Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ogeBNTUg-JdkkMzpVLwJWgGmMHw.roa
File:                     ogeBNTUg-JdkkMzpVLwJWgGmMHw.roa (raw, json)
Hash identifier:          audnYGnPF2E69T58Y4N/I9sVuKPQ7jWWCILPwC+LmQs=
Subject key identifier:   A2:07:81:35:35:20:F8:97:64:90:CC:E9:54:BC:09:5A:01:A6:30:7C
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       1779EAF6
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ogeBNTUg-JdkkMzpVLwJWgGmMHw.roa
Signing time:             Sat 01 Jan 2022 06:55:22 +0000
ROA not before:           Sat 01 Jan 2022 06:55:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2860
IP address blocks:        95.93.192.0/18 maxlen: 18
                          89.154.128.0/18 maxlen: 18
                          212.113.173.0/24 maxlen: 24
                          212.113.183.0/24 maxlen: 24
                          95.93.128.0/18 maxlen: 18
                          89.154.64.0/18 maxlen: 18
                          89.154.192.0/18 maxlen: 18
                          79.168.64.0/18 maxlen: 18
                          89.181.192.0/18 maxlen: 18
                          95.94.64.0/18 maxlen: 18
                          79.168.0.0/18 maxlen: 18
                          89.181.128.0/18 maxlen: 18
                          79.168.0.0/15 maxlen: 15
                          95.94.0.0/18 maxlen: 18
                          89.153.128.0/18 maxlen: 18
                          89.180.128.0/18 maxlen: 18
                          95.93.0.0/18 maxlen: 18
                          89.153.64.0/18 maxlen: 18
                          194.79.64.0/19 maxlen: 19
                          194.79.69.0/24 maxlen: 24
                          95.92.192.0/18 maxlen: 18
                          193.126.128.0/17 maxlen: 17
                          194.79.86.0/24 maxlen: 24
                          95.93.64.0/18 maxlen: 18
                          89.154.0.0/18 maxlen: 18
                          212.113.160.0/19 maxlen: 19
                          89.181.0.0/16 maxlen: 16
                          89.153.192.0/18 maxlen: 18
                          95.92.0.0/18 maxlen: 18
                          94.132.128.0/18 maxlen: 18
                          83.132.128.0/18 maxlen: 18
                          85.139.64.0/18 maxlen: 18
                          95.92.0.0/14 maxlen: 14
                          89.152.192.0/18 maxlen: 18
                          109.51.192.0/18 maxlen: 18
                          85.139.0.0/18 maxlen: 18
                          94.132.64.0/18 maxlen: 18
                          89.152.128.0/18 maxlen: 18
                          109.51.128.0/18 maxlen: 18
                          89.180.0.0/16 maxlen: 16
                          89.180.0.0/15 maxlen: 15
                          95.92.128.0/18 maxlen: 18
                          85.139.192.0/18 maxlen: 18
                          95.92.64.0/18 maxlen: 18
                          193.126.0.0/17 maxlen: 17
                          193.126.0.0/16 maxlen: 16
                          85.139.128.0/18 maxlen: 18
                          94.132.192.0/18 maxlen: 18
                          83.132.192.0/18 maxlen: 18
                          89.153.0.0/18 maxlen: 18
                          109.50.192.0/18 maxlen: 18
                          81.84.128.0/18 maxlen: 18
                          85.138.128.0/18 maxlen: 18
                          81.84.64.0/18 maxlen: 18
                          85.138.64.0/18 maxlen: 18
                          94.132.0.0/18 maxlen: 18
                          85.138.192.0/18 maxlen: 18
                          83.132.0.0/16 maxlen: 16
                          89.152.64.0/18 maxlen: 18
