Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/hFkDuv2MV9gbmqoIc6kvKBjWpiE.roa
File:                     hFkDuv2MV9gbmqoIc6kvKBjWpiE.roa (raw, json)
Hash identifier:          OoYsR8ZstTbm1QdQuAJ8F9aQkzS38FA94UzNkVW79AM=
Subject key identifier:   84:59:03:BA:FD:8C:57:D8:1B:9A:AA:08:73:A9:2F:28:18:D6:A6:21
Certificate issuer:       /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial:       01835A16D8E9E4EFCFC8CEE17EBF5BE56D3C
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/hFkDuv2MV9gbmqoIc6kvKBjWpiE.roa
Signing time:             Tue 20 Sep 2022 08:49:50 +0000
ROA not before:           Tue 20 Sep 2022 08:49:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50463
IP address blocks:        37.19.112.0/24 maxlen: 24
                          37.19.115.0/24 maxlen: 24
                          37.19.114.0/24 maxlen: 24
                          37.19.112.0/20 maxlen: 20
                          37.19.125.0/24 maxlen: 24
                          141.226.192.0/19 maxlen: 19
                          141.226.192.0/24 maxlen: 24
                          141.226.196.0/24 maxlen: 24
                          141.226.195.0/24 maxlen: 24
                          141.226.194.0/24 maxlen: 24
                          141.226.198.0/24 maxlen: 24
                          141.226.193.0/24 maxlen: 24
                          141.226.204.0/24 maxlen: 24
                          141.226.206.0/24 maxlen: 24
                          141.226.205.0/24 maxlen: 24
                          141.226.210.0/24 maxlen: 24
                          141.226.209.0/24 maxlen: 24
                          141.226.208.0/24 maxlen: 24
                          141.226.212.0/24 maxlen: 24
                          141.226.223.0/24 maxlen: 24
                          141.226.221.0/24 maxlen: 24
                          109.226.2.0/24 maxlen: 24
                          109.226.0.0/18 maxlen: 18
                          109.226.0.0/24 maxlen: 24
                          109.226.4.0/24 maxlen: 24
                          109.226.3.0/24 maxlen: 24
                          109.226.6.0/24 maxlen: 24
                          109.226.5.0/24 maxlen: 24
                          109.226.8.0/22 maxlen: 22
                          109.226.7.0/24 maxlen: 24
                          109.226.16.0/22 maxlen: 22
                          109.226.15.0/24 maxlen: 24
                          109.226.14.0/24 maxlen: 24
                          109.226.17.0/24 maxlen: 24
                          109.226.23.0/24 maxlen: 24
                          109.226.22.0/24 maxlen: 24
                          109.226.21.0/24 maxlen: 24
                          109.226.24.0/24 maxlen: 24
                          185.3.145.0/24 maxlen: 24
                          185.3.144.0/22 maxlen: 22
                          109.226.29.0/24 maxlen: 24
                          109.226.28.0/24 maxlen: 24
                          109.226.31.0/24 maxlen: 24
                          109.226.26.0/24 maxlen: 24
                          109.226.25.0/24 maxlen: 24
                          109.226.37.0/24 maxlen: 24
                          109.226.36.0/24 maxlen: 24
                          109.226.35.0/24 maxlen: 24
                          109.226.34.0/24 maxlen: 24
                          109.226.38.0/24 maxlen: 24
                          109.226.33.0/24 maxlen: 24
                          109.226.32.0/24 maxlen: 24
                          109.226.44.0/24 maxlen: 24
                          109.226.51.0/24 maxlen: 24
                          109.226.50.0/24 maxlen: 24
                          109.226.49.0/24 maxlen: 24
                          109.226.48.0/24 maxlen: 24
                          109.226.47.0/24 maxlen: 24
                          109.226.45.0/24 maxlen: 24
                          109.226.57.0/24 maxlen: 24
                          109.226.56.0/24 maxlen: 24
                          109.226.55.0/24 maxlen: 24
                          109.226.53.0/24 maxlen: 24
                          109.226.52.0/24 maxlen: 24
                          109.226.61.0/24 maxlen: 24
                          109.226.60.0/24 maxlen: 24
                          109.226.59.0/24 maxlen: 24
                          109.226.63.0/24 maxlen: 24
