Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AieMeoDTB6OOFGRkgRnBydBRGN0.roa
File:                     AieMeoDTB6OOFGRkgRnBydBRGN0.roa (raw, json)
Hash identifier:          mMkMQpZlZjgdjfCXtGeisg2kWxn3vWYjZ653pnioZJI=
Subject key identifier:   02:27:8C:7A:80:D3:07:A3:8E:14:64:64:81:19:C1:C9:D0:51:18:DD
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       018414CB2086E5D9F8F23885D0A652E4A35F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AieMeoDTB6OOFGRkgRnBydBRGN0.roa
Signing time:             Wed 26 Oct 2022 14:56:07 +0000
ROA not before:           Wed 26 Oct 2022 14:56:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.124.0/24 maxlen: 24
                          5.105.132.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.130.0/24 maxlen: 24
                          5.105.126.0/24 maxlen: 24
                          5.105.129.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.137.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.135.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.141.0/24 maxlen: 24
                          5.105.151.0/24 maxlen: 24
                          5.105.150.0/24 maxlen: 24
                          5.105.149.0/24 maxlen: 24
                          5.105.148.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.161.0/24 maxlen: 24
                          5.105.160.0/24 maxlen: 24
                          5.105.164.0/24 maxlen: 24
                          5.105.163.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.169.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.66.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.72.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.89.0/24 maxlen: 24
                          5.105.88.0/24 maxlen: 24
                          5.105.87.0/24 maxlen: 24
                          5.105.86.0/24 maxlen: 24
                          5.105.96.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.102.0/24 maxlen: 24
                          5.105.101.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.111.0/24 maxlen: 24
                          5.105.110.0/24 maxlen: 24
                          5.105.107.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.233.0/24 maxlen: 24
                          5.105.232.0/24 maxlen: 24
                          5.105.227.0/24 maxlen: 24
                          5.105.236.0/24 maxlen: 24
                          5.105.235.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.234.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.242.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.251.0/24 maxlen: 24
                          5.105.250.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.247.0/24 maxlen: 24
                          5.105.255.0/24 maxlen: 24
                          5.105.254.0/24 maxlen: 24
                          5.105.175.0/24 maxlen: 24
                          5.105.174.0/24 maxlen: 24
                          5.105.178.0/24 maxlen: 24
                          5.105.177.0/24 maxlen: 24
                          5.105.176.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.181.0/24 maxlen: 24
                          5.105.180.0/24 maxlen: 24
                          5.105.183.0/24 maxlen: 24
                          5.105.182.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.192.0/24 maxlen: 24
                          5.105.191.0/24 maxlen: 24
                          5.105.190.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.194.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.196.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.200.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.212.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.215.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.219.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.221.0/24 maxlen: 24
                          5.105.226.0/24 maxlen: 24
                          5.105.220.0/24 maxlen: 24
                          5.105.12.0/24 maxlen: 24
                          5.105.17.0/24 maxlen: 24
                          5.105.16.0/24 maxlen: 24
                          5.105.20.0/24 maxlen: 24
                          5.105.19.0/24 maxlen: 24
                          5.105.18.0/24 maxlen: 24
                          5.105.28.0/24 maxlen: 24
                          5.105.26.0/24 maxlen: 24
                          5.105.31.0/24 maxlen: 24
                          5.105.30.0/24 maxlen: 24
                          5.105.29.0/24 maxlen: 24
                          5.105.33.0/24 maxlen: 24
                          5.105.38.0/24 maxlen: 24
                          5.105.32.0/24 maxlen: 24
                          5.105.42.0/24 maxlen: 24
                          5.105.40.0/24 maxlen: 24
                          5.105.43.0/24 maxlen: 24
                          5.105.39.0/24 maxlen: 24
                          5.105.49.0/24 maxlen: 24
                          5.105.51.0/24 maxlen: 24
