Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5cYQ9X7nCe2yx6gSlhW2P_QxBm0.roa
File:                     5cYQ9X7nCe2yx6gSlhW2P_QxBm0.roa (raw, json)
Hash identifier:          i2VSbLnfqd4gYnyU+74sn+FOvfIe8k3cx4GdmNTq5Bw=
Subject key identifier:   E5:C6:10:F5:7E:E7:09:ED:B2:C7:A8:12:96:15:B6:3F:F4:31:06:6D
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       2589732E
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5cYQ9X7nCe2yx6gSlhW2P_QxBm0.roa
Signing time:             Sat 01 Jan 2022 05:58:06 +0000
ROA not before:           Sat 01 Jan 2022 05:58:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29314
IP address blocks:        178.235.41.0/24 maxlen: 24
                          178.235.42.0/24 maxlen: 24
                          178.235.43.0/24 maxlen: 24
                          178.235.40.0/24 maxlen: 24
                          109.107.0.0/21 maxlen: 21
                          109.107.0.0/19 maxlen: 19
                          95.160.228.0/22 maxlen: 22
                          178.235.0.0/17 maxlen: 17
                          95.160.233.0/24 maxlen: 24
                          109.241.192.0/18 maxlen: 18
                          95.160.236.0/22 maxlen: 22
                          109.107.9.0/24 maxlen: 24
                          195.26.72.0/22 maxlen: 22
                          178.235.146.0/24 maxlen: 24
                          178.235.147.0/24 maxlen: 24
                          178.235.148.0/22 maxlen: 22
                          178.235.148.0/23 maxlen: 23
                          178.235.150.0/24 maxlen: 24
                          178.235.150.0/23 maxlen: 23
                          178.235.152.0/21 maxlen: 21
                          178.235.160.0/19 maxlen: 19
                          178.235.192.0/18 maxlen: 18
                          178.235.98.0/24 maxlen: 24
                          178.235.110.0/24 maxlen: 24
                          178.235.131.0/24 maxlen: 24
                          178.235.132.0/23 maxlen: 23
                          178.235.128.0/24 maxlen: 24
                          178.235.129.0/24 maxlen: 24
                          178.235.130.0/24 maxlen: 24
                          178.235.138.0/23 maxlen: 23
                          178.235.134.0/24 maxlen: 24
                          178.235.135.0/24 maxlen: 24
                          178.235.136.0/23 maxlen: 23
                          178.235.140.0/24 maxlen: 24
                          178.235.141.0/24 maxlen: 24
                          178.235.142.0/23 maxlen: 23
                          178.235.144.0/23 maxlen: 23
                          95.160.57.0/24 maxlen: 24
                          95.160.56.0/22 maxlen: 22
                          95.160.76.0/22 maxlen: 22
                          31.11.202.0/24 maxlen: 24
                          95.160.0.0/17 maxlen: 24
                          95.160.16.0/22 maxlen: 22
                          88.156.80.176/28 maxlen: 28
                          31.11.228.0/24 maxlen: 24
                          95.160.28.0/22 maxlen: 22
                          109.241.0.0/18 maxlen: 18
                          95.160.166.0/24 maxlen: 24
                          193.201.18.0/23 maxlen: 23
                          109.241.128.0/18 maxlen: 18
                          95.160.170.0/24 maxlen: 24
                          109.241.64.0/18 maxlen: 18
                          95.160.128.0/17 maxlen: 17
                          95.160.152.0/24 maxlen: 24
                          95.160.153.0/24 maxlen: 24
                          95.160.154.0/24 maxlen: 24
                          95.160.158.0/24 maxlen: 24
                          95.160.159.0/24 maxlen: 24
                          95.160.155.0/24 maxlen: 24
                          95.160.156.0/24 maxlen: 24
                          95.160.157.0/24 maxlen: 24
                          93.105.128.0/17 maxlen: 17
