Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/eiGaX1nzzLynspM00YmdfTYGuEk.roa
File:                     eiGaX1nzzLynspM00YmdfTYGuEk.roa (raw, json)
Hash identifier:          Q0r9+Tn/xkywVHjciq1FgCb71/MjS5Z3m5i1uwuMEW0=
Subject key identifier:   7A:21:9A:5F:59:F3:CC:BC:A7:B2:93:34:D1:89:9D:7D:36:06:B8:49
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       0183A787B9008A865269CAEC9909B11BF96F
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/eiGaX1nzzLynspM00YmdfTYGuEk.roa
Signing time:             Wed 05 Oct 2022 09:43:53 +0000
ROA not before:           Wed 05 Oct 2022 09:43:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51407
IP address blocks:        46.32.216.0/23 maxlen: 23
                          46.32.214.0/23 maxlen: 23
                          46.32.218.0/23 maxlen: 23
                          46.32.220.0/23 maxlen: 23
                          176.67.58.0/24 maxlen: 24
                          176.67.57.0/24 maxlen: 24
                          176.67.62.0/24 maxlen: 24
                          176.67.61.0/24 maxlen: 24
                          95.215.131.0/24 maxlen: 24
                          37.60.144.0/23 maxlen: 23
                          37.60.144.0/21 maxlen: 21
                          37.60.148.0/23 maxlen: 23
                          37.60.146.0/23 maxlen: 23
                          37.60.150.0/23 maxlen: 23
                          84.242.50.0/24 maxlen: 24
                          84.242.53.0/24 maxlen: 24
                          94.73.12.0/23 maxlen: 23
                          94.73.16.0/23 maxlen: 23
                          94.73.14.0/23 maxlen: 23
                          94.73.18.0/23 maxlen: 23
                          94.73.24.0/23 maxlen: 23
                          94.73.22.0/23 maxlen: 23
                          94.73.20.0/23 maxlen: 23
                          94.73.26.0/23 maxlen: 23
                          94.73.30.0/23 maxlen: 23
                          94.73.28.0/23 maxlen: 23
                          46.32.192.0/21 maxlen: 21
                          46.32.192.0/23 maxlen: 23
                          46.32.194.0/23 maxlen: 23
                          46.32.198.0/23 maxlen: 23
                          46.32.196.0/23 maxlen: 23
                          46.32.202.0/23 maxlen: 23
                          46.32.206.0/23 maxlen: 23
                          46.32.204.0/23 maxlen: 23
                          46.32.212.0/23 maxlen: 23
                          46.32.210.0/23 maxlen: 23
                          94.73.4.0/23 maxlen: 23
                          94.73.2.0/23 maxlen: 23
                          94.73.0.0/19 maxlen: 19
                          94.73.0.0/23 maxlen: 23
                          94.73.10.0/23 maxlen: 23
                          94.73.8.0/23 maxlen: 23
                          94.73.6.0/23 maxlen: 23
                          5.43.206.0/23 maxlen: 23
                          5.43.204.0/23 maxlen: 23
                          5.43.202.0/23 maxlen: 23
                          5.43.200.0/23 maxlen: 23
                          5.43.208.0/23 maxlen: 23
                          5.43.212.0/23 maxlen: 23
                          5.43.210.0/23 maxlen: 23
                          5.43.216.0/23 maxlen: 23
                          5.43.214.0/23 maxlen: 23
                          5.43.218.0/23 maxlen: 23
                          5.43.222.0/23 maxlen: 23
                          5.43.220.0/23 maxlen: 23
                          46.43.64.0/23 maxlen: 23
                          46.43.70.0/23 maxlen: 23
                          46.43.68.0/23 maxlen: 23
                          46.43.64.0/18 maxlen: 18
                          46.43.66.0/23 maxlen: 23
                          46.43.76.0/23 maxlen: 23
                          46.43.74.0/23 maxlen: 23
                          46.43.72.0/23 maxlen: 23
                          46.43.78.0/23 maxlen: 23
                          46.43.84.0/23 maxlen: 23
                          46.43.82.0/23 maxlen: 23
                          46.43.80.0/23 maxlen: 23
                          46.43.90.0/23 maxlen: 23
                          46.43.88.0/23 maxlen: 23
