Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/Mt5h0IUE5276cQhCH_RVtO7k1VA.roa
File:                     Mt5h0IUE5276cQhCH_RVtO7k1VA.roa (raw, json)
Hash identifier:          a9ZLl1zGNSyzUHkitL/8O2g+cYKhoWrVDuflA1PL4C8=
Subject key identifier:   32:DE:61:D0:85:04:E7:6E:FA:71:08:42:1F:F4:55:B4:EE:E4:D5:50
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       018479BBD6C8DC4017E0CD9A7CA4A7539C81
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/Mt5h0IUE5276cQhCH_RVtO7k1VA.roa
Signing time:             Tue 15 Nov 2022 05:21:04 +0000
ROA not before:           Tue 15 Nov 2022 05:21:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197207
IP address blocks:        5.215.0.0/16 maxlen: 18
                          80.242.0.0/20 maxlen: 24
                          5.208.0.0/16 maxlen: 17
                          86.107.0.0/20 maxlen: 20
                          172.80.160.0/19 maxlen: 19
                          130.255.224.0/19 maxlen: 19
                          172.80.192.0/18 maxlen: 24
                          188.229.0.0/17 maxlen: 24
                          5.201.192.0/18 maxlen: 19
                          172.80.128.0/19 maxlen: 19
                          172.80.128.0/18 maxlen: 18
                          130.255.192.0/18 maxlen: 19
                          83.121.0.0/16 maxlen: 17
                          204.18.192.0/18 maxlen: 18
                          5.52.128.0/17 maxlen: 17
                          5.106.128.0/17 maxlen: 17
                          176.65.192.0/19 maxlen: 19
                          176.65.194.0/24 maxlen: 24
                          176.65.193.0/24 maxlen: 24
                          176.65.195.0/24 maxlen: 24
                          5.214.0.0/16 maxlen: 17
                          82.180.224.0/19 maxlen: 19
                          91.133.192.0/18 maxlen: 18
                          83.120.0.0/17 maxlen: 17
                          83.120.0.0/16 maxlen: 19
                          91.133.128.0/18 maxlen: 18
                          91.133.128.0/17 maxlen: 17
                          82.180.192.0/19 maxlen: 19
                          185.5.156.0/22 maxlen: 24
                          82.180.192.0/18 maxlen: 18
                          185.5.156.0/24 maxlen: 24
                          185.5.157.0/24 maxlen: 24
                          185.5.159.0/24 maxlen: 24
                          69.194.64.0/18 maxlen: 19
                          204.18.0.0/18 maxlen: 18
                          204.18.0.0/16 maxlen: 16
                          46.51.92.0/22 maxlen: 22
                          46.51.98.0/24 maxlen: 24
                          46.51.104.0/24 maxlen: 24
                          46.51.105.0/24 maxlen: 24
                          46.51.108.0/23 maxlen: 23
                          46.51.110.0/23 maxlen: 23
                          46.51.112.0/22 maxlen: 22
                          46.51.116.0/22 maxlen: 22
                          46.51.120.0/22 maxlen: 22
                          46.51.124.0/22 maxlen: 22
                          5.52.0.0/17 maxlen: 17
                          5.52.0.0/16 maxlen: 16
                          5.106.0.0/17 maxlen: 24
                          5.106.4.0/24 maxlen: 24
                          5.106.6.0/23 maxlen: 23
                          5.106.0.0/16 maxlen: 21
                          5.106.6.0/24 maxlen: 24
                          5.106.5.0/24 maxlen: 24
                          5.106.11.0/24 maxlen: 24
                          5.106.10.0/24 maxlen: 24
                          5.106.20.0/24 maxlen: 24
                          204.18.128.0/18 maxlen: 18
                          89.45.48.0/20 maxlen: 24
                          89.45.49.0/24 maxlen: 24
                          204.18.64.0/18 maxlen: 18
                          89.45.54.0/24 maxlen: 24
                          89.199.0.0/17 maxlen: 17
