Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mlvuwhaMTZnFfIFfyYVUlKG0KTY.roa
File:                     mlvuwhaMTZnFfIFfyYVUlKG0KTY.roa (raw, json)
Hash identifier:          Qef95VlVHvC9OD09nlCUXbx3en0rgciEJS5dpD6/oeM=
Subject key identifier:   9A:5B:EE:C2:16:8C:4D:99:C5:7C:81:5F:C9:85:54:94:A1:B4:29:36
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3BA9917C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mlvuwhaMTZnFfIFfyYVUlKG0KTY.roa
Signing time:             Mon 25 Apr 2022 08:12:24 +0000
ROA not before:           Mon 25 Apr 2022 08:12:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20804
IP address blocks:        88.220.224.0/19 maxlen: 19
                          88.220.192.0/20 maxlen: 20
                          88.220.208.0/20 maxlen: 20
                          88.220.0.0/17 maxlen: 17
                          88.220.32.0/21 maxlen: 21
                          88.220.40.0/22 maxlen: 22
                          88.220.48.0/23 maxlen: 23
                          88.220.50.0/23 maxlen: 23
                          88.220.46.0/23 maxlen: 23
                          88.220.120.0/22 maxlen: 22
                          88.220.128.0/18 maxlen: 18
                          88.220.132.0/23 maxlen: 23
                          88.220.152.0/23 maxlen: 23
                          88.220.58.0/23 maxlen: 23
                          88.220.52.0/23 maxlen: 23
                          88.220.64.0/22 maxlen: 22
                          88.220.60.0/23 maxlen: 23
                          88.220.66.0/23 maxlen: 23
                          82.177.244.0/23 maxlen: 23
                          82.177.254.0/23 maxlen: 23
                          81.15.254.0/23 maxlen: 23
                          82.177.176.0/21 maxlen: 21
                          82.177.196.0/22 maxlen: 22
                          82.177.14.0/23 maxlen: 23
                          195.136.164.0/23 maxlen: 23
                          82.177.20.0/22 maxlen: 22
                          195.136.174.0/23 maxlen: 23
                          195.136.176.0/22 maxlen: 22
                          82.177.42.0/23 maxlen: 23
                          82.177.44.0/22 maxlen: 22
                          81.15.128.0/17 maxlen: 17
                          82.177.48.0/21 maxlen: 21
                          81.15.128.0/23 maxlen: 23
                          81.15.132.0/23 maxlen: 23
                          82.177.52.0/23 maxlen: 23
                          81.15.136.0/23 maxlen: 23
                          195.136.112.0/21 maxlen: 21
                          195.136.114.0/23 maxlen: 23
                          82.177.4.0/22 maxlen: 22
                          195.136.148.0/22 maxlen: 22
                          82.177.0.0/23 maxlen: 23
                          82.177.0.0/16 maxlen: 16
                          195.136.156.0/23 maxlen: 23
                          82.177.10.0/23 maxlen: 23
                          82.177.120.0/21 maxlen: 21
                          81.15.204.0/23 maxlen: 23
                          82.177.132.0/23 maxlen: 23
                          81.15.214.0/23 maxlen: 23
                          81.15.218.0/23 maxlen: 23
                          82.177.144.0/20 maxlen: 20
                          81.15.222.0/23 maxlen: 23
                          81.15.224.0/22 maxlen: 22
                          82.177.140.0/23 maxlen: 23
                          81.15.232.0/22 maxlen: 22
                          81.15.240.0/23 maxlen: 23
                          81.15.244.0/23 maxlen: 23
                          82.177.164.0/22 maxlen: 22
                          82.177.168.0/21 maxlen: 21
                          81.15.148.0/22 maxlen: 22
                          82.177.68.0/22 maxlen: 22
                          82.177.72.0/21 maxlen: 21
                          82.177.80.0/21 maxlen: 21
                          82.177.90.0/23 maxlen: 23
                          81.15.168.0/21 maxlen: 21
                          82.177.88.0/22 maxlen: 22
                          82.177.102.0/23 maxlen: 24
                          81.15.180.0/22 maxlen: 22
                          81.15.184.0/23 maxlen: 23
                          195.136.248.0/21 maxlen: 21
                          81.15.182.0/23 maxlen: 23
                          81.15.192.0/22 maxlen: 22
                          82.177.108.0/23 maxlen: 23
                          82.177.112.0/22 maxlen: 22
                          81.15.198.0/23 maxlen: 23
                          82.177.116.0/22 maxlen: 22
                          195.136.70.0/23 maxlen: 23
                          195.136.88.0/22 maxlen: 22
