Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/uOvmw1fi5ZgxJtFf56Jkr8EBsvg.roa
File:                     uOvmw1fi5ZgxJtFf56Jkr8EBsvg.roa (raw, json)
Hash identifier:          7M4KwTCMrXqA9bZFb8dKARTWF/rR5/XqSyrFz9ZMOHk=
Subject key identifier:   B8:EB:E6:C3:57:E2:E5:98:31:26:D1:5F:E7:A2:64:AF:C1:01:B2:F8
Certificate issuer:       /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial:       0183B1DF7DEADDC102751779246F7F4788D5
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/uOvmw1fi5ZgxJtFf56Jkr8EBsvg.roa
Signing time:             Fri 07 Oct 2022 09:55:57 +0000
ROA not before:           Fri 07 Oct 2022 09:55:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34977
IP address blocks:        89.39.152.0/21 maxlen: 21
                          89.39.156.0/24 maxlen: 24
                          89.39.158.0/23 maxlen: 23
                          89.39.16.0/21 maxlen: 21
                          89.39.22.0/24 maxlen: 24
                          89.39.24.0/21 maxlen: 21
                          89.39.25.0/24 maxlen: 24
                          89.39.26.0/24 maxlen: 24
                          89.39.27.0/24 maxlen: 24
                          89.39.31.0/24 maxlen: 24
                          89.39.28.0/24 maxlen: 24
                          89.39.29.0/24 maxlen: 24
                          86.106.64.0/21 maxlen: 21
                          89.32.118.0/24 maxlen: 24
                          89.32.112.0/21 maxlen: 21
                          89.38.16.0/24 maxlen: 24
                          89.38.17.0/24 maxlen: 24
                          89.38.16.0/21 maxlen: 21
                          89.38.23.0/24 maxlen: 24
                          89.38.20.0/24 maxlen: 24
                          89.38.21.0/24 maxlen: 24
                          89.38.22.0/24 maxlen: 24
                          89.38.18.0/24 maxlen: 24
                          89.38.19.0/24 maxlen: 24
                          86.106.0.0/21 maxlen: 21
                          46.37.69.0/24 maxlen: 24
                          46.37.70.0/23 maxlen: 23
                          46.37.76.0/23 maxlen: 23
                          89.37.74.0/24 maxlen: 24
                          212.225.236.0/24 maxlen: 24
                          212.225.240.0/23 maxlen: 23
                          46.37.78.0/23 maxlen: 23
                          89.37.72.0/24 maxlen: 24
                          212.225.234.0/24 maxlen: 24
                          89.37.73.0/24 maxlen: 24
                          89.37.72.0/21 maxlen: 21
                          46.37.84.0/24 maxlen: 24
                          212.225.246.0/24 maxlen: 24
                          46.37.81.0/24 maxlen: 24
                          46.37.80.0/24 maxlen: 24
                          212.225.250.0/24 maxlen: 24
                          212.225.252.0/24 maxlen: 24
                          212.225.248.0/24 maxlen: 24
                          212.225.255.0/24 maxlen: 24
                          46.37.94.0/24 maxlen: 24
                          46.37.92.0/23 maxlen: 23
                          212.225.176.0/24 maxlen: 24
                          212.225.174.0/23 maxlen: 23
                          212.225.178.0/23 maxlen: 23
                          212.225.182.0/23 maxlen: 23
                          212.225.184.0/24 maxlen: 24
                          212.225.185.0/24 maxlen: 24
                          212.225.180.0/23 maxlen: 23
                          212.225.186.0/24 maxlen: 24
                          212.225.190.0/24 maxlen: 24
                          212.225.191.0/24 maxlen: 24
                          212.225.187.0/24 maxlen: 24
                          212.225.188.0/24 maxlen: 24
                          212.225.189.0/24 maxlen: 24
                          212.225.196.0/24 maxlen: 24
                          212.225.197.0/24 maxlen: 24
