Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/1YAj_K_9B2kpDKCgmHMJgbpd4-c.roa
File:                     1YAj_K_9B2kpDKCgmHMJgbpd4-c.roa (raw, json)
Hash identifier:          TUiSBf7xqlYob2cKYj3reW3dT7nmFElkCi1EKtcJaVM=
Subject key identifier:   D5:80:23:FC:AF:FD:07:69:29:0C:A0:A0:98:73:09:81:BA:5D:E3:E7
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       17F7EEEC
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/1YAj_K_9B2kpDKCgmHMJgbpd4-c.roa
Signing time:             Wed 23 Feb 2022 14:40:48 +0000
ROA not before:           Wed 23 Feb 2022 14:40:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2860
IP address blocks:        95.93.192.0/18 maxlen: 18
                          89.154.128.0/18 maxlen: 18
                          212.113.173.0/24 maxlen: 24
                          212.113.183.0/24 maxlen: 24
                          95.93.128.0/18 maxlen: 18
                          89.154.64.0/18 maxlen: 18
                          89.154.192.0/18 maxlen: 18
                          79.168.64.0/18 maxlen: 18
                          89.181.192.0/18 maxlen: 18
                          95.94.64.0/18 maxlen: 18
                          79.168.0.0/18 maxlen: 18
                          89.181.128.0/18 maxlen: 18
                          79.168.0.0/15 maxlen: 15
                          95.94.0.0/18 maxlen: 18
                          89.153.128.0/18 maxlen: 18
                          89.180.128.0/18 maxlen: 18
                          95.93.0.0/18 maxlen: 18
                          89.153.64.0/18 maxlen: 18
                          194.79.64.0/19 maxlen: 19
                          194.79.69.0/24 maxlen: 24
                          95.92.192.0/18 maxlen: 18
                          193.126.128.0/17 maxlen: 17
                          194.79.86.0/24 maxlen: 24
                          95.93.64.0/18 maxlen: 18
                          89.154.0.0/18 maxlen: 18
                          212.113.160.0/19 maxlen: 19
                          89.181.0.0/16 maxlen: 16
                          89.153.192.0/18 maxlen: 18
                          95.92.0.0/18 maxlen: 18
                          83.132.128.0/18 maxlen: 18
                          94.132.128.0/18 maxlen: 18
                          85.139.64.0/18 maxlen: 18
                          95.92.0.0/14 maxlen: 14
                          89.152.192.0/18 maxlen: 18
                          109.51.192.0/18 maxlen: 18
                          85.139.0.0/18 maxlen: 18
                          94.132.64.0/18 maxlen: 18
                          89.152.128.0/18 maxlen: 18
                          109.51.128.0/18 maxlen: 18
                          89.180.0.0/16 maxlen: 16
                          89.180.0.0/15 maxlen: 15
                          95.92.128.0/18 maxlen: 18
                          85.139.192.0/18 maxlen: 18
                          95.92.64.0/18 maxlen: 18
                          193.126.0.0/17 maxlen: 17
                          193.126.0.0/16 maxlen: 16
                          85.139.128.0/18 maxlen: 18
                          83.132.192.0/18 maxlen: 18
                          94.132.192.0/18 maxlen: 18
                          89.153.0.0/18 maxlen: 18
                          109.50.192.0/18 maxlen: 18
                          81.84.128.0/18 maxlen: 18
                          85.138.128.0/18 maxlen: 18
                          81.84.64.0/18 maxlen: 18
                          85.138.64.0/18 maxlen: 18
                          94.132.0.0/18 maxlen: 18
                          85.138.192.0/18 maxlen: 18
                          83.132.0.0/16 maxlen: 16
                          89.152.64.0/18 maxlen: 18
