Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/dZAt2LmtP7MQCOy6ux_lGZl0BeE.roa
File:                     dZAt2LmtP7MQCOy6ux_lGZl0BeE.roa (raw, json)
Hash identifier:          mD/3OHSgbsN6za5tkpm+Pqdazg9eyXIId60rCUj2FP4=
Subject key identifier:   75:90:2D:D8:B9:AD:3F:B3:10:08:EC:BA:BB:1F:E5:19:99:74:05:E1
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       0C2FF0DE
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/dZAt2LmtP7MQCOy6ux_lGZl0BeE.roa
Signing time:             Sat 01 Jan 2022 06:54:03 +0000
ROA not before:           Sat 01 Jan 2022 06:54:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42910
IP address blocks:        188.132.135.0/24 maxlen: 32
                          188.132.134.0/24 maxlen: 24
                          188.132.142.0/24 maxlen: 24
                          188.132.147.0/24 maxlen: 32
                          188.132.148.0/24 maxlen: 24
                          188.132.153.0/24 maxlen: 24
                          188.132.158.0/24 maxlen: 32
                          188.132.157.0/24 maxlen: 24
                          188.132.216.0/24 maxlen: 24
                          188.132.215.0/24 maxlen: 24
                          188.132.214.0/24 maxlen: 24
                          188.132.219.0/24 maxlen: 32
                          188.132.217.0/24 maxlen: 32
                          188.132.218.0/24 maxlen: 24
                          188.132.224.0/24 maxlen: 24
                          188.132.226.0/24 maxlen: 32
                          188.132.225.0/24 maxlen: 24
                          188.132.223.0/24 maxlen: 32
                          188.132.220.0/24 maxlen: 24
                          188.132.227.0/24 maxlen: 32
                          188.132.231.0/24 maxlen: 24
                          188.132.229.0/24 maxlen: 32
                          188.132.228.0/24 maxlen: 32
                          188.132.233.0/24 maxlen: 24
                          188.132.232.0/24 maxlen: 24
                          188.132.230.0/24 maxlen: 32
                          77.92.130.0/24 maxlen: 24
                          77.92.129.0/24 maxlen: 24
                          77.92.128.0/24 maxlen: 24
                          188.132.235.0/24 maxlen: 24
                          77.92.132.0/24 maxlen: 24
                          188.132.239.0/24 maxlen: 24
                          77.92.131.0/24 maxlen: 24
                          188.132.234.0/24 maxlen: 32
                          77.92.133.0/24 maxlen: 32
                          188.132.241.0/24 maxlen: 24
                          77.92.137.0/24 maxlen: 24
                          77.92.136.0/24 maxlen: 24
                          188.132.243.0/24 maxlen: 24
                          188.132.246.0/24 maxlen: 24
                          188.132.244.0/24 maxlen: 32
                          77.92.135.0/24 maxlen: 24
                          77.92.134.0/24 maxlen: 24
                          77.92.139.0/24 maxlen: 24
                          77.92.138.0/24 maxlen: 24
                          188.132.242.0/24 maxlen: 32
                          188.132.250.0/24 maxlen: 24
                          188.132.251.0/24 maxlen: 24
                          77.92.143.0/24 maxlen: 24
                          77.92.142.0/24 maxlen: 24
                          77.92.141.0/24 maxlen: 24
                          188.132.253.0/24 maxlen: 24
                          77.92.144.0/24 maxlen: 32
                          188.132.252.0/24 maxlen: 24
                          77.92.140.0/24 maxlen: 32
