Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yuppbRVVqtFStpkKQwsZM1kfyZk.roa
File:                     yuppbRVVqtFStpkKQwsZM1kfyZk.roa (raw, json)
Hash identifier:          1wT9rE7u8Dibl1brfEIQ7/ZL7EkwMRCiKkcWpqL+FkA=
Subject key identifier:   CA:EA:69:6D:15:55:AA:D1:52:B6:99:0A:43:0B:19:33:59:1F:C9:99
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       01843CABEB546013400456DC5BD1DA481F38
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yuppbRVVqtFStpkKQwsZM1kfyZk.roa
Signing time:             Thu 03 Nov 2022 08:46:50 +0000
ROA not before:           Thu 03 Nov 2022 08:46:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20804
IP address blocks:        88.220.224.0/19 maxlen: 19
                          88.220.192.0/20 maxlen: 20
                          88.220.208.0/20 maxlen: 20
                          88.220.0.0/17 maxlen: 17
                          88.220.32.0/21 maxlen: 21
                          88.220.40.0/22 maxlen: 22
                          88.220.48.0/23 maxlen: 23
                          88.220.50.0/23 maxlen: 23
                          88.220.46.0/23 maxlen: 23
                          88.220.120.0/22 maxlen: 22
                          88.220.128.0/18 maxlen: 18
                          88.220.132.0/23 maxlen: 23
                          88.220.152.0/23 maxlen: 23
                          88.220.58.0/23 maxlen: 23
                          88.220.52.0/23 maxlen: 23
                          88.220.64.0/22 maxlen: 22
                          88.220.60.0/23 maxlen: 23
                          88.220.66.0/23 maxlen: 23
                          82.177.244.0/23 maxlen: 23
                          82.177.254.0/23 maxlen: 23
                          81.15.254.0/23 maxlen: 23
                          82.177.176.0/21 maxlen: 21
                          82.177.196.0/22 maxlen: 22
                          82.177.14.0/23 maxlen: 23
                          195.136.164.0/23 maxlen: 23
                          82.177.20.0/22 maxlen: 22
                          195.136.174.0/23 maxlen: 23
                          195.136.176.0/22 maxlen: 22
                          82.177.42.0/23 maxlen: 23
                          82.177.44.0/22 maxlen: 22
                          81.15.128.0/17 maxlen: 17
                          82.177.48.0/21 maxlen: 21
                          81.15.128.0/23 maxlen: 23
                          81.15.132.0/23 maxlen: 23
                          82.177.52.0/23 maxlen: 23
                          81.15.136.0/23 maxlen: 23
                          195.136.112.0/21 maxlen: 21
                          195.136.114.0/23 maxlen: 23
                          82.177.4.0/22 maxlen: 22
                          195.136.148.0/22 maxlen: 22
                          82.177.0.0/23 maxlen: 23
                          82.177.0.0/16 maxlen: 16
                          195.136.156.0/23 maxlen: 23
                          82.177.10.0/23 maxlen: 23
                          82.177.120.0/21 maxlen: 21
                          81.15.204.0/23 maxlen: 23
                          82.177.132.0/23 maxlen: 23
                          81.15.214.0/23 maxlen: 23
                          81.15.218.0/23 maxlen: 23
                          82.177.144.0/20 maxlen: 20
                          81.15.222.0/23 maxlen: 23
                          81.15.224.0/22 maxlen: 22
                          82.177.140.0/23 maxlen: 23
                          81.15.232.0/22 maxlen: 22
                          81.15.240.0/23 maxlen: 23
                          81.15.244.0/23 maxlen: 23
                          82.177.164.0/22 maxlen: 22
                          82.177.168.0/21 maxlen: 21
                          81.15.148.0/22 maxlen: 22
                          82.177.68.0/22 maxlen: 22
                          82.177.72.0/21 maxlen: 21
                          82.177.80.0/21 maxlen: 21
                          82.177.90.0/23 maxlen: 23
                          81.15.168.0/21 maxlen: 21
                          82.177.88.0/22 maxlen: 22
                          82.177.102.0/23 maxlen: 24
                          81.15.180.0/22 maxlen: 22
                          81.15.184.0/23 maxlen: 23
                          195.136.248.0/21 maxlen: 21
                          81.15.182.0/23 maxlen: 23
                          81.15.192.0/22 maxlen: 22
                          82.177.108.0/23 maxlen: 23
                          82.177.112.0/22 maxlen: 22
                          81.15.198.0/23 maxlen: 23
                          82.177.116.0/22 maxlen: 22
                          195.136.70.0/23 maxlen: 23
                          195.136.88.0/22 maxlen: 22
