Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1cNVm4bFWTAp0zBwScpMwV0Bek8.roa
File:                     1cNVm4bFWTAp0zBwScpMwV0Bek8.roa (raw, json)
Hash identifier:          am75rKWINbGQfiaT92/urekFv7J8HlgOmZK5s2U5Fsk=
Subject key identifier:   D5:C3:55:9B:86:C5:59:30:29:D3:30:70:49:CA:4C:C1:5D:01:7A:4F
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       0183E5D6046F9E1498FC47B7D276CD72CCB4
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1cNVm4bFWTAp0zBwScpMwV0Bek8.roa
Signing time:             Mon 17 Oct 2022 12:05:51 +0000
ROA not before:           Mon 17 Oct 2022 12:05:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20804
IP address blocks:        88.220.224.0/19 maxlen: 19
                          88.220.192.0/20 maxlen: 20
                          88.220.208.0/20 maxlen: 20
                          88.220.0.0/17 maxlen: 17
                          88.220.32.0/21 maxlen: 21
                          88.220.40.0/22 maxlen: 22
                          88.220.48.0/23 maxlen: 23
                          88.220.50.0/23 maxlen: 23
                          88.220.46.0/23 maxlen: 23
                          88.220.120.0/22 maxlen: 22
                          88.220.128.0/18 maxlen: 18
                          88.220.132.0/23 maxlen: 23
                          88.220.152.0/23 maxlen: 23
                          88.220.58.0/23 maxlen: 23
                          88.220.52.0/23 maxlen: 23
                          88.220.64.0/22 maxlen: 22
                          88.220.60.0/23 maxlen: 23
                          88.220.66.0/23 maxlen: 23
                          82.177.244.0/23 maxlen: 23
                          82.177.254.0/23 maxlen: 23
                          81.15.254.0/23 maxlen: 23
                          82.177.176.0/21 maxlen: 21
                          82.177.196.0/22 maxlen: 22
                          82.177.14.0/23 maxlen: 23
                          195.136.164.0/23 maxlen: 23
                          82.177.20.0/22 maxlen: 22
                          195.136.174.0/23 maxlen: 23
                          195.136.176.0/22 maxlen: 22
                          82.177.42.0/23 maxlen: 23
                          82.177.44.0/22 maxlen: 22
                          81.15.128.0/17 maxlen: 17
                          82.177.48.0/21 maxlen: 21
                          81.15.128.0/23 maxlen: 23
                          81.15.132.0/23 maxlen: 23
                          82.177.52.0/23 maxlen: 23
                          81.15.136.0/23 maxlen: 23
                          195.136.112.0/21 maxlen: 21
                          195.136.114.0/23 maxlen: 23
                          82.177.4.0/22 maxlen: 22
                          195.136.148.0/22 maxlen: 22
                          82.177.0.0/23 maxlen: 23
                          82.177.0.0/16 maxlen: 16
                          195.136.156.0/23 maxlen: 23
                          82.177.10.0/23 maxlen: 23
                          82.177.120.0/21 maxlen: 21
                          81.15.204.0/23 maxlen: 23
                          82.177.132.0/23 maxlen: 23
                          81.15.214.0/23 maxlen: 23
                          81.15.218.0/23 maxlen: 23
                          82.177.144.0/20 maxlen: 20
                          81.15.222.0/23 maxlen: 23
                          81.15.224.0/22 maxlen: 22
                          82.177.140.0/23 maxlen: 23
                          81.15.232.0/22 maxlen: 22
                          81.15.240.0/23 maxlen: 23
                          81.15.244.0/23 maxlen: 23
                          82.177.164.0/22 maxlen: 22
                          82.177.168.0/21 maxlen: 21
                          81.15.148.0/22 maxlen: 22
                          82.177.68.0/22 maxlen: 22
                          82.177.72.0/21 maxlen: 21
                          82.177.80.0/21 maxlen: 21
                          82.177.90.0/23 maxlen: 23
                          81.15.168.0/21 maxlen: 21
                          82.177.88.0/22 maxlen: 22
                          82.177.102.0/23 maxlen: 24
                          81.15.180.0/22 maxlen: 22
                          81.15.184.0/23 maxlen: 23
                          195.136.248.0/21 maxlen: 21
                          81.15.182.0/23 maxlen: 23
                          81.15.192.0/22 maxlen: 22
                          82.177.108.0/23 maxlen: 23
                          82.177.112.0/22 maxlen: 22
                          81.15.198.0/23 maxlen: 23
                          82.177.116.0/22 maxlen: 22
                          195.136.70.0/23 maxlen: 23
                          195.136.88.0/22 maxlen: 22
                          195.136.0.0/23 maxlen: 23
