Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/VH5Tvd60Twyiie7y1m5Gt9tHPIw.roa
File:                     VH5Tvd60Twyiie7y1m5Gt9tHPIw.roa (raw, json)
Hash identifier:          JV+UArXBQh4iX6nrJzEi7KSq0A0utussTuRWDOYO6ic=
Subject key identifier:   54:7E:53:BD:DE:B4:4F:0C:A2:89:EE:F2:D6:6E:46:B7:DB:47:3C:8C
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       01847CF97717B99EBE68C935F9BBADF08427
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/VH5Tvd60Twyiie7y1m5Gt9tHPIw.roa
Signing time:             Tue 15 Nov 2022 20:27:14 +0000
ROA not before:           Tue 15 Nov 2022 20:27:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13335
IP address blocks:        188.114.98.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.96.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.75.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.82.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.87.0/24 maxlen: 24
                          141.101.90.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.99.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.112.0/23 maxlen: 23
                          141.101.107.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.114.0/23 maxlen: 23
                          141.101.64.0/24 maxlen: 24
                          141.101.120.0/22 maxlen: 22
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c00::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7c:f9:77:17:b9:9e:be:68:c9:35:f9:bb:ad:f0:84:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Nov 15 20:27:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=547e53bddeb44f0ca289eef2d66e46b7db473c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:77:ca:18:e6:84:6e:60:23:05:ca:09:ef:
                    8d:fd:48:48:dd:1c:9d:f3:a3:a3:20:69:eb:da:13:
                    63:b4:de:63:9b:17:27:3c:e3:a9:31:ab:23:92:e3:
                    c1:87:48:b1:0c:d7:5f:7f:35:e0:71:45:50:10:f2:
                    4c:ac:2a:1a:10:ff:46:a9:96:61:d1:10:d5:0e:02:
                    36:4c:ca:4e:7e:66:e3:80:0b:99:e5:7b:a6:50:99:
                    1f:96:f6:cc:95:71:5d:50:d9:bd:c0:61:3e:17:bd:
                    da:18:ec:36:1f:fa:18:e2:28:b5:9d:a9:50:39:f5:
                    78:39:d5:44:1b:d5:3f:0e:7e:8d:08:86:e1:4f:1b:
                    45:3a:e9:5e:e7:00:26:b9:dd:4b:12:46:15:24:99:
                    82:85:ab:1e:c0:bf:8c:04:38:84:b5:3c:ba:f5:79:
                    db:d0:f1:f1:2b:44:68:79:00:b3:46:dc:95:b7:c6:
                    9a:60:55:22:8b:e4:c1:6e:c0:1e:36:4b:52:92:57:
                    48:c3:6a:60:6e:c6:7c:4b:b3:67:14:11:26:28:ae:
                    38:7c:aa:2a:91:f3:09:65:7b:32:51:e9:b0:0c:fd:
                    8e:62:92:92:9a:59:34:5e:cd:3f:bd:f0:39:9e:ed:
                    a7:e0:dc:37:94:f1:12:18:2f:c2:26:e4:6b:04:de:
                    19:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7E:53:BD:DE:B4:4F:0C:A2:89:EE:F2:D6:6E:46:B7:DB:47:3C:8C
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/VH5Tvd60Twyiie7y1m5Gt9tHPIw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c0e:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:d3:49:2e:d0:89:fe:4a:39:3e:6b:8f:b4:5a:fa:ec:ff:d4:
         d0:98:08:d1:71:60:a7:b3:b6:55:45:82:af:7e:ed:99:44:7d:
         ca:05:2f:ac:d8:86:7e:93:83:c1:4d:b7:2d:0e:98:6c:c5:75:
         c1:a7:85:8c:1b:da:66:55:15:37:bc:c3:11:d6:34:bf:ce:ac:
         bf:6b:26:98:f6:bd:bc:aa:00:10:d0:c9:9c:d2:57:11:f1:36:
         9f:cd:56:ee:a5:ae:35:ef:35:47:9f:59:53:03:73:cf:0f:e4:
         d8:e5:ef:8a:15:91:13:fd:c0:39:2e:25:48:15:67:26:b5:6a:
         2e:e8:b7:23:75:71:90:d4:ed:81:de:38:37:58:e8:9f:b0:ba:
         1c:cf:b6:32:fc:0c:86:05:35:c6:98:56:d6:da:52:ad:b5:40:
         a5:84:30:3b:ce:65:c3:44:88:51:9b:5d:f5:34:71:11:82:49:
         09:c1:46:0c:c1:c9:03:bf:e6:dc:8c:f5:bf:cc:f9:19:9c:8c:
         11:71:c6:78:69:7f:df:d8:10:c4:57:d5:55:26:a9:ca:5d:39:
         2a:39:b5:c0:dd:74:f8:38:7b:d4:e3:33:9f:56:5c:fa:ee:08:
         0f:b5:6a:63:7d:20:d1:2e:5d:4e:63:88:0e:c6:6d:d2:05:83:
         db:ae:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org