Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/E84sOtZ6EmP1z2KDh-Bnqe2rIMs.roa
File:                     E84sOtZ6EmP1z2KDh-Bnqe2rIMs.roa (raw, json)
Hash identifier:          Um0B/FT/K2KA4iOl7uBYMF5eQaouqgz512xXHQopi9c=
Subject key identifier:   13:CE:2C:3A:D6:7A:12:63:F5:CF:62:83:87:E0:67:A9:ED:AB:20:CB
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       175C0B0C
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/E84sOtZ6EmP1z2KDh-Bnqe2rIMs.roa
Signing time:             Sat 01 Jan 2022 09:53:59 +0000
ROA not before:           Sat 01 Jan 2022 09:53:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6866
IP address blocks:        87.228.128.0/17 maxlen: 24
                          62.228.128.0/19 maxlen: 19
                          87.228.128.0/18 maxlen: 18
                          87.228.144.0/20 maxlen: 20
                          62.228.64.0/19 maxlen: 19
                          62.228.96.0/19 maxlen: 19
                          62.228.226.0/23 maxlen: 23
                          87.228.224.0/20 maxlen: 20
                          87.228.224.0/19 maxlen: 19
                          62.228.224.0/19 maxlen: 19
                          62.228.228.0/24 maxlen: 24
                          62.228.229.0/24 maxlen: 24
                          62.228.240.0/23 maxlen: 23
                          87.228.240.0/20 maxlen: 20
                          83.168.0.0/19 maxlen: 19
                          83.168.0.0/18 maxlen: 24
                          62.228.160.0/19 maxlen: 19
                          87.228.160.0/20 maxlen: 20
                          87.228.176.0/20 maxlen: 20
                          87.228.192.0/20 maxlen: 20
                          62.228.192.0/19 maxlen: 19
                          83.168.32.0/19 maxlen: 19
                          87.228.208.0/20 maxlen: 20
                          31.153.128.0/19 maxlen: 19
                          176.92.224.0/19 maxlen: 24
                          31.153.160.0/19 maxlen: 19
                          31.153.96.0/19 maxlen: 19
                          62.228.0.0/19 maxlen: 19
                          62.228.0.0/21 maxlen: 21
                          62.228.0.0/16 maxlen: 24
                          62.228.8.0/21 maxlen: 21
                          62.228.16.0/22 maxlen: 22
                          62.228.20.0/22 maxlen: 22
                          62.228.24.0/21 maxlen: 21
                          62.228.32.0/19 maxlen: 19
                          31.153.192.0/19 maxlen: 19
                          31.153.224.0/19 maxlen: 19
                          212.31.96.0/20 maxlen: 20
                          212.31.96.0/24 maxlen: 24
                          212.31.96.0/19 maxlen: 24
                          212.31.112.0/20 maxlen: 20
                          81.4.128.0/18 maxlen: 24
                          81.4.128.0/19 maxlen: 19
                          212.31.121.0/24 maxlen: 24
                          212.31.122.0/24 maxlen: 24
                          212.31.123.0/24 maxlen: 24
                          212.31.124.0/24 maxlen: 24
                          212.31.125.0/24 maxlen: 24
                          81.4.133.0/24 maxlen: 24
                          212.31.127.0/24 maxlen: 24
