Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/vPs7G7N0ImLFZWtRw3vcJ2RELpk.roa
File:                     vPs7G7N0ImLFZWtRw3vcJ2RELpk.roa (raw, json)
Hash identifier:          UHFHL9Uc6Yg54yWNx6+tMNApqNb8S/Ypxx+kWxsj9fY=
Subject key identifier:   BC:FB:3B:1B:B3:74:22:62:C5:65:6B:51:C3:7B:DC:27:64:44:2E:99
Certificate issuer:       /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial:       0183078FB7365ADC2002DB1DE5B0E3418E5C
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/vPs7G7N0ImLFZWtRw3vcJ2RELpk.roa
Signing time:             Sun 04 Sep 2022 08:13:22 +0000
ROA not before:           Sun 04 Sep 2022 08:13:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50463
IP address blocks:        109.226.2.0/24 maxlen: 24
                          109.226.0.0/18 maxlen: 18
                          109.226.0.0/24 maxlen: 24
                          109.226.4.0/24 maxlen: 24
                          109.226.3.0/24 maxlen: 24
                          109.226.6.0/24 maxlen: 24
                          109.226.5.0/24 maxlen: 24
                          109.226.8.0/22 maxlen: 22
                          109.226.7.0/24 maxlen: 24
                          109.226.16.0/22 maxlen: 22
                          109.226.15.0/24 maxlen: 24
                          109.226.14.0/24 maxlen: 24
                          109.226.17.0/24 maxlen: 24
                          109.226.23.0/24 maxlen: 24
                          109.226.22.0/24 maxlen: 24
                          109.226.21.0/24 maxlen: 24
                          109.226.24.0/24 maxlen: 24
                          109.226.29.0/24 maxlen: 24
                          109.226.28.0/24 maxlen: 24
                          109.226.31.0/24 maxlen: 24
                          109.226.26.0/24 maxlen: 24
                          109.226.25.0/24 maxlen: 24
                          109.226.37.0/24 maxlen: 24
                          109.226.36.0/24 maxlen: 24
                          109.226.35.0/24 maxlen: 24
                          109.226.34.0/24 maxlen: 24
                          109.226.38.0/24 maxlen: 24
                          109.226.33.0/24 maxlen: 24
                          109.226.32.0/24 maxlen: 24
                          109.226.44.0/24 maxlen: 24
                          109.226.51.0/24 maxlen: 24
                          109.226.50.0/24 maxlen: 24
                          109.226.49.0/24 maxlen: 24
                          109.226.48.0/24 maxlen: 24
                          109.226.47.0/24 maxlen: 24
                          109.226.45.0/24 maxlen: 24
                          109.226.57.0/24 maxlen: 24
                          109.226.56.0/24 maxlen: 24
                          109.226.55.0/24 maxlen: 24
                          109.226.53.0/24 maxlen: 24
                          109.226.52.0/24 maxlen: 24
                          109.226.61.0/24 maxlen: 24
                          109.226.60.0/24 maxlen: 24
                          109.226.59.0/24 maxlen: 24
                          109.226.63.0/24 maxlen: 24
                          109.226.62.0/24 maxlen: 24
                          5.144.55.0/24 maxlen: 24
                          5.144.57.0/24 maxlen: 24
                          5.144.61.0/24 maxlen: 24
                          5.144.48.0/24 maxlen: 24
                          5.144.48.0/20 maxlen: 20
                          5.144.50.0/24 maxlen: 24
                          2a00:c281:3004::/48 maxlen: 48
                          2a00:c281:2004::/48 maxlen: 48
                          2a00:c281:1004::/48 maxlen: 48
                          2a00:c281:4::/48 maxlen: 48
                          2a00:c281:4001::/48 maxlen: 48
                          2a00:c281:3001::/48 maxlen: 48
                          2a00:c281:2001::/48 maxlen: 48
