Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/fZOL2sayErZ_M0-d1N7F7zk5X8k.roa
File:                     fZOL2sayErZ_M0-d1N7F7zk5X8k.roa (raw, json)
Hash identifier:          lco2ouOrAkdqIrBGE4kSl89c27G3mxner5UfVRUiJ6U=
Subject key identifier:   7D:93:8B:DA:C6:B2:12:B6:7F:33:4F:9D:D4:DE:C5:EF:39:39:5F:C9
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       018416EE984FB0019B5F2405096FC3013D84
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/fZOL2sayErZ_M0-d1N7F7zk5X8k.roa
Signing time:             Thu 27 Oct 2022 00:54:06 +0000
ROA not before:           Thu 27 Oct 2022 00:54:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199610
IP address blocks:        31.214.193.0/24 maxlen: 24
                          31.214.196.0/22 maxlen: 22
                          31.214.195.0/24 maxlen: 24
                          31.214.202.0/23 maxlen: 23
                          31.214.204.0/22 maxlen: 22
                          31.214.208.0/22 maxlen: 22
                          31.214.216.0/24 maxlen: 24
                          31.214.218.0/24 maxlen: 24
                          31.214.219.0/24 maxlen: 24
                          31.214.220.0/23 maxlen: 23
                          31.214.224.0/22 maxlen: 22
                          31.214.227.0/24 maxlen: 24
                          31.214.232.0/21 maxlen: 21
                          134.255.208.0/23 maxlen: 23
                          134.255.212.0/23 maxlen: 23
                          134.255.214.0/24 maxlen: 24
                          134.255.240.0/24 maxlen: 24
                          134.255.251.0/24 maxlen: 24
                          134.255.198.0/24 maxlen: 24
                          31.214.134.0/23 maxlen: 23
                          31.214.136.0/24 maxlen: 24
                          31.214.142.0/23 maxlen: 23
                          31.214.148.0/24 maxlen: 24
                          45.140.128.0/23 maxlen: 23
                          45.140.131.0/24 maxlen: 24
                          31.214.158.0/23 maxlen: 23
                          31.214.161.0/24 maxlen: 24
                          31.214.160.0/24 maxlen: 24
                          31.214.162.0/23 maxlen: 23
                          31.214.166.0/24 maxlen: 24
                          31.214.130.0/23 maxlen: 23
                          31.214.128.0/24 maxlen: 24
                          37.10.96.0/21 maxlen: 21
                          37.10.107.0/24 maxlen: 24
                          37.10.106.0/24 maxlen: 24
                          37.10.115.0/24 maxlen: 24
                          37.10.120.0/22 maxlen: 22
                          37.10.119.0/24 maxlen: 24
                          37.10.124.0/22 maxlen: 22
                          45.159.4.0/23 maxlen: 23
                          45.159.7.0/24 maxlen: 24
                          45.159.6.0/24 maxlen: 24
                          5.83.160.0/22 maxlen: 24
                          5.83.164.0/24 maxlen: 24
                          5.83.165.0/24 maxlen: 24
                          5.83.163.0/24 maxlen: 24
                          5.83.172.0/23 maxlen: 23
                          5.83.167.0/24 maxlen: 24
                          5.83.168.0/22 maxlen: 22
                          5.83.174.0/23 maxlen: 23
                          46.251.231.0/24 maxlen: 24
                          46.251.228.0/24 maxlen: 24
                          46.251.229.0/24 maxlen: 24
                          46.251.232.0/23 maxlen: 23
                          185.9.104.0/22 maxlen: 22
                          46.251.234.0/24 maxlen: 24
                          46.251.238.0/24 maxlen: 24
                          46.251.235.0/24 maxlen: 24
                          46.251.236.0/24 maxlen: 24
                          46.251.240.0/21 maxlen: 21
                          85.190.138.0/23 maxlen: 23
                          85.190.134.0/23 maxlen: 23
                          85.190.136.0/24 maxlen: 32
                          85.190.137.0/24 maxlen: 24
                          109.230.243.0/24 maxlen: 24
                          85.190.141.0/24 maxlen: 24
                          85.190.140.0/24 maxlen: 24
                          109.230.248.0/23 maxlen: 23
                          95.156.220.0/23 maxlen: 23
                          95.156.224.0/24 maxlen: 24
                          85.190.143.0/24 maxlen: 24
                          85.190.144.0/24 maxlen: 24
                          85.190.142.0/24 maxlen: 24
                          85.190.145.0/24 maxlen: 24
                          85.190.152.0/24 maxlen: 24
