Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/SV7sPRy0kfJLMt_SKy7eYZ7tTOo.roa
File:                     SV7sPRy0kfJLMt_SKy7eYZ7tTOo.roa (raw, json)
Hash identifier:          SXBxl7NDjH5OFLfDgCnUAknCN4RnpIHzBTewUKrHKMI=
Subject key identifier:   49:5E:EC:3D:1C:B4:91:F2:4B:32:DF:D2:2B:2E:DE:61:9E:ED:4C:EA
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       0181F2AE7AF68DE8CA321EFE954601CDDD55
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/SV7sPRy0kfJLMt_SKy7eYZ7tTOo.roa
Signing time:             Tue 12 Jul 2022 13:52:09 +0000
ROA not before:           Tue 12 Jul 2022 13:52:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30781
IP address blocks:        46.231.216.0/21 maxlen: 24
                          185.53.80.0/22 maxlen: 24
                          212.114.16.0/20 maxlen: 24
                          46.22.192.0/20 maxlen: 24
                          45.80.8.0/22 maxlen: 24
                          45.80.20.0/22 maxlen: 24
                          45.80.24.0/22 maxlen: 24
                          45.80.32.0/22 maxlen: 24
                          46.255.200.0/21 maxlen: 24
                          95.178.88.0/22 maxlen: 24
                          185.114.100.0/22 maxlen: 24
                          94.100.160.0/20 maxlen: 24
                          37.110.192.0/21 maxlen: 24
                          193.151.84.0/24 maxlen: 24
                          193.151.87.0/24 maxlen: 24
                          37.26.184.0/21 maxlen: 24
                          185.146.220.0/22 maxlen: 24
                          194.116.142.0/23 maxlen: 24
                          185.15.140.0/22 maxlen: 24
                          185.62.184.0/22 maxlen: 24
                          212.85.229.0/24 maxlen: 24
                          212.85.230.0/23 maxlen: 24
                          195.234.35.0/24 maxlen: 24
                          95.143.64.0/20 maxlen: 24
                          176.241.120.0/21 maxlen: 24
                          212.18.240.0/21 maxlen: 24
                          130.180.208.0/20 maxlen: 24
                          78.153.224.0/19 maxlen: 24
                          91.226.193.0/24 maxlen: 24
                          185.61.184.0/22 maxlen: 24
                          185.61.184.0/21 maxlen: 24
                          185.61.188.0/22 maxlen: 24
                          31.172.232.0/21 maxlen: 24
                          31.172.238.0/24 maxlen: 24
                          185.78.156.0/22 maxlen: 24
                          185.92.36.0/22 maxlen: 24
                          31.7.248.0/21 maxlen: 24
                          31.172.160.0/22 maxlen: 24
                          193.189.124.0/23 maxlen: 24
                          185.4.60.0/23 maxlen: 24
                          185.4.62.0/24 maxlen: 24
                          185.91.220.0/22 maxlen: 24
                          185.91.224.0/22 maxlen: 24
                          77.72.88.0/21 maxlen: 24
                          37.61.240.0/21 maxlen: 24
                          85.31.192.0/19 maxlen: 24
                          82.163.36.0/22 maxlen: 24
                          5.226.0.0/21 maxlen: 24
                          88.212.144.0/21 maxlen: 24
                          88.212.152.0/22 maxlen: 24
                          185.209.52.0/22 maxlen: 24
                          82.196.24.0/21 maxlen: 24
                          88.202.236.0/22 maxlen: 24
                          77.246.80.0/20 maxlen: 24
