Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/2YM3ebA1kbsmJ67Y0AZjKNY90KY.roa
File:                     2YM3ebA1kbsmJ67Y0AZjKNY90KY.roa (raw, json)
Hash identifier:          tCE65X0C3oJVuqF2jJYlAEyaIeu28CDlTN8cMw5ikB4=
Subject key identifier:   D9:83:37:79:B0:35:91:BB:26:27:AE:D8:D0:06:63:28:D6:3D:D0:A6
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       0183C15E3944FD6AD1F628DEB422724A8680
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/2YM3ebA1kbsmJ67Y0AZjKNY90KY.roa
Signing time:             Mon 10 Oct 2022 10:08:41 +0000
ROA not before:           Mon 10 Oct 2022 10:08:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29286
IP address blocks:        88.202.4.0/24 maxlen: 24
                          88.202.9.0/24 maxlen: 24
                          88.202.8.0/24 maxlen: 24
                          88.202.5.0/24 maxlen: 24
                          88.202.7.0/24 maxlen: 24
                          88.202.6.0/24 maxlen: 24
                          88.202.18.0/24 maxlen: 24
                          84.254.135.0/24 maxlen: 24
                          84.254.133.0/24 maxlen: 24
                          84.254.139.0/24 maxlen: 24
                          84.254.138.0/24 maxlen: 24
                          84.254.143.0/24 maxlen: 24
                          84.254.141.0/24 maxlen: 24
                          84.254.152.0/24 maxlen: 24
                          84.254.150.0/24 maxlen: 24
                          84.254.149.0/24 maxlen: 24
                          84.254.151.0/24 maxlen: 24
                          84.254.148.0/24 maxlen: 24
                          84.254.159.0/24 maxlen: 24
                          84.254.157.0/24 maxlen: 24
                          84.254.156.0/24 maxlen: 24
                          84.254.158.0/24 maxlen: 24
                          84.254.153.0/24 maxlen: 24
                          84.254.155.0/24 maxlen: 24
                          84.254.154.0/24 maxlen: 24
                          84.254.163.0/24 maxlen: 24
                          84.254.160.0/24 maxlen: 24
                          84.254.162.0/24 maxlen: 24
                          84.254.161.0/24 maxlen: 24
                          84.254.166.0/24 maxlen: 24
                          84.254.171.0/24 maxlen: 24
                          84.254.170.0/24 maxlen: 24
                          84.254.172.0/24 maxlen: 24
                          84.254.167.0/24 maxlen: 24
                          84.254.169.0/24 maxlen: 24
                          84.254.168.0/24 maxlen: 24
                          84.254.174.0/24 maxlen: 24
                          84.254.173.0/24 maxlen: 24
                          84.254.175.0/24 maxlen: 24
                          176.227.128.0/24 maxlen: 24
                          176.227.130.0/24 maxlen: 24
                          176.227.139.0/24 maxlen: 24
                          176.227.138.0/24 maxlen: 24
                          176.227.137.0/24 maxlen: 24
                          84.254.132.0/24 maxlen: 24
                          176.227.142.0/24 maxlen: 24
                          84.254.129.0/24 maxlen: 24
                          84.254.128.0/24 maxlen: 24
                          84.254.131.0/24 maxlen: 24
                          176.227.143.0/24 maxlen: 24
                          176.227.141.0/24 maxlen: 24
                          176.227.140.0/24 maxlen: 24
                          84.254.190.0/24 maxlen: 24
                          95.210.136.0/24 maxlen: 24
                          95.210.138.0/24 maxlen: 24
                          95.210.140.0/24 maxlen: 24
                          95.210.143.0/24 maxlen: 24
                          95.210.142.0/24 maxlen: 24
                          95.210.152.0/24 maxlen: 24
                          95.210.157.0/24 maxlen: 24
