Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oeKcXSWgwfGHQiWVuP9Xte9qi9w.roa
File:                     oeKcXSWgwfGHQiWVuP9Xte9qi9w.roa (raw, json)
Hash identifier:          yGppjQMRkMQrjc1mr7y5E/1C2w7Fl/v4NWB6XGPB2Kw=
Subject key identifier:   A1:E2:9C:5D:25:A0:C1:F1:87:42:25:95:B8:FF:57:B5:EF:6A:8B:DC
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       018441DD418CBECAFF79B76F64A39100D3D9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oeKcXSWgwfGHQiWVuP9Xte9qi9w.roa
Signing time:             Fri 04 Nov 2022 08:58:50 +0000
ROA not before:           Fri 04 Nov 2022 08:58:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          85.255.180.0/22 maxlen: 24
                          5.105.125.0/24 maxlen: 24
                          5.105.132.0/24 maxlen: 24
                          5.105.131.0/24 maxlen: 24
                          5.105.126.0/24 maxlen: 24
                          5.105.129.0/24 maxlen: 24
                          5.105.127.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.137.0/24 maxlen: 24
                          5.105.136.0/24 maxlen: 24
                          5.105.135.0/24 maxlen: 24
                          5.105.134.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.141.0/24 maxlen: 24
                          5.105.151.0/24 maxlen: 24
                          5.105.150.0/24 maxlen: 24
                          5.105.149.0/24 maxlen: 24
                          5.105.148.0/24 maxlen: 24
                          5.105.156.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.161.0/24 maxlen: 24
                          5.105.160.0/24 maxlen: 24
                          5.105.164.0/24 maxlen: 24
                          5.105.163.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.168.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.72.0/24 maxlen: 24
                          5.105.84.0/24 maxlen: 24
                          5.105.82.0/24 maxlen: 24
                          5.105.89.0/24 maxlen: 24
                          5.105.88.0/24 maxlen: 24
                          5.105.87.0/24 maxlen: 24
                          5.105.86.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.102.0/24 maxlen: 24
                          5.105.101.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.111.0/24 maxlen: 24
                          5.105.110.0/24 maxlen: 24
                          5.105.107.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.230.0/24 maxlen: 24
                          5.105.229.0/24 maxlen: 24
                          5.105.233.0/24 maxlen: 24
                          5.105.232.0/24 maxlen: 24
                          5.105.227.0/24 maxlen: 24
                          5.105.236.0/24 maxlen: 24
                          5.105.235.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.234.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.242.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.251.0/24 maxlen: 24
                          5.105.250.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.247.0/24 maxlen: 24
                          5.105.255.0/24 maxlen: 24
                          5.105.254.0/24 maxlen: 24
                          5.105.175.0/24 maxlen: 24
                          5.105.174.0/24 maxlen: 24
                          5.105.178.0/24 maxlen: 24
                          5.105.177.0/24 maxlen: 24
                          5.105.176.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.181.0/24 maxlen: 24
                          5.105.180.0/24 maxlen: 24
                          5.105.183.0/24 maxlen: 24
                          5.105.182.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.192.0/24 maxlen: 24
                          5.105.191.0/24 maxlen: 24
                          5.105.190.0/24 maxlen: 24
                          5.105.195.0/24 maxlen: 24
                          5.105.194.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.197.0/24 maxlen: 24
                          5.105.196.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.200.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.212.0/24 maxlen: 24
                          5.105.216.0/24 maxlen: 24
                          5.105.214.0/24 maxlen: 24
                          5.105.219.0/24 maxlen: 24
                          5.105.218.0/24 maxlen: 24
                          5.105.221.0/24 maxlen: 24
                          5.105.220.0/24 maxlen: 24
                          5.105.17.0/24 maxlen: 24
                          5.105.16.0/24 maxlen: 24
                          5.105.20.0/24 maxlen: 24
                          5.105.19.0/24 maxlen: 24
                          5.105.24.0/24 maxlen: 24
                          5.105.18.0/24 maxlen: 24
                          5.105.28.0/24 maxlen: 24
                          5.105.26.0/24 maxlen: 24
                          5.105.31.0/24 maxlen: 24
                          5.105.30.0/24 maxlen: 24
                          5.105.29.0/24 maxlen: 24
                          5.105.33.0/24 maxlen: 24
                          5.105.38.0/24 maxlen: 24
                          5.105.32.0/24 maxlen: 24
