Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/LND3e0nJOfruVin4vPWISwcHFBs.roa
File:                     LND3e0nJOfruVin4vPWISwcHFBs.roa (raw, json)
Hash identifier:          6v6gbA7nLFUvgKhQjUXq53ZM0QgSABJwHDOmrlqmsv8=
Subject key identifier:   2C:D0:F7:7B:49:C9:39:FA:EE:56:29:F8:BC:F5:88:4B:07:07:14:1B
Certificate issuer:       /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial:       18093A35
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/LND3e0nJOfruVin4vPWISwcHFBs.roa
Signing time:             Sat 01 Jan 2022 07:00:35 +0000
ROA not before:           Sat 01 Jan 2022 07:00:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49063
IP address blocks:        91.107.64.0/21 maxlen: 21
                          91.107.64.0/24 maxlen: 24
                          91.107.69.0/24 maxlen: 24
                          91.107.68.0/24 maxlen: 24
                          91.107.71.0/24 maxlen: 24
                          91.107.70.0/24 maxlen: 24
                          91.107.65.0/24 maxlen: 24
                          91.107.67.0/24 maxlen: 24
                          91.107.66.0/24 maxlen: 24
                          176.107.166.0/24 maxlen: 24
                          95.181.192.0/22 maxlen: 22
                          176.107.165.0/24 maxlen: 24
                          176.107.163.0/24 maxlen: 24
                          176.107.162.0/24 maxlen: 24
                          176.107.164.0/24 maxlen: 24
                          176.107.161.0/24 maxlen: 24
                          176.107.160.0/24 maxlen: 24
                          95.181.199.0/24 maxlen: 24
                          95.181.196.0/23 maxlen: 23
                          95.181.193.0/24 maxlen: 24
                          95.181.195.0/24 maxlen: 24
                          95.181.194.0/24 maxlen: 24
                          176.107.167.0/24 maxlen: 24
                          95.181.204.0/24 maxlen: 24
                          95.181.203.0/24 maxlen: 24
                          95.181.205.0/24 maxlen: 24
                          95.181.200.0/24 maxlen: 24
                          95.181.200.0/21 maxlen: 21
                          95.181.201.0/24 maxlen: 24
                          185.242.120.0/24 maxlen: 24
                          185.127.151.0/24 maxlen: 24
                          185.127.150.0/24 maxlen: 24
                          185.127.149.0/24 maxlen: 24
                          185.127.148.0/24 maxlen: 24
                          185.127.148.0/22 maxlen: 22
                          92.242.36.0/24 maxlen: 24
                          92.242.35.0/24 maxlen: 24
                          92.242.38.0/24 maxlen: 24
                          92.242.37.0/24 maxlen: 24
                          92.242.33.0/24 maxlen: 24
                          92.242.32.0/21 maxlen: 21
                          92.242.32.0/24 maxlen: 24
                          92.242.34.0/24 maxlen: 24
                          92.242.43.0/24 maxlen: 24
                          92.242.42.0/24 maxlen: 24
                          92.242.39.0/24 maxlen: 24
                          92.242.41.0/24 maxlen: 24
                          92.242.47.0/24 maxlen: 24
                          92.242.46.0/24 maxlen: 24
                          185.247.186.0/24 maxlen: 24
                          185.99.140.0/23 maxlen: 23
                          185.99.140.0/24 maxlen: 24
                          130.193.64.0/24 maxlen: 24
                          130.193.64.0/21 maxlen: 21
                          130.193.70.0/24 maxlen: 24
                          130.193.71.0/24 maxlen: 24
                          130.193.66.0/24 maxlen: 24
