Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ID_LexeIN2CtG7y6QbfJoFAlXYw.roa
File:                     ID_LexeIN2CtG7y6QbfJoFAlXYw.roa (raw, json)
Hash identifier:          fLxKeCUzr1IoCc4IMzebQqpdzB/Wa+iCnzaZheHyGLA=
Subject key identifier:   20:3F:CB:7B:17:88:37:60:AD:1B:BC:BA:41:B7:C9:A0:50:25:5D:8C
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       0181FD40C798ED11474C96307EBAB75CAD9D
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ID_LexeIN2CtG7y6QbfJoFAlXYw.roa
Signing time:             Thu 14 Jul 2022 15:08:09 +0000
ROA not before:           Thu 14 Jul 2022 15:08:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59504
IP address blocks:        194.113.104.114/32 maxlen: 32
                          95.215.110.0/23 maxlen: 23
                          95.215.108.0/23 maxlen: 23
                          185.197.73.0/24 maxlen: 24
                          185.197.72.0/24 maxlen: 24
                          80.76.40.0/24 maxlen: 24
                          185.156.179.0/24 maxlen: 24
                          185.156.178.0/24 maxlen: 24
                          185.156.178.0/23 maxlen: 23
                          185.156.177.0/24 maxlen: 24
                          185.156.176.0/24 maxlen: 24
                          185.156.176.0/22 maxlen: 22
                          193.38.232.0/23 maxlen: 23
                          193.38.234.0/24 maxlen: 24
                          185.254.190.0/24 maxlen: 24
                          185.254.189.0/24 maxlen: 24
                          185.254.188.0/24 maxlen: 24
                          194.113.104.0/24 maxlen: 24
                          194.113.107.0/24 maxlen: 24
                          185.177.115.0/24 maxlen: 24
                          185.177.113.0/24 maxlen: 24
                          185.220.35.0/24 maxlen: 24
                          185.220.34.0/24 maxlen: 24
                          185.220.33.0/24 maxlen: 24
                          185.220.32.0/24 maxlen: 24
                          185.230.142.0/24 maxlen: 24
                          185.230.140.0/23 maxlen: 23
                          45.142.208.0/24 maxlen: 24
                          84.54.39.0/24 maxlen: 24
                          185.118.64.0/24 maxlen: 24
                          185.118.64.0/22 maxlen: 22
                          185.118.66.0/24 maxlen: 24
                          185.118.66.0/23 maxlen: 23
                          185.118.65.0/24 maxlen: 24
                          185.246.117.0/24 maxlen: 24
                          185.246.116.0/24 maxlen: 24
                          185.246.119.0/24 maxlen: 24
                          2a05:fb41::/32 maxlen: 32
                          2a07:14c0:1::/48 maxlen: 48
                          2a0d:60c1::/32 maxlen: 32
                          2a0a:4782::/32 maxlen: 32
                          2a0a:4781::/32 maxlen: 32
                          2a0d:7747::/32 maxlen: 32
                          2a05:fb42::/32 maxlen: 32
                          2a0a:4780::/32 maxlen: 32
                          2a0d:60c3::/32 maxlen: 32
                          2a07:14c1::/32 maxlen: 32
                          2a0d:60c0::/32 maxlen: 32
                          2a0a:4783::/32 maxlen: 32
                          2a07:14c7::/32 maxlen: 32
                          2a05:fb44::/32 maxlen: 32
                          2a07:14c6::/32 maxlen: 32
                          2a07:14c0:d000::/36 maxlen: 36
                          2a07:14c0:6000::/36 maxlen: 36
                          2a07:14c0:1000::/36 maxlen: 36
                          2a07:14c0:5000::/36 maxlen: 36
                          2a07:14c0:4000::/36 maxlen: 36
                          2a07:14c0:3000::/36 maxlen: 36
                          2a0c:5241::/32 maxlen: 32
                          2a0d:7740::/32 maxlen: 32
                          2a0c:5247:7000::/36 maxlen: 36
                          2a0c:5247:c000::/36 maxlen: 36
                          2a0c:5247:d000::/36 maxlen: 36
                          2a0c:5247:e000::/36 maxlen: 36
                          2a0c:5247:f000::/36 maxlen: 36
                          2a0c:5245::/32 maxlen: 32