                          212.225.198.0/24 maxlen: 24
                          212.225.199.0/24 maxlen: 24
                          212.225.200.0/22 maxlen: 22
                          212.225.204.0/24 maxlen: 24
                          212.225.208.0/23 maxlen: 23
                          212.225.218.0/24 maxlen: 24
                          212.225.219.0/24 maxlen: 24
                          212.225.216.0/23 maxlen: 23
                          212.225.215.0/24 maxlen: 24
                          46.37.64.0/19 maxlen: 19
                          212.225.222.0/24 maxlen: 24
                          212.225.220.0/24 maxlen: 24
                          212.225.221.0/24 maxlen: 24
                          88.212.188.0/24 maxlen: 24
                          88.212.190.0/24 maxlen: 24
                          91.151.97.0/24 maxlen: 24
                          91.151.96.0/24 maxlen: 24
                          91.151.96.0/20 maxlen: 20
                          212.225.128.0/17 maxlen: 17
                          212.225.132.0/24 maxlen: 24
                          91.151.105.0/24 maxlen: 24
                          212.225.130.0/23 maxlen: 23
                          91.151.99.0/24 maxlen: 24
                          212.225.128.0/23 maxlen: 23
                          212.225.138.0/23 maxlen: 23
                          91.151.111.0/24 maxlen: 24
                          212.225.134.0/23 maxlen: 23
                          91.151.108.0/24 maxlen: 24
                          91.151.109.0/24 maxlen: 24
                          212.225.137.0/24 maxlen: 24
                          91.151.110.0/24 maxlen: 24
                          212.225.133.0/24 maxlen: 24
                          212.225.144.0/24 maxlen: 24
                          212.225.142.0/23 maxlen: 23
                          212.225.145.0/24 maxlen: 24
                          212.225.152.0/24 maxlen: 24
                          212.225.148.0/22 maxlen: 22
                          212.225.146.0/24 maxlen: 24
                          212.225.156.0/22 maxlen: 22
                          212.225.163.0/24 maxlen: 24
                          212.225.164.0/22 maxlen: 22
                          212.225.162.0/24 maxlen: 24
                          212.225.168.0/22 maxlen: 22
                          212.225.172.0/23 maxlen: 23
                          89.35.136.0/21 maxlen: 21
                          89.35.137.0/24 maxlen: 24
                          89.35.138.0/23 maxlen: 23
                          89.35.142.0/23 maxlen: 23
                          89.35.140.0/23 maxlen: 23
                          89.36.4.0/23 maxlen: 23
                          89.36.2.0/23 maxlen: 23
                          89.36.0.0/23 maxlen: 23
                          89.36.6.0/24 maxlen: 24
                          89.36.7.0/24 maxlen: 24
                          37.61.144.0/20 maxlen: 20
                          37.61.144.0/23 maxlen: 23
                          37.61.146.0/23 maxlen: 23
                          37.61.159.0/24 maxlen: 24
                          37.61.155.0/24 maxlen: 24
                          195.82.101.0/24 maxlen: 24
                          195.82.100.0/22 maxlen: 22
                          195.82.102.0/24 maxlen: 24
                          195.82.100.0/24 maxlen: 24
                          195.82.112.0/21 maxlen: 21
                          195.82.113.0/24 maxlen: 24
                          195.82.126.0/23 maxlen: 23
                          195.82.126.0/24 maxlen: 24
                          171.33.232.0/21 maxlen: 21
                          185.13.203.0/24 maxlen: 24
                          185.13.200.0/22 maxlen: 22
                          93.114.144.0/24 maxlen: 24
                          93.114.144.0/20 maxlen: 20
                          93.114.146.0/24 maxlen: 24
                          93.114.147.0/24 maxlen: 24
