Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GLpW9dYPtTpbbGLBojaCj0YTpZ8.roa
File:                     GLpW9dYPtTpbbGLBojaCj0YTpZ8.roa (raw, json)
Hash identifier:          /mB6zgJfYE/ZYXL38fa/o7+PVNiZJm3Pp8x4dA/T7GY=
Subject key identifier:   18:BA:56:F5:D6:0F:B5:3A:5B:6C:62:C1:A2:36:82:8F:46:13:A5:9F
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       18AB5934
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GLpW9dYPtTpbbGLBojaCj0YTpZ8.roa
Signing time:             Mon 20 Jun 2022 07:26:45 +0000
ROA not before:           Mon 20 Jun 2022 07:26:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58272
IP address blocks:        37.230.187.0/24 maxlen: 24
                          188.72.119.0/24 maxlen: 24
                          178.170.231.0/24 maxlen: 24
                          178.170.139.0/24 maxlen: 24
                          178.170.137.0/24 maxlen: 24
                          217.150.90.0/24 maxlen: 24
                          217.150.89.0/24 maxlen: 24
                          217.150.88.0/24 maxlen: 24
                          217.150.91.0/24 maxlen: 24
                          178.170.140.0/24 maxlen: 24
                          217.150.94.0/24 maxlen: 24
                          217.150.93.0/24 maxlen: 24
                          217.150.92.0/24 maxlen: 24
                          217.150.95.0/24 maxlen: 24
                          46.243.149.0/24 maxlen: 24
                          37.18.0.0/24 maxlen: 24
                          185.4.150.0/24 maxlen: 24
                          37.18.15.0/24 maxlen: 24
                          185.4.149.0/24 maxlen: 24
                          185.4.148.0/24 maxlen: 24
                          185.4.151.0/24 maxlen: 24
                          141.101.255.0/24 maxlen: 24
                          46.243.139.0/24 maxlen: 24
                          46.243.138.0/24 maxlen: 24
                          37.230.134.0/24 maxlen: 24
                          37.230.151.0/24 maxlen: 24
                          188.72.83.0/24 maxlen: 24
                          188.72.81.0/24 maxlen: 24
                          188.72.80.0/24 maxlen: 24
                          188.72.85.0/24 maxlen: 24
                          188.72.84.0/24 maxlen: 24
                          37.230.163.0/24 maxlen: 24
                          188.72.86.0/24 maxlen: 24
                          37.230.170.0/24 maxlen: 24
                          37.230.171.0/24 maxlen: 24
                          37.230.176.0/24 maxlen: 24
                          37.230.183.0/24 maxlen: 24
                          37.230.182.0/24 maxlen: 24
                          46.243.204.0/24 maxlen: 24
                          46.243.214.0/24 maxlen: 24
                          46.243.217.0/24 maxlen: 24
                          46.243.216.0/24 maxlen: 24
                          46.243.222.0/24 maxlen: 24
                          46.243.221.0/24 maxlen: 24
                          46.243.225.0/24 maxlen: 24
                          46.243.223.0/24 maxlen: 24
                          46.243.232.0/24 maxlen: 24
                          46.243.233.0/24 maxlen: 24
                          37.18.63.0/24 maxlen: 24
                          46.243.240.0/24 maxlen: 24
                          46.243.236.0/24 maxlen: 24
                          46.243.235.0/24 maxlen: 24
                          46.243.234.0/24 maxlen: 24
                          46.243.238.0/24 maxlen: 24
                          46.243.237.0/24 maxlen: 24
                          46.243.243.0/24 maxlen: 24
                          46.243.242.0/24 maxlen: 24
                          46.243.241.0/24 maxlen: 24
                          46.243.246.0/24 maxlen: 24
                          46.243.250.0/24 maxlen: 24
                          46.243.249.0/24 maxlen: 24
                          46.243.248.0/24 maxlen: 24
                          46.243.247.0/24 maxlen: 24
                          37.230.131.0/24 maxlen: 24
                          46.243.251.0/24 maxlen: 24
                          128.0.71.0/24 maxlen: 24
                          141.101.179.0/24 maxlen: 24
                          141.101.191.0/24 maxlen: 24
                          141.101.132.0/24 maxlen: 24
                          141.101.133.0/24 maxlen: 24
                          141.101.135.0/24 maxlen: 24
                          141.101.145.0/24 maxlen: 24
                          141.101.143.0/24 maxlen: 24
                          141.101.148.0/24 maxlen: 24
                          141.101.147.0/24 maxlen: 24
                          141.101.150.0/24 maxlen: 24
                          141.101.149.0/24 maxlen: 24
                          141.101.155.0/24 maxlen: 24
                          141.101.154.0/24 maxlen: 24
                          141.101.153.0/24 maxlen: 24