                          94.132.0.0/15 maxlen: 15
                          109.51.64.0/18 maxlen: 18
                          89.152.0.0/18 maxlen: 18
                          109.51.0.0/18 maxlen: 18
                          89.152.0.0/14 maxlen: 14
                          81.84.192.0/18 maxlen: 18
                          195.23.0.0/17 maxlen: 17
                          195.23.0.0/16 maxlen: 16
                          217.70.64.0/20 maxlen: 20
                          195.23.37.0/24 maxlen: 24
                          213.22.192.0/18 maxlen: 18
                          88.157.128.0/17 maxlen: 17
                          88.157.134.0/24 maxlen: 24
                          109.49.192.0/18 maxlen: 18
                          88.157.157.0/24 maxlen: 24
                          81.84.0.0/18 maxlen: 18
                          81.84.0.0/16 maxlen: 16
                          85.138.0.0/18 maxlen: 18
                          195.23.128.0/17 maxlen: 17
                          85.138.0.0/15 maxlen: 15
                          109.50.128.0/18 maxlen: 18
                          88.157.230.0/24 maxlen: 24
                          88.157.231.0/24 maxlen: 24
                          83.144.128.0/18 maxlen: 18
                          109.50.64.0/18 maxlen: 18
                          213.205.64.0/19 maxlen: 19
                          213.205.64.0/24 maxlen: 24
                          78.130.0.0/17 maxlen: 17
                          88.157.0.0/17 maxlen: 17
                          213.22.64.0/18 maxlen: 18
                          88.157.0.0/16 maxlen: 16
                          213.22.0.0/18 maxlen: 18
                          213.22.0.0/16 maxlen: 16
                          109.49.0.0/18 maxlen: 18
                          185.224.164.0/22 maxlen: 22
                          109.49.128.0/18 maxlen: 18
                          109.49.64.0/18 maxlen: 18
                          213.22.128.0/18 maxlen: 18
                          79.169.128.0/18 maxlen: 18
                          109.48.64.0/18 maxlen: 18
                          95.95.128.0/18 maxlen: 18
                          93.102.64.0/18 maxlen: 18
                          109.48.0.0/18 maxlen: 18
                          79.169.64.0/18 maxlen: 18
                          62.169.64.0/18 maxlen: 18
                          87.196.64.0/19 maxlen: 19
                          109.48.0.0/14 maxlen: 14
                          93.102.0.0/18 maxlen: 18
                          95.95.64.0/18 maxlen: 18
                          93.102.0.0/16 maxlen: 16
                          109.48.192.0/18 maxlen: 18
                          109.48.128.0/18 maxlen: 18
                          79.169.192.0/18 maxlen: 18
                          88.210.64.0/18 maxlen: 18
                          95.95.192.0/18 maxlen: 18
                          89.155.64.0/18 maxlen: 18
                          79.168.192.0/18 maxlen: 18
                          89.155.0.0/18 maxlen: 18
                          79.168.128.0/18 maxlen: 18
                          95.94.128.0/18 maxlen: 18
                          87.196.0.0/18 maxlen: 18
                          212.0.160.0/21 maxlen: 21
                          87.196.0.0/16 maxlen: 16
                          95.95.0.0/18 maxlen: 18
                          80.243.80.0/20 maxlen: 20
                          89.155.192.0/18 maxlen: 18
                          95.94.192.0/18 maxlen: 18
                          89.155.128.0/18 maxlen: 18
                          79.169.0.0/18 maxlen: 18
                          2a01:10::/29 maxlen: 29
                          2001:1588::/29 maxlen: 29