                          109.226.62.0/24 maxlen: 24
                          5.144.55.0/24 maxlen: 24
                          5.144.57.0/24 maxlen: 24
                          5.144.61.0/24 maxlen: 24
                          5.144.63.0/24 maxlen: 24
                          5.144.48.0/24 maxlen: 24
                          5.144.48.0/20 maxlen: 20
                          5.144.50.0/24 maxlen: 24
                          5.22.133.0/24 maxlen: 24
                          5.22.135.0/24 maxlen: 24
                          5.22.134.0/24 maxlen: 24
                          5.22.132.0/24 maxlen: 24
                          5.22.130.0/23 maxlen: 23
                          5.22.128.0/21 maxlen: 21
                          5.22.129.0/24 maxlen: 24
                          5.22.128.0/24 maxlen: 24
                          2a00:c281:3004::/48 maxlen: 48
                          2a00:c281:2004::/48 maxlen: 48
                          2a00:c281:1004::/48 maxlen: 48
                          2a00:c281:4::/48 maxlen: 48
                          2a00:c281:4001::/48 maxlen: 48
                          2a00:c281:3001::/48 maxlen: 48
                          2a00:c281:2001::/48 maxlen: 48
                          2a00:c281:1001::/48 maxlen: 48
                          2a00:c281:1::/48 maxlen: 48
                          2a00:c281:300d::/48 maxlen: 48
                          2a00:c281:200d::/48 maxlen: 48
                          2a00:c281:100d::/48 maxlen: 48
                          2a00:c281:d::/48 maxlen: 48
                          2a00:c281:300a::/48 maxlen: 48
                          2a00:c281:200a::/48 maxlen: 48
                          2a00:c281:100a::/48 maxlen: 48
                          2a00:c281:a::/48 maxlen: 48
                          2a00:c281:101b::/48 maxlen: 48
                          2a00:c281:101d::/48 maxlen: 48
                          2a00:c281:101a::/48 maxlen: 48
                          2a00:c281:1012::/48 maxlen: 48
                          2a00:c280::/29 maxlen: 29
                          2a00:c281:300c::/48 maxlen: 48
                          2a00:c281:200c::/48 maxlen: 48
                          2a00:c281:100c::/48 maxlen: 48
                          2a00:c281:c::/48 maxlen: 48
                          2a00:c280:100::/48 maxlen: 48
                          2a00:c281:b::/48 maxlen: 48
                          2a00:c281:100b::/48 maxlen: 48
                          2a00:c281:200b::/48 maxlen: 48
                          2a00:c281:300b::/48 maxlen: 48
                          2a00:c281:101c::/48 maxlen: 48
                          2a00:c281:3003::/48 maxlen: 48
                          2a00:c281:2003::/48 maxlen: 48
                          2a00:c281:1003::/48 maxlen: 48
                          2a00:c281:3::/48 maxlen: 48
                          2a00:c281:1014::/48 maxlen: 48
                          2a00:c281:4000::/48 maxlen: 48
                          2a00:c281:1011::/48 maxlen: 48
                          2a00:c281:2::/48 maxlen: 48
                          2a00:c281:2002::/48 maxlen: 48
                          2a00:c281:3002::/48 maxlen: 48
                          2a00:c281:1002::/48 maxlen: 48
                          2a00:c281:1013::/48 maxlen: 48
                          2a00:c281:2b00::/40 maxlen: 40
                          2a00:c281:2300::/40 maxlen: 40
                          2a00:c281:100::/40 maxlen: 40
                          2a00:c281:1200::/40 maxlen: 40
                          2a00:c281:3d00::/40 maxlen: 40
                          2a00:c281:2c00::/40 maxlen: 40
                          2a00:c281:a00::/40 maxlen: 40
                          2a00:c281:4300::/40 maxlen: 40
                          2a00:c281:1b00::/40 maxlen: 40
                          2a00:c281:1800::/40 maxlen: 40
                          2a00:c281:400::/40 maxlen: 40
                          2a00:c281:3a00::/40 maxlen: 40
                          2a00:c281:1500::/40 maxlen: 40
                          2a00:c281:2200::/40 maxlen: 40
                          2a00:c281:1400::/40 maxlen: 40
                          2a00:c281:1100::/40 maxlen: 40
                          2a00:c281:3300::/40 maxlen: 40
                          2a00:c281:b00::/40 maxlen: 40
