Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/OVYSc1Vljtg1driQRg3xwt57n0s.roa
File:                     OVYSc1Vljtg1driQRg3xwt57n0s.roa (raw, json)
Hash identifier:          nEW6mHpSDsCR5sTM+F5ap43VCxuTGU3iP+0FBoU+KHc=
Subject key identifier:   39:56:12:73:55:65:8E:D8:35:76:B8:90:46:0D:F1:C2:DE:7B:9F:4B
Certificate issuer:       /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial:       0183B26527FAF20043D7CFCDF94F310B6967
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/OVYSc1Vljtg1driQRg3xwt57n0s.roa
Signing time:             Fri 07 Oct 2022 12:21:57 +0000
ROA not before:           Fri 07 Oct 2022 12:21:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3209
IP address blocks:        94.114.4.0/22 maxlen: 22
                          94.114.0.0/16 maxlen: 16
                          94.114.0.0/15 maxlen: 15
                          94.114.12.0/23 maxlen: 23
                          94.114.24.0/22 maxlen: 22
                          5.147.255.0/24 maxlen: 24
                          95.222.44.0/23 maxlen: 23
                          95.222.48.0/21 maxlen: 21
                          95.222.72.0/22 maxlen: 22
                          94.114.56.0/23 maxlen: 23
                          95.222.0.0/22 maxlen: 22
                          95.222.0.0/16 maxlen: 16
                          37.201.208.0/24 maxlen: 24
                          95.222.0.0/15 maxlen: 15
                          95.222.24.0/21 maxlen: 21
                          88.153.134.0/23 maxlen: 23
                          130.180.64.0/18 maxlen: 18
                          88.153.200.0/23 maxlen: 23
                          185.248.36.0/22 maxlen: 22
                          185.248.36.0/23 maxlen: 23
                          185.248.38.0/23 maxlen: 23
                          88.153.220.0/23 maxlen: 23
                          88.152.176.0/23 maxlen: 23
                          88.152.184.0/23 maxlen: 23
                          88.152.188.0/23 maxlen: 23
                          130.180.0.0/17 maxlen: 17
                          130.180.0.0/18 maxlen: 18
                          88.153.20.0/23 maxlen: 23
                          88.153.48.0/21 maxlen: 21
                          5.146.37.0/24 maxlen: 24
                          88.153.0.0/16 maxlen: 16
                          88.153.6.0/23 maxlen: 23
                          88.152.72.0/22 maxlen: 22
                          88.152.76.0/23 maxlen: 23
                          88.152.88.0/21 maxlen: 21
                          88.152.0.0/21 maxlen: 21
                          88.152.0.0/16 maxlen: 16
                          88.152.0.0/15 maxlen: 15
                          88.152.36.0/22 maxlen: 22
                          88.152.32.0/22 maxlen: 22
                          88.152.48.0/22 maxlen: 22
                          176.198.1.0/24 maxlen: 24
                          80.69.96.0/21 maxlen: 21
                          80.69.96.0/20 maxlen: 20
                          80.69.104.0/21 maxlen: 21
                          62.143.127.0/24 maxlen: 24
                          178.203.232.0/22 maxlen: 22
                          178.203.228.0/22 maxlen: 22
                          178.203.48.0/22 maxlen: 22
                          178.203.4.0/23 maxlen: 23
                          178.203.6.0/23 maxlen: 23
                          178.203.16.0/22 maxlen: 22
                          178.203.148.0/22 maxlen: 22
                          178.203.154.0/23 maxlen: 23
                          178.203.156.0/22 maxlen: 22
                          178.203.190.0/23 maxlen: 23
                          178.203.144.0/22 maxlen: 22
                          178.202.84.0/22 maxlen: 22
                          178.202.96.0/22 maxlen: 22
                          178.202.104.0/22 maxlen: 22
                          178.202.100.0/22 maxlen: 22
                          178.202.120.0/22 maxlen: 22
                          178.202.128.0/22 maxlen: 22
                          178.202.26.0/23 maxlen: 23
                          178.202.48.0/20 maxlen: 20
