Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/PSWJtKz8_PYTXvzFIW8ptF-SWd8.roa
File:                     PSWJtKz8_PYTXvzFIW8ptF-SWd8.roa (raw, json)
Hash identifier:          B5uePmiWu1C7gEKsDBC/Q1AtyuantOJ0sBQHBa3danQ=
Subject key identifier:   3D:25:89:B4:AC:FC:FC:F6:13:5E:FC:C5:21:6F:29:B4:5F:92:59:DF
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       0183F50BC26994D953CEB2C38B6E5BEF0F36
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/PSWJtKz8_PYTXvzFIW8ptF-SWd8.roa
Signing time:             Thu 20 Oct 2022 10:58:52 +0000
ROA not before:           Thu 20 Oct 2022 10:58:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47394
IP address blocks:        46.255.144.0/24 maxlen: 24
                          46.255.144.0/22 maxlen: 22
                          46.255.144.0/21 maxlen: 21
                          46.255.145.0/24 maxlen: 24
                          95.107.150.0/24 maxlen: 24
                          95.107.146.0/23 maxlen: 23
                          95.107.157.0/24 maxlen: 24
                          95.107.159.0/24 maxlen: 24
                          95.107.156.0/24 maxlen: 24
                          95.107.162.0/24 maxlen: 24
                          95.107.164.0/24 maxlen: 24
                          95.107.165.0/24 maxlen: 24
                          95.107.166.0/24 maxlen: 24
                          95.107.160.0/22 maxlen: 22
                          95.107.160.0/21 maxlen: 21
                          95.107.160.0/24 maxlen: 24
                          95.107.162.0/23 maxlen: 23
                          95.107.164.0/22 maxlen: 22
                          95.107.172.0/23 maxlen: 23
                          95.107.168.0/22 maxlen: 22
                          95.107.167.0/24 maxlen: 24
                          95.107.168.0/23 maxlen: 23
                          95.107.170.0/23 maxlen: 23
                          95.107.176.0/21 maxlen: 21
                          95.107.174.0/24 maxlen: 24
                          95.107.177.0/24 maxlen: 24
                          95.107.184.0/22 maxlen: 22
                          95.107.182.0/24 maxlen: 24
                          95.107.184.0/21 maxlen: 21
                          95.107.192.0/24 maxlen: 24
                          95.107.188.0/22 maxlen: 22
                          95.107.188.0/24 maxlen: 24
                          95.107.192.0/22 maxlen: 22
                          95.107.196.0/22 maxlen: 22
                          95.107.195.0/24 maxlen: 24
                          95.107.196.0/23 maxlen: 23
                          95.107.196.0/24 maxlen: 24
                          95.107.198.0/23 maxlen: 23
                          95.107.193.0/24 maxlen: 24
                          95.107.194.0/24 maxlen: 24
                          95.107.194.0/23 maxlen: 23
                          46.255.148.0/24 maxlen: 24
                          46.255.149.0/24 maxlen: 24
                          46.255.150.0/24 maxlen: 24
                          46.255.151.0/24 maxlen: 24
                          46.255.146.0/24 maxlen: 24
                          46.255.147.0/24 maxlen: 24
                          46.255.148.0/22 maxlen: 22
                          95.107.128.0/21 maxlen: 21
                          95.107.129.0/24 maxlen: 24
                          95.107.132.0/24 maxlen: 24
                          95.107.136.0/24 maxlen: 24
                          95.107.135.0/24 maxlen: 24
                          95.107.136.0/21 maxlen: 21
                          95.107.144.0/23 maxlen: 23
                          95.107.141.0/24 maxlen: 24
                          185.118.148.0/22 maxlen: 22
                          141.8.200.0/21 maxlen: 21
                          185.122.228.0/24 maxlen: 24
                          185.122.228.0/23 maxlen: 23
                          185.122.228.0/22 maxlen: 22
                          95.107.254.0/23 maxlen: 23
                          95.107.200.0/24 maxlen: 24
                          95.107.201.0/24 maxlen: 24
                          95.107.200.0/21 maxlen: 21
                          95.107.204.0/22 maxlen: 22
                          95.107.202.0/23 maxlen: 23
                          95.107.212.0/23 maxlen: 23
                          95.107.212.0/24 maxlen: 24
                          95.107.209.0/24 maxlen: 24
                          95.107.212.0/22 maxlen: 22
                          95.107.208.0/23 maxlen: 23
