Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/E4JjmG7ss8GoP9tXOnSDvLI1ccU.roa
File:                     E4JjmG7ss8GoP9tXOnSDvLI1ccU.roa (raw, json)
Hash identifier:          1KqSCAx0w611T2lUlFZ6/q/Oi9OyOYaoSKadAPxdlhM=
Subject key identifier:   13:82:63:98:6E:EC:B3:C1:A8:3F:DB:57:3A:74:83:BC:B2:35:71:C5
Certificate issuer:       /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial:       0184EBF964A782074E8C5A260540B660263C
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/E4JjmG7ss8GoP9tXOnSDvLI1ccU.roa
Signing time:             Wed 07 Dec 2022 09:45:00 +0000
ROA not before:           Wed 07 Dec 2022 09:45:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206564
IP address blocks:        95.174.137.0/24 maxlen: 24
                          95.174.138.0/24 maxlen: 24
                          95.174.139.0/24 maxlen: 24
                          95.174.133.0/24 maxlen: 24
                          95.174.134.0/24 maxlen: 24
                          95.174.135.0/24 maxlen: 24
                          95.174.136.0/24 maxlen: 24
                          95.174.144.0/24 maxlen: 24
                          95.174.145.0/24 maxlen: 24
                          95.174.140.0/24 maxlen: 24
                          95.174.141.0/24 maxlen: 24
                          95.174.142.0/24 maxlen: 24
                          95.174.143.0/24 maxlen: 24
                          95.174.151.0/24 maxlen: 24
                          95.174.152.0/24 maxlen: 24
                          95.174.147.0/24 maxlen: 24
                          95.174.148.0/24 maxlen: 24
                          95.174.149.0/24 maxlen: 24
                          95.174.150.0/24 maxlen: 24
                          95.174.146.0/24 maxlen: 24
                          95.174.158.0/24 maxlen: 24
                          95.174.159.0/24 maxlen: 24
                          95.174.154.0/24 maxlen: 24
                          95.174.155.0/24 maxlen: 24
                          95.174.156.0/24 maxlen: 24
                          95.174.157.0/24 maxlen: 24
                          95.174.153.0/24 maxlen: 24
                          95.174.130.0/24 maxlen: 24
                          95.174.131.0/24 maxlen: 24
                          95.174.132.0/24 maxlen: 24
                          95.174.128.0/24 maxlen: 24
                          95.174.129.0/24 maxlen: 24
                          217.10.79.0/24 maxlen: 24
                          217.10.64.0/24 maxlen: 24
                          217.10.69.0/24 maxlen: 24
                          217.10.70.0/24 maxlen: 24
                          217.10.71.0/24 maxlen: 24
                          217.10.66.0/24 maxlen: 24
                          217.10.67.0/24 maxlen: 24
                          217.10.68.0/24 maxlen: 24
                          217.10.65.0/24 maxlen: 24
                          217.10.74.0/24 maxlen: 24
                          217.10.77.0/24 maxlen: 24
                          217.10.76.0/24 maxlen: 24
                          217.10.78.0/24 maxlen: 24
                          217.10.73.0/24 maxlen: 24
                          217.10.75.0/24 maxlen: 24
                          217.10.72.0/24 maxlen: 24
                          82.116.110.0/24 maxlen: 24
                          82.116.111.0/24 maxlen: 24
                          82.116.112.0/24 maxlen: 24
                          217.116.112.0/24 maxlen: 24
                          82.116.106.0/24 maxlen: 24
                          82.116.107.0/24 maxlen: 24
                          82.116.108.0/24 maxlen: 24
                          82.116.109.0/24 maxlen: 24
                          82.116.118.0/24 maxlen: 24
                          217.116.117.0/24 maxlen: 24
                          217.116.116.0/24 maxlen: 24
                          82.116.117.0/24 maxlen: 24
                          82.116.116.0/24 maxlen: 24