                          93.105.142.0/24 maxlen: 24
                          93.105.144.0/22 maxlen: 22
                          185.51.180.0/22 maxlen: 22
                          93.105.168.0/21 maxlen: 21
                          82.139.0.0/18 maxlen: 18
                          78.31.209.0/24 maxlen: 24
                          93.105.236.0/24 maxlen: 24
                          93.105.237.0/24 maxlen: 24
                          31.11.172.0/24 maxlen: 24
                          93.105.178.0/23 maxlen: 23
                          78.31.152.0/21 maxlen: 21
                          93.105.176.0/23 maxlen: 23
                          93.105.180.0/24 maxlen: 24
                          93.105.181.0/24 maxlen: 24
                          93.105.182.0/24 maxlen: 24
                          93.105.183.0/24 maxlen: 24
                          31.11.131.0/24 maxlen: 24
                          31.11.128.0/24 maxlen: 24
                          31.11.132.0/22 maxlen: 22
                          31.11.129.0/24 maxlen: 24
                          31.11.128.0/17 maxlen: 17
                          31.11.130.0/24 maxlen: 24
                          192.166.120.0/23 maxlen: 23
                          91.192.76.0/24 maxlen: 24
                          91.192.76.0/22 maxlen: 22
                          37.77.152.0/21 maxlen: 21
                          93.105.40.0/24 maxlen: 24
                          93.105.42.0/24 maxlen: 24
                          93.105.0.0/17 maxlen: 17
                          89.151.0.0/18 maxlen: 18
                          195.191.162.0/23 maxlen: 23
                          195.225.92.0/22 maxlen: 22
                          91.238.232.0/22 maxlen: 22
                          88.156.222.0/24 maxlen: 24
                          88.156.226.0/23 maxlen: 23
                          37.8.192.0/18 maxlen: 18
                          88.156.255.0/24 maxlen: 24
                          83.143.136.0/21 maxlen: 21
                          37.8.208.0/24 maxlen: 24
                          88.156.164.0/22 maxlen: 22
                          83.143.40.0/21 maxlen: 21
                          195.28.170.0/23 maxlen: 23
                          88.156.192.0/18 maxlen: 18
                          109.197.56.0/21 maxlen: 21
                          109.197.64.0/21 maxlen: 21
                          91.231.116.0/23 maxlen: 23
                          37.8.214.0/24 maxlen: 24
                          94.231.48.0/20 maxlen: 20
                          37.8.231.0/24 maxlen: 24
                          37.8.230.0/24 maxlen: 24
                          31.22.96.0/21 maxlen: 21
                          31.22.100.0/23 maxlen: 23
                          88.156.0.0/18 maxlen: 18
                          78.88.188.0/22 maxlen: 22
                          62.122.112.0/21 maxlen: 21
                          194.54.188.0/22 maxlen: 22
                          83.243.104.0/21 maxlen: 21
                          78.88.123.0/24 maxlen: 24
                          31.135.168.0/21 maxlen: 21
                          78.88.128.0/17 maxlen: 17
                          31.135.175.0/24 maxlen: 24
                          88.156.128.0/23 maxlen: 23
                          88.156.128.0/21 maxlen: 21
                          91.230.159.0/24 maxlen: 24
                          88.156.132.0/23 maxlen: 23
                          88.156.128.0/18 maxlen: 18
                          88.156.130.0/23 maxlen: 23
                          88.156.134.0/23 maxlen: 23
                          91.230.162.0/23 maxlen: 23
                          91.230.164.0/22 maxlen: 22
                          88.156.136.0/21 maxlen: 21
                          78.88.216.0/22 maxlen: 22
                          88.156.64.0/24 maxlen: 24
                          88.156.64.0/18 maxlen: 18