                          130.193.65.0/24 maxlen: 24
                          130.193.68.0/24 maxlen: 24
                          130.193.67.0/24 maxlen: 24
                          85.193.73.0/24 maxlen: 24
                          85.193.72.0/24 maxlen: 24
                          85.193.75.0/24 maxlen: 24
                          85.193.74.0/24 maxlen: 24
                          185.99.10.0/24 maxlen: 24
                          185.99.9.0/24 maxlen: 24
                          185.99.11.0/24 maxlen: 24
                          185.99.8.0/24 maxlen: 24
                          185.99.8.0/21 maxlen: 21
                          185.232.107.0/24 maxlen: 24
                          193.23.147.0/24 maxlen: 24
                          185.232.106.0/24 maxlen: 24
                          193.23.146.0/24 maxlen: 24
                          178.57.73.0/24 maxlen: 24
                          178.57.72.0/21 maxlen: 21
                          178.57.72.0/24 maxlen: 24
                          178.57.75.0/24 maxlen: 24
                          178.57.74.0/24 maxlen: 24
                          178.57.77.0/24 maxlen: 24
                          178.57.76.0/24 maxlen: 24
                          178.57.78.0/24 maxlen: 24
                          178.57.79.0/24 maxlen: 24
                          185.3.142.0/24 maxlen: 24
                          185.3.141.0/24 maxlen: 24
                          185.3.143.0/24 maxlen: 24
                          185.3.140.0/22 maxlen: 22
                          185.3.140.0/24 maxlen: 24
                          185.98.85.0/24 maxlen: 24
                          185.98.84.0/23 maxlen: 23
                          185.98.84.0/24 maxlen: 24
                          185.98.81.0/24 maxlen: 24
                          185.98.83.0/24 maxlen: 24
                          185.98.82.0/24 maxlen: 24
                          185.98.80.0/24 maxlen: 24
                          185.98.80.0/22 maxlen: 22
                          193.23.144.0/24 maxlen: 24
                          185.232.105.0/24 maxlen: 24
                          193.23.145.0/24 maxlen: 24
                          193.23.144.0/22 maxlen: 22
                          185.232.104.0/22 maxlen: 22
                          185.232.104.0/24 maxlen: 24
                          95.131.24.0/24 maxlen: 24
                          95.131.24.0/21 maxlen: 21
                          95.131.31.0/24 maxlen: 24
                          95.131.30.0/24 maxlen: 24
                          95.131.26.0/24 maxlen: 24
                          95.131.29.0/24 maxlen: 24
                          95.131.25.0/24 maxlen: 24
                          87.251.90.0/23 maxlen: 23
                          87.251.91.0/24 maxlen: 24
                          195.14.101.0/24 maxlen: 24
                          195.14.100.0/24 maxlen: 24
                          185.195.169.0/24 maxlen: 24
                          185.148.83.0/24 maxlen: 24
                          185.148.81.0/24 maxlen: 24
                          185.148.80.0/24 maxlen: 24
                          185.148.82.0/24 maxlen: 24
                          178.20.233.0/24 maxlen: 24
                          178.20.232.0/24 maxlen: 24
                          178.20.232.0/21 maxlen: 21
                          178.20.237.0/24 maxlen: 24
                          178.20.236.0/24 maxlen: 24
                          178.20.239.0/24 maxlen: 24
                          178.20.238.0/24 maxlen: 24
                          178.20.234.0/24 maxlen: 24
                          178.20.235.0/24 maxlen: 24