                          89.199.0.0/16 maxlen: 16
                          37.98.0.0/18 maxlen: 24
                          164.138.128.0/19 maxlen: 19
                          164.138.128.0/18 maxlen: 19
                          95.64.0.0/17 maxlen: 24
                          46.51.40.0/22 maxlen: 22
                          46.51.44.0/22 maxlen: 22
                          158.58.0.0/17 maxlen: 19
                          89.199.128.0/17 maxlen: 17
                          46.51.80.0/22 maxlen: 22
                          46.51.84.0/22 maxlen: 22
                          5.213.0.0/16 maxlen: 17
                          46.51.88.0/22 maxlen: 22
                          46.51.0.0/17 maxlen: 17
                          46.51.16.0/22 maxlen: 22
                          46.51.20.0/22 maxlen: 22
                          46.51.24.0/22 maxlen: 22
                          46.51.28.0/22 maxlen: 22
                          85.239.192.0/19 maxlen: 19
                          46.51.34.0/24 maxlen: 24
                          46.51.37.0/24 maxlen: 24
                          46.51.36.0/24 maxlen: 24
                          46.51.38.0/24 maxlen: 24
                          46.51.33.0/24 maxlen: 24
                          46.51.36.0/22 maxlen: 22
                          46.51.32.0/22 maxlen: 22
                          37.63.128.0/17 maxlen: 17
                          37.63.128.0/18 maxlen: 18
                          46.164.64.0/18 maxlen: 19
                          89.198.0.0/17 maxlen: 17
                          89.198.0.0/16 maxlen: 16
                          89.198.0.0/15 maxlen: 17
                          109.225.128.0/18 maxlen: 18
                          5.212.0.0/16 maxlen: 19
                          188.212.48.0/20 maxlen: 24
                          37.63.192.0/18 maxlen: 18
                          89.198.128.0/17 maxlen: 17
                          188.210.192.0/20 maxlen: 20
                          185.22.28.0/24 maxlen: 24
                          185.22.29.0/24 maxlen: 24
                          192.15.128.0/17 maxlen: 17
                          91.251.0.0/17 maxlen: 18
                          83.123.0.0/16 maxlen: 18
                          91.251.0.0/16 maxlen: 18
                          5.22.0.0/17 maxlen: 18
                          5.218.0.0/16 maxlen: 17
                          93.110.64.0/18 maxlen: 18
                          31.2.128.0/17 maxlen: 18
                          5.211.0.0/16 maxlen: 17
                          93.110.0.0/20 maxlen: 20
                          93.110.0.0/16 maxlen: 22
                          83.123.129.0/24 maxlen: 24
                          91.251.128.0/17 maxlen: 18
                          188.122.96.0/19 maxlen: 21
                          86.55.0.0/17 maxlen: 17
                          86.55.0.0/16 maxlen: 16
                          113.203.64.0/18 maxlen: 18
                          5.210.0.0/16 maxlen: 17
                          109.108.160.0/19 maxlen: 19
                          113.203.0.0/18 maxlen: 18
                          113.203.0.0/17 maxlen: 17
                          94.101.240.0/20 maxlen: 24
                          188.209.192.0/20 maxlen: 24
                          37.129.0.0/17 maxlen: 18
                          37.129.0.0/16 maxlen: 18
                          37.129.128.0/17 maxlen: 18
                          192.15.0.0/17 maxlen: 17
                          192.15.0.0/16 maxlen: 16
                          86.55.128.0/17 maxlen: 17
                          188.210.64.0/20 maxlen: 20
                          5.217.0.0/16 maxlen: 18
                          188.229.116.0/24 maxlen: 24
                          86.107.208.0/20 maxlen: 20
                          188.229.24.0/23 maxlen: 23
                          86.107.209.0/24 maxlen: 24
                          188.229.24.0/24 maxlen: 24
                          172.80.253.0/24 maxlen: 24