                          88.156.78.0/24 maxlen: 24
                          77.222.240.0/20 maxlen: 20
                          77.222.248.0/22 maxlen: 22
                          78.88.0.0/17 maxlen: 17
                          195.242.252.0/22 maxlen: 22
                          78.88.30.0/24 maxlen: 24
                          78.88.28.0/22 maxlen: 22
                          78.88.31.0/24 maxlen: 24
                          78.88.28.0/24 maxlen: 24
                          78.88.29.0/24 maxlen: 24
                          77.222.224.0/21 maxlen: 21
                          78.88.43.0/24 maxlen: 24
                          77.222.232.0/21 maxlen: 21
                          2a00:9f00::/48 maxlen: 48
                          2a00:9f00:8000::/36 maxlen: 36
                          2a00:9f00::/32 maxlen: 32
                          2a00:9f00:3000::/36 maxlen: 36
                          2a00:9f00:9000::/36 maxlen: 36
                          2a00:9f00:e000::/36 maxlen: 36
                          2a00:9f00:6000::/36 maxlen: 36
                          2a00:9f00:1000::/36 maxlen: 36
                          2a00:9f00:b000::/36 maxlen: 36
                          2a00:9f00::/36 maxlen: 36
                          2a00:9f00:d000::/36 maxlen: 36
                          2a00:9f00:5000::/36 maxlen: 36
                          2a00:9f00:a000::/36 maxlen: 36
                          2a00:9f00:f000::/36 maxlen: 36
                          2a00:9f00:7000::/36 maxlen: 36
                          2a00:9f00:c000::/36 maxlen: 36
                          2a00:9f00:4000::/36 maxlen: 36
                          2a00:9f00:2000::/36 maxlen: 36
                          2a00:9f00:10::/48 maxlen: 48
                          2a00:9f00:a::/48 maxlen: 48
                          2a00:9f00:2007::/48 maxlen: 48
                          2a00:9f00:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629764910 (0x2589732e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Jan  1 05:58:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e5c610f57ee709edb2c7a8129615b63ff431066d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:91:c4:a8:24:2a:77:77:95:7c:8d:cf:74:
                    c2:fa:7b:67:5d:b5:db:c2:b1:1f:87:f8:09:21:dd:
                    0b:e8:ba:16:91:b8:5a:45:8d:4d:bb:93:22:7c:e2:
                    d6:30:be:0c:3d:73:aa:38:54:14:b7:66:25:16:bf:
                    64:a9:17:5d:e1:0e:c9:48:a7:2f:4d:a3:8e:a7:ca:
                    ec:f0:6c:6f:74:63:86:d6:3a:c1:2a:f7:44:78:80:
                    04:7f:51:cc:e6:a4:ce:74:90:e5:7f:0d:e5:18:17:
                    fd:42:f6:32:70:e7:70:b2:5c:9f:55:9a:6c:6a:8e:
                    50:a0:30:12:25:76:ea:df:11:ad:b6:65:ec:3a:5a:
                    cc:f8:23:54:79:74:e9:6d:75:81:d5:de:34:ee:9c:
                    18:ce:c9:58:ea:8e:2e:ec:6f:f9:3c:b4:cb:84:d4:
                    c7:3e:f5:78:84:a5:42:97:49:08:fd:20:70:36:33:
                    7d:8f:95:91:76:73:9b:dd:11:24:c9:20:9a:20:c4:
                    3c:92:8c:4e:a2:b4:91:c2:37:5c:e1:74:28:19:7e:
                    cb:c6:aa:12:8f:66:be:3c:b9:51:fb:a0:e0:73:44:
                    78:90:e0:54:af:13:2b:d8:22:63:79:e9:1f:df:17:
                    71:af:3b:da:69:ae:4e:a5:ac:8b:63:6e:71:29:9c:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C6:10:F5:7E:E7:09:ED:B2:C7:A8:12:96:15:B6:3F:F4:31:06:6D
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5cYQ9X7nCe2yx6gSlhW2P_QxBm0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.128.0/17
                  31.22.96.0/21
                  31.135.168.0/21
                  37.8.192.0/18
                  37.77.152.0/21
                  62.122.112.0/21
                  77.222.224.0/19
                  78.31.152.0/21
                  78.31.209.0/24
                  78.88.0.0/16
                  82.139.0.0/18
                  83.143.40.0/21
                  83.143.136.0/21
