Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eB6_kEiuwBLgGKIMS1kce8MywR8.roa
File:                     eB6_kEiuwBLgGKIMS1kce8MywR8.roa (raw, json)
Hash identifier:          jmBF2JIJkY7d1jtDrmGCITqEVVkh4cZD47qurqwPffo=
Subject key identifier:   78:1E:BF:90:48:AE:C0:12:E0:18:A2:0C:4B:59:1C:7B:C3:32:C1:1F
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0185297B2B5799600A79A6B29A1DC43513B3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eB6_kEiuwBLgGKIMS1kce8MywR8.roa
Signing time:             Mon 19 Dec 2022 08:23:35 +0000
ROA not before:           Mon 19 Dec 2022 08:23:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.180.176.0/24 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.123.0/24 maxlen: 24
                          5.105.122.0/24 maxlen: 24
                          5.105.132.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.126.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.141.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.166.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.164.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.72.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.81.0/24 maxlen: 24
                          5.105.80.0/24 maxlen: 24
                          5.105.79.0/24 maxlen: 24
                          5.105.95.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.103.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.108.0/24 maxlen: 24
                          5.105.106.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.114.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.242.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.185.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.12.0/24 maxlen: 24
                          5.105.19.0/24 maxlen: 24
                          5.105.26.0/24 maxlen: 24
                          5.105.40.0/24 maxlen: 24
                          5.105.43.0/24 maxlen: 24
                          5.105.49.0/24 maxlen: 24
                          5.105.63.0/24 maxlen: 24
                          5.105.1.0/24 maxlen: 24
                          5.105.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:29:7b:2b:57:99:60:0a:79:a6:b2:9a:1d:c4:35:13:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Dec 19 08:23:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=781ebf9048aec012e018a20c4b591c7bc332c11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:0d:54:38:76:ca:1c:6b:86:b4:74:07:d5:
                    12:e4:cb:86:c5:ff:b6:8f:6b:fa:01:81:22:6f:0e:
                    4d:d6:77:3c:21:50:41:10:ac:f0:48:d8:48:3d:71:
                    b4:c6:b9:68:02:37:d7:53:93:76:1a:b9:f2:ea:ae:
                    e1:1d:1e:70:f7:f7:20:d1:b6:dc:81:0b:60:e7:3b:
                    16:1f:23:07:0c:3f:c0:ba:61:85:05:16:8d:f4:ac:
                    2e:64:c4:6b:2a:e2:6b:48:83:06:f1:50:07:22:6a:
                    cf:58:c2:6c:8d:3f:55:c5:1a:b2:3f:d2:ca:41:fb:
                    bd:24:df:12:af:2f:cc:4a:0b:92:93:29:24:54:c2:
                    01:d5:2a:00:91:2f:43:cc:ce:15:c9:50:7a:eb:a8:
                    59:74:f0:1a:23:90:4a:96:b2:47:59:d8:bd:bc:fb:
                    39:d5:51:59:d5:ec:52:23:5f:61:41:17:2f:60:49:
                    1e:8f:cb:0e:81:fd:26:2b:ad:b0:8a:b7:03:36:34:
                    d4:8d:19:6b:d5:ec:c9:36:6a:29:93:7b:4a:b4:0b:
                    84:03:6c:75:cc:43:f8:c0:ef:95:a1:43:de:09:23:
                    81:b0:64:1d:fa:47:4b:51:bc:5a:20:93:60:13:c6:
                    41:3e:81:06:84:50:dc:e8:30:61:ce:7a:07:74:d7:
                    b2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1E:BF:90:48:AE:C0:12:E0:18:A2:0C:4B:59:1C:7B:C3:32:C1:1F
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eB6_kEiuwBLgGKIMS1kce8MywR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.1.0/24
                  5.105.4.0/24
                  5.105.12.0/24
                  5.105.19.0/24
                  5.105.26.0/24
                  5.105.40.0/24
                  5.105.43.0/24
                  5.105.49.0/24
                  5.105.63.0/24
                  5.105.68.0/23
                  5.105.72.0/24
                  5.105.76.0/23
                  5.105.79.0-5.105.82.255
                  5.105.84.0/24
                  5.105.94.0/23
                  5.105.103.0/24
                  5.105.106.0/24
                  5.105.108.0/24
                  5.105.112.0/22
                  5.105.122.0/23
                  5.105.125.0-5.105.127.255
                  5.105.131.0-5.105.132.255
                  5.105.134.0/24
                  5.105.136.0/24
                  5.105.138.0/23
                  5.105.141.0-5.105.143.255
                  5.105.156.0/24
                  5.105.162.0/24
                  5.105.164.0-5.105.166.255
                  5.105.168.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.185.0-5.105.187.255
                  5.105.195.0/24
                  5.105.197.0-5.105.199.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.214.0/24
                  5.105.216.0/24
                  5.105.218.0/24
                  5.105.229.0-5.105.230.255
                  5.105.239.0-5.105.240.255
                  5.105.242.0/24
                  5.105.244.0/23
                  5.105.248.0/23
                  5.180.176.0/24
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:0e:d2:ce:a3:c5:12:a3:f2:9e:22:4d:e2:57:bf:12:e7:57:
         d8:47:2b:4d:98:b7:fc:2c:0f:84:40:85:42:33:45:0a:2c:73:
         06:b3:71:17:2f:df:a6:26:d2:ee:6c:25:22:11:c8:97:0a:ed:
         06:d1:35:ca:3f:10:bb:56:1b:b0:44:23:53:7b:53:da:e8:fa:
         b5:2b:92:6e:2f:67:a0:4b:8f:5d:5c:a2:75:70:bd:2a:e1:31:
         d9:01:41:55:3c:0b:c4:27:f6:7d:6c:19:38:e6:42:06:84:43:
         a8:35:11:6e:e3:b8:cb:a9:c0:79:53:ec:7f:20:66:df:81:1d:
         de:c1:33:66:75:30:9a:cb:6b:b4:b5:a5:36:bc:01:a4:02:c0:
         d0:48:67:44:79:1c:62:17:dc:f7:f6:d5:c2:2c:f2:3f:88:d8:
         94:a1:d3:ba:34:9d:2a:ab:93:3e:10:d4:f0:e8:2e:aa:7f:48:
         96:c6:8d:27:3b:a4:fe:06:74:c9:9b:ed:f6:b4:98:d3:88:f8:
         83:13:e6:e9:2c:20:1f:d8:3a:f9:90:0d:4c:c5:7d:f8:71:9a:
         32:f8:44:bd:bc:ff:6e:17:cd:32:0e:e3:bb:57:9e:02:da:ad:
         e4:ef:e7:d9:ea:1a:24:59:08:ff:5a:f5:f5:f5:74:07:ff:30:
         30:9d:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org