                          78.94.128.0/17 maxlen: 17
                          178.202.202.0/23 maxlen: 23
                          178.202.204.0/22 maxlen: 22
                          178.202.232.0/22 maxlen: 22
                          37.201.128.0/17 maxlen: 17
                          94.114.1.0/24 maxlen: 24
                          178.201.166.0/23 maxlen: 23
                          37.201.72.0/21 maxlen: 21
                          178.201.96.0/23 maxlen: 23
                          37.201.108.0/22 maxlen: 22
                          37.201.116.0/22 maxlen: 22
                          178.201.240.0/20 maxlen: 20
                          37.201.252.0/22 maxlen: 22
                          178.202.0.0/15 maxlen: 15
                          5.147.204.0/22 maxlen: 22
                          78.94.0.0/17 maxlen: 17
                          78.94.0.0/16 maxlen: 16
                          178.201.216.0/22 maxlen: 22
                          37.201.216.0/21 maxlen: 21
                          5.146.192.0/23 maxlen: 23
                          178.200.170.0/23 maxlen: 23
                          94.79.128.0/19 maxlen: 19
                          94.79.128.0/18 maxlen: 18
                          178.200.114.0/23 maxlen: 23
                          178.200.134.0/23 maxlen: 23
                          178.200.136.0/22 maxlen: 22
                          5.146.168.0/21 maxlen: 21
                          178.201.16.0/20 maxlen: 20
                          5.147.52.0/23 maxlen: 23
                          178.201.34.0/23 maxlen: 23
                          178.201.36.0/22 maxlen: 22
                          5.147.68.0/22 maxlen: 22
                          37.201.50.0/23 maxlen: 23
                          5.146.250.0/23 maxlen: 23
                          94.79.160.0/19 maxlen: 19
                          5.147.10.0/23 maxlen: 23
                          5.147.0.0/16 maxlen: 16
                          5.147.14.0/23 maxlen: 23
                          5.147.22.0/23 maxlen: 23
                          178.201.4.0/23 maxlen: 23
                          37.201.4.0/22 maxlen: 22
                          37.201.0.0/17 maxlen: 17
                          37.201.2.0/23 maxlen: 23
                          37.201.0.0/16 maxlen: 16
                          176.199.208.0/22 maxlen: 22
                          176.199.216.0/23 maxlen: 23
                          176.199.232.0/21 maxlen: 21
                          5.146.0.0/16 maxlen: 16
                          5.146.0.0/15 maxlen: 15
                          37.24.128.0/17 maxlen: 17
                          178.200.54.0/23 maxlen: 23
                          5.146.124.0/23 maxlen: 23
                          178.200.100.0/22 maxlen: 22
                          5.146.126.0/23 maxlen: 23
                          178.200.104.0/22 maxlen: 22
                          178.200.8.0/21 maxlen: 21
                          88.152.225.0/24 maxlen: 24
                          5.146.34.0/23 maxlen: 23
                          178.200.0.0/15 maxlen: 15
                          5.146.46.0/23 maxlen: 23
                          5.146.48.0/21 maxlen: 21
                          178.200.0.0/14 maxlen: 14
                          5.146.72.0/21 maxlen: 21
                          176.198.246.0/23 maxlen: 23
                          176.198.244.0/23 maxlen: 23
                          176.199.0.0/22 maxlen: 22
                          176.199.0.0/16 maxlen: 16
                          109.91.0.0/16 maxlen: 16
                          176.198.220.0/22 maxlen: 22
                          176.199.144.0/22 maxlen: 22
                          176.199.140.0/22 maxlen: 22
                          37.24.0.0/17 maxlen: 17
                          176.199.44.0/22 maxlen: 22
                          37.24.0.0/16 maxlen: 16
                          176.199.48.0/22 maxlen: 22
                          176.199.64.0/22 maxlen: 22
                          5.10.160.0/19 maxlen: 19
                          5.10.160.0/20 maxlen: 20
                          5.10.176.0/20 maxlen: 20