                          2a00:c281:4100::/40 maxlen: 40
                          2a00:c281:1c00::/40 maxlen: 40
                          2a00:c281:2d00::/40 maxlen: 40
                          2a00:c281:4400::/40 maxlen: 40
                          2a00:c281:2100::/40 maxlen: 40
                          2a00:c281:3200::/40 maxlen: 40
                          2a00:c281:300::/40 maxlen: 40
                          2a00:c281:d00::/40 maxlen: 40
                          2a00:c281:1700::/40 maxlen: 40
                          2a00:c281:3c00::/40 maxlen: 40
                          2a00:c281:2a00::/40 maxlen: 40
                          2a00:c281:1600::/40 maxlen: 40
                          2a00:c281:3b00::/40 maxlen: 40
                          2a00:c281:200::/40 maxlen: 40
                          2a00:c281:1300::/40 maxlen: 40
                          2a00:c281:2400::/40 maxlen: 40
                          2a00:c281:3400::/40 maxlen: 40
                          2a00:c281:c00::/40 maxlen: 40
                          2a00:c281:3100::/40 maxlen: 40
                          2a00:c281:1d00::/40 maxlen: 40
                          2a00:c281:1a00::/40 maxlen: 40
                          2a00:c281:4200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5a:16:d8:e9:e4:ef:cf:c8:ce:e1:7e:bf:5b:e5:6d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
        Validity
            Not Before: Sep 20 08:49:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=845903bafd8c57d81b9aaa0873a92f2818d6a621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5e:db:68:08:1f:0b:f8:27:71:90:b8:b7:05:
                    a8:f9:cd:29:31:58:09:43:af:ac:e4:27:59:29:0d:
                    30:3f:a9:4a:53:21:73:f8:2d:bf:8b:39:a2:ee:5c:
                    b5:20:76:8f:83:3c:ba:08:da:86:09:72:82:b2:bb:
                    47:12:71:0a:d8:7f:6b:57:5d:01:b6:93:c5:f1:b0:
                    2e:99:cf:6a:2b:0c:6a:d4:49:af:b9:f3:5f:fd:41:
                    52:2d:cc:1d:52:e3:b8:94:e2:9a:86:56:b5:77:97:
                    5a:69:27:32:42:46:3b:21:cd:b4:c9:53:aa:5e:61:
                    e3:d2:57:14:27:62:d6:5a:b7:5c:47:9c:71:89:9a:
                    66:4a:60:86:63:58:35:62:82:b7:a3:e0:2d:61:fe:
                    c5:87:b6:26:0c:e2:65:f5:62:ae:b1:c8:00:68:6b:
                    13:f4:4b:fd:51:98:9f:86:0b:a0:21:a7:0c:fa:ae:
                    b1:e6:55:70:2d:e8:e1:64:61:29:c9:5d:f6:b1:e6:
                    e6:f9:ad:26:ad:7a:6c:86:ab:b9:12:37:a8:e7:09:
                    88:3b:19:ac:c2:c2:03:c9:a6:fa:d7:fc:2a:ff:7f:
                    96:f4:9e:89:ac:25:fc:4d:47:d3:69:50:04:1b:7a:
                    19:2f:d5:e8:c2:f5:79:01:17:1f:fe:8b:e2:b4:35:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:59:03:BA:FD:8C:57:D8:1B:9A:AA:08:73:A9:2F:28:18:D6:A6:21
            X509v3 Authority Key Identifier:
                keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/hFkDuv2MV9gbmqoIc6kvKBjWpiE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.22.128.0/21
                  5.144.48.0/20
                  37.19.112.0/20
                  109.226.0.0/18
                  141.226.192.0/19
                  185.3.144.0/22
                IPv6:
                  2a00:c280::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:0b:c2:ff:85:51:2a:92:ef:8f:af:55:d0:03:fb:65:85:
         ad:a2:4f:e1:fe:28:e9:da:3e:f8:bc:f8:73:00:ab:84:13:98:
         2a:ba:69:f3:d9:11:73:4a:9a:ce:d8:ac:04:7a:a3:6d:e6:93:
         38:c4:4a:c3:b5:0c:08:6a:7f:dd:31:4c:fa:20:c3:38:14:24:
         45:a5:5a:e6:f1:12:3a:c0:bc:6e:28:86:59:de:30:21:a5:79:
         d7:4e:bb:a3:ad:ed:91:1a:0c:71:9e:7d:96:c3:b6:97:a7:0d:
         39:e6:9f:be:23:3d:08:5b:ba:67:0d:e3:75:bf:01:36:83:de:
         02:09:f4:37:a9:af:61:d7:6f:ba:b1:db:f6:f6:99:c6:69:c5:
         69:1d:be:f9:e1:05:58:46:49:cf:68:b3:9c:e4:e0:28:72:80:
         5e:a3:b4:13:9e:dd:9b:91:0c:d4:de:8f:8d:2b:4a:59:e0:99:
         08:d0:90:4e:e3:17:48:54:b6:85:a0:db:5a:18:a1:ea:53:c5:
         19:ea:c4:25:79:7a:ad:5d:6a:e2:d1:ec:32:9a:87:8f:6f:a0:
         10:ea:39:3e:ff:00:34:85:5a:2d:51:49:be:e8:a7:18:ea:6e:
         88:22:e1:e6:68:23:71:3d:2a:fe:a9:79:de:9a:b8:e4:37:ff:
         71:5a:be:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:32 2023 by rpki-client on console-fra.rpki-client.org