Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/jfc6o5pZZFkcTQP4yIH1tfrJZ8k.roa
File:                     jfc6o5pZZFkcTQP4yIH1tfrJZ8k.roa (raw, json)
Hash identifier:          uuhMnB1yKya22E1X3+LGCox9gsPRyuSqR0KR/ZLAHe8=
Subject key identifier:   8D:F7:3A:A3:9A:59:64:59:1C:4D:03:F8:C8:81:F5:B5:FA:C9:67:C9
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       0184717E76DC133D132E7C9FF3E7DA47A5CE
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/jfc6o5pZZFkcTQP4yIH1tfrJZ8k.roa
Signing time:             Sun 13 Nov 2022 14:57:04 +0000
ROA not before:           Sun 13 Nov 2022 14:57:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42910
IP address blocks:        188.132.135.0/24 maxlen: 32
                          188.132.134.0/24 maxlen: 24
                          188.132.142.0/24 maxlen: 24
                          188.132.147.0/24 maxlen: 32
                          188.132.148.0/24 maxlen: 24
                          188.132.153.0/24 maxlen: 24
                          188.132.158.0/24 maxlen: 32
                          188.132.157.0/24 maxlen: 24
                          188.132.216.0/24 maxlen: 24
                          188.132.215.0/24 maxlen: 24
                          188.132.214.0/24 maxlen: 24
                          188.132.219.0/24 maxlen: 32
                          188.132.217.0/24 maxlen: 32
                          188.132.218.0/24 maxlen: 24
                          188.132.224.0/24 maxlen: 24
                          188.132.226.0/24 maxlen: 32
                          188.132.225.0/24 maxlen: 24
                          188.132.223.0/24 maxlen: 32
                          188.132.220.0/24 maxlen: 24
                          188.132.227.0/24 maxlen: 32
                          188.132.231.0/24 maxlen: 24
                          188.132.229.0/24 maxlen: 32
                          188.132.228.0/24 maxlen: 32
                          188.132.233.0/24 maxlen: 24
                          188.132.232.0/24 maxlen: 24
                          188.132.230.0/24 maxlen: 32
                          77.92.130.0/24 maxlen: 24
                          77.92.129.0/24 maxlen: 24
                          77.92.128.0/24 maxlen: 24
                          188.132.235.0/24 maxlen: 24
                          77.92.132.0/24 maxlen: 24
                          188.132.239.0/24 maxlen: 24
                          77.92.131.0/24 maxlen: 24
                          188.132.234.0/24 maxlen: 32
                          188.132.241.0/24 maxlen: 24
                          77.92.133.0/24 maxlen: 32
                          77.92.137.0/24 maxlen: 24
                          77.92.136.0/24 maxlen: 24
                          77.92.135.0/24 maxlen: 24
                          188.132.243.0/24 maxlen: 24
                          188.132.246.0/24 maxlen: 24
                          188.132.245.0/24 maxlen: 24
                          188.132.244.0/24 maxlen: 32
                          77.92.134.0/24 maxlen: 24
                          77.92.139.0/24 maxlen: 24
                          77.92.138.0/24 maxlen: 24
                          188.132.242.0/24 maxlen: 32
                          188.132.250.0/24 maxlen: 24
                          188.132.251.0/24 maxlen: 24
                          77.92.143.0/24 maxlen: 24
                          77.92.142.0/24 maxlen: 24
                          77.92.141.0/24 maxlen: 24
                          188.132.253.0/24 maxlen: 24
                          77.92.144.0/24 maxlen: 32
                          188.132.252.0/24 maxlen: 24
                          77.92.140.0/24 maxlen: 32
                          77.92.149.0/24 maxlen: 24
                          77.92.148.0/24 maxlen: 24
                          188.132.255.0/24 maxlen: 24
                          188.132.254.0/24 maxlen: 24
                          77.92.146.0/24 maxlen: 24
                          77.92.158.0/24 maxlen: 24
                          77.92.156.0/24 maxlen: 24
                          77.92.155.0/24 maxlen: 32
