Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/I447CKv6jd5RLTkJ6D9qOtVXBx0.roa
File:                     I447CKv6jd5RLTkJ6D9qOtVXBx0.roa (raw, json)
Hash identifier:          1z3qx31/gWhNa9x86y4kSUpzWk6PuUEacYhIyjssd5I=
Subject key identifier:   23:8E:3B:08:AB:FA:8D:DE:51:2D:39:09:E8:3F:6A:3A:D5:57:07:1D
Certificate issuer:       /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial:       040125
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/I447CKv6jd5RLTkJ6D9qOtVXBx0.roa
Signing time:             Thu 14 Apr 2022 08:55:16 +0000
ROA not before:           Thu 14 Apr 2022 08:55:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206564
IP address blocks:        95.174.137.0/24 maxlen: 24
                          95.174.138.0/24 maxlen: 24
                          95.174.139.0/24 maxlen: 24
                          95.174.133.0/24 maxlen: 24
                          95.174.134.0/24 maxlen: 24
                          95.174.135.0/24 maxlen: 24
                          95.174.136.0/24 maxlen: 24
                          95.174.144.0/24 maxlen: 24
                          95.174.145.0/24 maxlen: 24
                          95.174.140.0/24 maxlen: 24
                          95.174.141.0/24 maxlen: 24
                          95.174.142.0/24 maxlen: 24
                          95.174.143.0/24 maxlen: 24
                          95.174.151.0/24 maxlen: 24
                          95.174.152.0/24 maxlen: 24
                          95.174.147.0/24 maxlen: 24
                          95.174.148.0/24 maxlen: 24
                          95.174.149.0/24 maxlen: 24
                          95.174.150.0/24 maxlen: 24
                          95.174.146.0/24 maxlen: 24
                          95.174.158.0/24 maxlen: 24
                          95.174.159.0/24 maxlen: 24
                          95.174.154.0/24 maxlen: 24
                          95.174.155.0/24 maxlen: 24
                          95.174.156.0/24 maxlen: 24
                          95.174.157.0/24 maxlen: 24
                          95.174.153.0/24 maxlen: 24
                          95.174.130.0/24 maxlen: 24
                          95.174.131.0/24 maxlen: 24
                          95.174.132.0/24 maxlen: 24
                          95.174.128.0/24 maxlen: 24
                          95.174.129.0/24 maxlen: 24
                          217.10.79.0/24 maxlen: 24
                          217.10.64.0/24 maxlen: 24
                          217.10.69.0/24 maxlen: 24
                          217.10.70.0/24 maxlen: 24
                          217.10.71.0/24 maxlen: 24
                          217.10.66.0/24 maxlen: 24
                          217.10.67.0/24 maxlen: 24
                          217.10.68.0/24 maxlen: 24
                          217.10.65.0/24 maxlen: 24
                          217.10.74.0/24 maxlen: 24
                          217.10.77.0/24 maxlen: 24
                          217.10.76.0/24 maxlen: 24
                          217.10.78.0/24 maxlen: 24
                          217.10.73.0/24 maxlen: 24
                          217.10.75.0/24 maxlen: 24
                          217.10.72.0/24 maxlen: 24
                          82.116.110.0/24 maxlen: 24
                          82.116.111.0/24 maxlen: 24
                          217.116.112.0/24 maxlen: 24
                          82.116.112.0/24 maxlen: 24
                          82.116.106.0/24 maxlen: 24
                          82.116.107.0/24 maxlen: 24
                          82.116.108.0/24 maxlen: 24
                          82.116.109.0/24 maxlen: 24
                          82.116.118.0/24 maxlen: 24
                          82.116.117.0/24 maxlen: 24
                          82.116.116.0/24 maxlen: 24
                          217.116.117.0/24 maxlen: 24
                          217.116.116.0/24 maxlen: 24
