Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/59RZEgfjrGCOr032wUKAXrOMU6E.roa
File:                     59RZEgfjrGCOr032wUKAXrOMU6E.roa (raw, json)
Hash identifier:          o3n5php3rzfeUHu01nC1fbrmkjS+QPkd7/s0k1D0kPM=
Subject key identifier:   E7:D4:59:12:07:E3:AC:60:8E:AF:4D:F6:C1:42:80:5E:B3:8C:53:A1
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       11A33689
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/59RZEgfjrGCOr032wUKAXrOMU6E.roa
Signing time:             Sat 01 Jan 2022 12:06:01 +0000
ROA not before:           Sat 01 Jan 2022 12:06:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24875
IP address blocks:        185.147.14.0/23 maxlen: 23
                          185.147.12.0/23 maxlen: 23
                          185.147.12.0/22 maxlen: 22
                          89.105.192.0/20 maxlen: 20
                          89.105.192.0/19 maxlen: 19
                          89.105.208.0/20 maxlen: 20
                          80.89.236.0/23 maxlen: 23
                          80.89.224.0/20 maxlen: 24
                          185.80.232.0/22 maxlen: 22
                          185.80.232.0/23 maxlen: 23
                          185.80.234.0/23 maxlen: 23
                          2001:968:2016::/48 maxlen: 48
                          2001:968:2171::/48 maxlen: 48
                          2001:968:2005::/48 maxlen: 48
                          2001:968:2185::/48 maxlen: 48
                          2001:968::/32 maxlen: 32
                          2001:968:2160::/48 maxlen: 48
                          2001:968:2019::/48 maxlen: 48
                          2001:968:2119::/48 maxlen: 48
                          2001:968:2174::/48 maxlen: 48
                          2001:968:2177::/48 maxlen: 48
                          2001:968:677::/48 maxlen: 48
                          2001:968:2152::/48 maxlen: 48
                          2001:968:2108::/48 maxlen: 48
                          2001:968:2188::/48 maxlen: 48
                          2001:968:2008::/48 maxlen: 48
                          2001:968:2146::/48 maxlen: 48
                          2001:968:2021::/48 maxlen: 48
                          2a07:5440::/29 maxlen: 29
                          2001:968:2035::/48 maxlen: 48
                          2001:968:2135::/48 maxlen: 48
                          2001:968:2010::/48 maxlen: 48
                          2001:968:2190::/48 maxlen: 48
                          2001:968:2110::/48 maxlen: 48
                          2001:968:2193::/48 maxlen: 48
                          2001:968:2013::/48 maxlen: 48
                          2001:968:2024::/48 maxlen: 48
                          2001:968:2227::/48 maxlen: 48
                          2001:968:2127::/48 maxlen: 48
                          2001:968:2027::/48 maxlen: 48
                          2001:968:2182::/48 maxlen: 48
                          2001:968:2102::/48 maxlen: 48
                          2001:968:2138::/48 maxlen: 48
                          2001:968:676::/48 maxlen: 48
                          2001:968:2151::/48 maxlen: 48
                          2001:968:2140::/48 maxlen: 48
                          2001:968:2143::/48 maxlen: 48
                          2001:968:679::/48 maxlen: 48
                          2001:968:2179::/48 maxlen: 48
                          2001:968:2032::/48 maxlen: 48
                          2001:968:2132::/48 maxlen: 48
                          2a00:11f8::/32 maxlen: 32
                          2001:968:2026::/48 maxlen: 48
                          2001:968:2226::/48 maxlen: 48
                          2001:968:2101::/48 maxlen: 48
                          2001:968:2181::/48 maxlen: 48
                          2001:968:2001::/48 maxlen: 48
                          2001:968:15::/48 maxlen: 48
                          2001:968:2195::/48 maxlen: 48
                          2001:968:2015::/48 maxlen: 48
                          2001:968:3295::/48 maxlen: 48
                          2001:968:2173::/48 maxlen: 48
                          2001:968:2129::/48 maxlen: 48
                          2001:968:2004::/48 maxlen: 48
                          2001:968:2184::/48 maxlen: 48
                          2001:968:2104::/48 maxlen: 48
                          2001:968:2007::/48 maxlen: 48
                          2001:968:2107::/48 maxlen: 48
                          2001:968:1007::/48 maxlen: 48
                          2001:968:2162::/48 maxlen: 48
                          2001:968:2062::/48 maxlen: 48
                          2001:968:2198::/48 maxlen: 48
                          2001:968:2118::/48 maxlen: 48
                          2a07:5440::/32 maxlen: 32
                          2001:968:2131::/48 maxlen: 48
                          2001:968:2145::/48 maxlen: 48
                          2001:968:2020::/48 maxlen: 48
                          2001:968:2023::/48 maxlen: 48
                          2001:968:2134::/48 maxlen: 48
                          2001:968:2037::/48 maxlen: 48
                          2001:968:2137::/48 maxlen: 48