                          95.210.156.0/24 maxlen: 24
                          95.210.169.0/24 maxlen: 24
                          95.210.255.0/24 maxlen: 24
                          95.210.254.0/24 maxlen: 24
                          5.61.197.0/24 maxlen: 24
                          5.61.199.0/24 maxlen: 24
                          5.61.198.0/24 maxlen: 24
                          5.61.193.0/24 maxlen: 24
                          5.61.195.0/24 maxlen: 24
                          95.210.11.0/24 maxlen: 24
                          95.210.10.0/24 maxlen: 24
                          95.210.7.0/24 maxlen: 24
                          95.210.12.0/24 maxlen: 24
                          95.210.13.0/24 maxlen: 24
                          95.210.79.0/24 maxlen: 24
                          95.210.82.0/24 maxlen: 24
                          95.210.81.0/24 maxlen: 24
                          95.210.94.0/24 maxlen: 24
                          95.210.105.0/24 maxlen: 24
                          95.210.104.0/24 maxlen: 24
                          95.210.110.0/24 maxlen: 24
                          95.210.109.0/24 maxlen: 24
                          95.210.108.0/24 maxlen: 24
                          95.210.107.0/24 maxlen: 24
                          95.210.128.0/24 maxlen: 24
                          95.210.37.0/24 maxlen: 24
                          95.210.36.0/24 maxlen: 24
                          95.210.35.0/24 maxlen: 24
                          95.210.34.0/24 maxlen: 24
                          95.210.43.0/24 maxlen: 24
                          95.210.40.0/24 maxlen: 24
                          95.210.42.0/24 maxlen: 24
                          95.210.55.0/24 maxlen: 24
                          95.210.61.0/24 maxlen: 24
                          95.210.63.0/24 maxlen: 24
                          95.210.71.0/24 maxlen: 24
                          95.210.68.0/24 maxlen: 24
                          95.210.70.0/24 maxlen: 24
                          95.210.69.0/24 maxlen: 24
                          95.210.78.0/24 maxlen: 24
                          95.210.75.0/24 maxlen: 24
                          95.210.77.0/24 maxlen: 24
                          95.210.76.0/24 maxlen: 24
                          95.210.73.0/24 maxlen: 24
                          95.210.72.0/24 maxlen: 24
                          88.202.116.0/22 maxlen: 22
                          5.175.64.0/20 maxlen: 20
                          88.202.68.0/23 maxlen: 23
                          88.202.70.0/23 maxlen: 23
                          88.202.76.0/23 maxlen: 23
                          88.202.72.0/22 maxlen: 22
                          213.209.164.0/24 maxlen: 24
                          213.209.163.0/24 maxlen: 24
                          213.209.161.0/24 maxlen: 24
                          213.209.162.0/24 maxlen: 24
                          213.209.169.0/24 maxlen: 24
                          213.209.170.0/24 maxlen: 24
                          88.202.0.0/17 maxlen: 17
                          88.202.0.0/18 maxlen: 18
                          84.254.164.0/23 maxlen: 23
                          84.254.176.0/21 maxlen: 21
                          84.254.184.0/22 maxlen: 22
                          176.227.128.0/20 maxlen: 20
                          84.254.128.0/18 maxlen: 18
                          84.254.188.0/23 maxlen: 23
                          95.210.192.0/20 maxlen: 20
                          95.210.192.0/19 maxlen: 19
                          95.210.224.0/20 maxlen: 20
                          95.210.160.0/19 maxlen: 19
                          95.210.240.0/21 maxlen: 21
                          95.210.252.0/23 maxlen: 23
                          95.210.248.0/22 maxlen: 22