                          217.116.118.0/24 maxlen: 24
                          217.116.113.0/24 maxlen: 24
                          82.116.113.0/24 maxlen: 24
                          217.116.114.0/24 maxlen: 24
                          217.116.115.0/24 maxlen: 24
                          82.116.114.0/24 maxlen: 24
                          82.116.115.0/24 maxlen: 24
                          82.116.124.0/24 maxlen: 24
                          217.116.124.0/24 maxlen: 24
                          82.116.125.0/24 maxlen: 24
                          82.116.123.0/24 maxlen: 24
                          217.116.125.0/24 maxlen: 24
                          217.116.123.0/24 maxlen: 24
                          217.116.120.0/24 maxlen: 24
                          217.116.119.0/24 maxlen: 24
                          82.116.120.0/24 maxlen: 24
                          217.116.121.0/24 maxlen: 24
                          217.116.122.0/24 maxlen: 24
                          82.116.121.0/24 maxlen: 24
                          82.116.122.0/24 maxlen: 24
                          82.116.119.0/24 maxlen: 24
                          217.116.127.0/24 maxlen: 24
                          82.116.127.0/24 maxlen: 24
                          217.116.126.0/24 maxlen: 24
                          82.116.126.0/24 maxlen: 24
                          82.116.96.0/24 maxlen: 24
                          82.116.97.0/24 maxlen: 24
                          82.116.98.0/24 maxlen: 24
                          82.116.99.0/24 maxlen: 24
                          82.116.100.0/24 maxlen: 24
                          82.116.101.0/24 maxlen: 24
                          82.116.102.0/24 maxlen: 24
                          82.116.103.0/24 maxlen: 24
                          82.116.104.0/24 maxlen: 24
                          82.116.105.0/24 maxlen: 24
                          212.9.36.0/24 maxlen: 24
                          212.9.37.0/24 maxlen: 24
                          212.9.38.0/24 maxlen: 24
                          212.9.33.0/24 maxlen: 24
                          212.9.34.0/24 maxlen: 24
                          212.9.35.0/24 maxlen: 24
                          212.9.32.0/24 maxlen: 24
                          212.9.43.0/24 maxlen: 24
                          212.9.44.0/24 maxlen: 24
                          212.9.40.0/24 maxlen: 24
                          212.9.41.0/24 maxlen: 24
                          212.9.42.0/24 maxlen: 24
                          212.9.39.0/24 maxlen: 24
                          212.9.50.0/24 maxlen: 24
                          212.9.51.0/24 maxlen: 24
                          212.9.47.0/24 maxlen: 24
                          212.9.48.0/24 maxlen: 24
                          212.9.49.0/24 maxlen: 24
                          212.9.45.0/24 maxlen: 24
                          212.9.46.0/24 maxlen: 24
                          212.9.57.0/24 maxlen: 24
                          212.9.58.0/24 maxlen: 24
                          212.9.54.0/24 maxlen: 24
                          212.9.55.0/24 maxlen: 24
                          212.9.56.0/24 maxlen: 24
                          212.9.52.0/24 maxlen: 24
                          212.9.53.0/24 maxlen: 24
                          212.9.61.0/24 maxlen: 24
                          212.9.62.0/24 maxlen: 24
                          212.9.63.0/24 maxlen: 24
                          212.9.59.0/24 maxlen: 24
                          212.9.60.0/24 maxlen: 24
                          2001:ab7:f001::/48 maxlen: 48
                          2001:ab7:3001::/48 maxlen: 48
                          2001:ab7:2001::/48 maxlen: 48
                          2001:ab7:1001::/48 maxlen: 48
                          2001:ab7:f004::/48 maxlen: 48
                          2001:ab7:f000::/48 maxlen: 48