                          94.132.0.0/15 maxlen: 15
                          109.51.64.0/18 maxlen: 18
                          89.152.0.0/18 maxlen: 18
                          109.51.0.0/18 maxlen: 18
                          89.152.0.0/14 maxlen: 14
                          81.84.192.0/18 maxlen: 18
                          195.23.0.0/17 maxlen: 17
                          195.23.0.0/16 maxlen: 16
                          217.70.64.0/20 maxlen: 20
                          195.23.37.0/24 maxlen: 24
                          213.22.192.0/18 maxlen: 18
                          88.157.128.0/17 maxlen: 17
                          88.157.134.0/24 maxlen: 24
                          109.49.192.0/18 maxlen: 18
                          88.157.157.0/24 maxlen: 24
                          81.84.0.0/18 maxlen: 18
                          81.84.0.0/16 maxlen: 16
                          85.138.0.0/18 maxlen: 18
                          195.23.128.0/17 maxlen: 17
                          85.138.0.0/15 maxlen: 15
                          109.50.128.0/18 maxlen: 18
                          88.157.230.0/24 maxlen: 24
                          88.157.231.0/24 maxlen: 24
                          83.144.128.0/18 maxlen: 18
                          109.50.64.0/18 maxlen: 18
                          213.205.64.0/19 maxlen: 19
                          213.205.64.0/24 maxlen: 24
                          78.130.0.0/17 maxlen: 17
                          88.157.0.0/17 maxlen: 17
                          213.22.64.0/18 maxlen: 18
                          88.157.0.0/16 maxlen: 16
                          213.22.0.0/18 maxlen: 18
                          213.22.0.0/16 maxlen: 16
                          109.49.0.0/18 maxlen: 18
                          185.224.164.0/22 maxlen: 22
                          109.49.128.0/18 maxlen: 18
                          109.49.64.0/18 maxlen: 18
                          213.22.128.0/18 maxlen: 18
                          79.169.128.0/18 maxlen: 18
                          109.48.64.0/18 maxlen: 18
                          95.95.128.0/18 maxlen: 18
                          93.102.64.0/18 maxlen: 18
                          109.48.0.0/18 maxlen: 18
                          62.169.64.0/18 maxlen: 18
                          79.169.64.0/18 maxlen: 18
                          87.196.64.0/19 maxlen: 19
                          109.48.0.0/14 maxlen: 14
                          93.102.0.0/18 maxlen: 18
                          95.95.64.0/18 maxlen: 18
                          93.102.0.0/16 maxlen: 16
                          109.48.192.0/18 maxlen: 18
                          109.48.128.0/18 maxlen: 18
                          79.169.192.0/18 maxlen: 18
                          88.210.64.0/18 maxlen: 18
                          95.95.192.0/18 maxlen: 18
                          89.155.64.0/18 maxlen: 18
                          79.168.192.0/18 maxlen: 18
                          89.155.0.0/18 maxlen: 18
                          79.168.128.0/18 maxlen: 18
                          95.94.128.0/18 maxlen: 18
                          87.196.0.0/18 maxlen: 18
                          212.0.160.0/21 maxlen: 21
                          87.196.0.0/16 maxlen: 16
                          95.95.0.0/18 maxlen: 18
                          80.243.80.0/20 maxlen: 20
                          89.155.192.0/18 maxlen: 18
                          95.94.192.0/18 maxlen: 18
                          89.155.128.0/18 maxlen: 18
                          79.169.0.0/18 maxlen: 18
                          2a01:10::/29 maxlen: 29
                          2001:1588::/29 maxlen: 29