                          85.190.147.0/24 maxlen: 24
                          85.190.148.0/24 maxlen: 24
                          85.190.146.0/24 maxlen: 24
                          85.190.150.0/24 maxlen: 24
                          85.190.149.0/24 maxlen: 24
                          85.190.154.0/24 maxlen: 24
                          85.190.155.0/24 maxlen: 24
                          85.190.153.0/24 maxlen: 24
                          95.156.238.0/24 maxlen: 24
                          85.190.158.0/24 maxlen: 24
                          95.156.239.0/24 maxlen: 24
                          85.190.156.0/23 maxlen: 23
                          85.190.159.0/24 maxlen: 24
                          85.190.160.0/22 maxlen: 22
                          85.190.164.0/22 maxlen: 22
                          85.190.168.0/22 maxlen: 22
                          95.156.250.0/24 maxlen: 24
                          109.230.197.0/24 maxlen: 24
                          5.62.96.0/20 maxlen: 20
                          109.230.208.0/24 maxlen: 24
                          109.230.211.0/24 maxlen: 24
                          195.82.158.0/23 maxlen: 23
                          109.230.214.0/24 maxlen: 24
                          95.156.193.0/24 maxlen: 24
                          95.156.194.0/24 maxlen: 24
                          5.62.112.0/21 maxlen: 21
                          95.156.198.0/24 maxlen: 24
                          5.62.120.0/22 maxlen: 22
                          5.62.124.0/23 maxlen: 23
                          5.62.127.0/24 maxlen: 24
                          5.62.126.0/24 maxlen: 24
                          95.156.210.0/24 maxlen: 24
                          95.156.211.0/24 maxlen: 24
                          85.190.130.0/23 maxlen: 23
                          85.190.128.0/23 maxlen: 23
                          95.156.209.0/24 maxlen: 24
                          95.156.213.0/24 maxlen: 24
                          109.230.240.0/23 maxlen: 23
                          5.62.64.0/21 maxlen: 21
                          194.169.211.0/24 maxlen: 24
                          217.114.192.0/21 maxlen: 21
                          128.0.112.0/23 maxlen: 23
                          128.0.114.0/23 maxlen: 23
                          5.101.160.0/21 maxlen: 21
                          5.101.166.0/24 maxlen: 24
                          2a03:4d45::/37 maxlen: 37
                          2a03:4d45:800::/37 maxlen: 37
                          2a03:4d44:2000::/37 maxlen: 37
                          2a03:4d40::/32 maxlen: 32
                          2a03:4d43::/32 maxlen: 32
                          2a03:4d43::/37 maxlen: 37
                          2a03:4d43:800::/37 maxlen: 37
                          2a03:4d43:2000::/37 maxlen: 37
                          2a03:4d41::/40 maxlen: 40
                          2a03:4d42::/37 maxlen: 37
                          2a03:4d42:800::/37 maxlen: 37
                          2a03:4d41:500::/40 maxlen: 40
                          2a03:4d42::/32 maxlen: 32
                          2a03:4d41:100::/40 maxlen: 40
                          2a03:4d41:200::/40 maxlen: 40
                          2a03:4d41:300::/40 maxlen: 40
                          2a03:4d41:900::/40 maxlen: 40
                          2a03:4d41:600::/40 maxlen: 40
                          2a03:4d41:400::/40 maxlen: 40
                          2a03:4d41::/44 maxlen: 44
                          2a03:4d41:100::/44 maxlen: 44
                          2a03:4d41:200::/44 maxlen: 44
                          2a03:4d41:300::/44 maxlen: 44
                          2a03:4d41:400::/44 maxlen: 44
                          2a03:4d41:500::/44 maxlen: 44
                          2a03:4d41:600::/44 maxlen: 44
                          2a03:4d41:10::/44 maxlen: 44
                          2a03:4d41:210::/44 maxlen: 44
                          2a03:4d41:510::/44 maxlen: 44
                          2a03:4d41:610::/44 maxlen: 44
                          2a03:4d47::/48 maxlen: 48
                          2a03:4d47:800::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:16:ee:98:4f:b0:01:9b:5f:24:05:09:6f:c3:01:3d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: Oct 27 00:54:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d938bdac6b212b67f334f9dd4dec5ef39395fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7d:77:41:04:da:9a:e9:36:84:d4:be:ea:46:
                    1b:7d:6d:79:dd:03:ef:e5:59:94:4e:89:42:45:8d:
                    d7:cc:25:8a:58:3d:7a:f0:6d:6d:09:86:ed:29:57:
                    16:a1:f4:bd:0b:47:88:59:a8:11:3c:37:9c:d0:58:
                    af:87:6d:79:21:39:cd:e0:ac:3d:41:ea:02:db:45:
                    90:a0:46:76:89:d5:74:82:0d:8d:72:d1:05:64:18:
                    98:a4:58:44:c2:7e:61:22:8b:cd:d5:cb:5a:c3:23:
                    7b:c9:1b:91:a1:11:12:69:1c:25:d3:ac:66:b7:3f:
                    78:58:2f:30:95:74:15:0e:9e:f9:a5:94:dc:02:22:
                    e7:e7:08:64:c4:d6:96:6a:56:8d:b3:8d:78:e9:0f:
                    cf:58:06:4c:64:72:d6:7e:2c:83:ea:82:ef:bf:06:
                    c1:49:d3:08:46:7e:6f:f1:67:84:58:36:88:8d:79:
                    68:5d:69:4b:03:f0:ff:d4:cc:cc:e3:c9:6a:28:27:
                    94:ab:e4:c5:9c:a7:b1:18:f7:3f:04:a8:e4:0d:54:
                    0d:da:6b:c1:f3:0a:30:a3:8d:23:c4:b9:60:82:7c:
                    36:44:14:70:c2:9c:81:7d:39:7d:e5:25:4d:2b:12:
                    a0:2f:d7:24:82:2f:99:95:e8:b8:66:e0:4e:e6:7d:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:93:8B:DA:C6:B2:12:B6:7F:33:4F:9D:D4:DE:C5:EF:39:39:5F:C9
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/fZOL2sayErZ_M0-d1N7F7zk5X8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.62.64.0/21
                  5.62.96.0/19
                  5.83.160.0-5.83.165.255
                  5.83.167.0-5.83.175.255
                  5.101.160.0/21
                  31.214.128.0/24
                  31.214.130.0/23
                  31.214.134.0-31.214.136.255
                  31.214.142.0/23
                  31.214.148.0/24
                  31.214.158.0-31.214.163.255
                  31.214.166.0/24
                  31.214.193.0/24
                  31.214.195.0-31.214.199.255
                  31.214.202.0-31.214.211.255
                  31.214.216.0/24
                  31.214.218.0-31.214.221.255
                  31.214.224.0/22
                  31.214.232.0/21
                  37.10.96.0/21
                  37.10.106.0/23
                  37.10.115.0/24
                  37.10.119.0-37.10.127.255
                  45.140.128.0/23
                  45.140.131.0/24
                  45.159.4.0/22
                  46.251.228.0/23
                  46.251.231.0-46.251.236.255
                  46.251.238.0/24
                  46.251.240.0/21
                  85.190.128.0/22
                  85.190.134.0-85.190.150.255
                  85.190.152.0-85.190.171.255
                  95.156.193.0-95.156.194.255
                  95.156.198.0/24
                  95.156.209.0-95.156.211.255
                  95.156.213.0/24
                  95.156.220.0/23
                  95.156.224.0/24
                  95.156.238.0/23
                  95.156.250.0/24
                  109.230.197.0/24
                  109.230.208.0/24
                  109.230.211.0/24
                  109.230.214.0/24
                  109.230.240.0/23
                  109.230.243.0/24
                  109.230.248.0/23
                  128.0.112.0/22
                  134.255.198.0/24
                  134.255.208.0/23
                  134.255.212.0-134.255.214.255
                  134.255.240.0/24
                  134.255.251.0/24
                  185.9.104.0/22
                  194.169.211.0/24
                  195.82.158.0/23
                  217.114.192.0/21
                IPv6:
                  2a03:4d40::-2a03:4d41:6ff:ffff:ffff:ffff:ffff:ffff
                  2a03:4d41:900::/40
                  2a03:4d42::/31
                  2a03:4d44:2000::/37
                  2a03:4d45::/36
                  2a03:4d47::/48
                  2a03:4d47:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:8e:0e:93:5f:86:a8:1a:db:79:e8:d8:76:17:e2:6c:d7:be:
         70:2b:ea:cb:65:33:5c:2c:b0:44:64:55:81:27:ee:83:42:cd:
         0c:a9:f0:35:09:18:a0:ef:a0:a6:9f:94:cf:1c:90:44:71:38:
         0b:7b:e3:0a:2e:3a:9a:31:13:00:8a:96:09:02:27:9d:b1:f6:
         02:50:ae:e6:83:f6:35:dc:6b:11:17:79:8f:ed:cb:5b:8b:2f:
         62:98:00:20:c3:89:19:45:fd:35:05:8d:7c:d6:cc:11:86:ef:
         bb:d2:e6:83:76:99:3c:93:27:46:11:bc:6e:6d:c1:a4:1f:4b:
         16:6d:76:4a:ef:e8:f7:64:c6:8e:40:21:c6:58:84:e2:ee:b9:
         cb:fd:4e:e5:e1:89:05:2f:ef:a0:96:8d:8d:1c:c7:3e:d1:88:
         19:16:8f:ad:52:2f:b3:4d:b7:9e:69:17:13:e5:e7:39:b6:2d:
         44:67:61:7e:bf:37:05:4d:7b:6b:dd:b7:af:39:0d:05:fc:96:
         4d:74:62:91:ea:6a:70:5b:6b:dd:8b:79:c2:ac:37:af:54:54:
         9e:8e:22:4f:c6:8a:89:af:1a:52:69:f5:6b:cd:2d:ca:0f:0d:
         7c:a3:18:7b:0e:f5:d8:65:30:c6:b6:25:1e:8d:cb:43:57:92:
         00:55:f3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org