                          31.153.16.0/20 maxlen: 20
                          31.153.32.0/19 maxlen: 19
                          31.153.64.0/19 maxlen: 19
                          81.4.160.0/19 maxlen: 19
                          81.4.160.0/20 maxlen: 20
                          81.4.160.0/21 maxlen: 21
                          81.4.168.0/21 maxlen: 21
                          81.4.174.0/24 maxlen: 24
                          81.4.176.0/21 maxlen: 21
                          31.153.0.0/17 maxlen: 17
                          31.153.0.0/20 maxlen: 20
                          31.153.0.0/19 maxlen: 19
                          31.153.0.0/16 maxlen: 24
                          46.199.0.0/19 maxlen: 19
                          46.199.0.0/18 maxlen: 18
                          46.199.0.0/16 maxlen: 24
                          46.199.16.0/20 maxlen: 20
                          46.199.32.0/19 maxlen: 19
                          46.199.32.0/20 maxlen: 20
                          46.199.48.0/20 maxlen: 20
                          46.199.64.0/20 maxlen: 20
                          46.199.88.0/24 maxlen: 24
                          46.198.32.0/19 maxlen: 19
                          46.198.64.0/19 maxlen: 19
                          46.198.64.0/18 maxlen: 18
                          46.198.0.0/18 maxlen: 18
                          46.198.0.0/19 maxlen: 19
                          46.198.0.0/17 maxlen: 24
                          46.198.96.0/19 maxlen: 19
                          93.109.192.0/19 maxlen: 19
                          93.109.209.0/24 maxlen: 24
                          93.109.219.0/24 maxlen: 24
                          93.109.224.0/19 maxlen: 19
                          93.109.128.0/19 maxlen: 19
                          93.109.160.0/19 maxlen: 19
                          185.2.97.0/24 maxlen: 24
                          185.2.98.0/24 maxlen: 24
                          185.2.96.0/24 maxlen: 24
                          185.2.96.0/22 maxlen: 24
                          185.2.99.0/24 maxlen: 24
                          93.109.227.0/24 maxlen: 24
                          93.109.239.0/24 maxlen: 24
                          213.7.208.0/24 maxlen: 24
                          195.14.142.0/24 maxlen: 24
                          195.14.144.0/20 maxlen: 20
                          213.7.208.0/20 maxlen: 20
                          195.14.151.0/24 maxlen: 24
                          195.14.146.0/24 maxlen: 24
                          213.7.220.0/22 maxlen: 22
                          213.7.224.0/20 maxlen: 20
                          195.14.153.0/24 maxlen: 24
                          213.7.240.0/20 maxlen: 20
                          93.109.0.0/19 maxlen: 19
                          93.109.0.0/16 maxlen: 24
                          128.0.224.0/20 maxlen: 24
                          213.7.160.0/20 maxlen: 20
                          213.7.176.0/20 maxlen: 20
                          128.0.240.0/20 maxlen: 24
                          213.7.192.0/20 maxlen: 20
                          195.14.128.0/19 maxlen: 24
                          195.14.128.0/20 maxlen: 20
                          213.149.176.0/20 maxlen: 20
                          93.109.96.0/19 maxlen: 19
