Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7Dn98pxAnWfuV02eg2JJ-BrrCZI.roa
File:                     7Dn98pxAnWfuV02eg2JJ-BrrCZI.roa (raw, json)
Hash identifier:          l7Jn8ysfBdN2e/PgHRYP0XpKmVYQCvxLSXo9mg+HXzg=
Subject key identifier:   EC:39:FD:F2:9C:40:9D:67:EE:57:4D:9E:83:62:49:F8:1A:EB:09:92
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       0183D03DD56358AE56FC97DE7C1FFEC93A48
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7Dn98pxAnWfuV02eg2JJ-BrrCZI.roa
Signing time:             Thu 13 Oct 2022 07:27:36 +0000
ROA not before:           Thu 13 Oct 2022 07:27:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20804
IP address blocks:        88.220.224.0/19 maxlen: 19
                          88.220.192.0/20 maxlen: 20
                          88.220.208.0/20 maxlen: 20
                          88.220.0.0/17 maxlen: 17
                          88.220.32.0/21 maxlen: 21
                          88.220.40.0/22 maxlen: 22
                          88.220.48.0/23 maxlen: 23
                          88.220.50.0/23 maxlen: 23
                          88.220.46.0/23 maxlen: 23
                          88.220.120.0/22 maxlen: 22
                          88.220.128.0/18 maxlen: 18
                          88.220.132.0/23 maxlen: 23
                          88.220.152.0/23 maxlen: 23
                          88.220.58.0/23 maxlen: 23
                          88.220.52.0/23 maxlen: 23
                          88.220.64.0/22 maxlen: 22
                          88.220.60.0/23 maxlen: 23
                          88.220.66.0/23 maxlen: 23
                          82.177.244.0/23 maxlen: 23
                          82.177.254.0/23 maxlen: 23
                          81.15.254.0/23 maxlen: 23
                          82.177.176.0/21 maxlen: 21
                          82.177.196.0/22 maxlen: 22
                          82.177.14.0/23 maxlen: 23
                          195.136.164.0/23 maxlen: 23
                          82.177.20.0/22 maxlen: 22
                          195.136.174.0/23 maxlen: 23
                          195.136.176.0/22 maxlen: 22
                          82.177.42.0/23 maxlen: 23
                          82.177.44.0/22 maxlen: 22
                          81.15.128.0/17 maxlen: 17
                          82.177.48.0/21 maxlen: 21
                          81.15.128.0/23 maxlen: 23
                          81.15.132.0/23 maxlen: 23
                          82.177.52.0/23 maxlen: 23
                          81.15.136.0/23 maxlen: 23
                          195.136.112.0/21 maxlen: 21
                          195.136.114.0/23 maxlen: 23
                          82.177.4.0/22 maxlen: 22
                          195.136.148.0/22 maxlen: 22
                          82.177.0.0/23 maxlen: 23
                          82.177.0.0/16 maxlen: 16
                          195.136.156.0/23 maxlen: 23
                          82.177.10.0/23 maxlen: 23
                          82.177.120.0/21 maxlen: 21
                          81.15.204.0/23 maxlen: 23
                          82.177.132.0/23 maxlen: 23
                          81.15.214.0/23 maxlen: 23
                          81.15.218.0/23 maxlen: 23
                          82.177.144.0/20 maxlen: 20
                          81.15.222.0/23 maxlen: 23
                          81.15.224.0/22 maxlen: 22
                          82.177.140.0/23 maxlen: 23
                          81.15.232.0/22 maxlen: 22
                          81.15.240.0/23 maxlen: 23
                          81.15.244.0/23 maxlen: 23
                          82.177.164.0/22 maxlen: 22
                          82.177.168.0/21 maxlen: 21
                          81.15.148.0/22 maxlen: 22
                          82.177.68.0/22 maxlen: 22
                          82.177.72.0/21 maxlen: 21
                          82.177.80.0/21 maxlen: 21
                          82.177.90.0/23 maxlen: 23
                          81.15.168.0/21 maxlen: 21
                          82.177.88.0/22 maxlen: 22
                          82.177.102.0/23 maxlen: 24
                          81.15.180.0/22 maxlen: 22
                          81.15.184.0/23 maxlen: 23
                          195.136.248.0/21 maxlen: 21
                          81.15.182.0/23 maxlen: 23
                          81.15.192.0/22 maxlen: 22
                          82.177.108.0/23 maxlen: 23
                          82.177.112.0/22 maxlen: 22
                          81.15.198.0/23 maxlen: 23
                          82.177.116.0/22 maxlen: 22
                          195.136.70.0/23 maxlen: 23
                          195.136.88.0/22 maxlen: 22