                          217.116.118.0/24 maxlen: 24
                          82.116.113.0/24 maxlen: 24
                          217.116.113.0/24 maxlen: 24
                          82.116.114.0/24 maxlen: 24
                          217.116.114.0/24 maxlen: 24
                          217.116.115.0/24 maxlen: 24
                          82.116.115.0/24 maxlen: 24
                          217.116.121.0/24 maxlen: 24
                          217.116.124.0/24 maxlen: 24
                          82.116.124.0/24 maxlen: 24
                          217.116.125.0/24 maxlen: 24
                          217.116.123.0/24 maxlen: 24
                          82.116.125.0/24 maxlen: 24
                          82.116.120.0/24 maxlen: 24
                          82.116.119.0/24 maxlen: 24
                          217.116.120.0/24 maxlen: 24
                          82.116.121.0/24 maxlen: 24
                          82.116.123.0/24 maxlen: 24
                          82.116.122.0/24 maxlen: 24
                          217.116.122.0/24 maxlen: 24
                          217.116.119.0/24 maxlen: 24
                          82.116.127.0/24 maxlen: 24
                          217.116.127.0/24 maxlen: 24
                          82.116.126.0/24 maxlen: 24
                          217.116.126.0/24 maxlen: 24
                          82.116.96.0/24 maxlen: 24
                          82.116.97.0/24 maxlen: 24
                          82.116.98.0/24 maxlen: 24
                          82.116.99.0/24 maxlen: 24
                          82.116.100.0/24 maxlen: 24
                          82.116.101.0/24 maxlen: 24
                          82.116.102.0/24 maxlen: 24
                          82.116.103.0/24 maxlen: 24
                          82.116.104.0/24 maxlen: 24
                          82.116.105.0/24 maxlen: 24
                          212.9.36.0/24 maxlen: 24
                          212.9.37.0/24 maxlen: 24
                          212.9.38.0/24 maxlen: 24
                          212.9.33.0/24 maxlen: 24
                          212.9.34.0/24 maxlen: 24
                          212.9.35.0/24 maxlen: 24
                          212.9.32.0/24 maxlen: 24
                          212.9.43.0/24 maxlen: 24
                          212.9.44.0/24 maxlen: 24
                          212.9.40.0/24 maxlen: 24
                          212.9.41.0/24 maxlen: 24
                          212.9.42.0/24 maxlen: 24
                          212.9.39.0/24 maxlen: 24
                          212.9.50.0/24 maxlen: 24
                          212.9.51.0/24 maxlen: 24
                          212.9.47.0/24 maxlen: 24
                          212.9.48.0/24 maxlen: 24
                          212.9.49.0/24 maxlen: 24
                          212.9.45.0/24 maxlen: 24
                          212.9.46.0/24 maxlen: 24
                          212.9.57.0/24 maxlen: 24
                          212.9.58.0/24 maxlen: 24
                          212.9.54.0/24 maxlen: 24
                          212.9.55.0/24 maxlen: 24
                          212.9.56.0/24 maxlen: 24
                          212.9.52.0/24 maxlen: 24
                          212.9.53.0/24 maxlen: 24
                          212.9.61.0/24 maxlen: 24
                          212.9.62.0/24 maxlen: 24
                          212.9.63.0/24 maxlen: 24
                          212.9.59.0/24 maxlen: 24
                          212.9.60.0/24 maxlen: 24
                          2001:ab7:1001::/48 maxlen: 48
                          2001:ab7:2001::/48 maxlen: 48
                          2001:ab7:3001::/48 maxlen: 48
                          2001:ab7:f001::/48 maxlen: 48
                          2001:ab7:f004::/48 maxlen: 48
                          2001:ab7::/48 maxlen: 48
                          2001:ab7:3000::/48 maxlen: 48
                          2001:ab7:1000::/48 maxlen: 48
