Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Dgw2Q8n8VuCpMC7Br7Y6ecTJg1w.roa
File:                     Dgw2Q8n8VuCpMC7Br7Y6ecTJg1w.roa (raw, json)
Hash identifier:          JORDWPEE+EJnBsPvTpJBoBB+h5iJ0iDTk74QfeUOB2A=
Subject key identifier:   0E:0C:36:43:C9:FC:56:E0:A9:30:2E:C1:AF:B6:3A:79:C4:C9:83:5C
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       018447859F4B9DDA8F5D914F442CCF8A1EBF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Dgw2Q8n8VuCpMC7Br7Y6ecTJg1w.roa
Signing time:             Sat 05 Nov 2022 11:20:50 +0000
ROA not before:           Sat 05 Nov 2022 11:20:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.132.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.126.0/24 maxlen: 24
                          5.105.129.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.137.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.135.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.141.0/24 maxlen: 24
                          5.105.151.0/24 maxlen: 24
                          5.105.150.0/24 maxlen: 24
                          5.105.149.0/24 maxlen: 24
                          5.105.148.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.161.0/24 maxlen: 24
                          5.105.160.0/24 maxlen: 24
                          5.105.164.0/24 maxlen: 24
                          5.105.163.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.72.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.89.0/24 maxlen: 24
                          5.105.88.0/24 maxlen: 24
                          5.105.87.0/24 maxlen: 24
                          5.105.86.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.102.0/24 maxlen: 24
                          5.105.101.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.111.0/24 maxlen: 24
                          5.105.110.0/24 maxlen: 24
                          5.105.107.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.233.0/24 maxlen: 24
                          5.105.232.0/24 maxlen: 24
                          5.105.227.0/24 maxlen: 24
                          5.105.236.0/24 maxlen: 24
                          5.105.235.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.234.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.242.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.251.0/24 maxlen: 24
                          5.105.250.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.247.0/24 maxlen: 24
                          5.105.255.0/24 maxlen: 24
                          5.105.254.0/24 maxlen: 24
                          5.105.175.0/24 maxlen: 24
                          5.105.174.0/24 maxlen: 24
                          5.105.178.0/24 maxlen: 24
                          5.105.177.0/24 maxlen: 24
                          5.105.176.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.181.0/24 maxlen: 24
                          5.105.180.0/24 maxlen: 24
                          5.105.183.0/24 maxlen: 24
                          5.105.182.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.192.0/24 maxlen: 24
                          5.105.191.0/24 maxlen: 24
                          5.105.190.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.194.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.196.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.200.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.212.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.219.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.221.0/24 maxlen: 24
                          5.105.220.0/24 maxlen: 24
                          5.105.16.0/24 maxlen: 24
                          5.105.20.0/24 maxlen: 24
                          5.105.19.0/24 maxlen: 24
                          5.105.24.0/24 maxlen: 24
                          5.105.18.0/24 maxlen: 24
                          5.105.28.0/24 maxlen: 24
                          5.105.26.0/24 maxlen: 24
                          5.105.31.0/24 maxlen: 24
                          5.105.30.0/24 maxlen: 24
                          5.105.29.0/24 maxlen: 24
                          5.105.33.0/24 maxlen: 24
                          5.105.38.0/24 maxlen: 24
                          5.105.32.0/24 maxlen: 24
                          5.105.42.0/24 maxlen: 24
                          5.105.40.0/24 maxlen: 24
                          5.105.43.0/24 maxlen: 24
                          5.105.39.0/24 maxlen: 24
                          5.105.49.0/24 maxlen: 24
                          5.105.56.0/24 maxlen: 24
                          5.105.58.0/24 maxlen: 24
                          5.105.60.0/24 maxlen: 24
                          5.105.59.0/24 maxlen: 24
