Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/H2jGqQ01pUs1_k-nVBOOp5ak53g.roa
File:                     H2jGqQ01pUs1_k-nVBOOp5ak53g.roa (raw, json)
Hash identifier:          fQ/nIe4bdlF/PoCkmbo9xCbxDXuTGGbNm3mjB92A5SE=
Subject key identifier:   1F:68:C6:A9:0D:35:A5:4B:35:FE:4F:A7:54:13:8E:A7:96:A4:E7:78
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       18DA188E
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/H2jGqQ01pUs1_k-nVBOOp5ak53g.roa
Signing time:             Thu 16 Jun 2022 06:27:45 +0000
ROA not before:           Thu 16 Jun 2022 06:27:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6866
IP address blocks:        87.228.128.0/17 maxlen: 24
                          62.228.128.0/19 maxlen: 19
                          87.228.128.0/18 maxlen: 18
                          87.228.144.0/20 maxlen: 20
                          62.228.64.0/19 maxlen: 19
                          62.228.96.0/19 maxlen: 19
                          62.228.226.0/23 maxlen: 23
                          87.228.224.0/20 maxlen: 20
                          62.228.224.0/19 maxlen: 19
                          87.228.224.0/19 maxlen: 19
                          62.228.228.0/24 maxlen: 24
                          62.228.229.0/24 maxlen: 24
                          62.228.240.0/23 maxlen: 23
                          87.228.240.0/20 maxlen: 20
                          83.168.0.0/19 maxlen: 19
                          83.168.0.0/18 maxlen: 24
                          62.228.160.0/19 maxlen: 19
                          87.228.160.0/20 maxlen: 20
                          87.228.176.0/20 maxlen: 20
                          87.228.192.0/20 maxlen: 20
                          62.228.192.0/19 maxlen: 19
                          83.168.32.0/19 maxlen: 19
                          87.228.208.0/20 maxlen: 20
                          31.153.128.0/19 maxlen: 19
                          176.92.224.0/19 maxlen: 24
                          31.153.160.0/19 maxlen: 19
                          31.153.96.0/19 maxlen: 19
                          62.228.0.0/19 maxlen: 19
                          62.228.0.0/21 maxlen: 21
                          62.228.0.0/16 maxlen: 24
                          62.228.8.0/21 maxlen: 21
                          62.228.16.0/22 maxlen: 22
                          62.228.20.0/22 maxlen: 22
                          62.228.24.0/21 maxlen: 21
                          62.228.32.0/19 maxlen: 19
                          31.153.192.0/19 maxlen: 19
                          31.153.224.0/19 maxlen: 19
                          212.31.96.0/20 maxlen: 20
                          212.31.96.0/24 maxlen: 24
                          212.31.96.0/19 maxlen: 24
                          212.31.112.0/20 maxlen: 20
                          81.4.128.0/18 maxlen: 24
                          81.4.128.0/19 maxlen: 19
                          212.31.121.0/24 maxlen: 24
                          212.31.122.0/24 maxlen: 24
                          212.31.123.0/24 maxlen: 24
                          212.31.124.0/24 maxlen: 24
                          212.31.125.0/24 maxlen: 24
                          81.4.133.0/24 maxlen: 24
                          212.31.127.0/24 maxlen: 24
                          31.153.16.0/20 maxlen: 20
                          31.153.32.0/19 maxlen: 19
                          31.153.64.0/19 maxlen: 19
                          81.4.160.0/19 maxlen: 19
                          81.4.160.0/21 maxlen: 21
                          81.4.160.0/20 maxlen: 20
                          81.4.168.0/21 maxlen: 21
                          81.4.174.0/24 maxlen: 24
                          81.4.176.0/21 maxlen: 21
                          31.153.0.0/17 maxlen: 17