                          195.136.4.0/22 maxlen: 22
                          195.136.0.0/16 maxlen: 16
                          194.183.54.0/24 maxlen: 24
                          195.136.16.0/22 maxlen: 22
                          194.183.55.0/24 maxlen: 24
                          195.136.34.0/23 maxlen: 23
                          195.136.38.0/23 maxlen: 23
                          195.136.48.0/22 maxlen: 22
                          88.220.253.0/24 maxlen: 24
                          88.220.252.0/24 maxlen: 24
                          88.220.165.0/24 maxlen: 24
                          88.220.181.0/24 maxlen: 24
                          88.220.185.0/24 maxlen: 24
                          88.220.43.0/24 maxlen: 24
                          88.220.44.0/24 maxlen: 24
                          213.172.160.0/19 maxlen: 19
                          88.220.107.0/24 maxlen: 24
                          88.220.113.0/24 maxlen: 24
                          88.220.117.0/24 maxlen: 24
                          88.220.114.0/24 maxlen: 24
                          88.220.116.0/24 maxlen: 24
                          88.220.126.0/24 maxlen: 24
                          88.220.52.0/24 maxlen: 24
                          88.220.65.0/24 maxlen: 24
                          88.220.81.0/24 maxlen: 24
                          88.220.84.0/24 maxlen: 24
                          82.177.252.0/24 maxlen: 24
                          82.177.249.0/24 maxlen: 24
                          82.177.251.0/24 maxlen: 24
                          82.177.247.0/24 maxlen: 24
                          81.15.254.0/24 maxlen: 24
                          82.177.177.0/24 maxlen: 24
                          82.177.179.0/24 maxlen: 24
                          81.15.255.0/24 maxlen: 24
                          82.177.183.0/24 maxlen: 24
                          82.177.182.0/24 maxlen: 24
                          82.177.191.0/24 maxlen: 24
                          82.177.188.0/24 maxlen: 24
                          82.177.192.0/24 maxlen: 24
                          82.177.199.0/24 maxlen: 24
                          82.177.195.0/24 maxlen: 24
                          82.177.194.0/24 maxlen: 24
                          82.177.196.0/24 maxlen: 24
                          82.177.206.0/24 maxlen: 24
                          82.177.207.0/24 maxlen: 24
                          82.177.208.0/24 maxlen: 24
                          82.177.16.0/24 maxlen: 24
                          82.177.21.0/24 maxlen: 24
                          82.177.19.0/24 maxlen: 24
                          82.177.27.0/24 maxlen: 24
                          82.177.35.0/24 maxlen: 24
                          82.177.37.0/24 maxlen: 24
                          82.177.41.0/24 maxlen: 24
                          82.177.43.0/24 maxlen: 24
                          82.177.48.0/24 maxlen: 24
                          82.177.50.0/24 maxlen: 24
                          82.177.46.0/24 maxlen: 24
                          81.15.130.0/24 maxlen: 24
                          81.15.133.0/24 maxlen: 24
                          81.15.135.0/24 maxlen: 24
                          82.177.54.0/24 maxlen: 24
                          82.177.59.0/24 maxlen: 24
                          195.136.113.0/24 maxlen: 24
                          195.136.120.0/24 maxlen: 24
                          195.136.122.0/24 maxlen: 24
                          82.177.2.0/24 maxlen: 24
                          82.177.9.0/24 maxlen: 24
                          81.15.201.0/24 maxlen: 24
                          82.177.122.0/24 maxlen: 24
                          81.15.203.0/24 maxlen: 24
                          82.177.119.0/24 maxlen: 24
                          81.15.202.0/24 maxlen: 24
                          82.177.127.0/24 maxlen: 24
                          81.15.209.0/24 maxlen: 24
                          82.177.130.0/24 maxlen: 24
                          82.177.133.0/24 maxlen: 24
                          81.15.216.0/24 maxlen: 24
                          81.15.218.0/24 maxlen: 24
                          81.15.217.0/24 maxlen: 24
                          81.15.222.0/24 maxlen: 24
                          81.15.225.0/24 maxlen: 24
                          81.15.230.0/24 maxlen: 24
                          81.15.232.0/24 maxlen: 24
                          81.15.227.0/24 maxlen: 24
                          81.15.236.0/24 maxlen: 24
                          81.15.238.0/24 maxlen: 24
                          81.15.237.0/24 maxlen: 24
                          81.15.239.0/24 maxlen: 24
                          81.15.242.0/24 maxlen: 24
                          82.177.165.0/24 maxlen: 24