                          2001:ab7:f000::/48 maxlen: 48
                          2001:ab7:4000::/48 maxlen: 48
                          2001:ab7:2000::/48 maxlen: 48
                          2001:ab7:f003::/48 maxlen: 48
                          2001:ab0::/48 maxlen: 48
                          2001:ab7:1002::/48 maxlen: 48
                          2001:ab7:2002::/48 maxlen: 48
                          2001:ab7:3002::/48 maxlen: 48
                          2001:ab7:f002::/48 maxlen: 48
                          2001:ab7:f005::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:eb:f9:64:a7:82:07:4e:8c:5a:26:05:40:b6:60:26:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
        Validity
            Not Before: Dec  7 09:45:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=138263986eecb3c1a83fdb573a7483bcb23571c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:df:e8:8e:cd:6f:d8:8e:c7:fe:34:28:25:
                    1b:a4:41:5a:03:21:0b:5d:45:33:e6:92:ef:af:79:
                    16:fa:ad:5e:50:a6:43:a6:90:01:40:a7:da:78:88:
                    cb:5e:64:45:7c:48:ff:e9:39:0b:4f:7d:26:d5:6e:
                    d2:b3:b0:19:0d:94:2a:eb:ce:4e:9e:6f:d8:8a:2e:
                    59:4b:9c:4f:c9:27:a7:9e:3b:4d:d4:fc:c9:13:7f:
                    c2:fa:02:a0:67:de:ad:7d:b4:ee:05:ee:ca:76:19:
                    62:f2:71:18:8d:16:b1:7b:78:f1:97:cf:5d:59:41:
                    10:cb:ee:2a:47:36:3f:4a:c6:20:b6:d8:2a:d6:d4:
                    a6:ef:ce:41:43:a3:49:11:59:4f:33:c0:95:20:e0:
                    78:d9:45:2c:42:9b:d1:ce:20:49:dd:1f:43:95:5e:
                    b2:ad:5d:14:f9:79:4a:c3:22:9d:9d:7c:20:56:9e:
                    54:79:9a:25:d7:fb:50:df:f3:b8:ba:e4:ee:fc:d5:
                    f6:61:34:e4:c0:d2:c2:6e:72:36:05:f0:27:0e:c0:
                    0c:10:76:a8:06:74:aa:97:2e:d5:7c:a9:97:c4:86:
                    e1:ec:b1:fa:8b:49:60:0d:ad:57:9f:be:26:f5:f9:
                    7d:36:8a:60:56:ef:55:70:5f:89:05:a7:52:b3:b3:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:82:63:98:6E:EC:B3:C1:A8:3F:DB:57:3A:74:83:BC:B2:35:71:C5
            X509v3 Authority Key Identifier:
                keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/E4JjmG7ss8GoP9tXOnSDvLI1ccU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.116.96.0/19
                  95.174.128.0/19
                  212.9.32.0/19
                  217.10.64.0/20
                  217.116.112.0/20
                IPv6:
                  2001:ab0::/48
                  2001:ab7::/48
                  2001:ab7:1000::-2001:ab7:1002:ffff:ffff:ffff:ffff:ffff
                  2001:ab7:2000::-2001:ab7:2002:ffff:ffff:ffff:ffff:ffff
                  2001:ab7:3000::-2001:ab7:3002:ffff:ffff:ffff:ffff:ffff
                  2001:ab7:4000::/48
                  2001:ab7:f000::-2001:ab7:f005:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         25:58:ce:c0:f0:c6:71:dc:7b:27:c9:0f:c0:0c:df:17:e9:68:
         8c:ab:d4:07:dc:28:9f:00:37:02:65:ba:0c:a9:65:0e:11:60:
         a8:1e:07:21:2a:b3:35:a2:7d:ed:a8:22:c8:16:ab:b7:14:43:
         61:ce:81:81:cd:16:35:92:6e:6e:36:3b:63:d7:d2:27:a4:52:
         94:8c:0c:4b:94:73:89:34:ae:9c:6c:27:f0:52:b7:81:13:c3:
         87:13:26:5d:4e:49:aa:2b:9b:2c:9c:0a:39:b6:73:d7:40:6f:
         1b:72:80:e8:45:61:10:d6:3d:58:bf:38:04:4e:b2:e7:b7:72:
         06:c3:f0:24:6e:83:0b:9c:e1:c4:69:07:02:84:51:71:0d:2f:
         f8:5e:60:33:c1:cc:f1:58:b4:c5:57:c2:db:a5:96:f8:4e:2c:
         0b:c8:83:cb:85:6d:dc:7b:72:e3:d4:a5:db:0a:c6:8a:5e:60:
         57:36:81:d4:16:4b:7c:9e:03:22:aa:b5:13:76:05:e0:74:04:
         07:c9:c4:64:9e:90:d3:15:6f:dd:4f:97:de:9b:90:c8:70:27:
         dd:bc:a2:f7:51:4a:2e:64:5b:83:32:19:5f:95:ce:d2:35:4d:
         1b:af:0b:e0:9f:a0:62:f9:08:d5:88:5f:4d:5a:05:20:18:5f:
         a6:6a:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:45 2023 by rpki-client on console-ams.rpki-client.org