                          195.136.0.0/23 maxlen: 23
                          195.136.4.0/22 maxlen: 22
                          195.136.0.0/16 maxlen: 16
                          194.183.54.0/24 maxlen: 24
                          195.136.16.0/22 maxlen: 22
                          194.183.55.0/24 maxlen: 24
                          195.136.34.0/23 maxlen: 23
                          195.136.38.0/23 maxlen: 23
                          195.136.48.0/22 maxlen: 22
                          88.220.253.0/24 maxlen: 24
                          88.220.252.0/24 maxlen: 24
                          88.220.165.0/24 maxlen: 24
                          88.220.181.0/24 maxlen: 24
                          88.220.185.0/24 maxlen: 24
                          88.220.44.0/24 maxlen: 24
                          213.172.160.0/19 maxlen: 19
                          88.220.107.0/24 maxlen: 24
                          88.220.117.0/24 maxlen: 24
                          88.220.114.0/24 maxlen: 24
                          88.220.116.0/24 maxlen: 24
                          88.220.52.0/24 maxlen: 24
                          88.220.65.0/24 maxlen: 24
                          88.220.81.0/24 maxlen: 24
                          88.220.84.0/24 maxlen: 24
                          82.177.252.0/24 maxlen: 24
                          82.177.249.0/24 maxlen: 24
                          82.177.251.0/24 maxlen: 24
                          82.177.247.0/24 maxlen: 24
                          81.15.254.0/24 maxlen: 24
                          82.177.177.0/24 maxlen: 24
                          82.177.179.0/24 maxlen: 24
                          81.15.255.0/24 maxlen: 24
                          82.177.183.0/24 maxlen: 24
                          82.177.182.0/24 maxlen: 24
                          82.177.191.0/24 maxlen: 24
                          82.177.188.0/24 maxlen: 24
                          82.177.192.0/24 maxlen: 24
                          82.177.199.0/24 maxlen: 24
                          82.177.195.0/24 maxlen: 24
                          82.177.194.0/24 maxlen: 24
                          82.177.196.0/24 maxlen: 24
                          82.177.206.0/24 maxlen: 24
                          82.177.207.0/24 maxlen: 24
                          82.177.208.0/24 maxlen: 24
                          82.177.16.0/24 maxlen: 24
                          82.177.21.0/24 maxlen: 24
                          82.177.19.0/24 maxlen: 24
                          82.177.27.0/24 maxlen: 24
                          82.177.35.0/24 maxlen: 24
                          82.177.37.0/24 maxlen: 24
                          82.177.41.0/24 maxlen: 24
                          82.177.43.0/24 maxlen: 24
                          82.177.48.0/24 maxlen: 24
                          82.177.50.0/24 maxlen: 24
                          82.177.46.0/24 maxlen: 24
                          81.15.130.0/24 maxlen: 24
                          81.15.133.0/24 maxlen: 24
                          81.15.135.0/24 maxlen: 24
                          82.177.54.0/24 maxlen: 24
                          82.177.59.0/24 maxlen: 24
                          195.136.113.0/24 maxlen: 24
                          195.136.120.0/24 maxlen: 24
                          195.136.122.0/24 maxlen: 24
                          82.177.2.0/24 maxlen: 24
                          82.177.9.0/24 maxlen: 24
                          81.15.201.0/24 maxlen: 24
                          82.177.122.0/24 maxlen: 24
                          81.15.203.0/24 maxlen: 24
                          82.177.119.0/24 maxlen: 24
                          81.15.202.0/24 maxlen: 24
                          82.177.127.0/24 maxlen: 24
                          81.15.209.0/24 maxlen: 24
                          82.177.130.0/24 maxlen: 24
                          82.177.133.0/24 maxlen: 24
                          81.15.216.0/24 maxlen: 24
                          81.15.218.0/24 maxlen: 24
                          81.15.217.0/24 maxlen: 24
                          81.15.222.0/24 maxlen: 24
                          81.15.225.0/24 maxlen: 24
                          81.15.230.0/24 maxlen: 24
                          81.15.232.0/24 maxlen: 24
                          81.15.227.0/24 maxlen: 24
                          81.15.236.0/24 maxlen: 24
                          81.15.238.0/24 maxlen: 24
                          81.15.237.0/24 maxlen: 24
                          81.15.239.0/24 maxlen: 24
                          81.15.242.0/24 maxlen: 24
                          82.177.165.0/24 maxlen: 24
                          82.177.160.0/24 maxlen: 24
