Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/cjF_leQ-xXSjwv_py6DJUEw2ig8.roa
File:                     cjF_leQ-xXSjwv_py6DJUEw2ig8.roa (raw, json)
Hash identifier:          0r8AA1QkjcIs6jd6pgIl8bLQXwoAPaSAVTUboKYkU9s=
Subject key identifier:   72:31:7F:95:E4:3E:C5:74:A3:C2:FF:E9:CB:A0:C9:50:4C:36:8A:0F
Certificate issuer:       /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial:       05771774
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/cjF_leQ-xXSjwv_py6DJUEw2ig8.roa
Signing time:             Wed 22 Jun 2022 12:51:32 +0000
ROA not before:           Wed 22 Jun 2022 12:51:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        5.157.192.0/22 maxlen: 22
                          5.157.196.0/22 maxlen: 22
                          5.157.200.0/21 maxlen: 21
                          5.157.208.0/21 maxlen: 21
                          5.157.216.0/22 maxlen: 24
                          5.157.220.0/22 maxlen: 24
                          178.157.120.0/22 maxlen: 22
                          5.157.132.0/22 maxlen: 22
                          5.157.152.0/21 maxlen: 21
                          5.157.160.0/22 maxlen: 22
                          5.157.168.0/22 maxlen: 24
                          5.157.172.0/22 maxlen: 24
                          5.157.232.0/21 maxlen: 21
                          5.157.228.0/22 maxlen: 22
                          5.157.248.0/21 maxlen: 21
                          188.119.168.0/21 maxlen: 21
                          188.119.184.0/22 maxlen: 22
                          188.119.182.0/23 maxlen: 23
                          188.119.180.0/23 maxlen: 23
                          188.119.188.0/22 maxlen: 24
                          178.157.68.0/22 maxlen: 22
                          178.157.94.0/24 maxlen: 24
                          178.157.101.0/24 maxlen: 24
                          178.157.112.0/21 maxlen: 21
                          185.76.62.0/23 maxlen: 23
                          185.76.60.0/23 maxlen: 23
                          185.76.61.0/24 maxlen: 24
                          185.76.63.0/24 maxlen: 24
                          188.74.248.0/21 maxlen: 21
                          37.35.48.0/22 maxlen: 22
                          37.35.52.0/24 maxlen: 24
                          188.119.128.0/20 maxlen: 24
                          188.74.192.0/21 maxlen: 21
                          188.74.200.0/21 maxlen: 21
                          62.216.72.0/24 maxlen: 24
                          62.216.73.0/24 maxlen: 24
                          62.216.74.0/24 maxlen: 24
                          62.216.75.0/24 maxlen: 24
                          188.74.212.0/22 maxlen: 22
                          62.216.72.0/22 maxlen: 22
                          62.216.80.0/24 maxlen: 24
                          62.216.84.0/22 maxlen: 22
                          62.216.80.0/22 maxlen: 22
                          62.216.81.0/24 maxlen: 24
                          62.216.82.0/24 maxlen: 24
                          62.216.83.0/24 maxlen: 24
                          62.216.84.0/24 maxlen: 24
                          62.216.85.0/24 maxlen: 24
                          188.74.216.0/21 maxlen: 21
                          62.216.88.0/22 maxlen: 22
                          188.74.224.0/21 maxlen: 21
                          62.216.86.0/24 maxlen: 24
                          62.216.87.0/24 maxlen: 24
                          62.216.88.0/24 maxlen: 24
                          62.216.89.0/24 maxlen: 24
                          62.216.90.0/24 maxlen: 24
                          62.216.91.0/24 maxlen: 24
                          188.74.232.0/21 maxlen: 21
                          62.216.92.0/24 maxlen: 24
                          62.216.93.0/24 maxlen: 24
                          62.216.94.0/24 maxlen: 24