                          185.44.88.0/22 maxlen: 24
                          2a05:6e00::/29 maxlen: 48
                          2a03:bdc0::/32 maxlen: 48
                          2a02:398::/32 maxlen: 48
                          2a0b:41c0::/29 maxlen: 48
                          2a00:68c0::/32 maxlen: 48
                          2a04:cc00::/29 maxlen: 48
                          2a01:240::/32 maxlen: 48
                          2a01:290::/32 maxlen: 48
                          2a00:78c0::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f2:ae:7a:f6:8d:e8:ca:32:1e:fe:95:46:01:cd:dd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jul 12 13:52:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=495eec3d1cb491f24b32dfd22b2ede619eed4cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:25:75:dc:e8:26:05:96:d9:3f:2c:d1:3e:
                    27:e1:5d:3d:1b:af:98:02:7b:0d:4a:81:e4:73:10:
                    1b:75:1e:f2:77:e0:b7:93:30:6f:7d:8e:8b:bd:0b:
                    6f:8b:0d:b5:04:2b:79:78:0a:13:7e:83:39:f3:e6:
                    64:77:8b:24:81:5c:1e:87:41:37:bd:fb:92:1d:cb:
                    7d:4b:62:19:da:57:f3:9c:5a:83:35:31:85:26:c2:
                    e5:f6:b5:e0:ae:dc:7f:5e:ed:71:48:15:f6:74:50:
                    8c:36:8d:1c:d5:4b:89:61:12:e7:b1:8e:5f:a9:69:
                    c5:81:54:7c:d0:c6:b5:dd:fc:98:45:e1:c8:89:a9:
                    cd:3a:ff:8c:92:d4:dd:f2:25:b1:78:1e:64:3c:52:
                    65:5d:7f:e3:53:c3:11:5e:14:8c:31:ef:58:d0:ec:
                    1b:3e:ca:a6:c1:d5:e0:64:f9:82:2e:4b:11:6b:86:
                    54:45:b1:7c:d2:e1:87:2b:d3:00:20:17:76:fe:e1:
                    9f:9d:ce:02:c6:8c:5e:d4:d0:0c:1c:0f:f3:d3:3f:
                    7d:64:3d:ab:12:b0:01:87:d2:e9:82:a2:85:5b:71:
                    70:cc:15:60:f0:8f:13:60:1d:47:33:3c:47:93:af:
                    42:df:c1:a2:c4:8d:e9:89:0f:4b:e2:f1:41:92:65:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:EC:3D:1C:B4:91:F2:4B:32:DF:D2:2B:2E:DE:61:9E:ED:4C:EA
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/SV7sPRy0kfJLMt_SKy7eYZ7tTOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.0.0/21
                  31.7.248.0/21
                  31.172.160.0/22
                  31.172.232.0/21
                  37.26.184.0/21
                  37.61.240.0/21
                  37.110.192.0/21
                  45.80.8.0/22
                  45.80.20.0-45.80.27.255
                  45.80.32.0/22
                  46.22.192.0/20
                  46.231.216.0/21
                  46.255.200.0/21
                  77.72.88.0/21
                  77.246.80.0/20
                  78.153.224.0/19
                  82.163.36.0/22
                  82.196.24.0/21
                  85.31.192.0/19
                  88.202.236.0/22
                  88.212.144.0-88.212.155.255
                  91.226.193.0/24
                  94.100.160.0/20
                  95.143.64.0/20
                  95.178.88.0/22
                  130.180.208.0/20
                  176.241.120.0/21
                  185.4.60.0-185.4.62.255
                  185.15.140.0/22
                  185.44.88.0/22
                  185.53.80.0/22
                  185.61.184.0/21
                  185.62.184.0/22
                  185.78.156.0/22
                  185.91.220.0-185.91.227.255
                  185.92.36.0/22
                  185.114.100.0/22
                  185.146.220.0/22
                  185.209.52.0/22
