Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/h9U61uD0spXqNdIc9jWe_owadBg.roa
File:                     h9U61uD0spXqNdIc9jWe_owadBg.roa (raw, json)
Hash identifier:          0XS6zgON7q94m6bqnGgZTaseWv77pUDHFVnX46LVLbg=
Subject key identifier:   87:D5:3A:D6:E0:F4:B2:95:EA:35:D2:1C:F6:35:9E:FE:8C:1A:74:18
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       17659641
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/h9U61uD0spXqNdIc9jWe_owadBg.roa
Signing time:             Thu 24 Feb 2022 10:28:34 +0000
ROA not before:           Thu 24 Feb 2022 10:28:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     36692
IP address blocks:        185.60.84.0/23 maxlen: 24
                          185.60.86.0/24 maxlen: 24
                          185.60.87.0/24 maxlen: 24
                          146.112.60.0/24 maxlen: 24
                          146.112.41.0/24 maxlen: 24
                          146.112.170.0/24 maxlen: 24
                          146.112.174.0/24 maxlen: 24
                          146.112.131.0/24 maxlen: 24
                          146.112.132.0/24 maxlen: 24
                          146.112.128.0/24 maxlen: 24
                          146.112.129.0/24 maxlen: 24
                          146.112.130.0/24 maxlen: 24
                          146.112.134.0/24 maxlen: 24
                          146.112.133.0/24 maxlen: 24
                          146.112.138.0/24 maxlen: 24
                          146.112.139.0/24 maxlen: 24
                          146.112.135.0/24 maxlen: 24
                          146.112.136.0/24 maxlen: 24
                          146.112.137.0/24 maxlen: 24
                          155.190.192.0/24 maxlen: 24
                          155.190.193.0/24 maxlen: 24
                          155.190.194.0/24 maxlen: 24
                          155.190.195.0/24 maxlen: 24
                          155.190.196.0/24 maxlen: 24
                          155.190.197.0/24 maxlen: 24
                          155.190.201.0/24 maxlen: 24
                          155.190.202.0/24 maxlen: 24
                          155.190.28.0/24 maxlen: 24
                          155.190.29.0/24 maxlen: 24
                          155.190.38.0/24 maxlen: 24
                          155.190.32.0/24 maxlen: 24
                          155.190.33.0/24 maxlen: 24
                          155.190.34.0/24 maxlen: 24
                          155.190.35.0/24 maxlen: 24
                          155.190.36.0/24 maxlen: 24
                          155.190.37.0/24 maxlen: 24
                          155.190.39.0/24 maxlen: 24
                          155.190.40.0/24 maxlen: 24
                          155.190.41.0/24 maxlen: 24
                          155.190.42.0/24 maxlen: 24
                          155.190.43.0/24 maxlen: 24
                          155.190.44.0/24 maxlen: 24
                          155.190.45.0/24 maxlen: 24
                          155.190.46.0/24 maxlen: 24
                          155.190.47.0/24 maxlen: 24
                          155.190.48.0/24 maxlen: 24
                          155.190.49.0/24 maxlen: 24
                          155.190.50.0/24 maxlen: 24
                          155.190.51.0/24 maxlen: 24
                          155.190.53.0/24 maxlen: 24
                          155.190.54.0/24 maxlen: 24
                          155.190.55.0/24 maxlen: 24
                          155.190.0.0/24 maxlen: 24
                          155.190.4.0/24 maxlen: 24
                          155.190.3.0/24 maxlen: 24
                          155.190.1.0/24 maxlen: 24
                          155.190.2.0/24 maxlen: 24
                          155.190.8.0/24 maxlen: 24
                          155.190.9.0/24 maxlen: 24
                          155.190.15.0/24 maxlen: 24
                          155.190.17.0/24 maxlen: 24
                          155.190.18.0/24 maxlen: 24
                          155.190.19.0/24 maxlen: 24
                          155.190.20.0/24 maxlen: 24
                          155.190.21.0/24 maxlen: 24
                          155.190.22.0/24 maxlen: 24
                          2a04:e4c0:25::/48 maxlen: 48
                          2a04:e4c0:14::/48 maxlen: 48
                          2a04:e4c0:22::/48 maxlen: 48
                          2a04:e4c0:11::/48 maxlen: 48
                          2a04:e4c0:47::/48 maxlen: 48
                          2a04:e4c0:55::/48 maxlen: 48
                          2a04:e4c0:30::/48 maxlen: 48
                          2a04:e4c0:44::/48 maxlen: 48
                          2a04:e4c7:fffd::/48 maxlen: 48
                          2a04:e4c0:52::/48 maxlen: 48
                          2a04:e4c4:3::/48 maxlen: 48
                          2a04:e4c0:41::/48 maxlen: 48
                          2a04:e4c0:60::/48 maxlen: 48
                          2a04:e4c0:13::/48 maxlen: 48
                          2a04:e4c0:16::/48 maxlen: 48
                          2a04:e4c7:ffff::/48 maxlen: 48
                          2a04:e4c0:10::/48 maxlen: 48
