Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/G0Rjg1D1WNonjfeQt60BwDn183o.roa
File:                     G0Rjg1D1WNonjfeQt60BwDn183o.roa (raw, json)
Hash identifier:          /1Ha29OANW6a5sSNmzmlbXo6ELZaNymThKhzyprtId0=
Subject key identifier:   1B:44:63:83:50:F5:58:DA:27:8D:F7:90:B7:AD:01:C0:39:F5:F3:7A
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0183FB0B191B40784BF92DCD4FF375469CBE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/G0Rjg1D1WNonjfeQt60BwDn183o.roa
Signing time:             Fri 21 Oct 2022 14:55:52 +0000
ROA not before:           Fri 21 Oct 2022 14:55:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.124.0/24 maxlen: 24
                          5.105.132.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.130.0/24 maxlen: 24
                          5.105.126.0/24 maxlen: 24
                          5.105.129.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.137.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.135.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.141.0/24 maxlen: 24
                          5.105.151.0/24 maxlen: 24
                          5.105.150.0/24 maxlen: 24
                          5.105.149.0/24 maxlen: 24
                          5.105.148.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.161.0/24 maxlen: 24
                          5.105.160.0/24 maxlen: 24
                          5.105.164.0/24 maxlen: 24
                          5.105.163.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.169.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.66.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.72.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.88.0/24 maxlen: 24
                          5.105.87.0/24 maxlen: 24
                          5.105.86.0/24 maxlen: 24
                          5.105.96.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.102.0/24 maxlen: 24
                          5.105.101.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.111.0/24 maxlen: 24
                          5.105.110.0/24 maxlen: 24
                          5.105.107.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.228.0/24 maxlen: 24
                          5.105.233.0/24 maxlen: 24
                          5.105.232.0/24 maxlen: 24
                          5.105.227.0/24 maxlen: 24
                          5.105.236.0/24 maxlen: 24
                          5.105.235.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.234.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.242.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.251.0/24 maxlen: 24
                          5.105.250.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.247.0/24 maxlen: 24
                          5.105.254.0/24 maxlen: 24
                          5.105.175.0/24 maxlen: 24
                          5.105.174.0/24 maxlen: 24
                          5.105.178.0/24 maxlen: 24
                          5.105.177.0/24 maxlen: 24
                          5.105.176.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.181.0/24 maxlen: 24
                          5.105.180.0/24 maxlen: 24
                          5.105.184.0/24 maxlen: 24
                          5.105.183.0/24 maxlen: 24
                          5.105.182.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.192.0/24 maxlen: 24
                          5.105.191.0/24 maxlen: 24
                          5.105.190.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.194.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.196.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.200.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.212.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.215.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.219.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.223.0/24 maxlen: 24
                          5.105.221.0/24 maxlen: 24
                          5.105.226.0/24 maxlen: 24
                          5.105.225.0/24 maxlen: 24
                          5.105.220.0/24 maxlen: 24
                          5.105.12.0/24 maxlen: 24
                          5.105.17.0/24 maxlen: 24
                          5.105.16.0/24 maxlen: 24
                          5.105.20.0/24 maxlen: 24
                          5.105.19.0/24 maxlen: 24
                          5.105.18.0/24 maxlen: 24
                          5.105.28.0/24 maxlen: 24
                          5.105.31.0/24 maxlen: 24
                          5.105.30.0/24 maxlen: 24
                          5.105.29.0/24 maxlen: 24
                          5.105.33.0/24 maxlen: 24
                          5.105.38.0/24 maxlen: 24
                          5.105.32.0/24 maxlen: 24
                          5.105.42.0/24 maxlen: 24
                          5.105.39.0/24 maxlen: 24
                          5.105.49.0/24 maxlen: 24
                          5.105.51.0/24 maxlen: 24