                          77.92.159.0/24 maxlen: 24
                          77.92.157.0/24 maxlen: 32
                          188.132.172.0/24 maxlen: 24
                          188.132.175.0/24 maxlen: 24
                          188.132.176.0/24 maxlen: 32
                          188.132.177.0/24 maxlen: 24
                          188.132.184.0/24 maxlen: 24
                          188.132.183.0/24 maxlen: 32
                          188.132.180.0/24 maxlen: 24
                          188.132.190.0/24 maxlen: 24
                          188.132.195.0/24 maxlen: 24
                          188.132.194.0/24 maxlen: 24
                          188.132.204.0/24 maxlen: 32
                          188.132.200.0/24 maxlen: 24
                          188.132.205.0/24 maxlen: 32
                          188.132.206.0/24 maxlen: 24
                          188.132.210.0/24 maxlen: 24
                          188.132.211.0/24 maxlen: 32
                          188.132.207.0/24 maxlen: 24
                          188.132.208.0/24 maxlen: 32
                          188.132.213.0/24 maxlen: 24
                          188.132.212.0/24 maxlen: 24
                          212.68.55.0/24 maxlen: 24
                          212.68.57.0/24 maxlen: 32
                          212.68.56.0/24 maxlen: 32
                          212.68.61.0/24 maxlen: 32
                          31.210.33.0/24 maxlen: 24
                          31.210.32.0/24 maxlen: 24
                          31.210.36.0/24 maxlen: 24
                          31.210.35.0/24 maxlen: 24
                          31.210.44.0/24 maxlen: 24
                          31.210.40.0/24 maxlen: 32
                          31.210.41.0/24 maxlen: 24
                          31.210.48.0/24 maxlen: 24
                          31.210.46.0/24 maxlen: 24
                          31.210.47.0/24 maxlen: 24
                          31.210.51.0/24 maxlen: 32
                          31.210.50.0/24 maxlen: 32
                          31.210.45.0/24 maxlen: 32
                          31.210.49.0/24 maxlen: 24
                          31.210.58.0/24 maxlen: 24
                          31.210.57.0/24 maxlen: 24
                          31.210.56.0/24 maxlen: 24
                          31.210.59.0/24 maxlen: 24
                          31.210.61.0/24 maxlen: 32
                          78.135.98.0/24 maxlen: 24
                          78.135.103.0/24 maxlen: 24
                          78.135.99.0/24 maxlen: 32
                          78.135.108.0/24 maxlen: 32
                          78.135.113.0/24 maxlen: 32
                          78.135.116.0/24 maxlen: 24
                          78.135.115.0/24 maxlen: 24
                          78.135.114.0/24 maxlen: 32
                          212.68.32.0/24 maxlen: 32
                          212.68.37.0/24 maxlen: 32
                          212.68.33.0/24 maxlen: 32
                          212.68.38.0/24 maxlen: 24
                          212.68.36.0/24 maxlen: 32
                          212.68.41.0/24 maxlen: 32
                          212.68.40.0/24 maxlen: 32
                          212.68.43.0/24 maxlen: 32
                          212.68.44.0/24 maxlen: 24
                          212.68.42.0/24 maxlen: 32
                          212.68.39.0/24 maxlen: 24
                          212.68.45.0/24 maxlen: 32
                          212.68.46.0/24 maxlen: 32
                          212.68.49.0/24 maxlen: 24
                          212.68.48.0/24 maxlen: 24
                          212.68.50.0/24 maxlen: 32
                          212.68.51.0/24 maxlen: 24
                          78.135.79.0/24 maxlen: 24
                          2a02:26b0:8001::/48 maxlen: 48
                          2a02:26b0::/32 maxlen: 32
                          2a02:26b0:8000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:71:7e:76:dc:13:3d:13:2e:7c:9f:f3:e7:da:47:a5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: Nov 13 14:57:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8df73aa39a5964591c4d03f8c881f5b5fac967c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:32:2e:ee:02:7f:ac:50:00:8b:94:2d:6b:
                    d2:8c:97:eb:28:fc:81:2e:8e:1f:82:e7:54:c4:e6:
                    e0:7f:cb:d4:53:fa:19:f0:39:31:cf:a7:62:02:bc:
                    b7:89:9d:78:c0:6b:19:04:c8:01:d6:9f:69:99:db:
                    23:9e:27:80:9a:80:5c:3e:a3:d8:26:46:14:75:96:
                    c3:c0:21:57:36:6a:d6:f5:29:01:56:6e:71:6d:c4:
                    21:d8:bd:d7:c7:55:3b:d8:1d:88:57:78:9c:43:73:
                    f5:5f:6f:2b:68:0f:71:73:4e:ca:9b:3c:f0:51:66:
                    e8:95:f1:c5:4a:eb:41:b8:3a:8e:4a:04:14:a4:3e:
                    9c:7c:cc:3e:8b:09:ce:0e:22:71:f2:25:35:64:b9:
                    7a:bb:67:ba:14:cd:ec:d5:13:70:71:8e:a0:b0:62:
                    54:47:98:98:e4:00:66:d5:d9:7e:66:c9:15:c3:e8:
                    e1:84:cb:a7:3d:c5:7d:0e:df:d2:5c:cd:4b:e8:95:
                    a1:ed:e7:7c:33:90:12:3d:7c:3f:d1:bb:53:9d:6d:
                    23:0b:06:50:e4:fd:ec:38:9f:cf:71:4f:0a:c3:ca:
                    fe:d1:da:03:df:59:95:b8:6f:0a:a8:09:03:de:b1:
                    04:36:dc:4a:e8:67:71:23:3c:9c:80:97:83:3e:03:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F7:3A:A3:9A:59:64:59:1C:4D:03:F8:C8:81:F5:B5:FA:C9:67:C9
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/jfc6o5pZZFkcTQP4yIH1tfrJZ8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.32.0/23
                  31.210.35.0-31.210.36.255
                  31.210.40.0/23
                  31.210.44.0-31.210.51.255
                  31.210.56.0/22
                  31.210.61.0/24
                  77.92.128.0-77.92.144.255
                  77.92.146.0/24
                  77.92.148.0/23
                  77.92.155.0-77.92.159.255
                  78.135.79.0/24
                  78.135.98.0/23
                  78.135.103.0/24
                  78.135.108.0/24
                  78.135.113.0-78.135.116.255
                  188.132.134.0/23
                  188.132.142.0/24
                  188.132.147.0-188.132.148.255
                  188.132.153.0/24
                  188.132.157.0-188.132.158.255
                  188.132.172.0/24
                  188.132.175.0-188.132.177.255
                  188.132.180.0/24
                  188.132.183.0-188.132.184.255
                  188.132.190.0/24
                  188.132.194.0/23
                  188.132.200.0/24
                  188.132.204.0-188.132.208.255
                  188.132.210.0-188.132.220.255
                  188.132.223.0-188.132.235.255
                  188.132.239.0/24
                  188.132.241.0-188.132.246.255
                  188.132.250.0-188.132.255.255
                  212.68.32.0/23
                  212.68.36.0-212.68.46.255
                  212.68.48.0/22
                  212.68.55.0-212.68.57.255
                  212.68.61.0/24
                IPv6:
                  2a02:26b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:41:cd:80:c2:6a:eb:03:41:6d:f7:57:ee:ce:a6:b5:d4:c4:
         b4:54:66:28:c7:f0:bc:3b:d8:17:25:27:a3:f9:e7:05:43:ad:
         d4:df:84:79:72:f4:3f:e1:b9:db:fa:6e:d7:d3:0c:f0:05:b0:
         1e:91:b3:d7:e9:cd:28:9d:e9:c3:ed:ee:ff:6d:6f:e2:e1:b8:
         c1:26:5f:11:4f:61:76:3e:45:81:df:59:06:38:63:7a:eb:c7:
         62:a0:94:57:bc:cf:d1:16:f2:9d:21:34:ce:5c:01:a0:6b:21:
         47:0f:60:a0:cb:10:aa:26:8c:94:7b:20:dc:60:71:a9:b3:4e:
         e1:0d:ce:54:2e:43:5c:dc:7c:25:c3:6a:d7:99:97:59:aa:c8:
         2e:21:de:fa:3a:01:e4:3c:11:21:dc:9f:fc:b5:60:2b:02:77:
         77:d1:89:68:17:04:bc:0d:08:97:ce:dc:04:2c:66:98:6a:71:
         9d:b3:51:71:38:74:71:03:d6:2b:03:0b:d5:7d:65:e2:e2:d4:
         21:a7:50:46:d6:3c:a3:24:fc:87:25:88:63:b6:3f:8c:ec:ec:
         86:d9:d5:aa:0c:0e:e4:d7:cc:48:d2:a7:f9:fa:00:2c:cf:72:
         44:02:df:b0:a5:b7:ec:61:03:c9:10:5c:0f:60:6d:b1:23:89:
         3e:0c:4d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:30 2023 by rpki-client on console-ams.rpki-client.org