                          176.198.60.0/22 maxlen: 22
                          176.198.72.0/22 maxlen: 22
                          176.198.0.0/16 maxlen: 16
                          176.198.0.0/15 maxlen: 15
                          92.50.96.0/19 maxlen: 19
                          46.252.128.0/20 maxlen: 20
                          46.252.128.0/21 maxlen: 21
                          46.252.136.0/21 maxlen: 21
                          176.198.164.0/23 maxlen: 23
                          176.198.172.0/22 maxlen: 22
                          176.198.80.0/22 maxlen: 22
                          176.198.96.0/22 maxlen: 22
                          92.50.64.0/19 maxlen: 19
                          176.198.116.0/22 maxlen: 22
                          92.50.64.0/18 maxlen: 18
                          81.210.192.0/18 maxlen: 18
                          192.109.212.0/24 maxlen: 24
                          62.143.128.0/17 maxlen: 17
                          192.109.211.0/24 maxlen: 24
                          62.143.40.0/23 maxlen: 23
                          62.143.46.0/23 maxlen: 23
                          62.143.88.0/23 maxlen: 23
                          62.143.204.0/22 maxlen: 22
                          109.90.0.0/16 maxlen: 16
                          109.90.0.0/15 maxlen: 15
                          62.143.160.0/21 maxlen: 21
                          62.143.176.0/23 maxlen: 23
                          62.143.182.0/23 maxlen: 23
                          95.223.116.0/23 maxlen: 23
                          95.223.114.0/23 maxlen: 23
                          95.223.140.0/23 maxlen: 23
                          95.223.54.0/23 maxlen: 23
                          95.223.72.0/22 maxlen: 22
                          95.223.90.0/23 maxlen: 23
                          95.223.204.0/23 maxlen: 23
                          62.143.0.0/17 maxlen: 17
                          62.143.2.0/23 maxlen: 23
                          62.143.0.0/16 maxlen: 16
                          62.143.14.0/23 maxlen: 23
                          62.143.12.0/23 maxlen: 23
                          95.223.228.0/22 maxlen: 22
                          81.210.128.0/18 maxlen: 18
                          81.210.128.0/17 maxlen: 17
                          95.223.184.0/23 maxlen: 23
                          95.223.188.0/23 maxlen: 23
                          94.114.206.0/23 maxlen: 23
                          94.114.202.0/23 maxlen: 23
                          95.222.154.0/23 maxlen: 23
                          94.114.236.0/22 maxlen: 22
                          95.222.84.0/22 maxlen: 22
                          94.114.156.0/23 maxlen: 23
                          94.114.164.0/23 maxlen: 23
                          94.114.168.0/22 maxlen: 22
                          95.222.120.0/22 maxlen: 22
                          95.223.0.0/16 maxlen: 16
                          94.114.240.0/21 maxlen: 21
                          95.222.212.0/22 maxlen: 22
                          95.222.208.0/22 maxlen: 22
                          94.115.0.0/16 maxlen: 16
                          2a02:908::/32 maxlen: 32
                          2a02:908:8000::/33 maxlen: 33
                          2a02:908::/33 maxlen: 33

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b2:65:27:fa:f2:00:43:d7:cf:cd:f9:4f:31:0b:69:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
        Validity
            Not Before: Oct  7 12:21:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3956127355658ed83576b890460df1c2de7b9f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:47:1f:4a:7a:2d:8a:1a:59:ee:dc:0e:d5:
                    65:98:ca:db:1b:86:7e:c0:e6:65:2e:34:64:49:17:
                    2f:fa:3a:cd:6a:46:f2:c7:e7:cd:56:8e:3f:2d:bf:
                    95:0c:de:3e:9c:99:7f:67:05:15:5d:24:ed:2b:ae:
                    2b:d5:14:64:e9:ec:ae:54:22:0a:69:66:42:42:e5:
                    69:84:1a:6d:b7:1b:ec:e7:94:37:bd:bc:e5:68:28:
                    e6:c8:48:e5:8c:02:70:25:f1:ed:5e:cf:d7:80:09:
                    24:f0:00:32:d1:0e:0f:c8:d9:88:42:c9:6d:cd:98:
