Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VyDTBi294-x0dCo5bIDWi49lTxE.roa
File:                     VyDTBi294-x0dCo5bIDWi49lTxE.roa (raw, json)
Hash identifier:          9HIKYAcI0gvJ/U4Qu34BXxTdIR3iHclK9gjKJevA6So=
Subject key identifier:   57:20:D3:06:2D:BD:E3:EC:74:74:2A:39:6C:80:D6:8B:8F:65:4F:11
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0184E77B7CC2AA0BE6AB0E060D3C90099CF4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VyDTBi294-x0dCo5bIDWi49lTxE.roa
Signing time:             Tue 06 Dec 2022 12:49:00 +0000
ROA not before:           Tue 06 Dec 2022 12:49:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.132.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.126.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.141.0/24 maxlen: 24
                          5.105.151.0/24 maxlen: 24
                          5.105.150.0/24 maxlen: 24
                          5.105.149.0/24 maxlen: 24
                          5.105.148.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.166.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.164.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.72.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.89.0/24 maxlen: 24
                          5.105.88.0/24 maxlen: 24
                          5.105.87.0/24 maxlen: 24
                          5.105.86.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.103.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.108.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.233.0/24 maxlen: 24
                          5.105.232.0/24 maxlen: 24
                          5.105.236.0/24 maxlen: 24
                          5.105.235.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.234.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.242.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.247.0/24 maxlen: 24
                          5.105.175.0/24 maxlen: 24
                          5.105.174.0/24 maxlen: 24
                          5.105.178.0/24 maxlen: 24
                          5.105.177.0/24 maxlen: 24
                          5.105.176.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.181.0/24 maxlen: 24
                          5.105.180.0/24 maxlen: 24
                          5.105.185.0/24 maxlen: 24
                          5.105.183.0/24 maxlen: 24
                          5.105.182.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.12.0/24 maxlen: 24
                          5.105.17.0/24 maxlen: 24
                          5.105.26.0/24 maxlen: 24
                          5.105.43.0/24 maxlen: 24
                          5.105.59.0/24 maxlen: 24
                          5.105.63.0/24 maxlen: 24
                          5.105.62.0/24 maxlen: 24
                          5.105.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e7:7b:7c:c2:aa:0b:e6:ab:0e:06:0d:3c:90:09:9c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Dec  6 12:49:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5720d3062dbde3ec74742a396c80d68b8f654f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:fd:6d:0e:6e:0c:02:59:8a:5b:d5:76:b3:
                    da:b1:fb:0b:d7:48:f2:d8:12:b3:af:ea:d6:61:71:
                    43:1c:30:c6:b6:7a:0b:78:18:cc:8f:b8:95:9f:74:
                    2b:92:76:40:7b:c2:5a:43:90:e1:f9:8c:43:dd:f9:
                    5a:98:9f:35:5a:76:58:98:be:69:67:af:b0:0b:d6:
                    72:b0:2e:9d:d1:c6:cb:b0:11:79:6e:cd:0b:fa:f4:
                    b6:6c:cf:a2:2e:6c:78:3d:62:7c:7a:ca:96:db:13:
                    03:44:80:80:2a:e2:cd:86:3b:c5:32:77:77:65:fd:
                    c5:62:06:25:c7:98:1a:42:ec:dc:fe:65:31:a7:fd:
                    e2:b9:61:8e:07:d3:e6:29:73:95:6d:ea:76:87:63:
                    49:a7:18:39:db:7e:fa:e4:d5:b6:be:73:12:96:95:
                    ce:33:ff:d8:66:45:18:05:4e:13:d0:ce:2d:68:20:
                    b9:40:6d:62:d1:2c:9f:c9:8b:bd:73:9f:cd:68:55:
                    4d:0f:7a:62:ed:1f:c0:72:c6:c6:73:bf:43:38:e9:
                    01:5a:d4:a4:74:2c:69:fb:93:09:9d:2c:eb:0b:46:
                    4e:fc:7f:3d:99:07:a3:a0:52:32:03:58:7f:f2:14:
                    4b:a6:06:2f:e6:24:1d:5a:8e:ba:47:94:96:10:7a:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:20:D3:06:2D:BD:E3:EC:74:74:2A:39:6C:80:D6:8B:8F:65:4F:11
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VyDTBi294-x0dCo5bIDWi49lTxE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.1.0/24
