Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XkFUpHgf1y0p75giZF8FL5qu9tY.roa
File:                     XkFUpHgf1y0p75giZF8FL5qu9tY.roa (raw, json)
Hash identifier:          KEvYawaNCZiPXw23oDB+GzGvkv6J3QjykSrg0U8lOws=
Subject key identifier:   5E:41:54:A4:78:1F:D7:2D:29:EF:98:22:64:5F:05:2F:9A:AE:F6:D6
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0185114C5919D4A6007FD301488442908CB2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XkFUpHgf1y0p75giZF8FL5qu9tY.roa
Signing time:             Wed 14 Dec 2022 15:41:34 +0000
ROA not before:           Wed 14 Dec 2022 15:41:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.231.0/24 maxlen: 24
                          163.5.233.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.236.0/24 maxlen: 24
                          163.5.234.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.71.0/24 maxlen: 24
                          163.5.70.0/24 maxlen: 24
                          163.5.75.0/24 maxlen: 24
                          163.5.77.0/24 maxlen: 24
                          163.5.76.0/24 maxlen: 24
                          163.5.72.0/24 maxlen: 24
                          163.5.74.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.79.0/24 maxlen: 24
                          163.5.91.0/24 maxlen: 24
                          163.5.97.0/24 maxlen: 24
                          163.5.93.0/24 maxlen: 24
                          163.5.95.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24
                          163.5.98.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
                          163.5.94.0/24 maxlen: 24
                          163.5.103.0/24 maxlen: 24
                          163.5.105.0/24 maxlen: 24
                          163.5.99.0/24 maxlen: 24
                          163.5.101.0/24 maxlen: 24
                          163.5.104.0/24 maxlen: 24
                          163.5.100.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.111.0/24 maxlen: 24
                          163.5.109.0/24 maxlen: 24
                          163.5.110.0/24 maxlen: 24
                          163.5.112.0/24 maxlen: 24
                          163.5.106.0/24 maxlen: 24
                          163.5.108.0/24 maxlen: 24
                          163.5.117.0/24 maxlen: 24
                          163.5.113.0/24 maxlen: 24
                          163.5.115.0/24 maxlen: 24
                          163.5.118.0/24 maxlen: 24
                          163.5.114.0/24 maxlen: 24
                          163.5.116.0/24 maxlen: 24
                          163.5.30.0/24 maxlen: 24
                          163.5.31.0/24 maxlen: 24
                          163.5.38.0/24 maxlen: 24
                          163.5.34.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24
                          163.5.32.0/24 maxlen: 24
                          163.5.37.0/24 maxlen: 24
                          163.5.33.0/24 maxlen: 24
                          163.5.35.0/24 maxlen: 24
                          163.5.39.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.173.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.196.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.197.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.221.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.121.0/24 maxlen: 24
                          163.5.123.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.124.0/24 maxlen: 24
                          163.5.120.0/24 maxlen: 24
                          163.5.122.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.126.0/24 maxlen: 24
                          163.5.130.0/24 maxlen: 24
                          163.5.132.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.133.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.136.0/24 maxlen: 24
                          163.5.145.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.153.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.158.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:11:4c:59:19:d4:a6:00:7f:d3:01:48:84:42:90:8c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Dec 14 15:41:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5e4154a4781fd72d29ef9822645f052f9aaef6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:15:70:17:21:f1:88:84:98:8b:62:78:b4:70:
                    d4:6f:e9:f8:83:c7:a1:0b:42:4a:2c:3e:db:e3:b9:
                    e4:3d:6c:74:f8:d1:00:2d:47:02:48:aa:a4:c5:f7:
                    72:ca:30:4a:79:d2:a7:6b:ed:e8:d6:75:fb:c0:32:
                    e4:b1:c8:61:76:4f:a7:f3:0c:44:1c:5d:b2:c8:ae:
                    c2:fb:03:0a:89:93:da:8b:09:a1:53:1b:3c:bf:91:
                    8e:6e:9e:56:45:23:d4:38:7f:8b:5c:6c:55:86:79:
                    4a:d9:35:08:84:7e:63:aa:e8:cf:53:dc:ce:8f:61:
                    1f:56:29:14:49:db:ed:37:5f:06:06:6d:07:1a:ab:
                    c1:65:89:bb:3b:e9:a6:19:fe:86:19:e2:da:96:a8:
                    49:a8:d4:14:c7:bc:21:86:90:b6:f4:6b:3f:27:0b:
                    3c:7e:de:74:5e:1f:f7:a6:42:7e:2c:3e:7d:ba:58:
                    af:25:16:bd:a8:e7:9e:dc:f4:58:7f:29:a6:cc:b5:
                    1b:d3:64:92:fc:67:ce:c9:cd:b0:da:27:c0:1f:04:
                    b8:9c:48:ac:a0:e9:86:a2:26:d8:f4:43:5b:94:c4:
                    a0:bf:32:11:3e:d7:2f:e6:57:5d:58:87:26:10:b0:
                    8b:c5:bc:75:99:31:34:12:d2:7f:01:f6:85:79:e7:
                    95:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:41:54:A4:78:1F:D7:2D:29:EF:98:22:64:5F:05:2F:9A:AE:F6:D6
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XkFUpHgf1y0p75giZF8FL5qu9tY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.30.0-163.5.39.255
                  163.5.70.0-163.5.72.255
                  163.5.74.0-163.5.79.255
                  163.5.91.0-163.5.106.255
                  163.5.108.0-163.5.142.255
                  163.5.144.0-163.5.189.255
                  163.5.191.0-163.5.210.255
                  163.5.212.0/23
                  163.5.216.0-163.5.255.255
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:48:4e:86:01:34:26:7b:15:89:f7:3a:16:d6:fa:d2:c4:7c:
         05:a5:71:43:93:dc:fa:7d:84:83:3e:1e:0c:8f:7e:be:a7:fc:
         cd:3a:36:bf:1f:83:c0:75:ea:16:b4:3a:b4:5d:ff:7b:08:d8:
         e2:0f:ac:d3:15:ca:5d:d1:ab:b4:46:c1:52:b6:8f:0e:92:8d:
         62:4f:77:36:55:a4:f6:6d:30:31:e7:fe:3d:d7:aa:65:2c:8c:
         29:fc:f1:58:e2:1a:dc:d2:cf:ea:06:64:82:b6:40:e3:fc:cf:
         92:ff:14:d0:78:0a:5f:c4:6c:86:64:5f:d3:ae:40:62:b9:51:
         de:7c:60:d3:34:6d:04:e7:bd:41:05:80:56:91:18:e5:ec:f0:
         79:81:be:f2:e7:9b:6e:67:6b:d3:c5:01:8d:76:67:f0:7e:49:
         b6:77:e9:5f:cc:4c:31:93:07:dd:3f:ac:57:17:ed:3d:03:af:
         09:c3:89:32:64:cd:9f:b4:c6:93:88:dc:ad:1a:91:e5:9e:7b:
         32:72:48:d6:fc:90:50:4b:a4:14:af:76:38:58:80:ed:a9:50:
         be:eb:4a:16:84:d2:f0:ab:ff:c2:f1:0a:b5:ef:8e:65:82:d3:
         ad:f3:43:8a:12:a4:5b:59:9c:d3:ce:cc:87:ba:3d:7f:7d:e8:
         6a:c8:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org