Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/T4eRfUnAQFemML64WSls67lE0hw.roa
File:                     T4eRfUnAQFemML64WSls67lE0hw.roa (raw, json)
Hash identifier:          mpEWegq8cghHJ5VkPaLnaORqsGGDQH+3N3iP+rylkho=
Subject key identifier:   4F:87:91:7D:49:C0:40:57:A6:30:BE:B8:59:29:6C:EB:B9:44:D2:1C
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       0182F7A01FECB15A84EF5B3C667CAE8EF655
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/T4eRfUnAQFemML64WSls67lE0hw.roa
Signing time:             Thu 01 Sep 2022 05:57:22 +0000
ROA not before:           Thu 01 Sep 2022 05:57:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47583
IP address blocks:        45.93.136.0/22 maxlen: 22
                          45.87.80.0/22 maxlen: 22
                          194.11.214.0/23 maxlen: 23
                          153.92.4.0/23 maxlen: 23
                          153.92.3.0/24 maxlen: 24
                          153.92.2.0/24 maxlen: 24
                          153.92.1.0/24 maxlen: 24
                          153.92.6.0/23 maxlen: 23
                          153.92.9.0/24 maxlen: 24
                          153.92.7.0/24 maxlen: 24
                          153.92.6.0/24 maxlen: 24
                          153.92.11.0/24 maxlen: 24
                          153.92.10.0/24 maxlen: 24
                          153.92.8.0/21 maxlen: 21
                          153.92.8.0/24 maxlen: 24
                          31.220.17.0/24 maxlen: 24
                          31.220.16.0/24 maxlen: 24
                          153.92.15.0/24 maxlen: 24
                          153.92.14.0/24 maxlen: 24
                          153.92.13.0/24 maxlen: 24
                          153.92.12.0/24 maxlen: 24
                          31.220.23.0/24 maxlen: 24
                          31.220.20.0/23 maxlen: 23
                          31.220.22.0/24 maxlen: 24
                          31.220.21.0/24 maxlen: 24
                          31.220.19.0/24 maxlen: 24
                          31.220.18.0/24 maxlen: 24
                          31.220.20.0/24 maxlen: 24
                          31.220.48.0/20 maxlen: 20
                          31.220.108.0/24 maxlen: 24
                          31.220.107.0/24 maxlen: 24
                          31.220.106.0/24 maxlen: 24
                          31.220.111.0/24 maxlen: 24
                          31.220.110.0/24 maxlen: 24
                          31.220.109.0/24 maxlen: 24
                          194.11.154.0/23 maxlen: 23
                          31.220.104.0/24 maxlen: 24
                          31.220.105.0/24 maxlen: 24
                          2.57.90.0/24 maxlen: 24
                          2.57.88.0/23 maxlen: 23
                          2.57.91.0/24 maxlen: 24
                          212.1.212.0/24 maxlen: 24
                          212.1.212.0/22 maxlen: 22
                          212.1.211.0/24 maxlen: 24
                          212.1.210.0/24 maxlen: 24
                          212.1.208.0/24 maxlen: 24
                          212.1.208.0/21 maxlen: 21
                          212.1.215.0/24 maxlen: 24
                          195.110.58.0/23 maxlen: 23
                          31.170.160.0/22 maxlen: 22
                          31.170.164.0/23 maxlen: 23
                          31.170.164.0/24 maxlen: 24
                          31.170.165.0/24 maxlen: 24
                          31.170.166.0/23 maxlen: 23
                          185.28.21.0/24 maxlen: 24
                          185.28.20.0/24 maxlen: 24
                          185.28.23.0/24 maxlen: 24
                          185.28.22.0/24 maxlen: 24