                  5.105.12.0/24
                  5.105.17.0/24
                  5.105.26.0/24
                  5.105.43.0/24
                  5.105.59.0/24
                  5.105.62.0/23
                  5.105.68.0/23
                  5.105.72.0/24
                  5.105.76.0/23
                  5.105.82.0/24
                  5.105.84.0/24
                  5.105.86.0-5.105.89.255
                  5.105.94.0/24
                  5.105.103.0/24
                  5.105.108.0/24
                  5.105.112.0/24
                  5.105.115.0/24
                  5.105.125.0-5.105.127.255
                  5.105.131.0-5.105.132.255
                  5.105.134.0/24
                  5.105.136.0/24
                  5.105.138.0/23
                  5.105.141.0-5.105.143.255
                  5.105.148.0/22
                  5.105.156.0/24
                  5.105.162.0/24
                  5.105.164.0-5.105.166.255
                  5.105.168.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.174.0-5.105.178.255
                  5.105.180.0/22
                  5.105.185.0-5.105.187.255
                  5.105.195.0/24
                  5.105.197.0-5.105.199.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.214.0/24
                  5.105.216.0/24
                  5.105.218.0/24
                  5.105.229.0-5.105.230.255
                  5.105.232.0-5.105.236.255
                  5.105.239.0-5.105.240.255
                  5.105.242.0/24
                  5.105.244.0/23
                  5.105.247.0-5.105.249.255
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:fa:e9:e4:8b:11:b6:e0:b4:2d:dc:00:d3:ac:55:f2:0d:
         b1:09:5a:f9:6c:58:87:0f:d3:e1:4f:37:dd:f9:b1:e8:be:67:
         a5:b6:75:06:c4:4e:22:fc:2e:69:7d:df:fd:62:0e:9e:c3:e1:
         d0:57:af:40:5c:83:55:66:6b:01:f9:43:bf:e8:95:7f:f7:d5:
         42:50:8b:54:2f:ee:75:26:d0:b7:05:87:8c:88:70:15:be:86:
         53:b0:3a:ce:d1:ec:f5:30:a7:88:fe:52:f0:2e:66:32:d7:e0:
         3b:7a:1a:e3:f0:d8:8f:11:46:9b:d3:dc:a4:59:9b:d5:84:e8:
         3a:d9:5d:2f:a6:e5:2e:c9:ac:fa:75:f3:4e:b8:45:21:73:23:
         d0:8d:24:4c:25:e1:ee:c5:81:ab:f5:33:2b:ff:b9:49:44:2b:
         c3:b4:c0:f1:27:c0:04:39:46:ba:71:3b:89:25:b3:da:0e:80:
         32:d7:8b:a2:12:77:f1:69:88:f1:bd:36:7c:ee:48:53:ee:6d:
         f6:5f:56:c4:9e:c8:2b:96:53:42:44:cc:88:5c:f5:67:72:ce:
         1c:ea:78:0c:07:6f:db:b2:88:33:2e:2e:73:8a:ce:f3:55:fb:
         ba:c4:f4:5c:8d:4a:43:e9:fb:b3:1f:ca:80:5d:ca:05:59:cf:
         a6:6d:ab:f1
-----BEGIN CERTIFICATE-----
MIIGhzCCBW+gAwIBAgISAYTne3zCqgvmqw4GDTyQCZz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMjA2MTI0OTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzIwZDMwNjJkYmRlM2VjNzQ3NDJhMzk2YzgwZDY4YjhmNjU0ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAron9bQ5uDAJZilvVdrPasfsL10jy
2BKzr+rWYXFDHDDGtnoLeBjMj7iVn3QrknZAe8JaQ5Dh+YxD3flamJ81WnZYmL5p
Z6+wC9ZysC6d0cbLsBF5bs0L+vS2bM+iLmx4PWJ8esqW2xMDRICAKuLNhjvFMnd3
Zf3FYgYlx5gaQuzc/mUxp/3iuWGOB9PmKXOVbep2h2NJpxg523765NW2vnMSlpXO
M//YZkUYBU4T0M4taCC5QG1i0SyfyYu9c5/NaFVND3pi7R/AcsbGc79DOOkBWtSk
dCxp+5MJnSzrC0ZO/H89mQejoFIyA1h/8hRLpgYv5iQdWo66R5SWEHoBLQIDAQAB
o4IDkzCCA48wHQYDVR0OBBYEFFcg0wYtvePsdHQqOWyA1ouPZU8RMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvVnlEVEJpMjk0LXgwZENvNWJJRFdpNDlsVHhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBpwYIKwYBBQUHAQcBAf8EggGWMIIBkjCCAY4EAgABMIIB
hgMEAAVpAQMEAAVpDAMEAAVpEQMEAAVpGgMEAAVpKwMEAAVpOwMEAQVpPgMEAQVp
RAMEAAVpSAMEAQVpTAMEAAVpUgMEAAVpVDAMAwQBBWlWAwQBBWlYAwQABWleAwQA
BWlnAwQABWlsAwQABWlwAwQABWlzMAwDBAAFaX0DBAcFaQAwDAMEAAVpgwMEAAVp
hAMEAAVphgMEAAVpiAMEAQVpijAMAwQABWmNAwQEBWmAAwQCBWmUAwQABWmcAwQA
BWmiMAwDBAIFaaQDBAAFaaYDBAAFaagDBAAFaaoDBAAFaawwDAMEAQVprgMEAAVp
sgMEAgVptDAMAwQABWm5AwQCBWm4AwQABWnDMAwDBAAFacUDBAMFacADBAEFacoD
BAEFac4DBAAFadYDBAAFadgDBAAFadowDAMEAAVp5QMEAAVp5jAMAwQDBWnoAwQA
BWnsMAwDBAAFae8DBAAFafADBAAFafIDBAEFafQwDAMEAAVp9wMEAQVp+AMEAlX/
tAMEAMEu0jANBgkqhkiG9w0BAQsFAAOCAQEAaNT66eSLEbbgtC3cANOsVfINsQla
+WxYhw/T4U833fmx6L5npbZ1BsROIvwuaX3f/WIOnsPh0FevQFyDVWZrAflDv+iV
f/fVQlCLVC/udSbQtwWHjIhwFb6GU7A6ztHs9TCniP5S8C5mMtfgO3oa4/DYjxFG
m9PcpFmb1YToOtldL6blLsms+nXzTrhFIXMj0I0kTCXh7sWBq/UzK/+5SUQrw7TA
8SfABDlGunE7iSWz2g6AMteLohJ38WmI8b02fO5IU+5t9l9WxJ7IK5ZTQkTMiFz1
Z3LOHOp4DAdv27KIMy4uc4rO81X7usT0XI1KQ+n7sx/KgF3KBVnPpm2r8Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org