                    be:0b:3c:23:9c:76:d4:f7:88:cf:4b:d1:35:93:19:
                    3e:f2:0f:11:e6:35:e0:57:85:bb:16:15:4d:de:db:
                    38:93:6e:5c:bb:76:46:57:c7:0c:80:ac:84:d8:66:
                    e2:d9:40:94:81:b5:3f:4a:a6:1a:e8:a1:02:7f:7a:
                    96:82:e0:7c:0d:27:7c:29:bc:59:a4:21:c1:8b:94:
                    f3:56:2a:6f:28:99:84:a6:ec:d0:c4:b8:b1:22:05:
                    7a:9e:45:0b:47:89:13:44:6c:89:03:85:92:e0:1c:
                    41:df:96:f4:99:46:ea:35:dd:dc:c3:57:33:05:82:
                    08:0f:25:48:68:de:30:9f:9f:27:79:d3:fc:b4:01:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:56:12:73:55:65:8E:D8:35:76:B8:90:46:0D:F1:C2:DE:7B:9F:4B
            X509v3 Authority Key Identifier:
                keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/OVYSc1Vljtg1driQRg3xwt57n0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.10.160.0/19
                  5.146.0.0/15
                  37.24.0.0/16
                  37.201.0.0/16
                  46.252.128.0/20
                  62.143.0.0/16
                  78.94.0.0/16
                  80.69.96.0/20
                  81.210.128.0/17
                  88.152.0.0/15
                  92.50.64.0/18
                  94.79.128.0/18
                  94.114.0.0/15
                  95.222.0.0/15
                  109.90.0.0/15
                  130.180.0.0/17
                  176.198.0.0/15
                  178.200.0.0/14
                  185.248.36.0/22
                  192.109.211.0-192.109.212.255
                IPv6:
                  2a02:908::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:6f:90:45:e2:5e:ec:0f:50:8d:f9:b2:43:15:ea:1d:49:00:
         bb:4e:fb:a9:3f:0a:06:4f:71:8f:c7:4c:b2:53:e8:90:5e:5a:
         41:fa:7f:4e:59:7d:33:21:2e:1e:90:c8:a6:f1:22:52:4c:04:
         12:bf:45:65:f8:9d:21:7e:4e:2b:3c:98:26:fd:55:c7:95:7b:
         67:54:5f:41:11:e4:e0:f8:ce:b5:c9:ac:db:da:dd:2e:d0:35:
         6c:1c:e9:81:df:64:52:03:dc:f8:cb:ea:a1:cf:cb:ec:ff:d2:
         4b:31:39:ae:d9:56:5f:da:67:39:d7:26:c8:fb:c1:09:c4:b4:
         0e:65:34:73:d9:e5:b8:d9:cb:9e:4f:83:8b:ba:a3:1b:72:bf:
         11:89:4e:0a:8a:52:7b:05:97:4d:67:ae:3a:e7:d4:78:02:4f:
         94:e5:c7:d3:91:94:11:77:27:4b:19:2c:ab:1e:fc:11:3c:1b:
         dd:65:fc:cf:4d:2c:59:7b:34:23:89:12:cd:f6:b0:d3:10:45:
         ab:d9:ad:5e:36:29:e7:f2:77:58:90:13:72:f9:77:54:86:0f:
         6b:0a:df:b3:5f:2f:0f:08:b9:39:f6:b4:39:19:cf:05:4f:d2:
         03:19:e9:ac:00:74:8f:ce:32:ce:67:81:bf:1f:f8:da:34:69:
         0d:76:77:f7
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYOyZSf68gBD18/N+U8xC2lnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2
MGMwNTQwHhcNMjIxMDA3MTIyMTU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTU2MTI3MzU1NjU4ZWQ4MzU3NmI4OTA0NjBkZjFjMmRlN2I5ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLVHH0p6LYoaWe7cDtVlmMrbG4Z+
wOZlLjRkSRcv+jrNakbyx+fNVo4/Lb+VDN4+nJl/ZwUVXSTtK64r1RRk6eyuVCIK
aWZCQuVphBpttxvs55Q3vbzlaCjmyEjljAJwJfHtXs/XgAkk8AAy0Q4PyNmIQslt
zZi+CzwjnHbU94jPS9E1kxk+8g8R5jXgV4W7FhVN3ts4k25cu3ZGV8cMgKyE2Gbi
2UCUgbU/SqYa6KECf3qWguB8DSd8KbxZpCHBi5TzVipvKJmEpuzQxLixIgV6nkUL
R4kTRGyJA4WS4BxB35b0mUbqNd3cw1czBYIIDyVIaN4wn58nedP8tAHWhwIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFDlWEnNVZY7YNXa4kEYN8cLee59LMB8GA1UdIwQY
MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt
YjI5ODEyYzNlNDY1LzEvT1ZZU2MxVmxqdGcxZHJpUVJnM3h3dDU3bjBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1
LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDB7BAIAATB1AwQFBQqg
AwMBBZIDAwAlGAMDACXJAwQELvyAAwMAPo8DAwBOXgMEBFBFYAMEB1HSgAMDAViY
AwQGXDJAAwQGXk+AAwMBXnIDAwFf3gMDAW1aAwQHgrQAAwMBsMYDAwKyyAMEArn4
JDAMAwQAwG3TAwQAwG3UMA0EAgACMAcDBQAqAgkIMA0GCSqGSIb3DQEBCwUAA4IB
AQA2b5BF4l7sD1CN+bJDFeodSQC7TvupPwoGT3GPx0yyU+iQXlpB+n9OWX0zIS4e
kMim8SJSTAQSv0Vl+J0hfk4rPJgm/VXHlXtnVF9BEeTg+M61yazb2t0u0DVsHOmB
32RSA9z4y+qhz8vs/9JLMTmu2VZf2mc51ybI+8EJxLQOZTRz2eW42cueT4OLuqMb
cr8RiU4KilJ7BZdNZ64659R4Ak+U5cfTkZQRdydLGSyrHvwRPBvdZfzPTSxZezQj
iRLN9rDTEEWr2a1eNinn8ndYkBNy+XdUhg9rCt+zXy8PCLk59rQ5Gc8FT9IDGems
AHSPzjLOZ4G/H/jaNGkNdnf3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org