                          93.188.160.0/21 maxlen: 21
                          45.13.132.0/23 maxlen: 23
                          45.13.134.0/23 maxlen: 23
                          156.67.208.0/20 maxlen: 20
                          45.13.252.0/23 maxlen: 23
                          45.13.254.0/23 maxlen: 23
                          2a02:4780::/48 maxlen: 48
                          2a02:4780:11::/48 maxlen: 48
                          2a02:4780:14::/48 maxlen: 48
                          2a02:4780:25::/48 maxlen: 48
                          2a02:4780:e::/48 maxlen: 48
                          2a02:4780:22::/48 maxlen: 48
                          2a02:4780:b::/48 maxlen: 48
                          2a02:4780:1f::/48 maxlen: 48
                          2a02:4780:8::/48 maxlen: 48
                          2a02:4780:19::/48 maxlen: 48
                          2a02:4780:1c::/48 maxlen: 48
                          2a02:4780:16::/48 maxlen: 48
                          2a02:4780:5::/48 maxlen: 48
                          2a02:4780:13::/48 maxlen: 48
                          2a02:4780:2::/48 maxlen: 48
                          2a02:4780:10::/48 maxlen: 48
                          2a02:4780:21::/48 maxlen: 48
                          2a02:4780:24::/48 maxlen: 48
                          2a02:4780:1e::/48 maxlen: 48
                          2a02:4780:d::/48 maxlen: 48
                          2a02:4780:1b::/48 maxlen: 48
                          2a02:4780:a::/48 maxlen: 48
                          2a02:4780:18::/48 maxlen: 48
                          2a02:4780:26::/48 maxlen: 48
                          2a02:4780:1::/48 maxlen: 48
                          2a02:4780:4::/48 maxlen: 48
                          2a02:4780:15::/48 maxlen: 48
                          2a02:4780:23::/48 maxlen: 48
                          2a02:4780:12::/48 maxlen: 48
                          2a02:4780:20::/48 maxlen: 48
                          2a02:4780:f::/48 maxlen: 48
                          2a02:4780:9::/48 maxlen: 48
                          2a02:4780:c::/48 maxlen: 48
                          2a02:4780:1d::/48 maxlen: 48
                          2a02:4780:6::/48 maxlen: 48
                          2a02:4780:1a::/48 maxlen: 48
                          2a02:4780:3::/48 maxlen: 48
                          2a02:4780:17::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f7:a0:1f:ec:b1:5a:84:ef:5b:3c:66:7c:ae:8e:f6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Sep  1 05:57:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f87917d49c04057a630beb859296cebb944d21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:80:81:67:4e:ac:1a:fa:5d:02:32:8c:c3:
                    5c:84:4f:ed:7c:60:11:d9:bf:ba:94:a0:31:9f:1c:
                    2d:18:21:2a:96:3c:bd:fe:c8:60:f6:19:ba:39:15:
                    6f:24:ef:c8:b1:c9:53:f9:fb:7b:34:68:4e:17:70:
                    1f:c0:2e:ec:46:a5:7c:e7:08:42:19:df:31:d6:ea:
                    e4:0b:f7:df:99:96:04:51:00:a5:a9:9a:54:11:d1:
                    0e:1e:46:76:f5:1a:af:cd:08:4c:4e:99:f0:5c:ff:
                    85:da:79:77:d5:18:6d:58:06:44:eb:df:d6:55:e5:
                    0a:94:3d:34:d7:ec:70:9e:d0:d5:37:a6:f9:1d:c3:
                    67:fe:ba:e6:10:4b:29:dc:4d:62:da:84:01:12:fe:
                    d8:fb:0f:f0:bd:1d:54:85:6b:49:52:61:03:86:8d:
                    d2:37:0f:dd:a8:28:dc:a9:e3:ba:57:3d:b7:f6:a5:
                    97:eb:c5:18:6c:cc:de:e2:b1:b3:00:50:51:bb:97:
                    76:45:4d:75:b5:84:cb:47:59:f7:c9:a0:c0:74:c5:
                    07:8c:38:05:48:bf:70:f5:c3:7c:e2:42:ab:31:3e:
                    27:e2:23:fc:01:49:4d:94:a7:d2:d1:37:c8:7a:24:
                    1d:38:86:df:f0:c9:4d:19:61:fc:ab:36:70:67:43:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:87:91:7D:49:C0:40:57:A6:30:BE:B8:59:29:6C:EB:B9:44:D2:1C
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/T4eRfUnAQFemML64WSls67lE0hw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.88.0/22
                  31.170.160.0/21
                  31.220.16.0/21
                  31.220.48.0/20
                  31.220.104.0/21
                  45.13.132.0/22
                  45.13.252.0/22
                  45.87.80.0/22
                  45.93.136.0/22
                  93.188.160.0/21
                  153.92.1.0-153.92.15.255
                  156.67.208.0/20
                  185.28.20.0/22
                  194.11.154.0/23
                  194.11.214.0/23
                  195.110.58.0/23
                  212.1.208.0/21
                IPv6:
                  2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
                  2a02:4780:8::-2a02:4780:26:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1b:d9:51:2e:24:89:f1:a7:27:cf:e6:fd:2a:d6:dc:a2:4f:ea:
         9b:05:d1:df:28:cf:dc:8b:4c:1d:d7:9c:4f:95:16:b8:b2:bc:
         d4:b7:67:f0:63:9a:77:e3:14:d7:de:3f:81:16:30:7b:cf:78:
         73:6a:8f:6e:d0:69:77:76:c5:0a:7c:59:69:54:73:28:b8:07:
         02:7d:37:58:ab:f2:a7:cd:90:56:23:96:ed:04:72:a7:af:8e:
         59:14:59:c6:9f:ed:2b:9d:c5:ec:60:45:be:c4:4d:fc:3b:04:
         74:a0:53:3f:7f:7e:44:aa:98:f4:3e:a6:43:cf:6a:ab:7d:6b:
         d4:a3:f6:67:7d:e9:46:4b:03:20:02:60:25:e8:2f:ba:e5:f2:
         a0:65:13:a4:3e:e6:0e:26:ec:2c:ea:72:03:fa:b9:d4:8f:f7:
         93:07:8f:cc:8a:98:c2:ca:d8:38:1a:d7:46:c3:fd:e1:6b:25:
         71:45:86:0c:23:d6:e3:97:90:8a:90:47:74:b9:1e:df:c1:8a:
         65:12:27:67:de:fd:c9:0f:b9:26:ec:d5:9f:70:0c:2e:ad:c9:
         79:2f:40:cb:74:79:08:8e:a0:5e:16:75:93:4b:b0:e5:eb:6d:
         f0:cf:d9:07:17:66:6a:6b:6b:c0:64:1d:2f:78:6a:1e:17:e0:
         31:68:19:f7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAYL3oB/ssVqE71s8ZnyujvZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODY3NTQ1NzU5NGQ3ZTc0MGFhZWVmMmU3ZDdlZmQwMjIz
OWM2MTcwHhcNMjIwOTAxMDU1NzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Zjg3OTE3ZDQ5YzA0MDU3YTYzMGJlYjg1OTI5NmNlYmI5NDRkMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloqAgWdOrBr6XQIyjMNchE/tfGAR
2b+6lKAxnxwtGCEqljy9/shg9hm6ORVvJO/IsclT+ft7NGhOF3AfwC7sRqV85whC
Gd8x1urkC/ffmZYEUQClqZpUEdEOHkZ29RqvzQhMTpnwXP+F2nl31RhtWAZE69/W
VeUKlD001+xwntDVN6b5HcNn/rrmEEsp3E1i2oQBEv7Y+w/wvR1UhWtJUmEDho3S
Nw/dqCjcqeO6Vz239qWX68UYbMze4rGzAFBRu5d2RU11tYTLR1n3yaDAdMUHjDgF
SL9w9cN84kKrMT4n4iP8AUlNlKfS0TfIeiQdOIbf8MlNGWH8qzZwZ0NKyQIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFE+HkX1JwEBXpjC+uFkpbOu5RNIcMB8GA1UdIwQY
MBaAFC+GdUV1lNfnQKru8ufX79AiOcYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYt
MTAzMWFlMWViMDMyLzEvVDRlUmZVbkFRRmVtTUw2NFdTbHM2N2xFMGh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYtMTAzMWFlMWViMDMy
LzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDB0BAIAATBuAwQCAjlY
AwQDH6qgAwQDH9wQAwQEH9wwAwQDH9xoAwQCLQ2EAwQCLQ38AwQCLVdQAwQCLV2I
AwQDXbygMAwDBACZXAEDBASZXAADBAScQ9ADBAK5HBQDBAHCC5oDBAHCC9YDBAHD
bjoDBAPUAdAwLAQCAAIwJjAQAwUHKgJHgAMHACoCR4AABjASAwcDKgJHgAAIAwcA
KgJHgAAmMA0GCSqGSIb3DQEBCwUAA4IBAQAb2VEuJInxpyfP5v0q1tyiT+qbBdHf
KM/ci0wd15xPlRa4srzUt2fwY5p34xTX3j+BFjB7z3hzao9u0Gl3dsUKfFlpVHMo
uAcCfTdYq/KnzZBWI5btBHKnr45ZFFnGn+0rncXsYEW+xE38OwR0oFM/f35Eqpj0
PqZDz2qrfWvUo/ZnfelGSwMgAmAl6C+65fKgZROkPuYOJuws6nID+rnUj/eTB4/M
ipjCytg4GtdGw/3hayVxRYYMI9bjl5CKkEd0uR7fwYplEidn3v3JD7km7NWfcAwu
rcl5L0DLdHkIjqBeFnWTS7Dl623wz9kHF2Zqa2vAZB0veGoeF+AxaBn3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org