                          2a01:8:8011::/48 maxlen: 48
                          2a01:8::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393865974 (0x1779eaf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jan  1 06:55:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a20781353520f8976490cce954bc095a01a6307c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:de:c9:99:14:41:8b:8a:c9:88:d4:2f:89:
                    57:75:4a:de:81:b9:40:df:33:b5:f5:10:3d:f7:d4:
                    30:2f:87:06:7f:f0:29:15:3d:79:8d:ec:6b:f6:8b:
                    a1:cc:77:8d:f9:d6:f6:f5:b8:9f:1f:c9:c5:53:60:
                    98:77:37:78:5d:d9:48:a9:cb:29:e0:fa:73:4a:07:
                    eb:a1:42:bf:dd:ae:38:15:cf:a4:66:9b:09:c0:99:
                    08:f7:a2:53:00:82:b8:64:32:e1:43:0f:4f:3a:22:
                    68:1d:a8:f7:2d:51:ae:27:a3:ba:9c:3c:07:3b:18:
                    a5:da:50:10:55:92:0f:8b:3b:b6:6c:40:62:36:f0:
                    55:8b:d4:e9:47:78:f6:d1:8f:3e:94:64:ca:ba:60:
                    0b:8b:97:4e:80:00:4c:9a:93:f9:4c:e1:84:26:25:
                    87:17:a9:55:ce:1d:fd:a2:4f:20:32:72:e5:ad:5f:
                    f1:32:6a:09:f9:3b:e8:d1:0b:80:79:fb:55:3a:ce:
                    cf:6f:d6:03:6c:96:b3:41:12:6d:63:2e:c4:ab:14:
                    aa:ba:d2:68:27:5c:b3:59:51:56:f3:31:27:ac:f3:
                    c3:ed:59:f2:2c:b0:18:af:e9:ad:40:15:02:e3:03:
                    ff:aa:69:59:5d:ac:e2:94:92:78:03:3c:0c:ac:b3:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:07:81:35:35:20:F8:97:64:90:CC:E9:54:BC:09:5A:01:A6:30:7C
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ogeBNTUg-JdkkMzpVLwJWgGmMHw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.169.64.0/18
                  78.130.0.0/17
                  79.168.0.0/15
                  80.243.80.0/20
                  81.84.0.0/16
                  83.132.0.0/16
                  83.144.128.0/18
                  85.138.0.0/15
                  87.196.0.0/16
                  88.157.0.0/16
                  88.210.64.0/18
                  89.152.0.0/14
                  89.180.0.0/15
                  93.102.0.0/16
                  94.132.0.0/15
                  95.92.0.0/14
                  109.48.0.0/14
                  185.224.164.0/22
                  193.126.0.0/16
                  194.79.64.0/19
                  195.23.0.0/16
                  212.0.160.0/21
                  212.113.160.0/19
                  213.22.0.0/16
                  213.205.64.0/19
                  217.70.64.0/20
                IPv6:
                  2001:1588::/29
                  2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         74:43:4f:7c:d7:bd:b4:66:fa:c9:c0:fe:24:37:39:65:54:fc:
         08:c0:11:4a:5d:96:49:4d:8d:02:29:31:4c:af:b9:04:6e:5c:
         cb:9a:70:72:7f:9a:cc:ee:c9:5e:a6:83:54:5d:a3:bb:71:56:
         25:4a:fc:f3:4d:d8:0c:b8:34:4c:d3:f2:6d:7d:93:58:6a:db:
         26:9e:fe:96:3d:f7:34:0e:20:18:49:1c:0f:02:a6:d6:d7:35:
         2b:dd:47:2f:d7:9c:fa:f4:8e:ce:44:fb:f5:7f:0a:94:d6:ad:
         e2:f8:0b:4d:3e:42:5c:65:8d:69:e5:c7:f9:5a:29:dd:bc:5d:
         3a:20:3f:ec:81:08:09:32:e1:77:dd:1d:37:bf:35:8c:23:ce:
         21:4d:e8:84:c2:9d:fa:a2:30:b6:30:d1:9b:61:63:22:cb:7d:
         ae:ba:ef:9d:c6:62:4c:84:5c:6c:d1:af:24:a7:a0:89:5c:aa:
         fa:a4:9b:db:36:4a:7c:16:0c:bd:30:5b:a8:70:53:f4:71:78:
         da:39:75:a1:ca:77:98:be:7a:0d:70:f5:6c:86:5a:eb:14:88:
         fb:92:0e:0a:9c:a1:49:3b:83:9f:d7:65:6d:9c:42:62:76:10:
         52:67:a2:93:96:66:20:8e:45:bc:f7:a0:8f:3d:df:4b:a7:5a:
         ec:a2:44:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:30 2023 by rpki-client on console-ams.rpki-client.org