                          195.136.0.0/23 maxlen: 23
                          195.136.4.0/22 maxlen: 22
                          195.136.0.0/16 maxlen: 16
                          194.183.54.0/24 maxlen: 24
                          195.136.16.0/22 maxlen: 22
                          194.183.55.0/24 maxlen: 24
                          195.136.34.0/23 maxlen: 23
                          195.136.38.0/23 maxlen: 23
                          195.136.48.0/22 maxlen: 22
                          88.220.253.0/24 maxlen: 24
                          88.220.252.0/24 maxlen: 24
                          88.220.165.0/24 maxlen: 24
                          88.220.181.0/24 maxlen: 24
                          88.220.185.0/24 maxlen: 24
                          88.220.44.0/24 maxlen: 24
                          213.172.160.0/19 maxlen: 19
                          88.220.107.0/24 maxlen: 24
                          88.220.113.0/24 maxlen: 24
                          88.220.117.0/24 maxlen: 24
                          88.220.114.0/24 maxlen: 24
                          88.220.116.0/24 maxlen: 24
                          88.220.52.0/24 maxlen: 24
                          88.220.65.0/24 maxlen: 24
                          88.220.81.0/24 maxlen: 24
                          88.220.84.0/24 maxlen: 24
                          82.177.252.0/24 maxlen: 24
                          82.177.249.0/24 maxlen: 24
                          82.177.251.0/24 maxlen: 24
                          82.177.247.0/24 maxlen: 24
                          81.15.254.0/24 maxlen: 24
                          82.177.177.0/24 maxlen: 24
                          82.177.179.0/24 maxlen: 24
                          81.15.255.0/24 maxlen: 24
                          82.177.183.0/24 maxlen: 24
                          82.177.182.0/24 maxlen: 24
                          82.177.191.0/24 maxlen: 24
                          82.177.188.0/24 maxlen: 24
                          82.177.192.0/24 maxlen: 24
                          82.177.199.0/24 maxlen: 24
                          82.177.195.0/24 maxlen: 24
                          82.177.194.0/24 maxlen: 24
                          82.177.196.0/24 maxlen: 24
                          82.177.206.0/24 maxlen: 24
                          82.177.207.0/24 maxlen: 24
                          82.177.208.0/24 maxlen: 24
                          82.177.16.0/24 maxlen: 24
                          82.177.21.0/24 maxlen: 24
                          82.177.19.0/24 maxlen: 24
                          82.177.27.0/24 maxlen: 24
                          82.177.35.0/24 maxlen: 24
                          82.177.37.0/24 maxlen: 24
                          82.177.41.0/24 maxlen: 24
                          82.177.43.0/24 maxlen: 24
                          82.177.48.0/24 maxlen: 24
                          82.177.50.0/24 maxlen: 24
                          82.177.46.0/24 maxlen: 24
                          81.15.130.0/24 maxlen: 24
                          81.15.133.0/24 maxlen: 24
                          81.15.135.0/24 maxlen: 24
                          82.177.54.0/24 maxlen: 24
                          82.177.59.0/24 maxlen: 24
                          195.136.113.0/24 maxlen: 24
                          195.136.120.0/24 maxlen: 24
                          195.136.122.0/24 maxlen: 24
                          82.177.2.0/24 maxlen: 24
                          82.177.9.0/24 maxlen: 24
                          81.15.201.0/24 maxlen: 24
                          82.177.122.0/24 maxlen: 24
                          81.15.203.0/24 maxlen: 24
                          82.177.119.0/24 maxlen: 24
                          81.15.202.0/24 maxlen: 24
                          82.177.127.0/24 maxlen: 24
                          81.15.209.0/24 maxlen: 24
                          82.177.130.0/24 maxlen: 24
                          82.177.133.0/24 maxlen: 24
                          81.15.216.0/24 maxlen: 24
                          81.15.218.0/24 maxlen: 24
                          81.15.217.0/24 maxlen: 24
                          81.15.222.0/24 maxlen: 24
                          81.15.225.0/24 maxlen: 24
                          81.15.230.0/24 maxlen: 24
                          81.15.232.0/24 maxlen: 24
                          81.15.227.0/24 maxlen: 24
                          81.15.236.0/24 maxlen: 24
                          81.15.238.0/24 maxlen: 24
                          81.15.237.0/24 maxlen: 24
                          81.15.239.0/24 maxlen: 24
                          81.15.242.0/24 maxlen: 24
                          82.177.165.0/24 maxlen: 24
                          82.177.160.0/24 maxlen: 24