                          46.43.86.0/23 maxlen: 23
                          5.43.192.0/19 maxlen: 19
                          5.43.192.0/23 maxlen: 23
                          5.43.194.0/23 maxlen: 23
                          5.43.198.0/23 maxlen: 23
                          5.43.196.0/23 maxlen: 23
                          46.43.98.0/23 maxlen: 23
                          46.43.96.0/23 maxlen: 23
                          46.43.94.0/23 maxlen: 23
                          46.43.92.0/23 maxlen: 23
                          46.43.104.0/23 maxlen: 23
                          46.43.102.0/23 maxlen: 23
                          46.43.100.0/23 maxlen: 23
                          46.43.112.0/23 maxlen: 23
                          46.43.110.0/23 maxlen: 23
                          46.43.108.0/23 maxlen: 23
                          46.43.106.0/23 maxlen: 23
                          46.43.118.0/23 maxlen: 23
                          46.43.116.0/23 maxlen: 23
                          46.43.114.0/23 maxlen: 23
                          46.43.124.0/23 maxlen: 23
                          46.43.122.0/23 maxlen: 23
                          46.43.120.0/23 maxlen: 23
                          46.43.126.0/23 maxlen: 23
                          46.244.64.0/23 maxlen: 23
                          46.244.64.0/19 maxlen: 19
                          46.244.70.0/23 maxlen: 23
                          46.244.68.0/23 maxlen: 23
                          46.244.66.0/23 maxlen: 23
                          46.244.74.0/23 maxlen: 23
                          46.244.72.0/23 maxlen: 23
                          46.244.78.0/23 maxlen: 23
                          46.244.76.0/23 maxlen: 23
                          46.244.82.0/23 maxlen: 23
                          46.244.80.0/23 maxlen: 23
                          46.244.84.0/23 maxlen: 23
                          46.244.88.0/23 maxlen: 23
                          46.244.86.0/23 maxlen: 23
                          46.244.90.0/23 maxlen: 23
                          46.244.94.0/23 maxlen: 23
                          46.244.92.0/23 maxlen: 23
                          46.28.138.0/23 maxlen: 23
                          46.28.142.0/23 maxlen: 23
                          176.67.96.0/19 maxlen: 19
                          176.67.98.0/23 maxlen: 23
                          176.67.96.0/23 maxlen: 23
                          176.67.100.0/23 maxlen: 23
                          176.67.104.0/23 maxlen: 23
                          176.67.102.0/23 maxlen: 23
                          176.67.108.0/23 maxlen: 23
                          176.67.106.0/23 maxlen: 23
                          176.67.112.0/23 maxlen: 23
                          176.67.110.0/23 maxlen: 23
                          176.67.114.0/23 maxlen: 23
                          176.67.118.0/23 maxlen: 23
                          176.67.116.0/23 maxlen: 23
                          176.67.124.0/23 maxlen: 23
                          176.67.122.0/23 maxlen: 23
                          176.67.120.0/23 maxlen: 23
                          176.67.126.0/23 maxlen: 23
                          31.13.160.0/23 maxlen: 23
                          31.13.164.0/23 maxlen: 23
                          31.13.166.0/23 maxlen: 23
                          176.67.58.0/23 maxlen: 23
                          176.67.56.0/23 maxlen: 23
                          176.67.56.0/21 maxlen: 21
                          176.67.60.0/23 maxlen: 23
                          176.67.62.0/23 maxlen: 23
                          84.242.48.0/20 maxlen: 20
                          84.242.50.0/23 maxlen: 23
                          84.242.48.0/23 maxlen: 23
                          84.242.58.0/23 maxlen: 23
                          84.242.56.0/23 maxlen: 23
                          84.242.54.0/23 maxlen: 23
                          84.242.52.0/23 maxlen: 23
                          84.242.62.0/23 maxlen: 23
                          84.242.60.0/23 maxlen: 23
                          31.25.74.0/23 maxlen: 23
                          31.25.72.0/23 maxlen: 23
                          31.25.78.0/23 maxlen: 23
                          31.25.76.0/23 maxlen: 23