                          195.136.0.0/23 maxlen: 23
                          195.136.4.0/22 maxlen: 22
                          195.136.0.0/16 maxlen: 16
                          194.183.54.0/24 maxlen: 24
                          195.136.16.0/22 maxlen: 22
                          194.183.55.0/24 maxlen: 24
                          195.136.34.0/23 maxlen: 23
                          195.136.38.0/23 maxlen: 23
                          195.136.48.0/22 maxlen: 22
                          88.220.253.0/24 maxlen: 24
                          88.220.252.0/24 maxlen: 24
                          88.220.165.0/24 maxlen: 24
                          88.220.181.0/24 maxlen: 24
                          88.220.185.0/24 maxlen: 24
                          88.220.44.0/24 maxlen: 24
                          213.172.160.0/19 maxlen: 19
                          88.220.107.0/24 maxlen: 24
                          88.220.113.0/24 maxlen: 24
                          88.220.117.0/24 maxlen: 24
                          88.220.114.0/24 maxlen: 24
                          88.220.116.0/24 maxlen: 24
                          88.220.52.0/24 maxlen: 24
                          88.220.65.0/24 maxlen: 24
                          88.220.81.0/24 maxlen: 24
                          88.220.84.0/24 maxlen: 24
                          82.177.252.0/24 maxlen: 24
                          82.177.249.0/24 maxlen: 24
                          82.177.251.0/24 maxlen: 24
                          82.177.247.0/24 maxlen: 24
                          81.15.254.0/24 maxlen: 24
                          82.177.177.0/24 maxlen: 24
                          82.177.179.0/24 maxlen: 24
                          81.15.255.0/24 maxlen: 24
                          82.177.183.0/24 maxlen: 24
                          82.177.182.0/24 maxlen: 24
                          82.177.191.0/24 maxlen: 24
                          82.177.188.0/24 maxlen: 24
                          82.177.192.0/24 maxlen: 24
                          82.177.199.0/24 maxlen: 24
                          82.177.195.0/24 maxlen: 24
                          82.177.194.0/24 maxlen: 24
                          82.177.196.0/24 maxlen: 24
                          82.177.206.0/24 maxlen: 24
                          82.177.207.0/24 maxlen: 24
                          82.177.208.0/24 maxlen: 24
                          82.177.16.0/24 maxlen: 24
                          82.177.21.0/24 maxlen: 24
                          82.177.19.0/24 maxlen: 24
                          82.177.27.0/24 maxlen: 24
                          82.177.35.0/24 maxlen: 24
                          82.177.37.0/24 maxlen: 24
                          82.177.41.0/24 maxlen: 24
                          82.177.43.0/24 maxlen: 24
                          82.177.48.0/24 maxlen: 24
                          82.177.50.0/24 maxlen: 24
                          82.177.46.0/24 maxlen: 24
                          81.15.130.0/24 maxlen: 24
                          81.15.133.0/24 maxlen: 24
                          82.177.54.0/24 maxlen: 24
                          81.15.135.0/24 maxlen: 24
                          82.177.59.0/24 maxlen: 24
                          195.136.113.0/24 maxlen: 24
                          195.136.120.0/24 maxlen: 24
                          195.136.122.0/24 maxlen: 24
                          82.177.2.0/24 maxlen: 24
                          82.177.9.0/24 maxlen: 24
                          81.15.201.0/24 maxlen: 24
                          81.15.203.0/24 maxlen: 24
                          82.177.122.0/24 maxlen: 24
                          82.177.119.0/24 maxlen: 24
                          81.15.202.0/24 maxlen: 24
                          82.177.127.0/24 maxlen: 24
                          81.15.209.0/24 maxlen: 24
                          82.177.130.0/24 maxlen: 24
                          82.177.133.0/24 maxlen: 24
                          81.15.216.0/24 maxlen: 24
                          81.15.218.0/24 maxlen: 24
                          81.15.217.0/24 maxlen: 24
                          81.15.222.0/24 maxlen: 24
                          81.15.225.0/24 maxlen: 24
                          81.15.230.0/24 maxlen: 24
                          81.15.232.0/24 maxlen: 24
                          81.15.227.0/24 maxlen: 24
                          81.15.236.0/24 maxlen: 24
                          81.15.238.0/24 maxlen: 24
                          81.15.237.0/24 maxlen: 24
                          81.15.239.0/24 maxlen: 24
                          81.15.242.0/24 maxlen: 24
                          82.177.165.0/24 maxlen: 24
                          82.177.160.0/24 maxlen: 24