                          93.114.148.0/24 maxlen: 24
                          93.114.149.0/24 maxlen: 24
                          93.114.157.0/24 maxlen: 24
                          93.114.158.0/24 maxlen: 24
                          93.114.153.0/24 maxlen: 24
                          93.114.154.0/24 maxlen: 24
                          93.114.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b1:df:7d:ea:dd:c1:02:75:17:79:24:6f:7f:47:88:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
        Validity
            Not Before: Oct  7 09:55:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b8ebe6c357e2e5983126d15fe7a264afc101b2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:32:bd:3a:77:f0:ab:a1:d5:ec:17:a1:74:69:
                    0f:b9:30:1a:b0:c6:be:2a:f4:40:6f:f6:50:03:c4:
                    82:d4:5b:96:ac:fe:42:7a:e8:b9:26:25:a8:19:07:
                    5c:10:71:b4:6a:e4:14:3c:7d:cc:a4:46:18:68:95:
                    78:27:b4:e6:4b:f6:fb:88:5d:83:e5:3d:c8:fe:ac:
                    91:6c:26:bf:b1:8b:e0:10:3d:9a:2d:f0:be:36:59:
                    f5:ae:ae:cb:19:ab:bc:7a:fe:74:f6:5a:24:0b:2a:
                    7a:34:33:98:9f:fe:0d:7a:df:be:c8:f7:14:50:7f:
                    21:e9:72:9f:05:54:25:07:e1:0d:85:aa:17:88:de:
                    70:64:d1:7c:19:0a:2a:3c:fd:4d:c9:e8:c1:93:0d:
                    a4:52:3f:0f:17:d6:f7:72:1a:be:06:c3:00:c5:a3:
                    ae:74:c1:48:82:1c:92:12:41:1d:fd:7b:d4:42:24:
                    73:95:3e:5f:7c:d0:71:94:ca:0e:42:32:98:3a:71:
                    84:08:77:38:73:69:74:f7:7c:f7:7d:0e:d5:63:d1:
                    a4:77:8b:5c:f3:26:af:e2:c0:7b:1e:03:10:3a:fe:
                    15:2d:d6:c3:b4:4c:b7:e9:7e:6f:19:0d:d4:a2:49:
                    e2:60:a2:d5:45:6f:c8:e9:54:2f:e9:ed:9b:7e:4b:
                    b5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EB:E6:C3:57:E2:E5:98:31:26:D1:5F:E7:A2:64:AF:C1:01:B2:F8
            X509v3 Authority Key Identifier:
                keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/uOvmw1fi5ZgxJtFf56Jkr8EBsvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.61.144.0/20
                  46.37.64.0/19
                  86.106.0.0/21
                  86.106.64.0/21
                  88.212.188.0/24
                  88.212.190.0/24
                  89.32.112.0/21
                  89.35.136.0/21
                  89.36.0.0/21
                  89.37.72.0/21
                  89.38.16.0/21
                  89.39.16.0/20
                  89.39.152.0/21
                  91.151.96.0/20
                  93.114.144.0/20
                  171.33.232.0/21
                  185.13.200.0/22
                  195.82.100.0/22
                  195.82.112.0/21
                  195.82.126.0/23
                  212.225.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         50:be:49:b6:58:ba:61:e2:fc:f8:fe:13:5e:58:97:a7:ea:45:
         56:2b:9d:96:2d:53:e9:46:2e:d6:ea:49:47:cc:2e:59:2d:f7:
         25:64:5a:73:3b:24:56:f4:37:c7:d8:de:09:bb:5b:ef:53:75:
         5b:32:8d:6d:6d:e3:24:ad:59:79:4e:da:cf:7b:17:95:50:17:
         28:52:9d:9c:9b:e4:30:fe:4f:b2:f6:5a:3b:32:7f:85:b7:d1:
         ca:4e:fb:2f:75:03:df:50:af:91:48:e4:25:2a:a3:93:f6:79:
         63:6a:e9:b9:1f:4f:75:11:03:a1:b3:3b:11:ab:2b:c1:fb:3e:
         ff:91:ec:3f:52:77:53:62:04:5a:a1:cd:27:3d:ee:a4:f6:78:
         6a:ff:63:47:d9:1a:10:8a:a2:4d:7e:ce:9e:93:52:7b:88:45:
         dd:77:48:4a:27:8d:a8:de:bb:a6:ed:a1:e2:85:d1:42:30:e4:
         d9:0a:b6:98:c4:04:c0:5a:a9:b2:04:89:97:08:ab:b7:9c:9c:
         94:97:95:b2:20:4e:34:d1:26:f0:92:05:23:92:f2:72:1a:6a:
         fb:ad:9b:91:4e:0f:54:a5:03:30:b2:2f:4f:33:c7:84:40:e4:
         74:15:00:67:f5:9e:95:65:ee:fa:3e:f4:0f:c1:b2:d6:ef:4a:
         ac:71:be:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:14 2024 by rpki-client on console-ams.rpki-client.org