                          46.32.201.0/24 maxlen: 24
                          46.32.200.0/24 maxlen: 24
                          46.32.208.0/24 maxlen: 24
                          188.227.232.0/23 maxlen: 23
                          188.227.238.0/23 maxlen: 23
                          188.227.236.0/23 maxlen: 23
                          188.227.234.0/23 maxlen: 23
                          94.73.1.0/24 maxlen: 24
                          176.65.16.0/20 maxlen: 20
                          185.17.233.0/24 maxlen: 24
                          176.65.16.0/23 maxlen: 23
                          185.17.232.0/24 maxlen: 24
                          176.65.24.0/23 maxlen: 23
                          176.65.22.0/23 maxlen: 23
                          176.65.20.0/23 maxlen: 23
                          185.17.234.0/24 maxlen: 24
                          176.65.18.0/23 maxlen: 23
                          176.65.28.0/23 maxlen: 23
                          176.65.26.0/23 maxlen: 23
                          176.65.30.0/23 maxlen: 23
                          178.130.190.0/23 maxlen: 23
                          37.76.216.0/23 maxlen: 23
                          178.130.188.0/23 maxlen: 23
                          37.76.214.0/23 maxlen: 23
                          37.76.218.0/23 maxlen: 23
                          37.76.222.0/23 maxlen: 23
                          37.76.220.0/23 maxlen: 23
                          46.43.67.0/24 maxlen: 24
                          46.43.66.0/24 maxlen: 24
                          46.43.65.0/24 maxlen: 24
                          178.130.144.0/20 maxlen: 20
                          178.130.144.0/23 maxlen: 23
                          178.130.148.0/23 maxlen: 23
                          178.130.146.0/23 maxlen: 23
                          178.130.152.0/23 maxlen: 23
                          178.130.150.0/23 maxlen: 23
                          178.130.156.0/23 maxlen: 23
                          178.130.154.0/23 maxlen: 23
                          178.130.158.0/23 maxlen: 23
                          178.130.162.0/23 maxlen: 23
                          178.130.160.0/19 maxlen: 19
                          178.130.160.0/23 maxlen: 23
                          37.76.192.0/23 maxlen: 23
                          37.76.192.0/19 maxlen: 19
                          178.130.164.0/23 maxlen: 23
                          178.130.170.0/23 maxlen: 23
                          37.76.196.0/23 maxlen: 23
                          178.130.168.0/23 maxlen: 23
                          37.76.194.0/23 maxlen: 23
                          178.130.166.0/23 maxlen: 23
                          178.130.172.0/23 maxlen: 23
                          37.76.198.0/23 maxlen: 23
                          178.130.176.0/23 maxlen: 23
                          37.76.202.0/23 maxlen: 23
                          178.130.174.0/23 maxlen: 23
                          37.76.200.0/23 maxlen: 23
                          37.76.206.0/23 maxlen: 23
                          178.130.178.0/23 maxlen: 23
                          37.76.204.0/23 maxlen: 23
                          178.130.186.0/23 maxlen: 23
                          37.76.212.0/23 maxlen: 23
                          178.130.184.0/23 maxlen: 23
                          37.76.210.0/23 maxlen: 23
                          178.130.182.0/23 maxlen: 23
                          37.76.208.0/23 maxlen: 23
                          178.130.180.0/23 maxlen: 23
                          85.184.52.0/23 maxlen: 23
                          85.184.58.0/23 maxlen: 23
                          85.184.56.0/23 maxlen: 23
                          85.184.54.0/23 maxlen: 23
                          85.184.62.0/23 maxlen: 23
                          85.184.60.0/23 maxlen: 23
                          85.184.36.0/23 maxlen: 23
                          85.184.34.0/23 maxlen: 23
                          85.184.32.0/19 maxlen: 19
                          85.184.32.0/23 maxlen: 23
                          85.184.38.0/23 maxlen: 23
                          85.184.44.0/23 maxlen: 23
                          85.184.42.0/23 maxlen: 23
                          85.184.40.0/23 maxlen: 23