                          82.177.164.0/24 maxlen: 24
                          81.15.150.0/24 maxlen: 24
                          81.15.159.0/24 maxlen: 24
                          81.15.156.0/24 maxlen: 24
                          82.177.90.0/24 maxlen: 24
                          82.177.91.0/24 maxlen: 24
                          81.15.175.0/24 maxlen: 24
                          81.15.174.0/24 maxlen: 24
                          81.15.185.0/24 maxlen: 24
                          195.136.252.0/24 maxlen: 24
                          81.15.187.0/24 maxlen: 24
                          81.15.191.0/24 maxlen: 24
                          82.177.111.0/24 maxlen: 24
                          81.15.190.0/24 maxlen: 24
                          81.15.199.0/24 maxlen: 24
                          81.15.195.0/24 maxlen: 24
                          81.15.198.0/24 maxlen: 24
                          81.15.194.0/24 maxlen: 24
                          194.183.32.0/19 maxlen: 19
                          194.183.32.0/23 maxlen: 23
                          194.183.34.0/23 maxlen: 23
                          195.136.65.0/24 maxlen: 24
                          194.183.48.0/22 maxlen: 22
                          194.183.56.0/23 maxlen: 23
                          195.136.21.0/24 maxlen: 24
                          195.136.27.0/24 maxlen: 24
                          195.136.25.0/24 maxlen: 24
                          195.136.36.0/24 maxlen: 24
                          195.136.48.0/24 maxlen: 24
                          2a00:4120:8000:4::/64 maxlen: 64
                          2a00:4120::/32 maxlen: 32
                          2a00:4120:8000:70::/65 maxlen: 65
                          2a00:4120:8000:2::/64 maxlen: 64
                          2a00:4120:8000:5::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d0:3d:d5:63:58:ae:56:fc:97:de:7c:1f:fe:c9:3a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Oct 13 07:27:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec39fdf29c409d67ee574d9e836249f81aeb0992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:0e:9d:1b:10:a3:fc:13:d3:eb:a1:1b:c6:
                    69:54:83:55:2c:95:94:62:ad:46:3c:86:3c:0b:f7:
                    ce:b8:26:27:ca:be:34:ce:bd:93:cb:0a:fd:64:0d:
                    91:bf:51:b8:ea:59:67:91:ef:d9:61:bc:ff:3b:ad:
                    a4:a1:c7:98:80:65:54:1c:15:3e:2b:5d:3c:ad:39:
                    76:c8:ca:e4:93:7d:d5:eb:d4:ca:8b:6f:6c:ab:ab:
                    81:26:b8:56:91:84:3f:f3:82:55:14:9a:b7:59:8c:
                    58:63:f2:64:d6:fd:4b:84:18:8f:97:cb:91:3f:2d:
                    ae:a4:58:bb:b6:42:ce:e4:91:ed:84:f4:85:1b:d0:
                    61:96:ba:c4:23:bf:b7:6a:bf:a8:fe:b0:dd:d9:78:
                    71:87:ea:df:c5:d2:b0:93:94:ee:96:47:a2:d5:00:
                    57:7b:b6:36:91:3d:52:08:0e:db:96:2b:31:3e:c3:
                    d2:7f:0a:66:4a:44:5f:c3:93:e7:90:61:7c:41:e4:
                    99:26:20:f2:8b:ad:31:43:ea:23:65:a6:30:7e:c0:
                    42:6a:4f:15:23:bb:84:90:68:66:7d:0e:d2:aa:f9:
                    ee:f3:5c:20:b3:2f:49:fe:ad:6e:c5:a7:4f:ba:eb:
                    f1:e0:da:26:aa:d0:e5:65:f6:d9:4a:18:39:07:6c:
                    d7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:39:FD:F2:9C:40:9D:67:EE:57:4D:9E:83:62:49:F8:1A:EB:09:92
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7Dn98pxAnWfuV02eg2JJ-BrrCZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.128.0/17
                  82.177.0.0/16
                  88.220.0.0/16
                  194.183.32.0/19
                  195.136.0.0/16
                  213.172.160.0/19
                IPv6:
                  2a00:4120::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:5e:a7:ff:3b:41:8d:bd:d5:e1:a5:45:d8:88:01:16:65:
         98:e5:fc:5d:47:98:c9:55:70:38:af:78:15:a6:47:61:f7:28:
         b4:24:f5:f9:f7:6e:d7:9f:fe:4a:1f:36:20:2b:f1:8b:6b:8c:
         6d:9a:36:16:bc:c1:45:16:2b:12:d4:c3:50:e4:37:2b:19:81:
         12:bd:91:1b:5d:01:a7:c2:18:80:e8:1b:44:7d:53:84:24:8d:
         c2:03:44:59:2e:50:21:89:b0:80:bb:a4:cd:94:9a:87:48:19:
         58:a8:fb:3e:e3:d8:63:b6:e1:41:57:1a:5d:f3:6f:6d:10:37:
         0f:0b:f8:40:6c:dd:bb:54:0e:88:11:1f:5d:5e:1f:56:6c:75:
         8f:d3:b4:5e:b1:4c:54:56:be:4c:81:c5:41:08:b9:ab:08:0c:
         91:57:9d:a2:78:72:3c:5b:f2:8c:5c:3c:fc:b4:17:bd:f3:f2:
         72:cb:4a:67:88:19:28:41:2d:78:a6:80:ad:74:10:de:66:f0:
         ab:1d:af:9b:fd:fb:3a:5e:51:29:26:96:6a:00:e1:44:6e:8b:
         73:7c:a3:a5:05:ec:57:1a:6f:70:30:69:90:99:a3:7a:c7:36:
         67:e9:b1:12:52:5b:03:ac:06:10:0f:ae:f0:49:bb:60:f2:10:
         79:4b:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org