                          93.109.32.0/19 maxlen: 19
                          213.149.160.0/19 maxlen: 24
                          213.149.160.0/20 maxlen: 20
                          93.109.64.0/19 maxlen: 19
                          213.7.0.0/17 maxlen: 17
                          213.7.0.0/20 maxlen: 20
                          213.7.0.0/16 maxlen: 24
                          213.7.16.0/20 maxlen: 20
                          213.7.32.0/20 maxlen: 20
                          213.7.96.0/20 maxlen: 20
                          213.7.112.0/20 maxlen: 20
                          213.7.128.0/18 maxlen: 18
                          213.7.128.0/20 maxlen: 20
                          128.0.200.0/21 maxlen: 24
                          128.0.208.0/20 maxlen: 24
                          213.7.144.0/20 maxlen: 20
                          128.0.107.0/24 maxlen: 24
                          213.7.48.0/20 maxlen: 20
                          213.7.64.0/20 maxlen: 20
                          213.7.80.0/20 maxlen: 20
                          2a00:1358:1000::/48 maxlen: 48
                          2a00:1358:df00::/48 maxlen: 48
                          2a00:1358::/30 maxlen: 30
                          2a00:1358:f000::/41 maxlen: 41
                          2a00:1358:f080::/41 maxlen: 41
                          2a00:1358:b000::/44 maxlen: 44
                          2a00:1358:f000::/40 maxlen: 40
                          2a00:1358:d000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391908108 (0x175c0b0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan  1 09:53:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13ce2c3ad67a1263f5cf628387e067a9edab20cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:d5:ea:85:58:bd:d4:87:ab:19:f9:94:16:
                    aa:4a:79:f4:85:00:6e:41:54:15:7e:88:8a:1a:15:
                    23:c1:b8:28:56:90:14:e5:13:b1:a4:e4:ff:10:40:
                    6f:a8:ab:7b:45:05:ff:7b:2a:f7:6f:cc:0d:ea:84:
                    40:10:96:82:3a:86:b2:60:8a:91:0c:0f:55:95:a0:
                    d8:96:af:c2:6a:6a:02:fb:44:ac:70:1a:ae:cc:6c:
                    2f:15:6c:51:03:f7:a9:b5:4b:d4:34:ca:1d:27:02:
                    ae:30:b2:e5:a2:39:38:19:af:02:1a:22:96:18:03:
                    63:bd:23:61:51:c7:a1:35:8b:a0:a4:5e:73:86:91:
                    21:dd:c4:10:9e:45:16:9c:7c:c8:5a:4f:63:a1:60:
                    c8:1e:9e:8a:fa:e3:36:96:43:c4:c6:41:1d:f1:a9:
                    99:48:3f:39:83:24:52:09:51:05:59:11:26:21:83:
                    7e:c2:1e:bc:e5:7e:31:3f:89:84:b6:c6:e5:5e:57:
                    8f:bd:d7:7f:ec:29:64:9c:96:17:84:af:0c:63:4f:
                    ea:b6:03:8e:52:ec:4e:f8:93:b1:65:ac:a6:93:41:
                    92:7e:3f:6f:89:80:51:2b:ff:7f:fa:68:4c:ff:2d:
                    06:72:8d:9d:c9:bd:06:5f:68:7a:0e:1d:00:c7:b7:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CE:2C:3A:D6:7A:12:63:F5:CF:62:83:87:E0:67:A9:ED:AB:20:CB
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/E84sOtZ6EmP1z2KDh-Bnqe2rIMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.153.0.0/16
                  46.198.0.0/17
                  46.199.0.0/16
                  62.228.0.0/16
                  81.4.128.0/18