                          2a01:8:8011::/48 maxlen: 48
                          2a01:8::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402124524 (0x17f7eeec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Feb 23 14:40:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d58023fcaffd0769290ca0a098730981ba5de3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:11:58:20:23:a5:b1:a5:af:f6:b4:45:b4:
                    c8:cc:a3:b8:a3:5c:78:b8:2d:2c:6c:e1:c2:c4:07:
                    04:c2:42:32:3d:ea:0b:b1:91:df:2b:11:22:8f:9f:
                    84:62:7b:ea:c1:9f:97:93:76:08:69:5a:5e:b5:79:
                    1e:c4:c6:ba:c3:bc:92:df:52:5a:9f:87:17:f6:ee:
                    52:6c:a9:2b:83:9d:fe:43:14:3f:c8:1a:52:a8:a6:
                    b9:68:4e:c6:09:89:9e:25:7f:85:8e:be:c7:31:08:
                    4b:61:b3:31:74:09:31:25:af:1b:09:32:b6:1a:b4:
                    1b:19:d3:1c:e6:6b:8a:79:64:87:61:ce:e6:75:a5:
                    69:57:3c:25:a0:67:bf:58:a3:4e:a4:88:16:27:32:
                    c9:95:af:ed:80:04:95:c5:00:be:81:28:72:7a:c6:
                    85:3e:65:b7:18:e3:63:9d:54:57:23:1f:7e:bc:0a:
                    e3:1d:ce:10:24:42:30:01:6b:f9:29:35:44:74:07:
                    a5:14:d8:2f:e8:15:df:48:66:1b:8a:67:c2:56:b9:
                    90:b8:83:e8:34:2d:77:81:8b:73:ad:7f:8d:c8:c2:
                    58:9c:48:d4:72:76:f4:f7:fc:4e:9d:7c:19:af:5a:
                    82:55:74:27:a5:5a:fb:24:b9:4b:76:04:8f:3d:6e:
                    3e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:80:23:FC:AF:FD:07:69:29:0C:A0:A0:98:73:09:81:BA:5D:E3:E7
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/1YAj_K_9B2kpDKCgmHMJgbpd4-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.169.64.0/18
                  78.130.0.0/17
                  79.168.0.0/15
                  80.243.80.0/20
                  81.84.0.0/16
                  83.132.0.0/16
                  83.144.128.0/18
                  85.138.0.0/15
                  87.196.0.0/16
                  88.157.0.0/16
                  88.210.64.0/18
                  89.152.0.0/14
                  89.180.0.0/15
                  93.102.0.0/16
                  94.132.0.0/15
                  95.92.0.0/14
                  109.48.0.0/14
                  185.224.164.0/22
                  193.126.0.0/16
                  194.79.64.0/19
                  195.23.0.0/16
                  212.0.160.0/21
                  212.113.160.0/19
                  213.22.0.0/16
                  213.205.64.0/19
                  217.70.64.0/20
                IPv6:
                  2001:1588::/29
                  2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         66:50:78:ee:ee:36:b2:17:b6:89:a6:e9:04:4f:29:a5:6c:1f:
         61:84:50:cd:f5:83:be:46:be:a1:00:39:fe:e1:0f:f3:1f:61:
         7a:d6:05:11:16:9a:ee:02:26:38:dd:3f:4f:2b:3c:fb:aa:a2:
         3c:19:91:4d:16:16:dc:e3:88:9b:7d:a1:9a:8c:86:77:db:39:
         b4:9a:fa:6a:4f:74:e2:dc:d8:60:0d:38:eb:ea:a7:bc:47:b8:
         ae:93:4c:d0:5f:18:03:bb:24:3e:58:3d:77:bc:84:9d:e3:59:
         6d:e8:1b:53:33:b6:85:95:4a:38:3c:aa:67:a4:5d:08:13:52:
         e9:34:06:c5:d7:9b:af:a3:5d:13:37:a8:52:71:35:f9:1a:ac:
         38:34:3a:02:46:04:45:42:36:3f:14:9e:1d:3c:a0:6a:53:b4:
         2f:9d:1a:9b:bf:51:c7:4f:85:fb:2c:f1:37:25:26:e7:f4:7c:
         ca:9e:08:96:3b:fd:81:33:aa:65:1a:af:19:b7:e1:76:68:ba:
         ea:0f:de:ba:76:4e:4b:c4:08:38:c8:52:71:df:60:c7:3e:77:
         8f:ac:05:4e:ac:5d:a1:2c:bf:68:a2:d5:a8:3c:7c:f7:af:2c:
         62:1f:d6:11:96:94:16:82:79:df:45:33:cf:b3:b8:89:e2:b3:
         5a:df:91:26
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:40 2023 by rpki-client on console-fra.rpki-client.org