                          77.92.149.0/24 maxlen: 24
                          77.92.148.0/24 maxlen: 24
                          188.132.255.0/24 maxlen: 24
                          188.132.254.0/24 maxlen: 24
                          77.92.146.0/24 maxlen: 24
                          77.92.158.0/24 maxlen: 24
                          77.92.155.0/24 maxlen: 32
                          77.92.159.0/24 maxlen: 24
                          77.92.157.0/24 maxlen: 32
                          188.132.172.0/24 maxlen: 24
                          188.132.175.0/24 maxlen: 24
                          188.132.176.0/24 maxlen: 32
                          188.132.177.0/24 maxlen: 24
                          188.132.184.0/24 maxlen: 24
                          188.132.183.0/24 maxlen: 32
                          188.132.180.0/24 maxlen: 24
                          188.132.190.0/24 maxlen: 24
                          188.132.195.0/24 maxlen: 24
                          188.132.194.0/24 maxlen: 24
                          188.132.204.0/24 maxlen: 32
                          188.132.200.0/24 maxlen: 24
                          188.132.205.0/24 maxlen: 32
                          188.132.206.0/24 maxlen: 24
                          188.132.210.0/24 maxlen: 24
                          188.132.211.0/24 maxlen: 32
                          188.132.207.0/24 maxlen: 24
                          188.132.208.0/24 maxlen: 32
                          188.132.213.0/24 maxlen: 24
                          188.132.212.0/24 maxlen: 24
                          212.68.55.0/24 maxlen: 24
                          212.68.57.0/24 maxlen: 32
                          212.68.56.0/24 maxlen: 32
                          212.68.61.0/24 maxlen: 32
                          31.210.33.0/24 maxlen: 24
                          31.210.32.0/24 maxlen: 24
                          31.210.36.0/24 maxlen: 24
                          31.210.35.0/24 maxlen: 24
                          31.210.44.0/24 maxlen: 24
                          31.210.40.0/24 maxlen: 32
                          31.210.41.0/24 maxlen: 24
                          31.210.48.0/24 maxlen: 24
                          31.210.46.0/24 maxlen: 24
                          31.210.47.0/24 maxlen: 24
                          31.210.51.0/24 maxlen: 32
                          31.210.50.0/24 maxlen: 32
                          31.210.45.0/24 maxlen: 32
                          31.210.49.0/24 maxlen: 24
                          31.210.58.0/24 maxlen: 24
                          31.210.57.0/24 maxlen: 24
                          31.210.56.0/24 maxlen: 24
                          31.210.59.0/24 maxlen: 24
                          31.210.61.0/24 maxlen: 32
                          78.135.98.0/24 maxlen: 24
                          78.135.103.0/24 maxlen: 24
                          78.135.99.0/24 maxlen: 32
                          78.135.108.0/24 maxlen: 32
                          78.135.113.0/24 maxlen: 32
                          78.135.116.0/24 maxlen: 24
                          78.135.115.0/24 maxlen: 24
                          78.135.114.0/24 maxlen: 32
                          212.68.32.0/24 maxlen: 32
                          212.68.37.0/24 maxlen: 32
                          212.68.33.0/24 maxlen: 32
                          212.68.38.0/24 maxlen: 24
                          212.68.36.0/24 maxlen: 32
                          212.68.41.0/24 maxlen: 32
                          212.68.40.0/24 maxlen: 32
                          212.68.43.0/24 maxlen: 32