                  83.168.0.0/18
                  87.228.128.0/17
                  93.109.0.0/16
                  128.0.107.0/24
                  128.0.200.0-128.0.255.255
                  176.92.224.0/19
                  185.2.96.0/22
                  195.14.128.0/19
                  212.31.96.0/19
                  213.7.0.0/16
                  213.149.160.0/19
                IPv6:
                  2a00:1358::/30

    Signature Algorithm: sha256WithRSAEncryption
         63:d7:5e:fb:50:f3:00:71:05:f0:3c:6a:25:7e:b7:6f:57:cd:
         9a:f1:eb:1a:d5:95:b3:85:83:91:34:fb:b9:d8:ab:48:03:32:
         1e:a3:49:d5:52:1a:a5:81:c1:81:0d:cf:17:ca:a3:24:68:20:
         29:69:91:07:d4:c8:2f:6f:83:ce:6c:04:0b:fb:bb:9d:ae:4e:
         b6:9b:17:13:4f:83:d3:d3:d2:1a:25:aa:7c:ae:55:da:f5:6c:
         d0:be:f1:30:a7:12:5e:fc:c1:c2:6d:37:7f:39:6d:44:28:cf:
         b4:08:3c:d9:8b:52:c2:c0:bf:50:7a:43:4e:d1:b1:d3:d6:3c:
         b3:60:09:17:c5:27:70:25:83:19:39:84:df:65:7b:1b:3c:a0:
         d8:10:30:3b:5c:f2:97:71:14:44:6a:cb:aa:4b:1b:34:16:89:
         ed:d5:9d:5f:2c:1b:4f:de:d5:f1:04:99:19:6b:ef:8d:2a:bb:
         c3:6d:35:32:fe:62:a5:e5:a0:4a:e1:a0:b4:1e:ce:b4:20:3d:
         99:bb:8e:9f:dd:56:0b:87:7a:4c:6c:39:b9:ca:ec:8b:6a:93:
         df:da:5f:a2:a8:93:d9:a8:cf:09:81:62:4c:4a:24:7b:7e:c9:
         bf:ec:57:37:1f:0d:39:a7:65:04:94:c7:10:3f:36:ac:ee:f6:
         5a:50:c7:ab
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIEF1wLDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDExYWJjNGMwNDY4YWIyODkxZWFhY2FkYmEwZGMwMzc3OTM2ZmQ1MB4XDTIyMDEw
MTA5NTM1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTNjZTJjM2FkNjdh
MTI2M2Y1Y2Y2MjgzODdlMDY3YTllZGFiMjBjYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALiA1eqFWL3Uh6sZ+ZQWqkp59IUAbkFUFX6IihoVI8G4KFaQ
FOUTsaTk/xBAb6ire0UF/3sq92/MDeqEQBCWgjqGsmCKkQwPVZWg2JavwmpqAvtE
rHAarsxsLxVsUQP3qbVL1DTKHScCrjCy5aI5OBmvAhoilhgDY70jYVHHoTWLoKRe
c4aRId3EEJ5FFpx8yFpPY6FgyB6eivrjNpZDxMZBHfGpmUg/OYMkUglRBVkRJiGD
fsIevOV+MT+JhLbG5V5Xj73Xf+wpZJyWF4SvDGNP6rYDjlLsTviTsWWsppNBkn4/
b4mAUSv/f/poTP8tBnKNncm9Bl9oeg4dAMe3iMcCAwEAAaOCAnUwggJxMB0GA1Ud
DgQWBBQTziw61noSY/XPYoOH4Gep7asgyzAfBgNVHSMEGDAWgBTUEavEwEaKsoke
qsrboNwDd5Nv1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFCR3J4TUJHaXJLSkhxcksyNkRjQTNlVGI5VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvNjE4ZTUzLWFmYzQtNDBkZi04NjEyLWIwZjRiOWMzN2U0OS8x
L0U4NHNPdFo2RW1QMXoyS0RoLUJucWUycklNcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
NjE4ZTUzLWFmYzQtNDBkZi04NjEyLWIwZjRiOWMzN2U0OS8xLzFCR3J4TUJHaXJL
SkhxcksyNkRjQTNlVGI5VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
igYIKwYBBQUHAQcBAf8EezB5MGgEAgABMGIDAwAfmQMEBy7GAAMDAC7HAwMAPuQD
BAZRBIADBAZTqAADBAdX5IADAwBdbQMEAIAAazALAwQDgADIAwMAgAADBAWwXOAD
BAK5AmADBAXDDoADBAXUH2ADAwDVBwMEBdWVoDANBAIAAjAHAwUCKgATWDANBgkq
hkiG9w0BAQsFAAOCAQEAY9de+1DzAHEF8DxqJX63b1fNmvHrGtWVs4WDkTT7udir
SAMyHqNJ1VIapYHBgQ3PF8qjJGggKWmRB9TIL2+DzmwEC/u7na5OtpsXE0+D09PS
GiWqfK5V2vVs0L7xMKcSXvzBwm03fzltRCjPtAg82YtSwsC/UHpDTtGx09Y8s2AJ
F8UncCWDGTmE32V7Gzyg2BAwO1zyl3EURGrLqksbNBaJ7dWdXywbT97V8QSZGWvv
jSq7w201Mv5ipeWgSuGgtB7OtCA9mbuOn91WC4d6TGw5ucrsi2qT39pfoqiT2ajP
CYFiTEoke37Jv+xXNx8NOadlBJTHED82rO72WlDHqw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-ams.rpki-client.org