                          2001:968:2412::/48 maxlen: 48
                          2001:968:2112::/48 maxlen: 48
                          2001:968:2192::/48 maxlen: 48
                          2001:968:2148::/48 maxlen: 48
                          2001:968:2106::/48 maxlen: 48
                          2001:968:2006::/48 maxlen: 48
                          2001:968:2186::/48 maxlen: 48
                          2001:968::/29 maxlen: 29
                          2001:968:675::/48 maxlen: 48
                          2001:968:2150::/48 maxlen: 48
                          2001:968:2153::/48 maxlen: 48
                          2001:968:2189::/48 maxlen: 48
                          2001:968:2109::/48 maxlen: 48
                          2001:968:2164::/48 maxlen: 48
                          2a00:11f8::/29 maxlen: 29
                          2001:968:2178::/48 maxlen: 48
                          2001:968:678::/48 maxlen: 48
                          2001:968:2036::/48 maxlen: 48
                          2001:968:2111::/48 maxlen: 48
                          2001:968:2191::/48 maxlen: 48
                          2001:968:2025::/48 maxlen: 48
                          2001:968:2180::/48 maxlen: 48
                          2001:968:780::/48 maxlen: 48
                          2001:968:1400::/48 maxlen: 48
                          2001:968:100::/48 maxlen: 48
                          2001:968:2103::/48 maxlen: 48
                          2001:968:2003::/48 maxlen: 48
                          2001:968:2139::/48 maxlen: 48
                          2001:968:2194::/48 maxlen: 48
                          2001:968:2197::/48 maxlen: 48
                          2001:968:2117::/48 maxlen: 48
                          2001:968:2017::/48 maxlen: 48
                          2001:968:2172::/48 maxlen: 48
                          2001:968:2128::/48 maxlen: 48
                          2001:968:2155::/48 maxlen: 48
                          2001:968:2130::/48 maxlen: 48
                          2001:968:2133::/48 maxlen: 48
                          2001:968:2144::/48 maxlen: 48
                          2001:968:2147::/48 maxlen: 48
                          2001:968:2022::/48 maxlen: 48
                          2001:968:2158::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295909001 (0x11a33689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Jan  1 12:06:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e7d4591207e3ac608eaf4df6c142805eb38c53a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:fe:38:bc:70:44:5e:48:af:c5:fd:64:b8:
                    f4:d2:e2:13:2f:1c:b0:26:3d:61:46:75:ab:f9:32:
                    f6:7d:66:5f:12:8a:5f:51:f2:c0:68:0e:61:51:74:
                    cf:61:8b:e0:d9:fb:08:f0:fc:99:75:3c:03:2d:fc:
                    a5:55:33:b2:d8:34:91:0f:4e:cc:35:54:80:aa:9e:
                    e4:aa:5c:a9:1a:1f:10:d2:97:09:f6:c3:8d:6f:ce:
                    a0:ba:67:e4:a3:80:bc:17:a8:e7:c5:8d:6e:3f:83:
                    b6:4e:4f:ca:52:3f:7d:30:26:f6:b1:4e:4c:2d:5b:
                    76:9c:20:16:33:9d:37:2c:02:4a:aa:19:25:fd:35:
                    47:cd:41:96:d0:4a:17:ed:1e:6c:8f:a4:14:78:66:
                    e8:c7:05:cd:5c:ce:8a:8d:68:b7:88:4b:c9:6c:68:
                    9c:b2:8f:63:01:ec:8f:9d:1f:cf:64:ac:a0:4a:5a:
                    18:b6:76:c3:5d:70:16:17:1d:c4:ac:b9:79:1c:f3:
                    a5:ef:56:4e:99:44:f7:2b:3e:91:d6:30:9e:9c:90:
                    5e:b0:ab:c9:d9:af:72:42:b7:c4:8f:41:f4:f7:03:
                    34:6a:c4:7d:33:85:f8:0f:bb:a5:bd:e7:b1:7e:26:
                    e7:64:cb:92:15:b5:d5:df:6e:c8:bc:4b:fc:57:40:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D4:59:12:07:E3:AC:60:8E:AF:4D:F6:C1:42:80:5E:B3:8C:53:A1
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/59RZEgfjrGCOr032wUKAXrOMU6E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.89.224.0/20
                  89.105.192.0/19
                  185.80.232.0/22
                  185.147.12.0/22
                IPv6:
                  2001:968::/29
                  2a00:11f8::/29
                  2a07:5440::/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:86:82:33:cb:11:af:cc:9b:4e:fd:1a:22:bc:63:ee:85:02:
         9a:e9:0e:05:8b:e9:41:0c:a8:55:d8:ab:a3:01:75:b1:ed:7f:
         7e:e1:a0:ae:3c:b6:18:29:56:4a:89:ed:97:4b:37:cb:ff:2f:
         a5:09:16:40:bb:19:70:c9:67:c1:6c:8b:3b:6d:4f:ce:f9:ad:
         de:94:05:a5:d2:87:6e:84:2b:77:f9:9b:40:b8:ef:4d:52:9e:
         0e:e2:17:4d:93:09:fa:9d:e9:06:d1:28:c5:bc:9e:95:3a:7c:
         99:4f:7e:c4:fa:18:3b:43:dd:49:79:66:01:fe:de:ac:38:b0:
         e2:1e:c8:9c:61:c5:05:15:a6:31:01:8c:92:dd:c9:12:d0:7e:
         e0:4f:cd:ce:1f:df:1a:2e:84:10:02:ba:0d:f5:32:c7:a6:95:
         7d:5c:b2:6a:1f:75:bc:e3:22:ae:07:72:83:15:58:c4:65:1e:
         c9:c9:1d:c6:8d:3b:01:4f:a8:47:04:43:4c:93:ec:1f:0c:7d:
         f2:b2:2c:8e:fa:ba:e6:4f:0a:98:03:7a:ac:e8:f9:83:71:2e:
         32:b5:af:aa:3e:d2:c7:96:fd:99:d3:c4:7e:a1:6a:8e:ae:df:
         a1:75:90:32:e4:cd:c6:2c:b2:03:99:b6:9b:00:a0:b8:3d:62:
         fe:22:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org