Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Jl68CIsn9rIjqjxXai5iFeLNrF4.roa
File:                     Jl68CIsn9rIjqjxXai5iFeLNrF4.roa (raw, json)
Hash identifier:          XOOemKHtjPAms+74f9UnidayxABE2ci2/O1Ty55+o8A=
Subject key identifier:   26:5E:BC:08:8B:27:F6:B2:23:AA:3C:57:6A:2E:62:15:E2:CD:AC:5E
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0185627A0A1245F58E887642B015AA78FD4B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Jl68CIsn9rIjqjxXai5iFeLNrF4.roa
Signing time:             Fri 30 Dec 2022 10:00:43 +0000
ROA not before:           Fri 30 Dec 2022 10:00:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.101.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.108.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.31.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.37.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.39.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.221.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:7a:0a:12:45:f5:8e:88:76:42:b0:15:aa:78:fd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Dec 30 10:00:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=265ebc088b27f6b223aa3c576a2e6215e2cdac5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2e:de:97:9a:ad:a4:32:60:65:cc:8d:49:72:
                    03:48:26:53:18:b0:de:0c:5b:3c:da:fe:e9:08:48:
                    cf:8e:e5:99:1e:0d:7c:76:9b:aa:55:89:48:9d:e6:
                    57:49:3b:71:a5:38:72:9a:49:ce:53:31:e1:63:2b:
                    ed:68:a4:3b:88:20:f6:03:0d:ec:0f:e3:68:c4:0e:
                    38:8b:30:7d:d7:96:01:73:3b:8b:7e:c5:73:34:97:
                    31:a3:b5:c1:d5:01:16:97:53:8e:5e:3b:ff:1f:df:
                    19:64:ff:fe:74:52:d3:ed:62:56:68:4a:2f:ff:7d:
                    1c:c9:7f:81:15:57:07:34:99:bc:29:9c:1e:dc:f6:
                    45:79:42:ea:22:77:f6:f3:75:9d:55:e2:17:56:43:
                    ff:d7:64:e7:e4:57:65:03:f9:ab:f9:ba:bc:0f:a6:
                    c1:c2:7f:d7:f9:6c:34:5d:c8:c9:a5:4a:47:53:63:
                    b8:84:24:6a:8b:e5:e9:e6:2b:5f:a6:b4:31:eb:e8:
                    88:04:07:0b:fc:b3:4c:a9:ff:cb:55:4c:60:b4:5d:
                    95:11:2f:fd:b7:40:e3:57:e1:c6:8e:60:25:ef:a6:
                    2f:7c:27:26:be:a0:f8:16:e0:ec:7e:fe:b2:1a:32:
                    44:7d:d9:34:19:3e:7f:71:26:04:c5:fb:e6:62:4b:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5E:BC:08:8B:27:F6:B2:23:AA:3C:57:6A:2E:62:15:E2:CD:AC:5E
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Jl68CIsn9rIjqjxXai5iFeLNrF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0-163.5.39.255
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.91.0-163.5.106.255
                  163.5.108.0/22
                  163.5.113.0-163.5.114.255
                  163.5.116.0-163.5.120.255
                  163.5.122.0/23
                  163.5.125.0-163.5.129.255
                  163.5.131.0/24
                  163.5.134.0/23
                  163.5.137.0-163.5.142.255
                  163.5.144.0/24
                  163.5.146.0-163.5.152.255
                  163.5.154.0-163.5.157.255
                  163.5.159.0-163.5.172.255
                  163.5.174.0-163.5.189.255
                  163.5.191.0-163.5.194.255
                  163.5.199.0-163.5.210.255
                  163.5.213.0/24
                  163.5.216.0-163.5.218.255
                  163.5.221.0-163.5.222.255
                  163.5.224.0-163.5.230.255
                  163.5.235.0/24
                  163.5.237.0-163.5.255.255
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ab:ba:13:db:1b:f0:22:88:67:96:61:b5:4e:e4:a5:2a:ae:
         83:a9:62:e0:5a:2b:78:8a:a0:1c:23:f2:28:22:cc:2b:f1:d9:
         02:cf:77:55:ae:bb:ce:ff:9d:5c:5b:45:12:65:40:65:c9:1a:
         7d:75:c4:d5:a6:72:78:a6:6d:51:c1:63:84:4b:38:72:8f:79:
         73:69:16:67:d0:19:20:24:8a:6f:e1:f9:b5:d5:6d:d9:96:39:
         8b:88:b0:de:b3:7c:a6:bf:63:ae:ac:2d:7c:79:60:6c:1f:9e:
         0e:46:1c:fd:5d:fd:38:a8:0d:e0:04:b4:31:8f:21:ab:5f:f4:
         e3:5e:ba:25:6e:e2:a5:e6:fa:53:a1:fb:b9:92:57:8d:47:af:
         42:de:bf:45:35:18:8f:d4:10:cc:61:14:16:a3:9c:5b:2b:9d:
         4c:f1:1b:7f:98:ab:66:1a:e7:b2:26:39:91:bc:c0:2a:7e:56:
         18:7c:1c:b3:cc:50:92:4a:87:f9:ae:99:b7:54:18:99:b1:f0:
         f7:7b:3b:3d:5b:2e:b6:38:c6:54:5d:72:0b:59:a5:d8:41:4d:
         3b:05:e2:9d:29:5f:ab:98:ee:2d:4e:0f:b3:f8:55:23:ba:3d:
         9f:24:3e:4a:a0:5c:c6:ed:29:b0:b0:5b:da:79:86:a1:aa:3e:
         6c:b7:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org