                          2001:ab7:1000::/48 maxlen: 48
                          2001:ab7:2000::/48 maxlen: 48
                          2001:ab7:3000::/48 maxlen: 48
                          2001:ab7::/48 maxlen: 48
                          2001:ab7:f003::/48 maxlen: 48
                          2001:ab0::/48 maxlen: 48
                          2001:ab7:f002::/48 maxlen: 48
                          2001:ab7:3002::/48 maxlen: 48
                          2001:ab7:2002::/48 maxlen: 48
                          2001:ab7:1002::/48 maxlen: 48
                          2001:ab7:f005::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262437 (0x40125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
        Validity
            Not Before: Apr 14 08:55:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=238e3b08abfa8dde512d3909e83f6a3ad557071d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:29:04:7c:d1:85:29:2f:21:72:a5:1c:66:83:
                    55:54:b7:56:d3:54:a8:05:26:0b:94:0f:67:6a:f3:
                    76:31:18:c8:82:bb:a2:ce:89:a6:6e:88:f9:26:0a:
                    57:d8:1e:24:28:db:b3:21:a6:2f:a8:b3:98:ab:64:
                    05:db:04:a3:a4:c2:87:3d:5a:4f:d4:56:2b:0a:be:
                    e1:72:7c:a7:36:4d:f1:11:91:15:f5:7e:f7:80:a2:
                    a3:f8:02:a9:62:3f:39:a8:ab:95:d6:d1:d7:6f:3b:
                    32:9c:1f:86:37:3c:32:3b:93:d7:39:d5:a3:b0:c4:
                    d5:41:9d:1e:64:90:a7:fc:27:ab:50:36:59:fc:27:
                    14:c6:a7:e6:c1:48:f0:e1:f2:92:16:c9:a4:1a:18:
                    df:58:4f:f6:4c:a2:42:81:24:0a:7d:bc:53:f3:aa:
                    25:42:c8:39:3b:9a:d6:7a:85:45:f4:db:40:c1:a1:
                    67:28:35:5c:38:5c:84:5e:72:97:e6:e9:57:e3:5e:
                    d2:cd:18:7c:25:af:7c:74:d1:71:e1:6f:ce:42:5a:
                    b6:c2:fe:ab:85:6e:f8:48:9c:39:0d:2b:75:30:05:
                    6a:10:84:cc:1c:a8:f9:37:f9:7f:03:6e:e1:68:1c:
                    92:93:d0:33:d9:02:62:58:1f:b3:8c:01:2f:e0:53:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8E:3B:08:AB:FA:8D:DE:51:2D:39:09:E8:3F:6A:3A:D5:57:07:1D
            X509v3 Authority Key Identifier:
                keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/I447CKv6jd5RLTkJ6D9qOtVXBx0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.116.96.0/19
                  95.174.128.0/19
                  212.9.32.0/19
                  217.10.64.0/20
                  217.116.112.0/20
                IPv6:
                  2001:ab0::/48
                  2001:ab7::/48
                  2001:ab7:1000::-2001:ab7:1002:ffff:ffff:ffff:ffff:ffff
                  2001:ab7:2000::-2001:ab7:2002:ffff:ffff:ffff:ffff:ffff
                  2001:ab7:3000::-2001:ab7:3002:ffff:ffff:ffff:ffff:ffff
                  2001:ab7:f000::-2001:ab7:f005:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         27:8f:54:50:74:be:73:a6:24:92:0e:53:4f:d4:88:8d:11:ca:
         5a:11:61:1e:41:c7:e4:63:02:f6:25:19:6f:20:ac:43:8d:b2:
         d3:d2:24:6b:50:55:79:d8:6c:12:e5:ab:91:e9:87:24:79:2b:
         d6:3d:b7:f6:20:0e:46:3b:e4:8f:15:db:0a:38:5a:5b:78:f6:
         2d:64:26:bf:8a:89:5a:70:75:cb:dd:c0:a6:c1:e2:1f:f8:25:
         ea:a8:7b:c1:e6:23:0e:2b:99:8d:cb:c0:12:14:ca:29:a0:36:
         d2:fe:4a:8a:8a:a4:4c:4c:4b:f7:90:59:ad:79:45:f8:2a:64:
         8d:24:43:28:68:92:f6:2a:82:c4:52:d3:28:9d:b6:c2:7c:72:
         8d:f6:d8:8b:68:41:71:e5:6a:e6:33:fe:15:63:48:dd:2c:f7:
         7c:c9:77:a4:d7:75:fd:94:b2:57:4a:1d:18:24:bd:37:79:ed:
         f9:e1:0a:c9:e9:fc:0f:29:0f:65:c6:a7:7b:42:d5:ee:55:47:
         4a:d0:2f:de:3d:81:ff:0e:8c:ee:4b:e6:24:fd:5d:df:b0:1e:
         40:80:43:7f:62:9c:16:73:bb:8f:6c:5e:43:38:14:71:ee:d7:
         80:05:f6:14:5f:ef:d9:81:ed:ac:d9:b5:16:12:0a:2b:7c:38:
         90:8b:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:52 2023 by rpki-client on console-fra.rpki-client.org