                          2a04:e4c0:49::/48 maxlen: 48
                          2a04:e4c0:24::/48 maxlen: 48
                          2a04:e4c0:43::/48 maxlen: 48
                          2a04:e4c0:46::/48 maxlen: 48
                          2a04:e4c0:21::/48 maxlen: 48
                          2a04:e4c0:40::/48 maxlen: 48
                          2a04:e4c7:fffe::/48 maxlen: 48
                          2a04:e4c4:1::/48 maxlen: 48
                          2a04:e4c0:54::/48 maxlen: 48
                          2a04:e4c0:18::/48 maxlen: 48
                          2a04:e4c4:4::/48 maxlen: 48
                          2a04:e4c0:51::/48 maxlen: 48
                          2a04:e4c0:15::/48 maxlen: 48
                          2a04:e4c0:12::/48 maxlen: 48
                          2a04:e4c0:48::/48 maxlen: 48
                          2a04:e4c0:23::/48 maxlen: 48
                          2a04:e4c0:45::/48 maxlen: 48
                          2a04:e4c0:20::/48 maxlen: 48
                          2a04:e4c0:59::/48 maxlen: 48
                          2a04:e4c0:42::/48 maxlen: 48
                          2a04:e4c0:53::/48 maxlen: 48
                          2a04:e4c0:31::/48 maxlen: 48
                          2a04:e4c4:2::/48 maxlen: 48
                          2a04:e4c0:17::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392533569 (0x17659641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Feb 24 10:28:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=87d53ad6e0f4b295ea35d21cf6359efe8c1a7418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:88:f2:ac:04:c3:05:c1:91:11:5b:14:74:
                    9f:d3:40:7e:dc:75:bb:77:8b:1d:e6:ab:60:19:6d:
                    1f:ae:4a:c0:70:81:72:28:31:da:34:ff:ff:b7:8b:
                    2f:f4:23:a1:35:ed:c3:8d:47:e9:b8:80:76:a5:2e:
                    f2:1b:6f:12:f3:63:3d:74:c1:32:04:ac:8e:0e:f1:
                    b2:46:96:96:f1:36:a0:67:34:71:05:e7:9a:d4:76:
                    d5:24:b9:0a:1b:c6:af:94:66:42:cf:e0:c2:48:ca:
                    a9:f2:89:5f:a8:23:1b:03:54:d0:87:df:57:ee:89:
                    1a:51:fe:f2:ce:99:a7:a9:05:c3:9d:88:3d:af:4a:
                    5e:85:93:51:3c:ba:ed:17:b4:07:ec:f4:fe:26:f8:
                    2b:90:7d:5e:ba:55:64:09:37:82:fb:4e:bc:7d:8c:
                    f4:52:42:1a:d7:91:c9:45:6b:6b:96:cd:10:cd:a9:
                    18:7a:75:bf:d6:0e:2b:10:a3:1e:fe:14:fe:04:90:
                    74:27:3d:2c:58:f3:63:47:7b:38:9c:71:17:34:55:
                    79:47:54:96:6d:32:d0:67:bf:ce:35:94:98:65:a1:
                    ac:bc:90:76:19:a9:64:4a:c2:de:17:74:eb:13:c4:
                    ba:15:3f:7e:b5:36:7d:61:e9:49:91:26:72:30:8f:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D5:3A:D6:E0:F4:B2:95:EA:35:D2:1C:F6:35:9E:FE:8C:1A:74:18
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/h9U61uD0spXqNdIc9jWe_owadBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.112.41.0/24
                  146.112.60.0/24
                  146.112.128.0-146.112.139.255
                  146.112.170.0/24
                  146.112.174.0/24
                  155.190.0.0-155.190.4.255
                  155.190.8.0/23
                  155.190.15.0/24
                  155.190.17.0-155.190.22.255
                  155.190.28.0/23
                  155.190.32.0-155.190.51.255
                  155.190.53.0-155.190.55.255
                  155.190.192.0-155.190.197.255
                  155.190.201.0-155.190.202.255
                  185.60.84.0/22
                IPv6:
                  2a04:e4c0:10::-2a04:e4c0:18:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:20::-2a04:e4c0:25:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:30::/47
                  2a04:e4c0:40::-2a04:e4c0:49:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:51::-2a04:e4c0:55:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:59::/48
                  2a04:e4c0:60::/48
                  2a04:e4c4:1::-2a04:e4c4:4:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c7:fffd::-2a04:e4c7:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5c:07:7d:a9:d3:f7:02:0f:c2:92:20:58:b8:d8:3f:48:be:e3:
         a0:2a:a5:0a:d1:7b:bf:f1:c4:6f:6b:1d:9b:f6:87:68:fe:34:
         dd:48:d3:2a:fb:35:5a:df:65:bf:bd:72:fd:ce:40:d0:e6:39:
         4f:e7:d9:54:92:75:57:a6:ac:c4:1e:2b:47:0a:1d:da:48:44:
         7d:69:3a:0f:5e:49:9b:a6:1d:af:9b:5f:82:3a:33:ec:27:32:
         c6:e6:a6:aa:e0:a9:e7:99:16:89:00:80:91:74:3a:c2:df:d4:
         ea:41:dd:87:9e:e8:7f:da:58:bc:1b:9f:3c:3f:25:24:d7:8b:
         b5:ef:31:3e:99:29:c9:74:9a:ec:f6:d6:6c:5b:39:c1:21:7a:
         f7:6f:ba:d8:22:5c:21:6e:5f:54:28:89:23:7d:7f:ed:2d:13:
         ed:b6:3d:c7:6a:66:f4:2b:2f:37:14:e6:9e:33:62:3c:8b:d0:
         5f:51:50:70:e1:4d:dc:14:dc:6c:ad:f0:a6:19:af:78:d5:bd:
         b1:7b:d3:6c:cd:19:6e:bf:14:e4:f7:14:63:ab:83:45:99:9f:
         31:fa:6a:d6:51:2f:d7:8b:22:b9:62:8e:55:56:a8:82:15:4d:
         1a:aa:0b:6f:3a:25:94:d4:05:0b:44:61:04:18:e9:dc:5d:65:
         9a:3d:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:41 2024 by rpki-client on console-fra.rpki-client.org