                          85.184.50.0/23 maxlen: 23
                          85.184.48.0/23 maxlen: 23
                          85.184.46.0/23 maxlen: 23
                          5.34.162.0/23 maxlen: 23
                          5.34.164.0/23 maxlen: 23
                          5.34.166.0/23 maxlen: 23
                          31.13.163.0/24 maxlen: 24
                          31.13.162.0/24 maxlen: 24
                          185.7.120.0/23 maxlen: 23
                          185.7.122.0/23 maxlen: 23
                          2a04:940::/29 maxlen: 29
                          2a04:940:1600::/48 maxlen: 48
                          2a04:940:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a7:87:b9:00:8a:86:52:69:ca:ec:99:09:b1:1b:f9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Oct  5 09:43:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a219a5f59f3ccbca7b29334d1899d7d3606b849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:2a:e3:26:ef:4f:1e:97:44:63:72:3a:41:
                    50:78:12:c6:a2:6f:32:50:92:d8:21:31:6e:c3:d9:
                    5b:e2:12:a7:3a:cc:54:f4:87:83:2f:14:86:07:5d:
                    bc:63:d6:3b:16:11:f9:b8:78:82:46:2f:15:81:21:
                    dd:81:a9:22:1f:d7:f1:c1:a2:a9:c0:ef:f5:25:29:
                    92:63:99:fc:26:15:06:7e:10:5a:17:76:93:d2:5b:
                    23:56:c4:76:c9:42:22:7f:6c:88:d9:98:b7:db:52:
                    6e:90:5e:f8:a0:98:a7:0a:ab:2c:d4:3f:a4:8b:ca:
                    af:7d:56:0b:38:17:73:13:d7:1e:db:fa:e6:50:a0:
                    61:f1:d5:39:34:4b:ee:5e:b0:24:5f:b8:14:de:d1:
                    93:4f:32:04:6e:d7:1a:6a:98:06:84:bd:09:e0:e0:
                    db:3a:36:0c:e4:99:34:9c:bc:13:23:cc:ee:5b:43:
                    7c:5e:6c:ad:ac:b8:19:c0:a1:9c:8b:cb:c4:d7:18:
                    40:b4:fa:b0:99:de:28:97:27:5e:a6:a7:08:ce:89:
                    01:d2:db:d8:11:58:b7:a7:58:d3:07:a8:26:98:5c:
                    ac:64:ac:86:63:e0:17:9e:07:84:aa:df:c8:df:4e:
                    1d:de:6a:3d:0b:18:43:f2:b3:15:ee:2b:18:de:79:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:21:9A:5F:59:F3:CC:BC:A7:B2:93:34:D1:89:9D:7D:36:06:B8:49
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/eiGaX1nzzLynspM00YmdfTYGuEk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.34.162.0-5.34.167.255
                  5.43.192.0/19
                  31.13.160.0/21
                  31.25.72.0/21
                  37.60.144.0/21
                  37.76.192.0/19
                  46.28.138.0/23
                  46.28.142.0/23
                  46.32.192.0-46.32.208.255
                  46.32.210.0-46.32.221.255
                  46.43.64.0/18
                  46.244.64.0/19
                  84.242.48.0/20
                  85.184.32.0/19
                  94.73.0.0/19
                  95.215.131.0/24
                  176.65.16.0/20
                  176.67.56.0/21
                  176.67.96.0/19
                  178.130.144.0-178.130.191.255
                  185.7.120.0/22
                  185.17.232.0-185.17.234.255
                  188.227.232.0/21
                IPv6:
                  2a04:940::/29

    Signature Algorithm: sha256WithRSAEncryption
         0a:5a:1f:4f:97:b0:18:4b:0c:bb:8a:32:b8:91:8b:0f:8f:55:
         c5:af:45:2e:c2:9e:b3:2b:d6:c6:0e:87:25:02:eb:5f:82:af:
         73:63:86:44:cf:94:85:8c:41:e1:2e:d2:1b:c3:69:33:b7:d4:
         14:e3:57:be:c6:da:d8:c8:15:fe:a7:40:dc:11:29:97:41:9d:
         78:de:06:5e:2b:97:d6:cd:62:49:6a:ed:da:49:1d:bb:f9:90:
         4a:ed:78:3d:cf:23:56:f0:eb:6c:87:84:a6:83:0a:23:39:eb:
         6f:d7:86:e9:11:ca:99:ba:df:17:77:ea:b5:bc:64:02:95:4e:
         64:cc:8a:0c:4d:7f:52:92:80:75:cf:49:fb:6a:27:fe:03:27:
         94:e5:5d:50:75:a1:4f:f0:af:a4:df:a4:10:58:c4:22:f8:36:
         ed:66:16:11:86:8a:6e:f4:96:b9:fd:c4:68:59:9a:2d:fc:af:
         bc:b5:b3:d4:ea:41:96:30:47:c4:d4:e3:ab:9f:3f:f4:78:dd:
         c5:75:6d:f6:e8:84:ef:9a:b4:1d:50:36:29:db:38:a0:bd:78:
         3c:48:91:0d:91:83:63:0e:5f:e2:65:c2:6c:a2:0e:98:24:91:
         4f:56:05:7b:a7:d8:ad:62:0a:2a:23:9c:5b:bf:04:ce:ab:be:
         75:12:c2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:46 2023 by rpki-client on console-ams.rpki-client.org