                  83.243.104.0/21
                  88.156.0.0/16
                  89.151.0.0/18
                  91.192.76.0/22
                  91.230.159.0/24
                  91.230.162.0-91.230.167.255
                  91.231.116.0/23
                  91.238.232.0/22
                  93.105.0.0/16
                  94.231.48.0/20
                  95.160.0.0/16
                  109.107.0.0/19
                  109.197.56.0-109.197.71.255
                  109.241.0.0/16
                  178.235.0.0/16
                  185.51.180.0/22
                  192.166.120.0/23
                  193.201.18.0/23
                  194.54.188.0/22
                  195.26.72.0/22
                  195.28.170.0/23
                  195.191.162.0/23
                  195.225.92.0/22
                  195.242.252.0/22
                IPv6:
                  2a00:9f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:e1:1e:f4:91:01:e2:bb:ab:e7:12:cf:4f:c2:21:64:38:50:
         ca:40:61:a1:36:77:cc:4c:a4:53:32:25:29:5f:1d:81:85:26:
         b2:f0:82:6f:f5:f0:f0:4d:35:78:78:dc:dc:df:da:2b:89:ed:
         5f:a8:0c:23:43:02:a6:88:b3:f6:f3:a8:a0:33:3f:da:d6:00:
         dc:df:75:77:43:03:e6:40:36:d1:c9:78:64:fb:b9:89:18:f2:
         24:d7:b3:5e:b6:7a:96:cb:0c:95:82:6f:f7:d9:f1:b4:a4:37:
         07:d8:d3:2f:ed:5a:d2:04:e8:fa:8a:09:f4:9f:a3:f2:21:ea:
         d7:82:26:2c:dc:37:57:67:00:45:3d:c2:b5:b1:e3:9c:d7:06:
         95:26:0e:2b:b9:df:89:87:1d:17:21:28:ac:30:14:22:ce:77:
         f7:36:c5:2c:35:1e:61:9a:d9:66:0e:92:5f:6c:ee:fe:3a:2a:
         65:bf:77:f3:16:6b:5a:a1:1f:96:fe:2a:ff:1a:3c:2f:df:29:
         89:90:2b:a4:ca:06:91:96:18:a3:40:00:85:47:fa:2c:9d:7a:
         02:7b:40:b9:1d:f0:51:32:fa:97:0e:45:3b:bf:4d:ff:f3:0e:
         2c:70:cd:ab:be:4b:4b:ed:65:e1:6f:05:f6:0b:ae:26:a1:2e:
         40:d9:24:4b
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgIEJYlzLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NjU5NmYxYjE2M2NhYjBjNDVhODRlZWIxMzI2MWI2NWYxYTIyOTYyMB4XDTIyMDEw
MTA1NTgwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTVjNjEwZjU3ZWU3
MDllZGIyYzdhODEyOTYxNWI2M2ZmNDMxMDY2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdOkcSoJCp3d5V8jc90wvp7Z12128KxH4f4CSHdC+i6FpG4
WkWNTbuTInzi1jC+DD1zqjhUFLdmJRa/ZKkXXeEOyUinL02jjqfK7PBsb3RjhtY6
wSr3RHiABH9RzOakznSQ5X8N5RgX/UL2MnDncLJcn1WabGqOUKAwEiV26t8RrbZl
7DpazPgjVHl06W11gdXeNO6cGM7JWOqOLuxv+Ty0y4TUxz71eISlQpdJCP0gcDYz
fY+VkXZzm90RJMkgmiDEPJKMTqK0kcI3XOF0KBl+y8aqEo9mvjy5Ufug4HNEeJDg
VK8TK9giY3npH98Xca872mmuTqWsi2NucSmcvPUCAwEAAaOCAwIwggL+MB0GA1Ud
DgQWBBTlxhD1fucJ7bLHqBKWFbY/9DEGbTAfBgNVHSMEGDAWgBTmWW8bFjyrDEWo
TusTJhtl8aIpYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVsbHZHeFk4cXd4RnFFN3JFeVliWmZHaUtXSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODUvZWRlOTRlLWJhMmEtNDFlZS1iMTJjLWUwNTM0ZTIzODU5Yi8x
LzVjWVE5WDduQ2UyeXg2Z1NsaFcyUF9ReEJtMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUv
ZWRlOTRlLWJhMmEtNDFlZS1iMTJjLWUwNTM0ZTIzODU5Yi8xLzVsbHZHeFk4cXd4
RnFFN3JFeVliWmZHaUtXSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ARYGCCsGAQUFBwEHAQH/BIIBBTCCAQEwge8EAgABMIHoAwQHHwuAAwQDHxZgAwQD
H4eoAwQGJQjAAwQDJU2YAwQDPnpwAwQFTd7gAwQDTh+YAwQATh/RAwMATlgDBAZS
iwADBANTjygDBANTj4gDBANT82gDAwBYnAMEBlmXAAMEAlvATAMEAFvmnzAMAwQB
W+aiAwQDW+agAwQBW+d0AwQCW+7oAwMAXWkDBARe5zADAwBfoAMEBW1rADAMAwQD
bcU4AwQDbcVAAwMAbfEDAwCy6wMEArkztAMEAcCmeAMEAcHJEgMEAsI2vAMEAsMa
SAMEAcMcqgMEAcO/ogMEAsPhXAMEAsPy/DANBAIAAjAHAwUAKgCfADANBgkqhkiG
9w0BAQsFAAOCAQEApuEe9JEB4rur5xLPT8IhZDhQykBhoTZ3zEykUzIlKV8dgYUm
svCCb/Xw8E01eHjc3N/aK4ntX6gMI0MCpoiz9vOooDM/2tYA3N91d0MD5kA20cl4
ZPu5iRjyJNezXrZ6lssMlYJv99nxtKQ3B9jTL+1a0gTo+ooJ9J+j8iHq14ImLNw3
V2cART3CtbHjnNcGlSYOK7nfiYcdFyEorDAUIs539zbFLDUeYZrZZg6SX2zu/joq
Zb938xZrWqEflv4q/xo8L98piZArpMoGkZYYo0AAhUf6LJ16AntAuR3wUTL6lw5F
O79N//MOLHDNq75LS+1l4W8F9guuJqEuQNkkSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:33 2024 by rpki-client on console-fra.rpki-client.org