                          31.153.0.0/20 maxlen: 20
                          31.153.0.0/19 maxlen: 19
                          31.153.0.0/16 maxlen: 24
                          46.199.0.0/18 maxlen: 18
                          46.199.0.0/19 maxlen: 19
                          46.199.0.0/16 maxlen: 24
                          46.199.16.0/20 maxlen: 20
                          46.199.32.0/19 maxlen: 19
                          46.199.32.0/20 maxlen: 20
                          46.199.48.0/20 maxlen: 20
                          46.199.64.0/20 maxlen: 20
                          46.199.88.0/24 maxlen: 24
                          46.198.32.0/19 maxlen: 19
                          46.198.64.0/19 maxlen: 19
                          46.198.64.0/18 maxlen: 18
                          46.198.0.0/18 maxlen: 18
                          46.198.0.0/19 maxlen: 19
                          46.198.0.0/17 maxlen: 24
                          46.198.96.0/19 maxlen: 19
                          93.109.192.0/19 maxlen: 19
                          93.109.209.0/24 maxlen: 24
                          93.109.219.0/24 maxlen: 24
                          93.109.224.0/19 maxlen: 19
                          93.109.128.0/19 maxlen: 19
                          93.109.160.0/19 maxlen: 19
                          185.2.97.0/24 maxlen: 24
                          185.2.98.0/24 maxlen: 24
                          185.2.96.0/22 maxlen: 24
                          185.2.96.0/24 maxlen: 24
                          185.2.99.0/24 maxlen: 24
                          93.109.227.0/24 maxlen: 24
                          93.109.239.0/24 maxlen: 24
                          213.7.208.0/24 maxlen: 24
                          195.14.142.0/24 maxlen: 24
                          195.14.144.0/20 maxlen: 20
                          213.7.208.0/20 maxlen: 20
                          195.14.151.0/24 maxlen: 24
                          195.14.146.0/24 maxlen: 24
                          213.7.220.0/22 maxlen: 22
                          213.7.224.0/20 maxlen: 20
                          195.14.153.0/24 maxlen: 24
                          213.7.240.0/20 maxlen: 20
                          93.109.0.0/19 maxlen: 19
                          93.109.0.0/16 maxlen: 24
                          128.0.224.0/20 maxlen: 24
                          213.7.160.0/20 maxlen: 20
                          213.7.176.0/20 maxlen: 20
                          128.0.240.0/20 maxlen: 24
                          213.7.192.0/20 maxlen: 20
                          195.14.128.0/19 maxlen: 24
                          195.14.128.0/20 maxlen: 20
                          213.149.176.0/20 maxlen: 20
                          93.109.96.0/19 maxlen: 19
                          93.109.32.0/19 maxlen: 19
                          213.149.160.0/19 maxlen: 24
                          213.149.160.0/20 maxlen: 20
                          93.109.64.0/19 maxlen: 19
                          213.7.0.0/17 maxlen: 17
                          213.7.0.0/20 maxlen: 20
                          213.7.0.0/16 maxlen: 24
                          213.7.16.0/20 maxlen: 20
                          213.7.32.0/20 maxlen: 20
                          213.7.96.0/20 maxlen: 20
                          213.7.112.0/20 maxlen: 20
                          213.7.128.0/18 maxlen: 18
                          213.7.128.0/20 maxlen: 20
                          128.0.200.0/21 maxlen: 24
                          128.0.208.0/20 maxlen: 24
                          37.149.0.0/16 maxlen: 24
                          213.7.144.0/20 maxlen: 20
                          128.0.107.0/24 maxlen: 24
                          213.7.48.0/20 maxlen: 20