                          212.68.44.0/24 maxlen: 24
                          212.68.42.0/24 maxlen: 32
                          212.68.39.0/24 maxlen: 24
                          212.68.45.0/24 maxlen: 32
                          212.68.46.0/24 maxlen: 32
                          212.68.49.0/24 maxlen: 24
                          212.68.48.0/24 maxlen: 24
                          212.68.50.0/24 maxlen: 32
                          212.68.51.0/24 maxlen: 24
                          78.135.79.0/24 maxlen: 24
                          2a02:26b0:8001::/48 maxlen: 48
                          2a02:26b0::/32 maxlen: 32
                          2a02:26b0:8000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204468446 (0xc2ff0de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: Jan  1 06:54:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75902dd8b9ad3fb31008ecbabb1fe519997405e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:ae:12:41:b1:a5:b6:5b:a4:bc:a2:cd:60:
                    4c:87:28:5b:db:06:38:83:5f:06:ea:16:bc:8c:dc:
                    c2:5b:3c:8f:32:fa:44:f7:53:b0:59:4a:ae:72:fa:
                    5b:84:26:71:eb:35:81:23:2a:ff:02:78:d0:a9:7b:
                    7e:ed:54:d7:df:f7:c6:55:00:d0:dc:8e:b8:f7:1a:
                    fe:02:8c:7d:18:b8:81:d7:f6:cc:a8:9f:d5:71:3e:
                    0d:24:ba:6b:63:c0:72:d9:e4:5d:c8:5f:a4:ea:6a:
                    b4:6e:3e:8f:99:6a:f6:b1:36:00:7f:e1:d3:cc:70:
                    f2:41:7e:e6:ec:48:13:d4:1c:b0:89:97:2d:3d:37:
                    fc:1f:a4:a1:09:4c:68:09:5d:bd:bc:c7:a1:0e:23:
                    6e:4a:6b:76:00:5f:3f:65:e0:ab:5f:cc:e5:ac:5a:
                    e2:13:85:ba:49:82:8f:67:d2:be:05:b1:3a:25:a3:
                    29:bd:a5:f6:2d:03:af:bc:29:1b:98:72:2e:53:3b:
                    27:64:63:a8:3c:a9:48:0d:9a:1d:b1:07:32:c8:a1:
                    ef:1d:2a:00:de:2e:62:e8:51:9a:8f:c7:dc:07:b1:
                    3a:2e:c2:4e:09:f5:54:da:4e:26:49:44:af:39:67:
                    1c:dd:c0:ff:97:61:54:ac:83:7c:a1:14:5b:83:bb:
                    18:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:90:2D:D8:B9:AD:3F:B3:10:08:EC:BA:BB:1F:E5:19:99:74:05:E1
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/dZAt2LmtP7MQCOy6ux_lGZl0BeE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.32.0/23
                  31.210.35.0-31.210.36.255
                  31.210.40.0/23
                  31.210.44.0-31.210.51.255
                  31.210.56.0/22
                  31.210.61.0/24
                  77.92.128.0-77.92.144.255
                  77.92.146.0/24
                  77.92.148.0/23
                  77.92.155.0/24
                  77.92.157.0-77.92.159.255
                  78.135.79.0/24
                  78.135.98.0/23
                  78.135.103.0/24
                  78.135.108.0/24
                  78.135.113.0-78.135.116.255
                  188.132.134.0/23
                  188.132.142.0/24
                  188.132.147.0-188.132.148.255
                  188.132.153.0/24
                  188.132.157.0-188.132.158.255
                  188.132.172.0/24
                  188.132.175.0-188.132.177.255
                  188.132.180.0/24
                  188.132.183.0-188.132.184.255
                  188.132.190.0/24
                  188.132.194.0/23
                  188.132.200.0/24
                  188.132.204.0-188.132.208.255
                  188.132.210.0-188.132.220.255
                  188.132.223.0-188.132.235.255
                  188.132.239.0/24
                  188.132.241.0-188.132.244.255