                          5.105.42.0/24 maxlen: 24
                          5.105.40.0/24 maxlen: 24
                          5.105.43.0/24 maxlen: 24
                          5.105.39.0/24 maxlen: 24
                          5.105.49.0/24 maxlen: 24
                          5.105.50.0/24 maxlen: 24
                          5.105.56.0/24 maxlen: 24
                          5.105.58.0/24 maxlen: 24
                          5.105.60.0/24 maxlen: 24
                          5.105.59.0/24 maxlen: 24
                          5.105.63.0/24 maxlen: 24
                          5.105.62.0/24 maxlen: 24
                          5.105.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:41:dd:41:8c:be:ca:ff:79:b7:6f:64:a3:91:00:d3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Nov  4 08:58:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a1e29c5d25a0c1f187422595b8ff57b5ef6a8bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:a4:38:66:32:52:2d:5d:0b:92:de:4a:14:
                    84:fc:07:a8:24:77:21:ba:9b:a0:79:45:b0:68:bf:
                    df:45:93:ff:24:24:0b:f2:f1:2a:0f:bd:1a:ea:c2:
                    36:64:79:f0:41:5d:ef:7b:2b:b8:87:ff:c9:47:c7:
                    58:2e:71:9b:ee:f2:5e:4d:a8:36:b2:be:3f:58:28:
                    2d:ed:d1:4c:61:80:c3:a0:1f:32:22:d0:8f:5c:21:
                    01:a7:f9:ca:ae:31:be:f1:db:b0:a7:2b:95:fc:ac:
                    2a:fa:88:f7:a5:29:26:4a:dd:d5:06:aa:ca:8d:d8:
                    89:f3:b8:d9:fb:75:b4:27:0c:4f:08:e3:6e:73:41:
                    3e:14:eb:77:39:15:78:28:99:0e:64:35:f0:6b:58:
                    f5:08:7a:2b:21:42:8a:97:18:f1:35:ce:36:6b:8e:
                    78:80:11:73:f9:c5:24:f9:2f:39:7f:77:31:59:c4:
                    4c:32:e8:a6:9d:4f:28:b5:9c:0f:71:31:8c:4a:8e:
                    e7:0c:24:d8:ed:f2:6a:e3:b3:c5:89:0c:be:78:6f:
                    88:65:dd:a1:65:6b:ac:f2:62:b1:62:6d:58:5d:a4:
                    20:62:c5:9b:d3:3e:ea:10:aa:e2:74:a3:e1:ee:b9:
                    ad:3c:fb:e9:26:09:0f:fb:c0:2a:a0:98:52:27:30:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E2:9C:5D:25:A0:C1:F1:87:42:25:95:B8:FF:57:B5:EF:6A:8B:DC
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oeKcXSWgwfGHQiWVuP9Xte9qi9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.4.0/24
                  5.105.16.0-5.105.20.255
                  5.105.24.0/24
                  5.105.26.0/24
                  5.105.28.0-5.105.33.255
                  5.105.38.0-5.105.40.255
                  5.105.42.0/23
                  5.105.49.0-5.105.50.255
                  5.105.56.0/24
                  5.105.58.0-5.105.60.255
                  5.105.62.0/23
                  5.105.68.0/23
                  5.105.72.0/24
                  5.105.76.0/23
                  5.105.82.0/24
                  5.105.84.0/24
                  5.105.86.0-5.105.89.255
                  5.105.94.0/24
                  5.105.101.0-5.105.102.255
                  5.105.107.0/24
                  5.105.110.0-5.105.112.255
                  5.105.115.0/24
                  5.105.125.0-5.105.127.255
                  5.105.129.0/24
                  5.105.131.0-5.105.132.255
                  5.105.134.0-5.105.139.255
                  5.105.141.0-5.105.143.255
                  5.105.148.0/22
                  5.105.156.0/24
                  5.105.160.0-5.105.165.255
                  5.105.168.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.174.0-5.105.178.255
                  5.105.180.0/22
                  5.105.186.0/23
                  5.105.190.0-5.105.192.255
                  5.105.194.0-5.105.200.255
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.212.0/24
                  5.105.214.0/24
                  5.105.216.0/24
                  5.105.218.0-5.105.221.255
                  5.105.227.0/24
                  5.105.229.0-5.105.230.255
                  5.105.232.0-5.105.236.255
                  5.105.239.0-5.105.240.255
                  5.105.242.0/24
                  5.105.244.0/23
                  5.105.247.0-5.105.251.255
                  5.105.254.0/23
                  85.255.180.0/22
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:ae:02:cf:9d:cf:6c:8f:ea:f1:23:fb:1b:28:7a:fa:17:
         40:5e:44:a1:78:23:57:82:c8:4a:fe:9c:33:d3:50:01:3c:39:
         75:de:30:a2:c4:8f:91:d3:bd:40:10:e5:4f:51:dc:ad:17:0a:
         ba:d3:39:c0:fc:03:a5:20:4e:9c:78:fb:ee:dd:43:f7:eb:67:
         7b:13:8f:3e:3d:23:42:ec:18:10:18:46:b2:67:6c:e6:dc:5f:
         0a:8a:1b:38:42:fc:90:25:2b:6a:55:f3:e9:0f:07:30:f1:a2:
         8e:06:41:99:bb:3e:82:0d:64:bb:2a:27:5d:4c:33:6f:0a:be:
         79:b1:67:77:dc:86:16:f0:55:73:5e:b4:22:bf:48:fb:a7:e8:
         ba:a4:ba:4b:44:fb:2b:9e:8f:27:4a:df:73:7c:20:67:04:de:
         82:cf:95:cf:48:c2:71:7d:18:48:ec:0e:c4:b5:da:0b:82:85:
         32:53:2e:4a:8d:ae:d3:c0:82:56:0c:11:1c:3c:dc:5e:6f:9b:
         8e:69:ee:e7:10:22:5c:84:0b:f4:c3:80:b2:71:57:4c:0b:eb:
         5a:83:89:2f:81:f3:f2:37:0a:ea:2e:d0:19:a8:c3:4d:ce:c5:
         c2:b5:4a:86:00:ab:61:19:c9:d0:0f:05:8b:2b:46:8b:54:04:
         49:68:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org