                          82.177.164.0/24 maxlen: 24
                          81.15.150.0/24 maxlen: 24
                          81.15.159.0/24 maxlen: 24
                          81.15.156.0/24 maxlen: 24
                          82.177.90.0/24 maxlen: 24
                          82.177.91.0/24 maxlen: 24
                          81.15.175.0/24 maxlen: 24
                          81.15.174.0/24 maxlen: 24
                          81.15.185.0/24 maxlen: 24
                          195.136.252.0/24 maxlen: 24
                          81.15.187.0/24 maxlen: 24
                          81.15.191.0/24 maxlen: 24
                          82.177.111.0/24 maxlen: 24
                          81.15.190.0/24 maxlen: 24
                          81.15.199.0/24 maxlen: 24
                          81.15.195.0/24 maxlen: 24
                          81.15.198.0/24 maxlen: 24
                          81.15.194.0/24 maxlen: 24
                          194.183.32.0/19 maxlen: 19
                          194.183.32.0/23 maxlen: 23
                          194.183.34.0/23 maxlen: 23
                          195.136.65.0/24 maxlen: 24
                          194.183.48.0/22 maxlen: 22
                          194.183.56.0/23 maxlen: 23
                          195.136.21.0/24 maxlen: 24
                          195.136.27.0/24 maxlen: 24
                          195.136.25.0/24 maxlen: 24
                          195.136.36.0/24 maxlen: 24
                          195.136.48.0/24 maxlen: 24
                          2a00:4120:8000:4::/64 maxlen: 64
                          2a00:4120::/32 maxlen: 32
                          2a00:4120:8000:70::/65 maxlen: 65
                          2a00:4120:8000:2::/64 maxlen: 64
                          2a00:4120:8000:5::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3c:ab:eb:54:60:13:40:04:56:dc:5b:d1:da:48:1f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Nov  3 08:46:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=caea696d1555aad152b6990a430b1933591fc999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cb:c8:79:fd:94:1d:ab:69:17:3a:3c:58:55:
                    de:bc:fa:02:bf:79:82:d4:8f:dc:28:c8:a7:52:e4:
                    21:ad:13:fe:f4:2a:96:e6:df:1d:d8:99:38:88:b5:
                    02:3c:ba:45:7e:31:32:80:26:22:0d:d1:ae:55:42:
                    61:64:9a:64:69:79:12:62:32:68:c3:73:40:3c:24:
                    16:a0:1a:18:4b:e0:64:58:65:fb:33:ad:54:5d:31:
                    78:dd:9b:a7:aa:3c:b4:d7:da:91:92:e6:cc:d4:dc:
                    90:4c:f4:11:35:c4:5a:e3:03:60:7c:80:3c:b6:0d:
                    30:69:cf:8f:5d:67:1c:47:13:9d:af:57:d4:fa:d7:
                    55:50:c2:40:10:33:b6:32:91:6c:85:26:32:44:41:
                    dd:2b:b6:cc:8d:81:2f:ac:74:fd:39:4e:19:86:28:
                    74:42:58:6f:bf:fb:e6:ec:6f:81:4a:2f:f1:a0:41:
                    9e:9e:fb:38:6d:75:90:1a:c1:f0:b1:03:11:ac:ba:
                    1e:1a:99:7a:78:12:af:f6:62:5d:e2:db:6f:cc:fc:
                    29:f5:7e:72:15:25:c2:0d:c5:17:a9:fa:aa:9c:98:
                    24:bc:93:29:dc:cd:f3:98:62:2e:4e:e3:ee:56:2f:
                    61:e8:6b:11:63:7d:b6:bb:3b:4e:83:0e:65:63:e6:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EA:69:6D:15:55:AA:D1:52:B6:99:0A:43:0B:19:33:59:1F:C9:99
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yuppbRVVqtFStpkKQwsZM1kfyZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.128.0/17
                  82.177.0.0/16
                  88.220.0.0/16
                  194.183.32.0/19
                  195.136.0.0/16
                  213.172.160.0/19
                IPv6:
                  2a00:4120::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:bd:b1:56:d8:bd:e8:18:86:5b:d2:49:6a:3d:a8:8e:39:be:
         0e:58:bb:00:62:a5:c9:56:e4:3a:84:ae:c7:9d:d5:42:26:11:
         94:bf:bb:ad:19:29:dd:4b:bb:2e:72:be:e0:50:ab:66:3e:81:
         92:46:b0:31:e0:5b:00:9c:6e:a2:75:ba:e4:4f:71:d8:ec:8e:
         84:a2:25:51:54:2d:7c:c9:41:8c:d6:98:6f:5e:5e:b9:06:69:
         44:df:af:8d:f2:70:05:99:b9:d9:c1:52:0d:07:06:de:67:c9:
         5e:68:51:5d:fd:86:c7:01:ec:15:91:3c:77:13:31:73:a3:12:
         3e:00:a7:31:44:5d:b9:79:40:3f:78:3a:0f:81:02:58:5c:de:
         af:e7:be:50:7f:d7:50:10:94:e6:60:50:2c:b1:39:a8:59:91:
         7a:97:bf:e3:5e:b2:bb:ef:e2:72:70:3e:f7:65:4f:0a:68:44:
         03:da:00:6f:6c:a2:b1:95:96:0a:a5:37:b4:6d:b4:3b:da:12:
         ac:7b:65:a1:ec:60:3c:49:9e:6f:8f:53:55:47:82:7d:d5:1a:
         f9:84:b8:70:39:97:69:87:47:11:8d:cc:85:cf:c9:2d:e2:e9:
         8d:e0:87:a8:bb:32:37:a8:8f:5f:b1:e8:05:e6:62:c8:a5:23:
         8f:d0:41:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org