                          95.107.208.0/21 maxlen: 21
                          95.107.208.0/22 maxlen: 22
                          95.107.208.0/20 maxlen: 20
                          95.107.216.0/22 maxlen: 22
                          95.107.216.0/21 maxlen: 21
                          95.107.216.0/23 maxlen: 23
                          95.107.218.0/23 maxlen: 23
                          95.107.224.0/20 maxlen: 20
                          95.107.224.0/22 maxlen: 22
                          95.107.220.0/23 maxlen: 23
                          95.107.222.0/23 maxlen: 23
                          95.107.220.0/22 maxlen: 22
                          95.107.228.0/24 maxlen: 24
                          95.107.228.0/22 maxlen: 22
                          95.107.232.0/22 maxlen: 22
                          95.107.240.0/23 maxlen: 23
                          95.107.238.0/23 maxlen: 23
                          95.107.240.0/22 maxlen: 22
                          95.107.234.0/23 maxlen: 23
                          95.107.236.0/22 maxlen: 22
                          95.107.240.0/20 maxlen: 20
                          95.107.244.0/22 maxlen: 22
                          95.107.252.0/22 maxlen: 22
                          95.107.248.0/24 maxlen: 24
                          95.107.248.0/23 maxlen: 23
                          95.107.248.0/22 maxlen: 22
                          2a03:8480::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f5:0b:c2:69:94:d9:53:ce:b2:c3:8b:6e:5b:ef:0f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Oct 20 10:58:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d2589b4acfcfcf6135efcc5216f29b45f9259df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:27:6f:d1:99:24:8d:a4:7d:f2:0a:49:7d:
                    dc:3f:b5:6d:67:9a:a9:8a:53:b1:38:f7:ab:e8:79:
                    3c:f8:d5:cb:91:c2:f6:93:81:d9:19:58:94:c9:69:
                    4a:5c:51:65:00:08:8a:07:ad:50:66:00:e5:f9:81:
                    7c:3d:c6:37:e7:f2:6e:f1:82:f1:88:4b:7f:89:26:
                    18:a2:74:7d:ed:80:4a:d9:23:4b:82:f2:04:7c:db:
                    d0:2b:92:aa:a4:a0:6c:69:cb:ae:e0:b3:0c:b6:3d:
                    64:f7:f9:b4:8e:64:46:1e:9e:b6:2e:a8:83:30:3e:
                    69:bd:87:6e:f8:32:cb:48:b1:37:7f:10:17:54:2b:
                    97:7c:7c:2e:10:a4:63:0e:d5:e9:14:5f:dc:53:93:
                    1f:10:01:d0:fd:5f:a4:4b:c5:53:2b:26:f5:1f:91:
                    d2:72:f5:25:3c:14:64:64:26:05:03:e1:84:a3:de:
                    4e:1e:a1:5c:c4:3e:cb:bc:88:0a:c0:98:0d:71:6b:
                    98:ad:95:b2:e1:c1:e0:2e:1c:cd:b6:ce:c1:b1:20:
                    2e:9a:64:91:42:dc:e6:be:f3:11:0b:d9:93:68:9e:
                    8a:23:44:d3:ad:83:a2:14:a0:25:17:c4:6e:9e:b2:
                    08:b5:0f:dd:56:37:f4:25:eb:44:83:10:7a:d2:de:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:89:B4:AC:FC:FC:F6:13:5E:FC:C5:21:6F:29:B4:5F:92:59:DF
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/PSWJtKz8_PYTXvzFIW8ptF-SWd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.255.144.0/21
                  95.107.128.0-95.107.147.255
                  95.107.150.0/24
                  95.107.156.0/23
                  95.107.159.0-95.107.174.255
                  95.107.176.0-95.107.255.255
                  141.8.200.0/21
                  185.118.148.0/22
                  185.122.228.0/22
                IPv6:
                  2a03:8480::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:80:d6:5b:5e:6e:36:6c:3f:a0:c4:c0:c0:d9:7b:0a:3d:f2:
         e1:0d:9b:ef:12:00:4f:6c:e5:96:75:44:e1:50:dd:b8:b7:28:
         d9:26:d4:a9:20:0d:b1:a4:f2:34:32:da:bf:52:e0:43:7d:d6:
         60:f7:e7:d0:0d:09:29:db:6c:7d:9b:2e:59:3b:b5:75:7e:6a:
         c4:b0:57:78:2d:23:92:0c:d1:dc:43:6c:d5:16:69:6f:ab:b7:
         e2:a7:31:9f:de:29:89:ba:f0:10:6e:03:1b:df:4e:97:b0:de:
         d8:e9:f8:81:8d:14:b0:8f:d6:a7:7d:42:69:86:60:05:7d:ab:
         16:d0:83:19:f9:e0:4f:1a:fe:3f:16:ad:53:60:e5:3d:33:5f:
         61:b3:50:99:99:d4:ec:e1:70:1b:ee:6d:0c:48:0b:1c:ad:b6:
         87:68:e9:83:1e:d4:1f:a7:6b:14:bc:79:12:d1:a8:d6:c4:b2:
         32:81:9b:54:76:5e:16:59:4e:49:98:2a:5d:14:d2:5d:40:a7:
         33:18:94:af:92:73:88:50:ca:45:ea:85:76:8d:a7:e3:00:82:
         6c:2c:f5:13:8e:83:8b:35:12:16:4c:14:24:1c:bf:25:3f:c1:
         9a:5b:3a:a9:67:4d:fa:57:8c:d3:b5:92:02:dc:e1:26:93:c7:
         e2:b4:25:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:29 2023 by rpki-client on console-fra.rpki-client.org