                          213.7.64.0/20 maxlen: 20
                          213.7.80.0/20 maxlen: 20
                          2a00:1358:df00::/48 maxlen: 48
                          2a00:1358:1000::/48 maxlen: 48
                          2a00:1358::/30 maxlen: 30
                          2a00:1358:f080::/41 maxlen: 41
                          2a00:1358:f000::/41 maxlen: 41
                          2a00:1358:b000::/44 maxlen: 44
                          2a00:1358:d000::/40 maxlen: 40
                          2a00:1358:f000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416946318 (0x18da188e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jun 16 06:27:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1f68c6a90d35a54b35fe4fa754138ea796a4e778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:a7:cd:25:44:e1:e4:bd:e6:c4:aa:f2:cb:
                    c3:61:5b:cb:a7:f8:c7:3e:dc:a6:ad:21:63:e0:10:
                    69:d9:b7:7c:29:34:9a:b8:dd:84:18:8d:d9:55:23:
                    08:38:ec:db:ad:bc:ca:73:24:df:19:7a:3b:45:03:
                    d1:4e:1f:4f:db:e1:c0:a2:7e:37:26:41:fb:90:ee:
                    33:de:ea:11:ab:12:b5:94:d4:39:8f:6c:0d:14:41:
                    2c:24:29:d1:0a:e0:1c:5b:86:9c:4a:76:88:90:c5:
                    c0:21:f2:3c:c8:d2:33:2e:35:e4:f6:35:70:78:58:
                    bd:91:2a:bd:30:ac:2f:59:88:b9:b7:5f:5e:93:d2:
                    6e:ae:07:fe:a0:4b:01:b7:ec:e1:0a:4c:53:87:e1:
                    54:52:b6:28:ea:cc:f1:2a:49:3d:70:e2:fb:16:c8:
                    7c:7b:af:63:ff:fc:89:40:10:f2:ed:67:f4:0d:4e:
                    29:69:30:bb:cd:1d:ce:8a:15:fe:f7:da:a2:85:02:
                    99:34:5a:0d:18:7a:bc:2a:de:8e:90:da:a5:1e:60:
                    c8:00:ad:34:46:c7:22:57:3e:44:ab:21:9d:d5:c5:
                    57:4b:0d:e6:91:2b:e8:c3:63:fb:e2:47:15:77:10:
                    77:5b:ad:90:e0:2f:ec:a1:4c:61:50:e0:6c:35:bb:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:68:C6:A9:0D:35:A5:4B:35:FE:4F:A7:54:13:8E:A7:96:A4:E7:78
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/H2jGqQ01pUs1_k-nVBOOp5ak53g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.153.0.0/16
                  37.149.0.0/16
                  46.198.0.0/17
                  46.199.0.0/16
                  62.228.0.0/16
                  81.4.128.0/18
                  83.168.0.0/18
                  87.228.128.0/17
                  93.109.0.0/16
                  128.0.107.0/24
                  128.0.200.0-128.0.255.255
                  176.92.224.0/19
                  185.2.96.0/22
                  195.14.128.0/19
                  212.31.96.0/19
                  213.7.0.0/16
                  213.149.160.0/19
                IPv6:
                  2a00:1358::/30

    Signature Algorithm: sha256WithRSAEncryption
         25:d2:10:4e:20:ca:3b:bf:40:86:09:cd:12:46:76:ef:9e:ba:
         b9:f3:45:3f:2e:68:11:87:a3:09:df:f1:97:56:be:f4:49:79:
         66:11:03:eb:bc:eb:d6:81:7d:d2:19:87:f0:8c:12:bd:dd:e9:
         6d:e7:9c:bb:72:e6:56:cf:0d:de:87:7d:0c:7d:49:ab:fc:ce:
         64:8f:01:2b:5d:ca:0c:06:eb:92:2c:0c:63:32:b9:10:2e:ab:
         43:aa:05:13:09:15:cb:f1:24:d5:11:0c:35:70:52:e5:b7:be:
         04:26:e3:38:69:ba:fa:39:77:7f:64:dd:8e:7d:df:da:a8:91:
         ba:71:80:d9:de:e8:49:2e:6b:fe:ba:0a:ba:0b:3e:01:c0:e4:
         ca:0b:94:9a:b2:b8:b8:de:da:74:2f:35:39:0e:9a:65:4c:a1:
         1d:f5:c2:a8:35:3f:e8:17:34:c1:09:82:9e:ba:c1:9b:39:74:
         6d:79:5d:00:de:50:f6:8b:79:75:d9:20:59:d9:a8:e3:c5:de:
         53:c1:1c:cc:01:dd:72:8f:c0:f0:6f:5f:6f:62:7b:eb:77:4e:
         a9:8b:f8:6b:2b:bc:5f:21:64:b2:f7:03:55:a9:e4:d0:cc:77:
         68:1b:c9:40:c4:48:33:c9:47:f1:e2:5c:62:26:be:cf:b6:4e:
         4a:61:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org