Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JmveAKBv60qcAIi0noRbG-g-zVI.roa
File:                     JmveAKBv60qcAIi0noRbG-g-zVI.roa (raw, json)
Hash identifier:          924IoyJrTWsI22I7GMK4U+5G0EsKhupFLUi5kelaK6o=
Subject key identifier:   26:6B:DE:00:A0:6F:EB:4A:9C:00:88:B4:9E:84:5B:1B:E8:3E:CD:52
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0185301BCB9B4ED806EF25EF2FDC9C2B5B14
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JmveAKBv60qcAIi0noRbG-g-zVI.roa
Signing time:             Tue 20 Dec 2022 15:16:46 +0000
ROA not before:           Tue 20 Dec 2022 15:16:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.231.0/24 maxlen: 24
                          163.5.233.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.236.0/24 maxlen: 24
                          163.5.234.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.101.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.108.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.115.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.31.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.37.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.39.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.173.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.196.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.197.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.221.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.124.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.130.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.136.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.153.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:30:1b:cb:9b:4e:d8:06:ef:25:ef:2f:dc:9c:2b:5b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Dec 20 15:16:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=266bde00a06feb4a9c0088b49e845b1be83ecd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:e0:c6:6b:31:b0:bc:47:dd:83:8a:4d:14:
                    c8:e5:e4:4f:76:45:a4:12:d3:a5:d9:59:69:52:5e:
                    83:98:e7:8a:6a:f8:a9:31:78:8f:00:07:5e:4d:2f:
                    41:47:a5:1c:94:10:a7:e0:10:86:57:70:c0:99:5a:
                    bc:22:bf:51:1a:aa:77:5b:ad:d4:c3:94:e8:6b:ff:
                    6c:eb:24:a9:ac:2e:f9:42:66:b4:7a:98:62:65:23:
                    26:28:b1:db:99:c6:dc:44:0d:e4:3e:1c:2c:8d:e1:
                    16:23:a3:11:6c:41:de:77:23:5b:08:07:dc:74:67:
                    f7:2e:1b:c7:7b:f6:dc:ba:02:6e:4d:01:e7:72:52:
                    3b:c0:32:64:0e:11:dd:9b:79:48:4d:2a:a3:1e:5e:
                    b2:91:9e:17:c2:03:27:3d:79:9f:ba:01:e2:ee:35:
                    bb:89:71:8e:0b:11:0c:0d:fd:50:18:ec:d1:7f:0b:
                    61:e7:f4:8e:c9:da:1d:ab:9d:80:a9:7d:97:18:e4:
                    3a:cc:a9:f1:31:a6:65:15:ec:16:eb:3d:02:34:f5:
                    f9:26:49:f0:63:41:71:93:41:9a:57:f1:45:7d:97:
                    3f:15:40:5c:bb:18:27:4c:a1:15:39:84:46:37:2e:
                    cd:38:ab:07:53:2f:1c:78:8a:03:29:86:1b:80:8c:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6B:DE:00:A0:6F:EB:4A:9C:00:88:B4:9E:84:5B:1B:E8:3E:CD:52