                          5.61.192.0/21 maxlen: 21
                          95.210.0.0/22 maxlen: 22
                          95.210.8.0/21 maxlen: 21
                          95.210.0.0/16 maxlen: 16
                          213.209.184.0/22 maxlen: 22
                          95.210.112.0/22 maxlen: 22
                          95.210.116.0/22 maxlen: 22
                          185.28.64.0/24 maxlen: 24
                          95.210.32.0/23 maxlen: 23
                          95.210.44.0/23 maxlen: 23
                          185.28.65.0/24 maxlen: 24
                          95.210.46.0/23 maxlen: 23
                          95.210.48.0/22 maxlen: 22
                          95.210.64.0/20 maxlen: 20
                          88.202.85.0/24 maxlen: 24
                          88.202.81.0/24 maxlen: 24
                          88.202.84.0/24 maxlen: 24
                          88.202.79.0/24 maxlen: 24
                          88.202.88.0/24 maxlen: 24
                          88.202.90.0/24 maxlen: 24
                          88.202.87.0/24 maxlen: 24
                          88.202.86.0/24 maxlen: 24
                          88.202.96.0/24 maxlen: 24
                          88.202.95.0/24 maxlen: 24
                          88.202.98.0/24 maxlen: 24
                          88.202.97.0/24 maxlen: 24
                          88.202.93.0/24 maxlen: 24
                          88.202.105.0/24 maxlen: 24
                          88.202.103.0/24 maxlen: 24
                          88.202.102.0/24 maxlen: 24
                          88.202.104.0/24 maxlen: 24
                          88.202.99.0/24 maxlen: 24
                          88.202.101.0/24 maxlen: 24
                          88.202.100.0/24 maxlen: 24
                          88.202.112.0/24 maxlen: 24
                          88.202.106.0/24 maxlen: 24
                          88.202.107.0/24 maxlen: 24
                          88.202.122.0/24 maxlen: 24
                          88.202.121.0/24 maxlen: 24
                          88.202.30.0/24 maxlen: 24
                          88.202.32.0/24 maxlen: 24
                          5.175.64.0/24 maxlen: 24
                          88.202.51.0/24 maxlen: 24
                          88.202.47.0/24 maxlen: 24
                          88.202.46.0/24 maxlen: 24
                          88.202.48.0/24 maxlen: 24
                          5.175.68.0/24 maxlen: 24
                          5.175.71.0/24 maxlen: 24
                          5.175.70.0/24 maxlen: 24
                          5.175.67.0/24 maxlen: 24
                          5.175.69.0/24 maxlen: 24
                          88.202.55.0/24 maxlen: 24
                          5.175.66.0/24 maxlen: 24
                          5.175.65.0/24 maxlen: 24
                          5.175.74.0/24 maxlen: 24
                          5.175.78.0/24 maxlen: 24
                          5.175.77.0/24 maxlen: 24
                          88.202.64.0/24 maxlen: 24
                          88.202.61.0/24 maxlen: 24
                          5.175.76.0/24 maxlen: 24
                          88.202.63.0/24 maxlen: 24
                          5.175.75.0/24 maxlen: 24
                          88.202.62.0/24 maxlen: 24
                          5.175.73.0/24 maxlen: 24
                          5.175.72.0/24 maxlen: 24
                          88.202.66.0/24 maxlen: 24
                          5.175.79.0/24 maxlen: 24
                          213.209.160.0/19 maxlen: 19
                          213.209.172.0/22 maxlen: 24
                          2a00:ca0:201e::/48 maxlen: 48
                          2a00:ca0:2008::/48 maxlen: 48
                          2a00:ca0:2005::/48 maxlen: 48
                          2a00:ca0:2002::/48 maxlen: 48