                  188.132.246.0/24
                  188.132.250.0-188.132.255.255
                  212.68.32.0/23
                  212.68.36.0-212.68.46.255
                  212.68.48.0/22
                  212.68.55.0-212.68.57.255
                  212.68.61.0/24
                IPv6:
                  2a02:26b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:c7:ba:7b:95:e6:b3:6e:4c:3e:7e:82:69:29:29:fd:af:03:
         cd:d4:03:65:7e:40:49:13:05:1d:b5:a8:d1:6b:2f:55:1b:c6:
         dd:61:2c:ae:e5:8a:ea:59:db:3b:8e:18:ef:dc:42:06:f0:2b:
         56:3f:91:e8:57:4f:58:1c:ac:a3:a6:20:7c:34:53:1e:c9:3c:
         17:4b:7d:81:79:aa:a2:39:cf:8e:0e:ba:f8:dc:3f:3c:0f:ab:
         38:f4:a8:87:37:38:05:c8:08:96:89:2f:ad:1c:3f:82:66:87:
         d4:57:b9:6d:04:44:5f:ed:6e:fa:2b:44:7e:79:50:7a:53:b8:
         43:fa:63:cc:3d:ad:05:7e:f0:c1:d8:85:29:e2:0c:2b:99:1c:
         f8:a5:81:a0:da:90:98:84:74:15:0a:d4:09:43:b3:28:e7:a0:
         72:68:9a:07:e5:dc:4f:0c:fc:c5:ce:36:32:99:05:1e:07:bb:
         8f:4a:2a:5c:18:b7:03:84:10:b8:08:98:41:58:da:e6:03:2e:
         33:d1:24:03:f5:b6:92:b2:f7:2a:3c:7e:15:fd:8a:45:e8:19:
         d7:18:f6:71:25:cd:63:f4:12:4a:02:36:e2:3d:62:e4:5d:13:
         c3:5f:de:c8:aa:41:5b:1c:08:32:c1:2b:59:ff:0b:b6:14:65:
         ad:a2:95:72
-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgIEDC/w3jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NGEyYjhlOTBkMTU3ZWEwMjJmOGU3MDAwMjRhOTNkYzM1NmE1MTRkMB4XDTIyMDEw
MTA2NTQwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzU5MDJkZDhiOWFk
M2ZiMzEwMDhlY2JhYmIxZmU1MTk5OTc0MDVlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALTyrhJBsaW2W6S8os1gTIcoW9sGOINfBuoWvIzcwls8jzL6
RPdTsFlKrnL6W4Qmces1gSMq/wJ40Kl7fu1U19/3xlUA0NyOuPca/gKMfRi4gdf2
zKif1XE+DSS6a2PActnkXchfpOpqtG4+j5lq9rE2AH/h08xw8kF+5uxIE9QcsImX
LT03/B+koQlMaAldvbzHoQ4jbkprdgBfP2Xgq1/M5axa4hOFukmCj2fSvgWxOiWj
Kb2l9i0Dr7wpG5hyLlM7J2RjqDypSA2aHbEHMsih7x0qAN4uYuhRmo/H3AexOi7C
Tgn1VNpOJklErzlnHN3A/5dhVKyDfKEUW4O7GO8CAwEAAaOCA4swggOHMB0GA1Ud
DgQWBBR1kC3Yua0/sxAI7Lq7H+UZmXQF4TAfBgNVHSMEGDAWgBTkorjpDRV+oCL4
5wACSpPcNWpRTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVLSzQ2UTBWZnFBaS1PY0FBa3FUM0RWcVVVMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTcvNjk5ZTg1LTEwMjctNGM3ZS04YWU3LWRmNGEyZTc2MGNjYi8x
L2RaQXQyTG10UDdNUUNPeTZ1eF9sR1psMEJlRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcv
Njk5ZTg1LTEwMjctNGM3ZS04YWU3LWRmNGEyZTc2MGNjYi8xLzVLSzQ2UTBWZnFB
aS1PY0FBa3FUM0RWcVVVMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AZ8GCCsGAQUFBwEHAQH/BIIBjjCCAYowggF3BAIAATCCAW8DBAEf0iAwDAMEAB/S
IwMEAB/SJAMEAR/SKDAMAwQCH9IsAwQCH9IwAwQCH9I4AwQAH9I9MAwDBAdNXIAD
BABNXJADBABNXJIDBAFNXJQDBABNXJswDAMEAE1cnQMEBU1cgAMEAE6HTwMEAU6H
YgMEAE6HZwMEAE6HbDAMAwQATodxAwQATod0AwQBvISGAwQAvISOMAwDBAC8hJMD
BAC8hJQDBAC8hJkwDAMEALyEnQMEALyEngMEALyErDAMAwQAvISvAwQBvISwAwQA
vIS0MAwDBAC8hLcDBAC8hLgDBAC8hL4DBAG8hMIDBAC8hMgwDAMEAryEzAMEALyE
0DAMAwQBvITSAwQAvITcMAwDBAC8hN8DBAK8hOgDBAC8hO8wDAMEALyE8QMEALyE
9AMEALyE9jALAwQBvIT6AwMAvIQDBAHURCAwDAMEAtREJAMEANRELgMEAtREMDAM
AwQA1EQ3AwQB1EQ4AwQA1EQ9MA0EAgACMAcDBQAqAiawMA0GCSqGSIb3DQEBCwUA
A4IBAQDWx7p7leazbkw+foJpKSn9rwPN1ANlfkBJEwUdtajRay9VG8bdYSyu5Yrq
Wds7jhjv3EIG8CtWP5HoV09YHKyjpiB8NFMeyTwXS32BeaqiOc+ODrr43D88D6s4
9KiHNzgFyAiWiS+tHD+CZofUV7ltBERf7W76K0R+eVB6U7hD+mPMPa0FfvDB2IUp
4gwrmRz4pYGg2pCYhHQVCtQJQ7Mo56ByaJoH5dxPDPzFzjYymQUeB7uPSipcGLcD
hBC4CJhBWNrmAy4z0SQD9baSsvcqPH4V/YpF6BnXGPZxJc1j9BJKAjbiPWLkXRPD
X97IqkFbHAgywStZ/wu2FGWtopVy
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:30 2023 by rpki-client on console-ams.rpki-client.org