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JmveAKBv60qcAIi0noRbG-g-zVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0-163.5.39.255
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.91.0-163.5.106.255
                  163.5.108.0-163.5.120.255
                  163.5.122.0-163.5.131.255
                  163.5.134.0-163.5.142.255
                  163.5.144.0/24
                  163.5.146.0-163.5.157.255
                  163.5.159.0-163.5.189.255
                  163.5.191.0-163.5.197.255
                  163.5.199.0-163.5.210.255
                  163.5.212.0/23
                  163.5.216.0-163.5.222.255
                  163.5.224.0/19
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:9d:60:ae:25:fe:37:f6:45:b1:0f:71:16:7d:12:65:7d:
         00:32:0f:35:4b:b9:10:74:56:d8:9c:f1:d2:5c:97:78:df:dc:
         60:9b:70:b1:31:19:37:ee:c3:e6:9e:ee:fb:c3:e0:66:b0:af:
         1d:00:58:0d:3f:e8:dd:e2:ca:c4:8c:52:0d:10:86:cf:35:8b:
         eb:39:f8:d8:f6:76:e4:0e:17:63:32:26:4e:4c:ed:54:77:26:
         f3:92:5f:0c:c3:60:e6:e0:f6:95:7f:23:c8:a1:52:18:a4:e9:
         30:e7:81:0e:8a:9d:5a:72:87:5f:35:f3:11:89:23:27:fd:db:
         b7:ef:be:5f:e3:57:58:cf:23:00:3e:4c:e5:cf:17:0a:3b:2d:
         94:04:6c:36:4e:f2:0d:0c:9e:63:5e:28:be:7f:b9:2a:5a:63:
         4d:82:f2:b9:29:73:5c:b6:0d:c2:f5:a1:a0:73:f4:78:91:f7:
         0c:f5:84:ce:7c:9e:e6:d1:cc:e9:84:ce:d8:8a:4d:f8:ce:07:
         dd:17:7f:fb:a2:61:b2:a2:c6:76:b2:59:bc:84:81:ae:be:76:
         d3:7f:b4:3b:58:06:89:cc:fc:b7:1f:59:46:14:b6:e3:3c:e0:
         e1:5d:f2:db:16:3a:4a:de:79:f8:fc:18:a9:db:cc:a3:a0:0a:
         a6:f1:a9:83
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAYUwG8ubTtgG7yXvL9ycK1sUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMjIwMTUxNjQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjZiZGUwMGEwNmZlYjRhOWMwMDg4YjQ5ZTg0NWIxYmU4M2VjZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE3gxmsxsLxH3YOKTRTI5eRPdkWk
EtOl2VlpUl6DmOeKavipMXiPAAdeTS9BR6UclBCn4BCGV3DAmVq8Ir9RGqp3W63U
w5Toa/9s6ySprC75Qma0ephiZSMmKLHbmcbcRA3kPhwsjeEWI6MRbEHedyNbCAfc
dGf3LhvHe/bcugJuTQHnclI7wDJkDhHdm3lITSqjHl6ykZ4XwgMnPXmfugHi7jW7
iXGOCxEMDf1QGOzRfwth5/SOydodq52AqX2XGOQ6zKnxMaZlFewW6z0CNPX5Jknw
Y0Fxk0GaV/FFfZc/FUBcuxgnTKEVOYRGNy7NOKsHUy8ceIoDKYYbgIzMHwIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFCZr3gCgb+tKnACItJ6EWxvoPs1SMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvSm12ZUFLQnY2MHFjQUlpMG5vUmJHLWctelZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBxwQCAAEwgcAwDAME
AaMFHgMEA6MFIDAMAwQBowVGAwQAowVIMAwDBAGjBUoDBASjBUAwDAMEAKMFWwME
AKMFajAMAwQCowVsAwQAowV4MAwDBAGjBXoDBAKjBYAwDAMEAaMFhgMEAKMFjgME
AKMFkDAMAwQBowWSAwQBowWcMAwDBACjBZ8DBAGjBbwwDAMEAKMFvwMEAaMFxDAM
AwQAowXHAwQAowXSAwQBowXUMAwDBAOjBdgDBACjBd4DBAWjBeADBAC5/TYwDQYJ
KoZIhvcNAQELBQADggEBAD/AnWCuJf439kWxD3EWfRJlfQAyDzVLuRB0Vtic8dJc
l3jf3GCbcLExGTfuw+ae7vvD4Gawrx0AWA0/6N3iysSMUg0Qhs81i+s5+Nj2duQO
F2MyJk5M7VR3JvOSXwzDYObg9pV/I8ihUhik6TDngQ6KnVpyh1818xGJIyf927fv
vl/jV1jPIwA+TOXPFwo7LZQEbDZO8g0MnmNeKL5/uSpaY02C8rkpc1y2DcL1oaBz
9HiR9wz1hM58nubRzOmEztiKTfjOB90Xf/uiYbKixnayWbyEga6+dtN/tDtYBonM
/LcfWUYUtuM84OFd8tsWOkreefj8GKnbzKOgCqbxqYM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org