                          5.105.63.0/24 maxlen: 24
                          5.105.62.0/24 maxlen: 24
                          5.105.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:47:85:9f:4b:9d:da:8f:5d:91:4f:44:2c:cf:8a:1e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Nov  5 11:20:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e0c3643c9fc56e0a9302ec1afb63a79c4c9835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:ae:a6:9d:3a:d5:68:d4:ff:55:7c:fa:66:
                    35:53:0a:83:72:f4:74:08:bd:a9:54:e3:12:79:64:
                    53:a1:01:42:7c:7d:b1:0f:51:5a:2d:ac:0c:69:d4:
                    a5:13:df:7a:a6:7a:e1:ff:5b:70:a0:db:74:33:fc:
                    e4:bd:08:fd:85:47:e3:2f:21:d5:e0:a3:9f:f8:73:
                    16:68:b1:80:76:b5:f0:f3:04:1a:62:84:5d:f8:2e:
                    70:c4:e9:20:63:04:12:d4:96:a4:91:b4:b8:9f:65:
                    73:bf:96:17:e6:37:ec:21:36:bd:5e:96:8e:28:8c:
                    ac:39:39:58:18:c7:6d:b5:23:aa:b6:f6:20:bf:84:
                    03:d0:c0:d1:78:dd:65:a1:4c:c1:31:bd:3b:ed:c6:
                    ad:e7:40:57:75:c9:14:1a:be:29:38:79:98:1a:15:
                    27:3e:f5:f3:7b:83:46:31:79:be:11:55:5f:60:43:
                    4a:9e:32:74:e4:e2:9f:05:3c:57:87:c2:b2:8d:ce:
                    73:f6:63:0a:a6:aa:5a:97:3f:27:75:b7:d6:1b:0a:
                    52:26:56:35:29:6a:2a:81:ca:42:0d:77:ac:1a:f1:
                    75:4b:56:cc:06:31:66:27:39:6e:be:81:49:9b:48:
                    37:80:69:40:ff:1d:ba:24:3c:d2:02:20:48:5a:16:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0C:36:43:C9:FC:56:E0:A9:30:2E:C1:AF:B6:3A:79:C4:C9:83:5C
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Dgw2Q8n8VuCpMC7Br7Y6ecTJg1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.4.0/24
                  5.105.16.0/24
                  5.105.18.0-5.105.20.255
                  5.105.24.0/24
                  5.105.26.0/24
                  5.105.28.0-5.105.33.255
                  5.105.38.0-5.105.40.255
                  5.105.42.0/23
                  5.105.49.0/24
                  5.105.56.0/24
                  5.105.58.0-5.105.60.255
                  5.105.62.0/23
                  5.105.68.0/23
                  5.105.72.0/24
                  5.105.76.0/23
                  5.105.82.0/24
                  5.105.84.0/24
                  5.105.86.0-5.105.89.255
                  5.105.94.0/24
                  5.105.101.0-5.105.102.255
                  5.105.107.0/24
                  5.105.110.0-5.105.112.255
                  5.105.115.0/24
                  5.105.125.0-5.105.127.255
                  5.105.129.0/24
                  5.105.131.0-5.105.132.255
                  5.105.134.0-5.105.139.255
                  5.105.141.0-5.105.143.255
                  5.105.148.0/22
                  5.105.156.0/24
                  5.105.160.0-5.105.165.255
                  5.105.168.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.174.0-5.105.178.255
                  5.105.180.0/22
                  5.105.186.0/23
                  5.105.190.0-5.105.192.255
                  5.105.194.0-5.105.200.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.212.0/24
                  5.105.214.0/24
                  5.105.216.0/24
                  5.105.218.0-5.105.221.255
                  5.105.227.0/24
                  5.105.229.0-5.105.230.255
                  5.105.232.0-5.105.236.255
                  5.105.239.0-5.105.240.255
                  5.105.242.0/24
                  5.105.244.0/23
                  5.105.247.0-5.105.251.255
                  5.105.254.0/23
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:82:f7:9d:1d:fd:39:e8:cb:7b:7a:4d:68:36:02:e6:63:97:
         c0:8b:72:4f:a9:0a:0f:79:dd:e0:41:b9:7c:4c:c8:02:48:f4:
         5a:26:34:81:77:cd:73:c4:6c:95:2e:77:7a:08:ce:f8:b3:d0:
         67:78:7e:26:c4:a9:4a:8c:75:1a:f8:9d:96:31:7f:6b:1f:ba:
         61:a0:2b:03:69:8c:6d:2f:e4:06:a1:f2:bc:ea:04:d2:df:e1:
         53:f7:2c:3a:ef:3f:f9:00:63:40:8f:17:f5:d4:76:91:68:ec:
         9c:62:bd:92:56:02:c1:68:54:c5:b3:51:38:82:04:aa:70:90:
         19:93:70:2e:8d:db:f1:7c:21:9a:ca:70:fb:f6:68:82:c5:93:
         8d:3a:ca:b4:dc:31:2b:e4:fe:6f:e4:6c:8d:bd:f0:02:3d:59:
         79:d6:59:30:59:f2:25:bc:98:f9:ad:44:6c:8a:e9:12:ba:6f:
         a7:b7:ae:0a:05:15:f5:bb:06:74:bf:c0:9d:76:84:c2:78:56:
         33:82:6b:c4:17:2f:ab:e5:0b:e2:65:f1:22:60:45:f8:c6:37:
         ff:f5:73:8c:26:3a:ec:8b:2d:3e:0d:c0:a6:e4:f7:20:b6:15:
         85:b5:26:0b:4b:22:13:01:97:1a:aa:34:24:2c:e4:da:7c:a3:
         0f:aa:f2:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:56 2024 by rpki-client on console-ams.rpki-client.org