                          2a01:ba80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403257909 (0x18093a35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
        Validity
            Not Before: Jan  1 07:00:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2cd0f77b49c939faee5629f8bcf5884b0707141b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:18:bf:19:9d:52:35:17:64:0a:d1:0c:d2:2b:
                    37:91:5b:85:d0:db:4d:f6:38:90:89:8d:e3:f4:a2:
                    8e:6e:1a:cd:35:a4:be:7f:a8:32:dc:e3:9e:0b:07:
                    19:6d:26:ca:0c:37:ec:a6:b5:fe:43:96:9b:8e:18:
                    d6:3b:98:ce:7d:6f:eb:75:76:3b:c4:97:5f:53:7f:
                    a9:c3:18:ad:81:59:0d:05:02:75:ce:7a:9e:53:59:
                    eb:7a:c8:03:8c:78:fc:81:43:47:a6:29:54:ac:8b:
                    3c:c4:43:ec:1a:0b:e5:1a:94:8f:3e:02:3f:69:a1:
                    c9:c1:28:2c:bb:66:e0:2d:59:12:b0:d8:cc:a3:3b:
                    f9:4c:2c:12:2e:5c:33:15:8e:12:5a:b5:05:87:22:
                    ad:47:e3:f9:05:ba:9c:9f:67:69:2b:08:45:14:6d:
                    eb:7f:f3:8e:54:5c:67:6c:73:00:88:a3:71:b4:00:
                    86:04:6e:43:dc:64:9d:09:2e:72:19:ed:f5:a6:0a:
                    e9:d6:43:0b:61:e2:aa:2b:75:49:5e:31:ac:a8:78:
                    12:09:42:f6:81:bc:05:65:75:88:40:58:1c:87:32:
                    df:98:19:77:f5:60:cd:f7:09:75:c7:96:5b:3e:c1:
                    7e:2e:59:40:7f:aa:9f:dd:f6:bc:56:75:5d:db:b3:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D0:F7:7B:49:C9:39:FA:EE:56:29:F8:BC:F5:88:4B:07:07:14:1B
            X509v3 Authority Key Identifier:
                keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/LND3e0nJOfruVin4vPWISwcHFBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.193.72.0/22
                  87.251.90.0/23
                  91.107.64.0/21
                  92.242.32.0/21
                  92.242.41.0-92.242.43.255
                  92.242.46.0/23
                  95.131.24.0/21
                  95.181.192.0-95.181.197.255
                  95.181.199.0-95.181.207.255
                  130.193.64.0/21
                  176.107.160.0/21
                  178.20.232.0/21
                  178.57.72.0/21
                  185.3.140.0/22
                  185.98.80.0-185.98.85.255
                  185.99.8.0/21
                  185.99.140.0/23
                  185.127.148.0/22
                  185.148.80.0/22
                  185.195.169.0/24
                  185.232.104.0/22
                  185.242.120.0/24
                  185.247.186.0/24
                  193.23.144.0/22
                  195.14.100.0/23
                IPv6:
                  2a01:ba80::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:cd:e1:30:25:b0:2d:22:3c:fc:6f:ad:18:fe:bc:51:2f:25:
         0b:fc:b8:2d:5f:36:a4:08:50:23:ac:b7:66:d3:b4:c8:0e:0a:
         37:92:36:62:bc:ee:76:a5:fd:f9:07:7f:00:70:82:f1:23:d7:
         46:26:26:41:0f:de:b9:b4:90:21:db:40:a4:ee:90:97:4e:ce:
         0c:5c:39:50:77:6a:97:1d:2c:52:19:13:c4:5e:1e:b3:ec:72:
         3b:11:34:19:3d:40:cc:03:0e:2c:49:ba:ff:f5:7d:84:95:fc:
         c2:44:bc:86:d1:2e:4b:c3:07:63:01:0b:e6:2d:3b:2d:d5:61:
         58:10:fe:4f:3c:3c:2a:9a:75:bf:1e:d2:af:a6:0a:f6:ee:d7:
         b8:d5:71:20:66:1a:48:5b:19:1b:81:8f:a5:56:47:c2:00:21:
         b8:fd:22:86:ec:eb:01:4e:5a:6c:88:17:b5:ea:78:65:87:82:
         35:90:b9:fb:3c:bb:22:da:a8:20:5d:af:c2:1b:d3:75:67:f0:
         41:61:fe:5d:f4:8b:ac:82:a4:0d:a2:ba:b5:79:7b:02:46:50:
         c8:53:4b:54:c6:55:e4:d0:ad:84:69:ba:99:64:83:0b:b7:a1:
         4f:cc:cd:64:4d:0c:06:49:33:f8:03:2e:06:75:df:e2:2c:f6:
         44:4d:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:41 2023 by rpki-client on console-fra.rpki-client.org