                          5.105.50.0/24 maxlen: 24
                          5.105.56.0/24 maxlen: 24
                          5.105.58.0/24 maxlen: 24
                          5.105.60.0/24 maxlen: 24
                          5.105.59.0/24 maxlen: 24
                          5.105.63.0/24 maxlen: 24
                          5.105.62.0/24 maxlen: 24
                          5.105.4.0/24 maxlen: 24
                          5.105.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:fb:0b:19:1b:40:78:4b:f9:2d:cd:4f:f3:75:46:9c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Oct 21 14:55:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b44638350f558da278df790b7ad01c039f5f37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bc:01:cd:c8:6e:63:3d:a8:8d:4b:7b:b6:21:
                    03:e2:b1:10:96:b5:1a:b7:cf:c7:76:24:e1:a6:e7:
                    e9:63:2c:bd:0c:be:fc:5f:b9:a2:96:1a:84:00:f9:
                    d7:02:97:11:53:96:cd:2e:88:dc:f3:2a:10:d2:af:
                    3c:2e:fa:a7:4d:f5:be:10:c8:9e:e5:34:db:6c:47:
                    f7:e3:fa:bb:ce:23:3d:54:45:6d:49:ab:16:b6:32:
                    60:9e:85:28:de:18:bb:6d:34:04:da:02:3a:c1:8e:
                    50:aa:46:c0:6e:cf:08:2e:2d:6f:00:48:ac:82:d7:
                    c6:84:5b:91:54:fe:ab:a1:7d:73:a3:b3:5b:ed:5f:
                    df:ba:64:c2:8d:c5:d3:f5:75:4a:74:13:05:85:4e:
                    43:f7:11:d9:3b:a7:71:af:31:c3:c7:1d:e7:ca:6b:
                    46:e1:f4:22:c4:e9:9c:75:e8:01:cf:dc:08:f7:2f:
                    e5:13:aa:5d:e8:a6:25:e0:98:1e:00:a3:12:74:b8:
                    bd:61:e6:cd:1a:59:77:e7:f4:2f:13:cc:65:b5:4b:
                    af:c8:de:3b:a3:75:f6:c1:d6:7c:ef:08:95:59:4d:
                    ad:5e:b9:5f:bc:c4:ec:71:7c:c5:0a:b3:78:ea:97:
                    75:62:43:42:9e:94:0b:be:b8:86:0c:cd:c2:84:d2:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:44:63:83:50:F5:58:DA:27:8D:F7:90:B7:AD:01:C0:39:F5:F3:7A
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/G0Rjg1D1WNonjfeQt60BwDn183o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.4.0/24
                  5.105.7.0/24
                  5.105.12.0/24
                  5.105.16.0-5.105.20.255
                  5.105.28.0-5.105.33.255
                  5.105.38.0/23
                  5.105.42.0/24
                  5.105.49.0-5.105.51.255
                  5.105.56.0/24
                  5.105.58.0-5.105.60.255
                  5.105.62.0/23
                  5.105.66.0/24
                  5.105.68.0/23
                  5.105.72.0/24
                  5.105.76.0/23
                  5.105.82.0/24
                  5.105.84.0/24
                  5.105.86.0-5.105.88.255
                  5.105.94.0/24
                  5.105.96.0/24
                  5.105.101.0-5.105.102.255
                  5.105.107.0/24
                  5.105.110.0-5.105.112.255
                  5.105.115.0/24
                  5.105.124.0/22
                  5.105.129.0-5.105.132.255
                  5.105.134.0-5.105.139.255
                  5.105.141.0-5.105.143.255
                  5.105.148.0/22
                  5.105.156.0/24
                  5.105.160.0-5.105.165.255
                  5.105.168.0-5.105.170.255
                  5.105.172.0/24
                  5.105.174.0-5.105.178.255
                  5.105.180.0-5.105.184.255
                  5.105.186.0/23
                  5.105.190.0-5.105.192.255
                  5.105.194.0-5.105.200.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.212.0/24
                  5.105.214.0-5.105.216.255
                  5.105.218.0-5.105.221.255
                  5.105.223.0/24
                  5.105.225.0-5.105.230.255
                  5.105.232.0-5.105.236.255
                  5.105.239.0-5.105.240.255
                  5.105.242.0/24
                  5.105.244.0/23
                  5.105.247.0-5.105.251.255
                  5.105.254.0/24
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:4f:9e:b4:c8:6f:35:bd:4a:0f:73:5c:11:ce:69:05:cc:00:
         ac:ea:32:04:c2:dc:9d:e6:71:2c:59:77:d7:b7:43:b3:ec:d2:
         96:3d:61:a8:a8:d4:59:ac:d6:ca:8a:08:fb:5e:28:b0:2d:dd:
         6b:12:16:8b:ec:e5:60:4a:33:b1:75:33:91:d8:3f:53:14:4c:
         37:22:39:aa:f1:1c:5a:ae:c3:6e:c1:94:c3:eb:5f:19:c6:3f:
         1a:57:cf:a6:43:e9:08:e6:2a:63:e7:ee:57:91:2b:ea:81:49:
         27:d6:99:6c:35:83:0a:24:86:7e:bb:08:1f:a9:13:a4:96:1c:
         fd:f6:b9:a4:dc:cf:47:39:18:6b:70:ca:bc:a7:1b:d4:ec:5e:
         eb:68:26:83:c1:ff:77:2e:f5:52:07:f9:34:15:1d:d3:8a:4d:
         03:f0:3a:50:71:43:4e:99:60:16:8a:d7:12:af:84:53:e2:71:
         42:3b:2a:99:bb:57:98:f8:d6:0a:cd:5e:a6:b2:84:99:17:aa:
         6f:14:0d:51:57:ce:05:fb:b1:13:d1:78:ed:70:e6:b9:ed:dc:
         57:b1:71:60:0f:65:15:23:4f:41:1b:28:d2:af:fb:f2:0e:bc:
         68:85:95:f2:06:9b:51:40:6b:77:cf:43:fa:ed:c3:57:4c:3f:
         20:96:ff:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org