Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/lInmaiODnmU16bOn3fl7DUYTBDo.roa
File:                     lInmaiODnmU16bOn3fl7DUYTBDo.roa (raw, json)
Hash identifier:          7UtX2xGyzGIwAZAgYYUpq8nF3twImwEmYPwy9lfBkzc=
Subject key identifier:   94:89:E6:6A:23:83:9E:65:35:E9:B3:A7:DD:F9:7B:0D:46:13:04:3A
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0185541504FAF420BB00D2ED993E1C685B92
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/lInmaiODnmU16bOn3fl7DUYTBDo.roa
Signing time:             Tue 27 Dec 2022 14:55:41 +0000
ROA not before:           Tue 27 Dec 2022 14:55:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.180.176.0/24 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.123.0/24 maxlen: 24
                          5.105.122.0/24 maxlen: 24
                          5.105.132.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.126.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.141.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.166.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.164.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.74.0/24 maxlen: 24
                          5.105.72.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.81.0/24 maxlen: 24
                          5.105.80.0/24 maxlen: 24
                          5.105.79.0/24 maxlen: 24
                          5.105.95.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.103.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.108.0/24 maxlen: 24
                          5.105.106.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.114.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.242.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.185.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.12.0/24 maxlen: 24
                          5.105.19.0/24 maxlen: 24
                          5.105.26.0/24 maxlen: 24
                          5.105.40.0/24 maxlen: 24
                          5.105.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:54:15:04:fa:f4:20:bb:00:d2:ed:99:3e:1c:68:5b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Dec 27 14:55:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9489e66a23839e6535e9b3a7ddf97b0d4613043a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1c:b4:66:f1:8d:68:47:d8:33:51:ed:b6:cc:
                    eb:bd:59:88:58:37:42:1e:e0:fb:b9:bf:65:c5:83:
                    d7:eb:f9:45:aa:2f:40:7b:48:0a:d0:3e:9d:af:92:
                    7a:86:c1:ce:aa:16:c7:2c:15:6e:fd:33:04:97:bf:
                    6a:f2:ee:36:dc:e8:6c:81:a4:49:52:e3:76:9e:e1:
                    82:68:f7:7d:78:fd:59:b8:01:98:8d:e2:e2:7c:28:
                    f5:fc:97:86:fb:a6:0b:2c:8c:94:e6:8c:ec:9b:fa:
                    25:0d:f8:08:d0:60:da:36:f7:d0:81:80:6e:a9:23:
                    76:ab:03:94:c3:07:52:24:4c:4d:78:68:c7:f8:26:
                    99:e7:03:a1:04:6b:d3:e8:ee:e6:4c:3d:ea:b6:d9:
                    02:99:80:84:21:d7:2a:7d:d1:8d:38:b0:2d:b2:24:
                    a2:71:a1:ea:67:c0:85:e4:5e:b0:87:10:bd:4a:34:
                    94:66:09:92:26:31:27:a3:2c:e9:5f:47:e3:4d:05:
                    9d:24:5e:08:59:64:b7:ed:f6:a8:8a:28:7a:db:eb:
                    6c:b6:1f:55:58:ac:52:78:3a:b9:4e:0c:ad:a2:65:
                    67:5e:9e:14:8b:f6:e9:19:c2:a6:38:26:03:ec:31:
                    dc:4f:dd:b0:89:41:eb:df:08:a7:d7:74:09:a0:e0:
                    4c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:E6:6A:23:83:9E:65:35:E9:B3:A7:DD:F9:7B:0D:46:13:04:3A
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/lInmaiODnmU16bOn3fl7DUYTBDo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.12.0/24
                  5.105.19.0/24
                  5.105.26.0/24
                  5.105.40.0/24
                  5.105.43.0/24
                  5.105.68.0/23
                  5.105.72.0/24
                  5.105.74.0/24
                  5.105.76.0/24
                  5.105.79.0-5.105.82.255
                  5.105.84.0/24
                  5.105.94.0/23
                  5.105.103.0/24
                  5.105.106.0/24
                  5.105.108.0/24
                  5.105.112.0/22
                  5.105.122.0/23
                  5.105.125.0-5.105.127.255
                  5.105.131.0-5.105.132.255
                  5.105.134.0/24
                  5.105.136.0/24
                  5.105.138.0/23
                  5.105.141.0-5.105.143.255
                  5.105.156.0/24
                  5.105.162.0/24
                  5.105.164.0-5.105.166.255
                  5.105.168.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.185.0-5.105.187.255
                  5.105.195.0/24
                  5.105.197.0-5.105.199.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.214.0/24
                  5.105.216.0/24
                  5.105.218.0/24
                  5.105.229.0-5.105.230.255
                  5.105.239.0-5.105.240.255
                  5.105.242.0/24
                  5.105.244.0/23
                  5.105.248.0/23
                  5.180.176.0/24
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:54:e6:65:85:6d:3f:40:69:0f:fe:de:02:06:64:1b:65:e0:
         05:bf:32:a9:92:9f:cf:f5:52:75:af:71:c7:c8:4e:60:17:f1:
         d3:e2:7a:b9:59:23:6a:f8:91:83:29:33:dc:2d:2b:e5:32:46:
         81:8c:44:7b:5b:db:39:12:41:60:83:68:40:20:bc:1e:a7:49:
         51:f4:8d:8e:b4:5e:63:6a:74:fc:45:88:fc:4e:ec:62:41:06:
         5b:4e:ae:3d:79:79:46:61:15:6b:ff:56:6c:cc:df:cd:42:03:
         05:b7:ea:22:34:00:96:8d:70:1d:06:d7:00:40:80:6e:4f:df:
         cf:39:20:3f:bb:ec:dc:c6:3a:1e:31:87:a1:a2:af:9d:1b:80:
         f9:6b:b8:58:fc:ea:09:e6:fa:17:11:ef:c4:50:ce:54:60:a9:
         e4:2f:d5:37:f9:6f:b5:49:d1:bd:d0:4f:d9:a7:ff:56:cf:5f:
         b1:32:f5:52:15:d0:e1:60:76:cb:3e:59:67:53:98:cb:c6:1f:
         51:49:38:d7:ca:ac:e1:be:69:aa:1a:18:ab:37:e3:f6:84:94:
         62:f5:17:eb:78:53:42:48:28:fb:d5:d3:9f:df:7b:02:71:d6:
         57:e5:18:de:d7:5c:7b:59:97:62:ca:9d:4d:2c:fc:20:54:c5:
         ae:b3:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org