                  193.151.84.0/24
                  193.151.87.0/24
                  193.189.124.0/23
                  194.116.142.0/23
                  195.234.35.0/24
                  212.18.240.0/21
                  212.85.229.0-212.85.231.255
                  212.114.16.0/20
                IPv6:
                  2a00:68c0::/32
                  2a00:78c0::/29
                  2a01:240::/32
                  2a01:290::/32
                  2a02:398::/32
                  2a03:bdc0::/32
                  2a04:cc00::/29
                  2a05:6e00::/29
                  2a0b:41c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:fe:41:2d:95:2d:96:74:8a:14:f0:31:4c:e5:89:97:9b:9f:
         4a:69:78:54:bf:86:af:a2:bc:4c:3b:eb:4c:6e:df:a0:a2:19:
         68:47:30:6d:86:16:90:00:6c:30:30:1d:07:4d:9c:36:e8:65:
         08:89:e9:7c:29:c0:ba:fc:c8:15:57:47:8b:5b:0a:06:21:f7:
         48:c2:7f:8b:e3:e7:6b:34:d2:ae:ab:6b:e0:72:0a:c0:91:20:
         ad:a2:f1:85:f9:09:c8:0d:59:02:89:50:d0:e4:7b:09:a8:37:
         a9:40:31:ee:97:5b:b7:1e:8d:d1:9b:41:d0:86:3e:e8:fa:ce:
         86:b7:ad:80:28:bf:f8:57:9f:6f:43:29:65:6d:f8:86:d2:bb:
         90:15:44:7f:bb:34:18:e8:fb:85:8e:2d:18:f5:8c:40:f1:00:
         5f:37:c5:8f:d0:95:42:bb:d0:57:6d:0e:8d:5c:e2:59:ee:ff:
         b4:84:d0:74:ba:bb:55:3c:13:1e:5a:99:e5:df:19:00:c0:03:
         ab:aa:f0:d8:c1:4c:22:72:32:59:21:a1:40:e8:43:5b:11:03:
         df:8f:2f:2e:cb:c8:97:6a:50:49:c0:22:35:59:4a:a4:db:01:
         85:e9:b4:66:9c:8e:a0:3e:f5:b3:d6:55:e3:25:d0:b4:9d:cc:
         59:a8:d6:b0
-----BEGIN CERTIFICATE-----
MIIGijCCBXKgAwIBAgISAYHyrnr2jejKMh7+lUYBzd1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5
ODk4ODEwHhcNMjIwNzEyMTM1MjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTVlZWMzZDFjYjQ5MWYyNGIzMmRmZDIyYjJlZGU2MTllZWQ0Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJolddzoJgWW2T8s0T4n4V09G6+Y
AnsNSoHkcxAbdR7yd+C3kzBvfY6LvQtviw21BCt5eAoTfoM58+Zkd4skgVweh0E3
vfuSHct9S2IZ2lfznFqDNTGFJsLl9rXgrtx/Xu1xSBX2dFCMNo0c1UuJYRLnsY5f
qWnFgVR80Ma13fyYReHIianNOv+MktTd8iWxeB5kPFJlXX/jU8MRXhSMMe9Y0Owb
PsqmwdXgZPmCLksRa4ZURbF80uGHK9MAIBd2/uGfnc4Cxoxe1NAMHA/z0z99ZD2r
ErABh9LpgqKFW3FwzBVg8I8TYB1HMzxHk69C38GixI3piQ9L4vFBkmXd1QIDAQAB
o4IDljCCA5IwHQYDVR0OBBYEFEle7D0ctJHySzLf0isu3mGe7UzqMB8GA1UdIwQY
MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt
ZGQxMTVmOWUzMzAxLzEvU1Y3c1BSeTBrZkpMTXRfU0t5N2VZWjd0VE9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx
LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBqgYIKwYBBQUHAQcBAf8EggGZMIIBlTCCAUoEAgABMIIB
QgMEAwXiAAMEAx8H+AMEAh+soAMEAx+s6AMEAyUauAMEAyU98AMEAyVuwAMEAi1Q
CDAMAwQCLVAUAwQCLVAYAwQCLVAgAwQELhbAAwQDLufYAwQDLv/IAwQDTUhYAwQE
TfZQAwQFTpngAwQCUqMkAwQDUsQYAwQFVR/AAwQCWMrsMAwDBARY1JADBAJY1JgD
BABb4sEDBAReZKADBARfj0ADBAJfslgDBASCtNADBAOw8XgwDAMEArkEPAMEALkE
PgMEArkPjAMEArksWAMEArk1UAMEA7k9uAMEArk+uAMEArlOnDAMAwQCuVvcAwQC
uVvgAwQCuVwkAwQCuXJkAwQCuZLcAwQCudE0AwQAwZdUAwQAwZdXAwQBwb18AwQB
wnSOAwQAw+ojAwQD1BLwMAwDBADUVeUDBAPUVeADBATUchAwRQQCAAIwPwMFACoA
aMADBQMqAHjAAwUAKgECQAMFACoBApADBQAqAgOYAwUAKgO9wAMFAyoEzAADBQMq
BW4AAwUDKgtBwDANBgkqhkiG9w0BAQsFAAOCAQEAVv5BLZUtlnSKFPAxTOWJl5uf
Sml4VL+Gr6K8TDvrTG7foKIZaEcwbYYWkABsMDAdB02cNuhlCInpfCnAuvzIFVdH
i1sKBiH3SMJ/i+PnazTSrqtr4HIKwJEgraLxhfkJyA1ZAolQ0OR7Cag3qUAx7pdb
tx6N0ZtB0IY+6PrOhretgCi/+Fefb0MpZW34htK7kBVEf7s0GOj7hY4tGPWMQPEA
XzfFj9CVQrvQV20OjVziWe7/tITQdLq7VTwTHlqZ5d8ZAMADq6rw2MFMInIyWSGh
QOhDWxED348vLsvIl2pQScAiNVlKpNsBhem0ZpyOoD71s9ZV4yXQtJ3MWajWsA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org