                          141.101.159.0/24 maxlen: 24
                          141.101.158.0/24 maxlen: 24
                          141.101.156.0/24 maxlen: 24
                          141.101.162.0/24 maxlen: 24
                          141.101.161.0/24 maxlen: 24
                          141.101.160.0/24 maxlen: 24
                          141.101.166.0/24 maxlen: 24
                          141.101.165.0/24 maxlen: 24
                          141.101.164.0/24 maxlen: 24
                          141.101.168.0/24 maxlen: 24
                          141.101.167.0/24 maxlen: 24
                          141.101.171.0/24 maxlen: 24
                          141.101.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413882676 (0x18ab5934)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jun 20 07:26:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18ba56f5d60fb53a5b6c62c1a236828f4613a59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:a0:7b:af:d7:f3:25:3b:f3:ef:0d:d6:10:
                    da:f9:1b:05:67:2b:a0:56:be:21:d3:3d:63:4f:7f:
                    b8:8d:28:44:7e:75:38:82:d1:bd:48:36:01:8e:81:
                    c3:be:a8:bd:1c:07:dc:b2:91:c9:fc:94:b2:37:e4:
                    72:d7:d3:6c:31:a6:ff:94:cc:6a:12:c9:11:61:85:
                    38:fb:1b:99:f6:25:ee:22:e9:1b:ad:61:71:ed:09:
                    61:f9:6f:5e:f4:20:d8:e7:e2:b2:c5:85:3e:ad:0b:
                    2c:9e:e3:e9:99:fe:64:b6:70:db:4b:a5:03:45:1e:
                    fa:2a:3c:fa:ad:da:4e:bc:01:95:b2:a8:32:7d:93:
                    ea:cb:b1:94:7f:d3:f4:09:47:85:f9:6d:a5:92:b9:
                    e4:bc:47:7a:57:f2:6a:28:a9:c0:9b:47:ca:c3:b1:
                    8d:3f:4e:8b:da:5e:4e:cb:e8:cf:ec:3b:02:5a:63:
                    9f:d8:b2:63:69:c0:ae:97:3d:35:34:48:46:8e:4e:
                    73:45:36:1c:01:b0:b3:b4:77:6c:8e:f8:a6:2c:13:
                    d6:9c:46:62:a3:17:92:d3:67:d8:53:11:bc:16:db:
                    a9:c1:bd:83:c8:52:69:56:e5:79:75:7e:98:b2:a9:
                    23:a3:ec:65:57:8c:77:e4:ed:93:c8:15:11:00:d9:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BA:56:F5:D6:0F:B5:3A:5B:6C:62:C1:A2:36:82:8F:46:13:A5:9F
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GLpW9dYPtTpbbGLBojaCj0YTpZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.0.0/24
                  37.18.15.0/24
                  37.18.63.0/24
                  37.230.131.0/24
                  37.230.134.0/24
                  37.230.151.0/24
                  37.230.163.0/24
                  37.230.170.0/23
                  37.230.176.0/24
                  37.230.182.0/23
                  37.230.187.0/24
                  46.243.138.0/23
                  46.243.149.0/24
                  46.243.204.0/24
                  46.243.214.0/24
                  46.243.216.0/23
                  46.243.221.0-46.243.223.255
                  46.243.225.0/24
                  46.243.232.0-46.243.238.255
                  46.243.240.0/22
                  46.243.246.0-46.243.251.255
                  128.0.71.0/24
                  141.101.132.0/23
                  141.101.135.0/24
                  141.101.143.0/24
                  141.101.145.0/24
                  141.101.147.0-141.101.150.255
                  141.101.153.0-141.101.156.255
                  141.101.158.0-141.101.162.255
                  141.101.164.0-141.101.168.255
                  141.101.170.0/23
                  141.101.179.0/24
                  141.101.191.0/24
                  141.101.255.0/24
                  178.170.137.0/24
                  178.170.139.0-178.170.140.255
                  178.170.231.0/24
                  185.4.148.0/22
                  188.72.80.0/23
                  188.72.83.0-188.72.86.255
                  188.72.119.0/24
                  217.150.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c3:86:6a:4e:52:50:0a:aa:25:a3:8a:9d:7c:04:f9:7a:3d:b3:
         52:a5:cf:ac:a9:35:3a:c2:cd:a1:ea:93:db:6a:82:a5:cf:4d:
         da:b2:c1:33:41:17:5a:64:04:9b:d5:e6:8e:01:6b:d5:76:17:
         19:db:dd:58:aa:99:3e:be:9b:1a:f1:8b:95:92:46:71:e5:1c:
         83:a3:b7:1f:05:bb:32:a6:40:c0:fe:a9:3b:eb:8c:9e:15:52:
         89:25:d7:7c:61:22:2f:b8:5d:08:ee:30:fa:cc:0c:e0:62:8f:
         de:3a:96:95:a1:f9:8f:c5:79:d6:d0:bd:14:2b:a9:8b:fa:cb:
         ab:5c:1a:68:51:73:44:4c:85:f2:49:9a:36:d8:1b:b2:9c:99:
         e2:26:10:72:46:f8:c4:4e:b2:97:7b:8c:db:6d:4e:02:5d:4b:
         18:d9:4b:02:78:a7:d4:45:77:85:e8:59:bd:94:98:7b:89:8d:
         17:81:21:83:83:d0:e5:d5:e7:8c:b3:82:89:42:fc:5d:51:7d:
         f6:7d:4a:06:e6:f3:d9:60:25:91:8a:52:cc:39:bb:78:22:fb:
         e0:53:9f:ee:22:7f:05:b9:d6:cf:4a:83:e8:58:3c:c0:fb:ee:
         24:d3:80:3c:c8:2c:80:97:85:18:e8:6f:c9:10:64:4c:c7:9f:
         a0:aa:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-ams.rpki-client.org