                          172.80.255.0/24 maxlen: 24
                          172.80.254.0/24 maxlen: 24
                          5.209.0.0/16 maxlen: 17
                          89.196.0.0/16 maxlen: 17
                          5.250.0.0/17 maxlen: 18
                          83.122.0.0/16 maxlen: 18
                          5.216.0.0/16 maxlen: 17
                          2a02:4540:e000::/43 maxlen: 43
                          2a02:4540:7000::/43 maxlen: 43
                          2a02:4540:c000::/43 maxlen: 43
                          2a02:4540::100/120 maxlen: 120
                          2a02:4544:e0::/46 maxlen: 46
                          2a02:4540:7044::/46 maxlen: 46
                          2a02:4545:e0::/56 maxlen: 56
                          2a02:4540:c4::/46 maxlen: 46
                          2a02:4545:e0::/46 maxlen: 46
                          2a02:4540:e030::/44 maxlen: 44
                          2a02:4540:c030::/44 maxlen: 44
                          2a02:4540::/42 maxlen: 42
                          2a02:4540:9010::/49 maxlen: 49
                          2a02:4540:7040::/48 maxlen: 48
                          2a02:4540:60::/44 maxlen: 44
                          2a02:4540:7040::/49 maxlen: 49
                          2a02:4544:e0:300::/112 maxlen: 112
                          2a02:4540:9010::/44 maxlen: 44
                          2a02:4540:5010::/44 maxlen: 44
                          2a02:4540:e010::/44 maxlen: 44
                          2a02:4540:e020::/64 maxlen: 64
                          2a02:4540:e020::/48 maxlen: 48
                          2a02:4540:7040::/46 maxlen: 46
                          2a02:4540:5040::/46 maxlen: 46
                          2a02:4540:c040::/46 maxlen: 46
                          2a02:4540:9040::/46 maxlen: 46
                          2a02:4540:e040::/46 maxlen: 46
                          2a02:4540:c0::/46 maxlen: 46
                          2a02:4544:e0:500::/112 maxlen: 112
                          2a02:4540:40::/44 maxlen: 44
                          2a02:4544:e4::/46 maxlen: 46
                          2a02:4540:70::/44 maxlen: 44
                          2a02:4540:7048::/46 maxlen: 46
                          2a02:4540:6fc0::/64 maxlen: 64
                          2a02:4540:c020::/44 maxlen: 44
                          2a02:4545:e0::b/128 maxlen: 128
                          2a02:4545:e0::c/128 maxlen: 128
                          2a02:4540:9000::/49 maxlen: 49
                          2a02:4545:e0::/48 maxlen: 48
                          2a02:4540:50::/44 maxlen: 44
                          2a02:4544:e8::/46 maxlen: 46
                          2a02:4540:100::/46 maxlen: 46
                          2a02:4540:5000::/44 maxlen: 44
                          2a02:4540:9000::/44 maxlen: 44
                          2a02:4540:e000::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:79:bb:d6:c8:dc:40:17:e0:cd:9a:7c:a4:a7:53:9c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: Nov 15 05:21:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32de61d08504e76efa7108421ff455b4eee4d550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:10:29:e1:fb:a0:b4:e1:e4:b6:e3:ee:d4:
                    c8:62:8c:c2:f3:0c:1a:70:15:72:70:24:6a:70:a1:
                    d7:06:e9:d1:08:8b:5d:b8:b9:d6:e1:33:ff:00:cf:
                    31:68:e7:0a:61:b1:8c:13:27:3e:73:a0:fb:d6:6e:
                    e8:97:a4:e5:a7:65:56:10:a4:05:80:00:c2:58:97:
                    72:af:6f:8f:ae:4a:9d:20:aa:65:d8:ed:7a:d2:ed:
                    bb:5d:63:2a:0d:9d:b0:c2:8a:16:15:cc:76:01:f4:
                    0e:3c:14:e5:76:da:3c:15:60:2c:17:72:19:bd:33:
                    df:6e:2d:49:3c:ff:25:73:42:1b:c1:10:60:f7:b7:
                    2f:7a:10:9c:32:4d:37:fd:dd:35:5e:26:c4:bc:b6:
                    a5:76:c3:e4:9a:c3:06:e2:c0:c8:ee:bd:9c:13:c3:
                    c5:62:57:d2:2a:b5:a6:4a:e8:ee:9f:f1:11:55:43:
                    e5:11:cd:9b:3d:91:68:93:a7:e8:85:a4:c3:61:58:
                    82:29:b3:b5:a9:cd:da:cc:c3:11:59:91:03:37:35:
                    19:ff:5d:8f:69:37:75:9d:80:72:e8:58:67:62:36:
                    c8:77:fb:8f:89:ed:c3:a7:d2:d8:f3:a4:04:94:0e:
                    24:d1:73:7f:ea:ad:cf:5b:e5:a4:ad:f5:2f:a1:d6:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DE:61:D0:85:04:E7:6E:FA:71:08:42:1F:F4:55:B4:EE:E4:D5:50
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/Mt5h0IUE5276cQhCH_RVtO7k1VA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.22.0.0/17
                  5.52.0.0/16
                  5.106.0.0/16
                  5.201.192.0/18
                  5.208.0.0-5.218.255.255
                  5.250.0.0/17
                  31.2.128.0/17
                  37.63.128.0/17
                  37.98.0.0/18
                  37.129.0.0/16
                  46.51.0.0/17
                  46.164.64.0/18
                  69.194.64.0/18
                  80.242.0.0/20
                  82.180.192.0/18
                  83.120.0.0/14
                  85.239.192.0/19
                  86.55.0.0/16
                  86.107.0.0/20
                  86.107.208.0/20
                  89.45.48.0/20
                  89.196.0.0/16
                  89.198.0.0/15
                  91.133.128.0/17
                  91.251.0.0/16
                  93.110.0.0/16
                  94.101.240.0/20
                  95.64.0.0/17
                  109.108.160.0/19
                  109.225.128.0/18
                  113.203.0.0/17
                  130.255.192.0/18
                  158.58.0.0/17
                  164.138.128.0/18
                  172.80.128.0/17
                  176.65.192.0/19
                  185.5.156.0/22
                  185.22.28.0/23
                  188.122.96.0/19
                  188.209.192.0/20
                  188.210.64.0/20
                  188.210.192.0/20
                  188.212.48.0/20
                  188.229.0.0/17
                  192.15.0.0/16
                  204.18.0.0/16
                IPv6:
                  2a02:4540::/41
                  2a02:4540:c0::/45
                  2a02:4540:100::/46
                  2a02:4540:5000::/43
                  2a02:4540:5040::/46
                  2a02:4540:6fc0::/64
                  2a02:4540:7000::/43
                  2a02:4540:7040::-2a02:4540:704b:ffff:ffff:ffff:ffff:ffff
                  2a02:4540:9000::/43
                  2a02:4540:9040::/46
                  2a02:4540:c000::-2a02:4540:c043:ffff:ffff:ffff:ffff:ffff
                  2a02:4540:e000::-2a02:4540:e020:ffff:ffff:ffff:ffff:ffff
                  2a02:4540:e030::-2a02:4540:e043:ffff:ffff:ffff:ffff:ffff
                  2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
                  2a02:4545:e0::/46

    Signature Algorithm: sha256WithRSAEncryption
         8b:62:3f:f4:24:81:aa:e4:59:52:af:3f:6f:13:25:c1:f8:f3:
         db:ac:df:31:8d:d4:95:06:40:07:cf:16:32:d4:f9:06:96:9a:
         53:0b:73:63:77:05:fe:0e:bf:19:51:ae:d9:a4:a3:53:08:06:
         27:9a:5d:ea:b6:d6:4f:a9:6f:e8:bf:74:d5:f8:49:f5:28:57:
         2e:d1:bc:43:11:3b:56:2f:d4:37:af:c3:cf:67:e5:49:1b:63:
         b0:9a:aa:86:03:ad:91:41:bb:1c:bd:0e:ff:80:29:8b:eb:05:
         a1:7d:26:69:01:e0:2a:37:a3:cf:9c:bf:ab:e7:48:11:d2:4e:
         4f:a3:fa:6e:a2:b1:ef:84:91:67:12:f2:8f:31:c2:54:83:61:
         6c:df:9a:22:9a:fd:26:10:84:a6:1a:ae:79:4a:d3:c4:92:d6:
         10:87:75:d2:32:b8:10:1b:ad:4f:61:39:d1:38:85:1f:2f:98:
         7c:38:ba:2e:c2:a5:50:16:83:92:c7:f8:6c:14:be:4f:72:1f:
         1c:99:64:13:ba:ea:05:b5:f2:85:cb:bc:20:03:7d:09:69:b0:
         16:47:f6:07:1d:c7:3e:39:65:c0:e2:fe:48:17:86:a1:e4:00:
         d8:fd:08:9c:c5:c7:30:7a:4b:d0:d0:eb:1a:ec:b3:e6:8a:d9:
         de:d8:d8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:15 2024 by rpki-client on console-fra.rpki-client.org