                          2a0a:4785::/32 maxlen: 32
                          2a07:14c0::/48 maxlen: 48
                          2a05:fb45::/32 maxlen: 32
                          2a07:14c2::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fd:40:c7:98:ed:11:47:4c:96:30:7e:ba:b7:5c:ad:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Jul 14 15:08:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=203fcb7b17883760ad1bbcba41b7c9a050255d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:93:33:4b:46:cd:10:2a:bc:2e:46:08:d6:
                    fa:60:36:c4:06:a7:52:5d:95:3e:d3:93:b2:15:cf:
                    c9:03:72:71:62:e2:27:61:bd:6e:82:4e:49:86:45:
                    1f:f3:48:24:74:31:5c:de:5a:ea:aa:84:82:e0:49:
                    e2:0a:cc:66:74:b0:9c:17:54:8f:f3:46:3e:eb:b3:
                    66:e0:c8:8f:e6:5c:a9:fe:15:9d:bb:1d:fe:35:ab:
                    24:01:39:79:ce:78:97:9a:27:81:b0:70:6f:44:1c:
                    c9:fd:10:91:90:84:91:22:d6:ac:3d:25:a8:b5:e7:
                    58:e5:2a:93:f5:43:c5:82:8b:6c:57:1b:b5:3e:36:
                    de:b8:a8:3a:cc:c8:f3:1c:aa:3c:d2:19:d7:83:de:
                    0d:7b:00:1b:47:ff:4e:28:09:e8:09:f0:31:81:15:
                    c9:80:93:89:04:ea:03:51:e4:ad:88:73:ac:e3:1e:
                    30:03:3c:b2:ff:8b:c4:ec:07:4f:d9:22:d4:0b:fd:
                    8f:b5:dc:ca:76:b4:45:3e:f4:a1:22:92:23:49:ad:
                    4a:8f:f1:97:d5:be:02:00:73:a5:4e:ca:57:ad:f6:
                    19:b5:7b:33:73:0a:36:ec:71:80:86:33:61:31:4a:
                    09:b4:d5:2e:37:dd:7f:73:e8:88:b5:52:60:ff:b6:
                    b0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:CB:7B:17:88:37:60:AD:1B:BC:BA:41:B7:C9:A0:50:25:5D:8C
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ID_LexeIN2CtG7y6QbfJoFAlXYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.208.0/24
                  80.76.40.0/24
                  84.54.39.0/24
                  95.215.108.0/22
                  185.118.64.0/22
                  185.156.176.0/22
                  185.177.113.0/24
                  185.177.115.0/24
                  185.197.72.0/23
                  185.220.32.0/22
                  185.230.140.0-185.230.142.255
                  185.246.116.0/23
                  185.246.119.0/24
                  185.254.188.0-185.254.190.255
                  193.38.232.0-193.38.234.255
                  194.113.104.0/24
                  194.113.107.0/24
                IPv6:
                  2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
                  2a05:fb44::/31
                  2a07:14c0::/47
                  2a07:14c0:1000::/36
                  2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
                  2a07:14c0:d000::/36
                  2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:14c6::/31
                  2a0a:4780::/30
                  2a0a:4785::/32
                  2a0c:5241::/32
                  2a0c:5245::/32
                  2a0c:5247:7000::/36
                  2a0c:5247:c000::/34
                  2a0d:60c0::/31
                  2a0d:60c3::/32
                  2a0d:7740::/32
                  2a0d:7747::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:92:8b:e4:94:1e:83:a3:b2:d1:2e:0b:97:48:61:57:8b:0e:
         61:67:df:01:a8:e9:57:c6:dd:4b:e1:5b:1e:cb:75:bb:b6:d1:
         e2:03:1f:d2:8c:81:d4:ef:17:93:a7:25:2c:f0:fa:4f:16:b3:
         7e:88:76:12:01:c4:f2:1d:c7:3e:ca:76:1b:26:03:27:4c:e4:
         6c:87:a1:e8:67:ce:53:8a:45:4b:de:b1:a7:16:02:15:20:72:
         3e:55:1a:5f:81:c8:82:2c:ee:f7:68:82:f2:a2:af:75:56:c8:
         04:09:09:95:48:2e:cc:8b:d9:f5:22:95:bf:cc:d2:0c:da:74:
         19:60:fc:24:6f:8c:88:a8:e2:d7:90:9d:3c:81:c4:e7:ef:93:
         2d:b3:33:0e:4c:3c:33:a3:30:c7:ca:27:4b:83:e2:40:73:4f:
         e3:81:e0:b7:cd:32:dc:2b:74:ad:64:e0:f7:ba:78:60:a2:a8:
         4a:e5:fb:e1:79:11:d1:94:7b:c7:6d:d0:3e:0f:d1:b9:41:88:
         05:a3:8d:c9:d2:69:96:96:71:b0:da:42:9b:6e:4b:94:ac:fd:
         2b:34:73:1a:4c:6c:18:72:b9:dc:4c:c3:b8:5d:a4:43:9a:91:
         79:59:82:c3:18:10:92:5c:1e:6d:b3:98:1c:6d:75:a8:27:81:
         b5:ca:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org