                          2a00:ca0:2003::/48 maxlen: 48
                          2a00:ca0:2000::/48 maxlen: 48
                          2a00:ca0:2012::/48 maxlen: 48
                          2a00:ca0:200c::/48 maxlen: 48
                          2a00:ca0:200f::/48 maxlen: 48
                          2a00:ca0:2006::/48 maxlen: 48
                          2a00:ca0:200a::/48 maxlen: 48
                          2a00:ca0:2004::/48 maxlen: 48
                          2a00:ca0:2001::/48 maxlen: 48
                          2a00:ca0:2016::/48 maxlen: 48
                          2a00:ca0::/32 maxlen: 32
                          2a00:ca0:2013::/48 maxlen: 48
                          2a00:ca0:2017::/48 maxlen: 48
                          2a00:ca0:200e::/48 maxlen: 48
                          2a00:ca0:201d::/48 maxlen: 48
                          2a00:ca0:201a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c1:5e:39:44:fd:6a:d1:f6:28:de:b4:22:72:4a:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Oct 10 10:08:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d9833779b03591bb2627aed8d0066328d63dd0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:b1:a9:2e:d1:37:4b:02:e5:44:60:53:e9:
                    73:b8:27:c5:4a:5a:0b:f3:5c:5c:7f:75:db:8b:a2:
                    44:04:5b:fa:be:fa:7c:bd:a2:a3:d8:b1:2e:e8:69:
                    76:5f:7a:60:4a:69:26:8d:76:49:2e:0e:b7:5a:22:
                    49:0b:e4:83:e6:94:96:10:c0:49:e1:32:e5:b7:37:
                    75:c1:7a:ef:52:34:01:42:c3:3d:1b:ef:93:ae:5e:
                    4a:47:7e:fa:62:cf:0b:f8:06:02:6f:9d:92:5e:f6:
                    a7:95:83:b0:44:a4:3a:d3:c9:49:df:f3:a6:70:83:
                    94:7d:dc:9c:59:06:7b:f5:80:da:9d:3f:d0:de:d5:
                    3a:91:4f:34:d1:d8:01:b6:8e:a3:de:d7:67:a3:bf:
                    7e:d4:ac:57:a8:84:3a:31:3e:2d:28:ee:7d:02:7f:
                    09:50:85:fb:cd:38:16:7b:cb:eb:52:3c:ce:63:15:
                    89:a3:68:5f:66:0a:5c:3b:79:9d:d0:04:14:e1:e4:
                    37:de:03:96:da:a3:7b:70:51:69:65:08:f6:ae:05:
                    f5:f3:b9:2b:a4:92:d0:b5:cf:a1:c1:c9:8d:57:f4:
                    65:46:7f:f4:c6:ab:8e:36:b9:29:54:b7:9c:f7:a5:
                    33:a0:f7:ab:54:69:ff:58:10:bd:e7:eb:75:54:3c:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:83:37:79:B0:35:91:BB:26:27:AE:D8:D0:06:63:28:D6:3D:D0:A6
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/2YM3ebA1kbsmJ67Y0AZjKNY90KY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.61.192.0/21
                  5.175.64.0/20
                  84.254.128.0/18
                  88.202.0.0/17
                  95.210.0.0/16
                  176.227.128.0/20
                  185.28.64.0/23
                  213.209.160.0/19
                IPv6:
                  2a00:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:1f:e4:d5:77:31:ed:49:43:20:cd:ff:48:97:fe:b0:63:14:
         f6:85:8c:72:b7:99:00:eb:ba:c1:34:43:e5:50:6a:67:3d:25:
         25:3a:92:e3:17:7b:57:8e:2f:2c:e7:16:2e:06:4d:e0:22:52:
         e1:b3:7a:fc:65:06:63:8c:71:f7:6d:81:df:79:33:b2:e7:06:
         fc:48:02:fc:ec:64:8d:ae:71:7c:3e:90:5f:4e:38:81:b6:88:
         35:9c:46:ca:a6:24:2f:58:4d:9d:01:03:e7:23:55:c6:ff:64:
         3d:fc:ec:56:e2:ec:09:27:43:a4:ba:9d:d9:8a:49:48:20:3f:
         bd:b8:64:28:be:05:01:cb:89:b4:ee:55:5c:ba:45:57:5f:bb:
         a1:fb:6a:76:f1:30:f1:61:9a:c3:4a:22:16:55:48:2c:4e:d8:
         7d:c5:ad:7f:76:47:c4:56:77:ac:e5:dd:93:76:4b:f6:bf:5c:
         17:a0:61:ca:45:68:57:53:75:56:95:9f:5f:06:29:53:50:48:
         20:df:18:ac:f0:fc:2f:14:e1:4a:5c:a8:eb:ec:01:b3:7d:49:
         0c:b1:8f:f4:ce:a1:a0:7b:db:6f:35:b7:c4:cb:d3:9f:79:d3:
         40:c4:c9:d1:d4:e4:dd:ab:0b:c9:50:fd:1a:41:4f:40:94:ab:
         6f:b0:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:54:14 2025 by rpki-client