1:43:ed:57:3c:2d:f1:c1:47:
         e7:e4:28:06:a6:4a:cd:9e:76:2f:91:99:35:54:ce:7f:77:09:
         82:b5:7b:53:29:ba:7d:24:72:1f:09:9e:90:b8:0c:66:0a:55:
         02:d3:25:ee:d4:9a:69:45:4d:85:e4:50:a9:fe:27:92:b7:94:
         96:a1:ce:bf:a6:13:34:6d:ba:3a:d1:5a:d4:aa:97:2f:ca:85:
         e5:73:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org