                          82.177.164.0/24 maxlen: 24
                          81.15.150.0/24 maxlen: 24
                          81.15.159.0/24 maxlen: 24
                          81.15.156.0/24 maxlen: 24
                          82.177.90.0/24 maxlen: 24
                          82.177.91.0/24 maxlen: 24
                          81.15.175.0/24 maxlen: 24
                          81.15.174.0/24 maxlen: 24
                          81.15.185.0/24 maxlen: 24
                          195.136.252.0/24 maxlen: 24
                          81.15.187.0/24 maxlen: 24
                          81.15.191.0/24 maxlen: 24
                          82.177.111.0/24 maxlen: 24
                          81.15.190.0/24 maxlen: 24
                          81.15.199.0/24 maxlen: 24
                          81.15.195.0/24 maxlen: 24
                          81.15.198.0/24 maxlen: 24
                          81.15.194.0/24 maxlen: 24
                          194.183.32.0/19 maxlen: 19
                          194.183.32.0/23 maxlen: 23
                          194.183.34.0/23 maxlen: 23
                          195.136.65.0/24 maxlen: 24
                          194.183.48.0/22 maxlen: 22
                          194.183.56.0/23 maxlen: 23
                          195.136.21.0/24 maxlen: 24
                          195.136.27.0/24 maxlen: 24
                          195.136.25.0/24 maxlen: 24
                          195.136.36.0/24 maxlen: 24
                          195.136.48.0/24 maxlen: 24
                          2a00:4120:8000:4::/64 maxlen: 64
                          2a00:4120::/32 maxlen: 32
                          2a00:4120:8000:70::/65 maxlen: 65
                          2a00:4120:8000:2::/64 maxlen: 64
                          2a00:4120:8000:5::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1000968572 (0x3ba9917c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Apr 25 08:12:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a5beec2168c4d99c57c815fc9855494a1b42936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:9b:7d:f6:45:44:18:b2:23:75:ee:80:39:
                    b1:5e:89:ae:08:c7:8e:56:cd:93:ab:ee:e1:5d:1a:
                    cf:0a:6a:47:f7:ff:0c:14:b3:ce:25:84:ee:f6:ab:
                    8b:bc:4e:d1:41:c5:9e:b4:54:e9:3a:c1:b8:a3:05:
                    86:7c:f0:91:55:79:65:64:98:9f:03:63:95:ce:62:
                    38:cb:3b:73:25:77:95:9f:57:d0:38:59:5b:e4:2d:
                    9b:dc:2d:07:f9:89:cc:fe:0d:d8:3d:d5:30:7c:85:
                    23:ce:9b:e9:b0:6b:1b:fb:d4:b0:fd:49:42:c4:27:
                    7b:af:ed:f9:b4:9e:8b:af:17:5f:09:ec:fa:14:66:
                    4b:36:dd:ad:f3:14:84:a5:39:b2:61:0f:46:20:30:
                    fe:41:49:b2:0c:62:89:86:c2:74:2a:b1:ce:8b:9c:
                    d2:6c:fd:a3:42:b4:0a:6d:b8:b8:ff:3a:3d:70:a8:
                    cb:30:b8:9a:ae:99:95:11:6b:78:c5:39:33:14:1b:
                    be:62:79:84:fa:7a:69:32:d3:cb:f8:8a:e8:c7:88:
                    4a:8a:8b:56:fc:fa:30:ce:b3:2c:e9:0a:c3:93:71:
                    8b:fe:ac:c8:55:67:4f:23:cf:47:1f:36:6f:d2:02:
                    a7:5d:ed:23:56:48:97:bc:b4:ed:61:3b:a6:9e:ad:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5B:EE:C2:16:8C:4D:99:C5:7C:81:5F:C9:85:54:94:A1:B4:29:36
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mlvuwhaMTZnFfIFfyYVUlKG0KTY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.128.0/17
                  82.177.0.0/16
                  88.220.0.0/16
                  194.183.32.0/19
                  195.136.0.0/16
                  213.172.160.0/19
                IPv6:
                  2a00:4120::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:76:e5:98:72:f9:a1:fb:83:82:e8:a9:72:fc:de:29:19:f8:
         82:ae:57:32:a8:af:d4:f1:ba:a6:1a:00:93:19:8b:f2:2a:4f:
         1c:be:43:96:d7:e4:b8:d5:ef:2b:61:7c:e4:19:0d:ed:f3:76:
         e5:b1:d9:f5:04:d0:f6:f4:df:69:b0:82:27:8c:53:89:a5:64:
         f3:f7:04:a5:86:96:3b:7e:92:a6:b3:fb:81:26:aa:d7:95:fa:
         a2:1b:e5:ea:93:e0:cc:ed:d2:47:6c:b1:95:8b:fc:ae:bb:1d:
         65:7a:5f:80:05:05:f1:34:8c:f0:f7:b8:88:38:26:97:c6:fa:
         78:62:2e:12:c2:6b:ee:8b:ef:9a:d6:c6:d3:d0:8d:e7:a4:04:
         22:e0:eb:02:2b:a0:88:ba:db:f1:51:3d:b4:f4:d7:bc:1c:b6:
         eb:9d:c3:46:fd:9c:a2:fb:e4:f9:88:31:76:63:09:a8:bf:74:
         8d:51:37:65:23:79:6b:cb:8b:6d:fe:c4:ce:1e:2b:ca:6c:96:
         a5:83:b3:e4:1b:e5:7b:fb:e1:b2:cf:9b:7b:1e:ac:1f:57:fa:
         4f:c2:cb:14:0d:ca:b5:66:34:c7:63:3f:46:6f:02:20:6c:c7:
         e8:43:78:60:d3:d7:10:f0:b1:ad:8f:f8:c5:69:ba:6b:c2:b1:
         d9:58:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org