                          62.216.95.0/24 maxlen: 24
                          188.74.144.0/22 maxlen: 22
                          188.74.148.0/22 maxlen: 22
                          188.74.160.0/21 maxlen: 21
                          188.74.184.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91690868 (0x5771774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
        Validity
            Not Before: Jun 22 12:51:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=72317f95e43ec574a3c2ffe9cba0c9504c368a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:38:04:68:d9:c8:ec:06:ab:64:06:52:bd:
                    ca:5d:45:34:85:94:f4:e3:15:d7:ba:4d:ab:83:ba:
                    06:5b:58:22:8d:02:0a:9c:39:d1:00:c3:e3:10:0b:
                    ab:b8:44:da:64:5c:74:cb:76:d7:5c:63:90:94:88:
                    5b:d5:90:b3:1d:d9:0a:81:1b:5b:dc:4f:70:53:f9:
                    01:3d:93:1e:87:26:dc:83:52:99:4f:c8:93:13:6f:
                    99:85:30:f3:4f:c6:8d:47:4a:20:c0:18:15:05:d5:
                    8d:75:f7:87:d6:0a:ef:c7:a4:71:c6:58:ec:28:12:
                    20:91:1a:2f:e3:2a:0d:e4:f7:f6:42:7f:95:6d:62:
                    d3:51:a0:5e:2d:82:05:33:a0:6f:6f:80:41:50:f0:
                    58:ba:54:b0:dc:a0:90:35:8d:c1:33:b4:c3:30:ca:
                    24:20:26:57:ff:4f:e7:a6:b0:5f:6c:0b:9d:de:2c:
                    fc:81:e8:c1:b2:03:40:40:95:d3:ec:a1:30:35:0b:
                    3a:c0:c0:08:45:6d:61:bb:5e:f4:4e:2a:5c:8a:66:
                    f3:7c:71:77:6f:35:1e:b8:ea:90:9e:c9:d7:81:6a:
                    2e:a6:37:95:c0:f2:cd:42:e3:7b:5e:a9:94:74:fb:
                    a2:91:8b:99:67:d6:f9:b5:75:9f:4f:f4:16:80:b5:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:31:7F:95:E4:3E:C5:74:A3:C2:FF:E9:CB:A0:C9:50:4C:36:8A:0F
            X509v3 Authority Key Identifier:
                keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/cjF_leQ-xXSjwv_py6DJUEw2ig8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.157.132.0/22
                  5.157.152.0-5.157.163.255
                  5.157.168.0/21
                  5.157.192.0/19
                  5.157.228.0-5.157.239.255
                  5.157.248.0/21
                  37.35.48.0-37.35.52.255
                  62.216.72.0/22
                  62.216.80.0/20
                  178.157.68.0/22
                  178.157.94.0/24
                  178.157.101.0/24
                  178.157.112.0-178.157.123.255
                  185.76.60.0/22
                  188.74.144.0/21
                  188.74.160.0/21
                  188.74.184.0/22
                  188.74.192.0/20
                  188.74.212.0-188.74.239.255
                  188.74.248.0/21
                  188.119.128.0/20
                  188.119.168.0/21
                  188.119.180.0-188.119.191.255

    Signature Algorithm: sha256WithRSAEncryption
         92:c6:eb:ab:58:bd:dd:7e:c0:56:49:d3:93:7f:52:14:5b:2f:
         f0:35:84:d1:9b:c0:86:54:24:45:b3:be:64:1e:32:dd:42:bc:
         c8:80:f6:99:d6:11:61:ec:8c:da:4f:ca:ab:af:60:47:3d:0d:
         be:4f:c6:d8:7a:d7:37:af:45:4e:e9:62:cf:e4:b2:c6:e7:1b:
         8d:c7:44:83:a7:2c:e9:e6:63:fc:d7:b5:cd:c9:3e:25:09:5d:
         ad:e7:32:6f:5a:b6:6d:69:49:e1:89:e6:2f:a4:e9:71:4d:98:
         65:35:ae:70:f6:95:5e:8a:39:2a:89:82:26:39:20:a2:26:8d:
         b3:63:61:3b:b4:f1:54:71:f7:96:cc:85:1d:53:87:86:dc:f8:
         4f:e3:52:99:74:02:be:d5:7c:f3:8e:87:a4:f9:e1:d1:05:28:
         bf:c2:85:b6:90:25:67:73:ae:fe:8c:2d:c3:e5:4c:ad:98:4d:
         e8:41:46:22:a6:aa:10:79:b7:96:72:6f:85:91:69:68:2d:cd:
         36:2c:83:dd:05:dc:9d:b9:c2:8a:bc:63:9a:af:d2:67:e3:1f:
         f2:cb:09:15:bb:ca:d9:c2:9c:b0:d0:2e:71:87:45:79:4a:7d:
         5d:18:3d:ed:3a:07:59:a5:ee:79:be:4d:aa:e8:a7:61:82:da:
         5a:73:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org