                          82.177.160.0/24 maxlen: 24
                          82.177.164.0/24 maxlen: 24
                          81.15.150.0/24 maxlen: 24
                          81.15.159.0/24 maxlen: 24
                          81.15.156.0/24 maxlen: 24
                          82.177.90.0/24 maxlen: 24
                          82.177.91.0/24 maxlen: 24
                          81.15.175.0/24 maxlen: 24
                          81.15.174.0/24 maxlen: 24
                          81.15.185.0/24 maxlen: 24
                          195.136.252.0/24 maxlen: 24
                          81.15.187.0/24 maxlen: 24
                          81.15.191.0/24 maxlen: 24
                          82.177.111.0/24 maxlen: 24
                          81.15.190.0/24 maxlen: 24
                          81.15.199.0/24 maxlen: 24
                          81.15.195.0/24 maxlen: 24
                          81.15.198.0/24 maxlen: 24
                          81.15.194.0/24 maxlen: 24
                          194.183.32.0/19 maxlen: 19
                          194.183.32.0/23 maxlen: 23
                          194.183.34.0/23 maxlen: 23
                          195.136.65.0/24 maxlen: 24
                          194.183.48.0/22 maxlen: 22
                          194.183.56.0/23 maxlen: 23
                          195.136.21.0/24 maxlen: 24
                          195.136.27.0/24 maxlen: 24
                          195.136.25.0/24 maxlen: 24
                          195.136.36.0/24 maxlen: 24
                          195.136.48.0/24 maxlen: 24
                          2a00:4120:8000:4::/64 maxlen: 64
                          2a00:4120::/32 maxlen: 32
                          2a00:4120:8000:70::/65 maxlen: 65
                          2a00:4120:8000:2::/64 maxlen: 64
                          2a00:4120:8000:5::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e5:d6:04:6f:9e:14:98:fc:47:b7:d2:76:cd:72:cc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Oct 17 12:05:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d5c3559b86c5593029d3307049ca4cc15d017a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:18:1c:12:33:4f:db:b9:dd:6a:4c:11:15:
                    68:80:7e:05:aa:16:25:5f:45:4e:e4:12:46:28:14:
                    6c:3d:8b:0a:bf:90:18:9f:f6:bf:1d:d1:da:b9:9b:
                    c9:ce:6e:33:cf:fb:a3:79:04:ce:e3:0f:e9:02:b2:
                    cb:f3:1e:3c:bd:1c:ba:a0:44:b4:ed:7f:d8:90:f7:
                    54:b0:e0:b1:98:bb:51:7f:ec:b2:aa:aa:1c:6b:f0:
                    a7:ec:d3:a7:f8:4f:4c:93:a6:8a:70:76:3a:f5:e0:
                    12:06:35:0d:6e:b4:ef:f9:ee:12:75:e3:3e:a5:1c:
                    4a:7a:3b:28:49:0d:67:91:84:67:43:3f:57:58:0e:
                    74:69:7e:d6:ff:0b:d3:4f:2d:0d:9a:c7:57:65:c2:
                    cd:d4:6a:12:8b:97:61:ca:db:f4:f9:23:3f:44:b7:
                    c2:70:82:cf:2b:d3:93:a6:ee:fb:44:a8:c0:2a:c2:
                    09:ae:2d:3d:03:0f:27:f5:46:b3:50:f5:19:f5:55:
                    5c:53:b5:e9:64:f6:48:fc:ff:de:39:8d:58:0c:c7:
                    33:3f:3a:60:ce:b0:2e:93:db:a1:ab:ba:77:5a:48:
                    a4:8d:b7:43:29:f5:83:75:06:7d:06:f8:3e:58:44:
                    2e:19:97:16:72:b1:ef:c6:e1:c0:ea:bc:7f:c3:c1:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C3:55:9B:86:C5:59:30:29:D3:30:70:49:CA:4C:C1:5D:01:7A:4F
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1cNVm4bFWTAp0zBwScpMwV0Bek8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.128.0/17
                  82.177.0.0/16
                  88.220.0.0/16
                  194.183.32.0/19
                  195.136.0.0/16
                  213.172.160.0/19
                IPv6:
                  2a00:4120::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:af:c3:14:58:11:d9:cf:7f:4d:f6:af:30:55:92:04:df:2c:
         42:81:3e:a5:08:a4:c0:ae:7a:3c:24:b7:5b:45:df:6f:d5:b7:
         d4:bf:6f:91:a0:93:87:8b:3d:42:0e:60:f2:01:71:64:4b:e2:
         2a:a1:7a:8b:d8:a0:0e:44:78:a1:47:52:9f:b0:ef:cd:31:54:
         61:2c:f2:d3:6b:8e:b2:34:f0:ae:f4:0e:d4:b0:ab:4e:a7:59:
         3e:d6:cd:48:33:a1:e9:81:d8:fe:67:94:d5:96:8b:47:fb:3d:
         08:3c:cc:3c:97:f1:6a:bf:03:a0:de:d2:a4:9d:7d:92:95:8b:
         c3:f1:5f:e2:2e:ad:c4:78:b3:0e:ed:41:03:4c:17:e0:63:9e:
         90:18:3f:95:a2:9c:5e:dd:49:aa:3e:30:85:f1:ff:f1:f4:9a:
         10:77:d4:4c:80:69:7b:2f:30:1a:ab:d5:2d:10:c9:fa:6c:f1:
         d8:cc:e6:19:f5:32:fc:f4:a2:bd:6e:cb:29:1a:36:90:de:a6:
         51:fe:57:4a:ae:aa:71:61:39:07:e3:b9:7a:04:19:9a:dc:60:
         f8:70:c1:ea:3f:12:5e:a9:ab:5b:95:cb:90:93:7d:2f:89:1b:
         04:03:5f:55:26:04:79:c2:f0:8c:aa:e4:05:a3:98:9e:3e:89:
         ac:1a:3d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org