                          5.105.50.0/24 maxlen: 24
                          5.105.56.0/24 maxlen: 24
                          5.105.58.0/24 maxlen: 24
                          5.105.60.0/24 maxlen: 24
                          5.105.59.0/24 maxlen: 24
                          5.105.63.0/24 maxlen: 24
                          5.105.62.0/24 maxlen: 24
                          5.105.4.0/24 maxlen: 24
                          5.105.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:14:cb:20:86:e5:d9:f8:f2:38:85:d0:a6:52:e4:a3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Oct 26 14:56:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02278c7a80d307a38e1464648119c1c9d05118dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:80:78:e8:f4:67:19:10:56:84:9b:b9:b7:
                    7a:e0:a4:27:7b:aa:45:d9:39:4b:5f:b7:59:ee:bc:
                    09:93:91:fd:95:d7:ff:ba:e7:ac:fa:d6:d9:e6:f7:
                    65:8e:00:3a:44:ca:e2:06:67:5e:3d:64:37:20:d1:
                    af:d9:5e:ca:07:c4:ed:32:20:35:94:21:d5:df:3f:
                    92:5c:6e:33:a3:76:0f:77:47:57:78:b1:f7:3c:0d:
                    93:43:30:4a:82:14:a5:e0:1b:21:1b:8c:64:5f:63:
                    1a:a2:43:e7:5e:00:62:3f:46:0a:fd:66:86:e5:ac:
                    ad:aa:c4:10:99:8a:f1:35:ae:c4:ae:42:56:25:e8:
                    59:9c:a2:96:ca:f4:63:a8:8e:18:5f:c5:6a:a5:52:
                    1a:7f:37:ff:11:26:66:5a:6e:ed:ff:ec:96:15:e4:
                    2d:46:3a:62:4b:d5:b6:73:c9:c0:f6:d9:57:0f:75:
                    26:8f:4c:7e:34:f7:56:0d:2d:4f:87:63:7e:98:64:
                    4b:fc:da:08:24:39:e8:32:3e:f8:f9:da:19:26:1e:
                    11:ac:63:6e:38:42:12:9d:0f:d1:b9:f7:f5:eb:1a:
                    77:0f:93:9c:45:c0:38:a6:cc:98:5a:89:8c:53:73:
                    c4:4b:5a:aa:d1:b8:f4:b1:cd:84:e7:67:88:5f:78:
                    86:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:27:8C:7A:80:D3:07:A3:8E:14:64:64:81:19:C1:C9:D0:51:18:DD
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AieMeoDTB6OOFGRkgRnBydBRGN0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.4.0/24
                  5.105.7.0/24
                  5.105.12.0/24
                  5.105.16.0-5.105.20.255
                  5.105.26.0/24
                  5.105.28.0-5.105.33.255
                  5.105.38.0-5.105.40.255
                  5.105.42.0/23
                  5.105.49.0-5.105.51.255
                  5.105.56.0/24
                  5.105.58.0-5.105.60.255
                  5.105.62.0/23
                  5.105.66.0/24
                  5.105.68.0/23
                  5.105.72.0/24
                  5.105.76.0/23
                  5.105.82.0/24
                  5.105.84.0/24
                  5.105.86.0-5.105.89.255
                  5.105.94.0/24
                  5.105.96.0/24
                  5.105.101.0-5.105.102.255
                  5.105.107.0/24
                  5.105.110.0-5.105.112.255
                  5.105.115.0/24
                  5.105.124.0/22
                  5.105.129.0-5.105.132.255
                  5.105.134.0-5.105.139.255
                  5.105.141.0-5.105.143.255
                  5.105.148.0/22
                  5.105.156.0/24
                  5.105.160.0-5.105.165.255
                  5.105.168.0-5.105.170.255
                  5.105.172.0/24
                  5.105.174.0-5.105.178.255
                  5.105.180.0/22
                  5.105.186.0/23
                  5.105.190.0-5.105.192.255
                  5.105.194.0-5.105.200.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.212.0/24
                  5.105.214.0-5.105.216.255
                  5.105.218.0-5.105.221.255
                  5.105.226.0/23
                  5.105.229.0-5.105.230.255
                  5.105.232.0-5.105.236.255
                  5.105.239.0-5.105.240.255
                  5.105.242.0/24
                  5.105.244.0/23
                  5.105.247.0-5.105.251.255
                  5.105.254.0/23
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:72:fe:93:3f:d1:fb:3b:15:03:ea:dc:bf:25:2e:15:58:
         26:7b:7f:3f:c1:81:7e:62:dc:c0:41:f2:2f:68:a0:19:8d:f2:
         e1:d1:92:40:eb:7b:9c:3e:47:4b:78:02:b5:e6:df:62:20:6e:
         84:44:bb:25:ff:fc:e3:fe:b9:4c:5b:b5:e3:28:6c:81:c1:34:
         30:2c:36:05:d0:cd:f6:fa:5f:58:b0:54:bb:bb:5c:ff:37:ed:
         ad:77:bd:da:5a:0a:bc:37:c5:47:09:ca:e3:9d:a5:dc:4e:77:
         03:09:13:9c:98:24:4c:74:29:b4:fd:5f:b8:77:b4:9e:c3:5e:
         7a:3f:06:96:78:03:c7:42:45:e5:0a:75:5b:9c:85:44:39:23:
         c0:3b:8c:c1:08:72:5f:d3:11:95:da:4e:32:20:8d:88:e2:bf:
         c8:c5:29:b5:9c:b0:7e:ef:61:89:21:df:42:fe:03:7e:e0:5c:
         c5:3b:6a:8f:2a:e2:76:e8:79:fd:90:78:d4:37:92:35:2c:a5:
         54:dd:ec:64:30:9e:30:b3:73:27:5c:50:10:0d:20:ab:e7:af:
         00:d9:3d:6e:b7:bf:e2:33:e0:8f:af:b9:a0:a9:60:32:80:54:
         55:af:1a:69:61:1c:e5:93:04:7f:cd:d6:67:d7:9a:41:ff:58:
         74:83:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org