                          2a00:c281:1001::/48 maxlen: 48
                          2a00:c281:1::/48 maxlen: 48
                          2a00:c281:300d::/48 maxlen: 48
                          2a00:c281:200d::/48 maxlen: 48
                          2a00:c281:100d::/48 maxlen: 48
                          2a00:c281:d::/48 maxlen: 48
                          2a00:c281:300a::/48 maxlen: 48
                          2a00:c281:200a::/48 maxlen: 48
                          2a00:c281:100a::/48 maxlen: 48
                          2a00:c281:a::/48 maxlen: 48
                          2a00:c281:101d::/48 maxlen: 48
                          2a00:c281:101a::/48 maxlen: 48
                          2a00:c280::/29 maxlen: 29
                          2a00:c281:300c::/48 maxlen: 48
                          2a00:c281:200c::/48 maxlen: 48
                          2a00:c281:100c::/48 maxlen: 48
                          2a00:c281:c::/48 maxlen: 48
                          2a00:c280:100::/48 maxlen: 48
                          2a00:c281:101c::/48 maxlen: 48
                          2a00:c281:3003::/48 maxlen: 48
                          2a00:c281:2003::/48 maxlen: 48
                          2a00:c281:1003::/48 maxlen: 48
                          2a00:c281:3::/48 maxlen: 48
                          2a00:c281:1014::/48 maxlen: 48
                          2a00:c281:4000::/48 maxlen: 48
                          2a00:c281:1011::/48 maxlen: 48
                          2a00:c281:1013::/48 maxlen: 48
                          2a00:c281:2300::/40 maxlen: 40
                          2a00:c281:2c00::/40 maxlen: 40
                          2a00:c281:3d00::/40 maxlen: 40
                          2a00:c281:a00::/40 maxlen: 40
                          2a00:c281:4300::/40 maxlen: 40
                          2a00:c281:2d00::/40 maxlen: 40
                          2a00:c281:1c00::/40 maxlen: 40
                          2a00:c281:2a00::/40 maxlen: 40
                          2a00:c281:2400::/40 maxlen: 40
                          2a00:c281:1300::/40 maxlen: 40
                          2a00:c281:4100::/40 maxlen: 40
                          2a00:c281:1800::/40 maxlen: 40
                          2a00:c281:400::/40 maxlen: 40
                          2a00:c281:3a00::/40 maxlen: 40
                          2a00:c281:100::/40 maxlen: 40
                          2a00:c281:1500::/40 maxlen: 40
                          2a00:c281:2100::/40 maxlen: 40
                          2a00:c281:d00::/40 maxlen: 40
                          2a00:c281:1700::/40 maxlen: 40
                          2a00:c281:3400::/40 maxlen: 40
                          2a00:c281:3100::/40 maxlen: 40
                          2a00:c281:1a00::/40 maxlen: 40
                          2a00:c281:3c00::/40 maxlen: 40
                          2a00:c281:1d00::/40 maxlen: 40
                          2a00:c281:c00::/40 maxlen: 40
                          2a00:c281:300::/40 maxlen: 40
                          2a00:c281:1400::/40 maxlen: 40
                          2a00:c281:1100::/40 maxlen: 40
                          2a00:c281:4400::/40 maxlen: 40
                          2a00:c281:3300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:07:8f:b7:36:5a:dc:20:02:db:1d:e5:b0:e3:41:8e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
        Validity
            Not Before: Sep  4 08:13:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bcfb3b1bb3742262c5656b51c37bdc2764442e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:06:13:2a:5f:48:11:23:51:96:75:dc:1a:
                    b0:55:e4:f3:83:ce:95:4c:6b:8b:a2:f6:69:d5:78:
                    b5:0d:7e:a0:20:6f:18:7f:2c:e6:af:fa:49:8d:6e:
                    ac:9c:f6:ce:4d:cb:74:34:c3:f3:82:34:85:c2:51:
                    15:06:af:2c:2d:8b:b2:88:a4:5a:38:c5:d7:d8:55:
                    59:d1:c4:4c:38:3b:9e:36:33:f7:df:a0:ee:b6:5b:
                    d5:bc:f4:2a:b0:69:52:4e:d8:19:67:b6:61:f9:ff:
                    de:06:bf:64:06:5e:49:28:11:7c:5c:c1:59:71:c8:
                    22:56:21:a4:6b:3b:b0:c8:3b:b3:81:ed:f1:a7:81:
                    a9:40:89:66:fb:22:44:a4:a7:58:da:84:99:9d:84:
                    3e:6b:45:82:7f:03:fc:a0:ae:ad:3c:ec:f0:2b:b8:
                    18:fd:42:8e:87:41:f3:8c:aa:2d:7f:88:a6:a9:9c:
                    2f:7d:2e:ce:fd:77:dd:31:2e:fc:5c:ce:46:b2:65:
                    60:aa:a8:f0:9a:80:6a:d2:db:bf:e4:d6:d1:d6:e4:
                    a1:41:8e:13:bc:2b:b0:4f:8e:48:0f:14:97:03:b0:
                    5b:d9:1a:71:96:b0:32:df:26:82:cc:82:14:68:46:
                    81:b6:85:2f:e0:cd:c1:ef:c3:df:4c:64:c1:30:d0:
                    5e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FB:3B:1B:B3:74:22:62:C5:65:6B:51:C3:7B:DC:27:64:44:2E:99
            X509v3 Authority Key Identifier:
                keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/vPs7G7N0ImLFZWtRw3vcJ2RELpk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.144.48.0/20
                  109.226.0.0/18
                IPv6:
                  2a00:c280::/29

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:ad:fe:4d:75:f6:93:e8:87:16:4c:07:9f:a0:9b:24:b2:
         a8:87:8e:af:11:7b:5f:25:72:74:8d:ef:3d:fa:37:bc:2e:10:
         a3:35:bc:69:f4:40:4c:32:22:0e:ee:80:60:ff:be:e8:1a:d8:
         27:43:3a:67:da:cf:4b:b6:c6:3d:3a:e6:3f:30:ea:2d:57:57:
         05:e2:ef:f4:85:86:81:3a:2d:43:4a:4b:98:f7:90:9e:1f:f3:
         c5:45:09:35:43:4a:6e:92:4d:6f:38:d5:35:4e:4b:aa:7c:58:
         bf:ac:9c:68:7c:3d:48:81:f2:ff:20:b9:89:55:89:e0:1f:ef:
         c0:37:8b:7f:88:8e:3e:23:62:76:79:ab:7d:78:c0:2d:5d:0e:
         ec:80:dc:e6:90:4c:8c:9a:fc:99:7f:96:78:51:7a:23:b0:d5:
         4f:42:a9:0f:4c:07:cd:47:dd:66:8c:1d:96:40:ee:fa:ed:78:
         ca:1c:6a:e9:cc:27:d3:05:43:fc:e7:58:55:46:f3:b7:ab:a4:
         d4:b1:82:52:34:60:e7:3b:72:7e:9b:ac:31:64:2c:4a:1a:c6:
         08:1c:66:7a:8a:7a:e2:66:33:0e:a9:a2:18:e1:71:77:05:b0:
         7a:72:c8:81:e6:3f:83:fc:67:3f:0c:2c:c5:68:51:ef:ba:b6:
         a8:bc:56:b6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYMHj7c2WtwgAtsd5bDjQY5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGE0YmY1ZjE5MGYzOTk4YjgwYzYxNDlhMTQ2MzI3MGZi
YmVlMTUwHhcNMjIwOTA0MDgxMzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2ZiM2IxYmIzNzQyMjYyYzU2NTZiNTFjMzdiZGMyNzY0NDQyZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMMGEypfSBEjUZZ13BqwVeTzg86V
TGuLovZp1Xi1DX6gIG8Yfyzmr/pJjW6snPbOTct0NMPzgjSFwlEVBq8sLYuyiKRa
OMXX2FVZ0cRMODueNjP336DutlvVvPQqsGlSTtgZZ7Zh+f/eBr9kBl5JKBF8XMFZ
ccgiViGkazuwyDuzge3xp4GpQIlm+yJEpKdY2oSZnYQ+a0WCfwP8oK6tPOzwK7gY
/UKOh0HzjKotf4imqZwvfS7O/XfdMS78XM5GsmVgqqjwmoBq0tu/5NbR1uShQY4T
vCuwT45IDxSXA7Bb2RpxlrAy3yaCzIIUaEaBtoUv4M3B78PfTGTBMNBeVQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLz7OxuzdCJixWVrUcN73CdkRC6ZMB8GA1UdIwQY
MBaAFIraS/XxkPOZi4DGFJoUYycPu+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUt
ODkzNWU5MDc5Nzk2LzEvdlBzN0c3TjBJbUxGWld0UnczdmNKMlJFTHBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUtODkzNWU5MDc5Nzk2
LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEBZAwAwQG
beIAMA0EAgACMAcDBQMqAMKAMA0GCSqGSIb3DQEBCwUAA4IBAQAp0K3+TXX2k+iH
FkwHn6CbJLKoh46vEXtfJXJ0je89+je8LhCjNbxp9EBMMiIO7oBg/77oGtgnQzpn
2s9LtsY9OuY/MOotV1cF4u/0hYaBOi1DSkuY95CeH/PFRQk1Q0pukk1vONU1Tkuq
fFi/rJxofD1IgfL/ILmJVYngH+/AN4t/iI4+I2J2eat9eMAtXQ7sgNzmkEyMmvyZ
f5Z4UXojsNVPQqkPTAfNR91mjB2WQO767XjKHGrpzCfTBUP851hVRvO3q6TUsYJS
NGDnO3J+m6wxZCxKGsYIHGZ6inriZjMOqaIY4XF3BbB6csiB5j+D/Gc/DCzFaFHv
uraovFa2
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:10 2023 by rpki-client on console-ams.rpki-client.org