Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/hAOLv_W07nswkx2dUa4QWLoicp8.roa
File:                     hAOLv_W07nswkx2dUa4QWLoicp8.roa (raw, json)
Hash identifier:          bnUzW5v2b2CaADx+RcU136eA063CIL4bRkBKVUZryQw=
Subject key identifier:   84:03:8B:BF:F5:B4:EE:7B:30:93:1D:9D:51:AE:10:58:BA:22:72:9F
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       0184D1ED4F0A310BE8E2229A1E27BB0C156D
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/hAOLv_W07nswkx2dUa4QWLoicp8.roa
Signing time:             Fri 02 Dec 2022 08:21:41 +0000
ROA not before:           Fri 02 Dec 2022 08:21:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29286
IP address blocks:        88.202.4.0/24 maxlen: 24
                          88.202.9.0/24 maxlen: 24
                          88.202.8.0/24 maxlen: 24
                          88.202.5.0/24 maxlen: 24
                          88.202.7.0/24 maxlen: 24
                          88.202.6.0/24 maxlen: 24
                          88.202.18.0/24 maxlen: 24
                          84.254.135.0/24 maxlen: 24
                          84.254.133.0/24 maxlen: 24
                          84.254.139.0/24 maxlen: 24
                          84.254.138.0/24 maxlen: 24
                          84.254.143.0/24 maxlen: 24
                          84.254.141.0/24 maxlen: 24
                          84.254.140.0/24 maxlen: 24
                          84.254.152.0/24 maxlen: 24
                          84.254.150.0/24 maxlen: 24
                          84.254.149.0/24 maxlen: 24
                          84.254.151.0/24 maxlen: 24
                          84.254.148.0/24 maxlen: 24
                          84.254.159.0/24 maxlen: 24
                          84.254.157.0/24 maxlen: 24
                          84.254.156.0/24 maxlen: 24
                          84.254.158.0/24 maxlen: 24
                          84.254.153.0/24 maxlen: 24
                          84.254.155.0/24 maxlen: 24
                          84.254.154.0/24 maxlen: 24
                          84.254.163.0/24 maxlen: 24
                          84.254.160.0/24 maxlen: 24
                          84.254.162.0/24 maxlen: 24
                          84.254.161.0/24 maxlen: 24
                          84.254.166.0/24 maxlen: 24
                          84.254.171.0/24 maxlen: 24
                          84.254.170.0/24 maxlen: 24
                          84.254.172.0/24 maxlen: 24
                          84.254.167.0/24 maxlen: 24
                          84.254.169.0/24 maxlen: 24
                          84.254.168.0/24 maxlen: 24
                          84.254.174.0/24 maxlen: 24
                          84.254.173.0/24 maxlen: 24
                          84.254.175.0/24 maxlen: 24
                          176.227.132.0/24 maxlen: 24
                          176.227.128.0/24 maxlen: 24
                          176.227.130.0/24 maxlen: 24
                          176.227.139.0/24 maxlen: 24
                          176.227.138.0/24 maxlen: 24
                          176.227.137.0/24 maxlen: 24
                          84.254.132.0/24 maxlen: 24
                          176.227.142.0/24 maxlen: 24
                          84.254.129.0/24 maxlen: 24
                          84.254.128.0/24 maxlen: 24
                          84.254.131.0/24 maxlen: 24
                          176.227.143.0/24 maxlen: 24
                          176.227.141.0/24 maxlen: 24
                          176.227.140.0/24 maxlen: 24
                          84.254.190.0/24 maxlen: 24
                          95.210.136.0/24 maxlen: 24
                          95.210.138.0/24 maxlen: 24
                          95.210.140.0/24 maxlen: 24
                          95.210.143.0/24 maxlen: 24
                          95.210.142.0/24 maxlen: 24
                          95.210.152.0/24 maxlen: 24
                          95.210.157.0/24 maxlen: 24
                          95.210.156.0/24 maxlen: 24
                          95.210.169.0/24 maxlen: 24
                          95.210.255.0/24 maxlen: 24
                          95.210.254.0/24 maxlen: 24
                          5.61.197.0/24 maxlen: 24
                          5.61.199.0/24 maxlen: 24
                          5.61.198.0/24 maxlen: 24
                          5.61.193.0/24 maxlen: 24
                          5.61.195.0/24 maxlen: 24
                          95.210.11.0/24 maxlen: 24
                          95.210.10.0/24 maxlen: 24
                          95.210.7.0/24 maxlen: 24
                          95.210.12.0/24 maxlen: 24
                          95.210.13.0/24 maxlen: 24
                          95.210.79.0/24 maxlen: 24
                          95.210.82.0/24 maxlen: 24
                          95.210.81.0/24 maxlen: 24
                          95.210.94.0/24 maxlen: 24
                          95.210.105.0/24 maxlen: 24
                          95.210.104.0/24 maxlen: 24
                          95.210.110.0/24 maxlen: 24
                          95.210.109.0/24 maxlen: 24
                          95.210.108.0/24 maxlen: 24
                          95.210.107.0/24 maxlen: 24
                          95.210.128.0/24 maxlen: 24
                          95.210.37.0/24 maxlen: 24
                          95.210.36.0/24 maxlen: 24
                          95.210.35.0/24 maxlen: 24
                          95.210.34.0/24 maxlen: 24
                          95.210.43.0/24 maxlen: 24
                          95.210.40.0/24 maxlen: 24
                          95.210.42.0/24 maxlen: 24
                          95.210.55.0/24 maxlen: 24
                          95.210.61.0/24 maxlen: 24
                          95.210.63.0/24 maxlen: 24
                          95.210.71.0/24 maxlen: 24
                          95.210.68.0/24 maxlen: 24
                          95.210.70.0/24 maxlen: 24
                          95.210.69.0/24 maxlen: 24
                          95.210.78.0/24 maxlen: 24
                          95.210.75.0/24 maxlen: 24
                          95.210.77.0/24 maxlen: 24
                          95.210.76.0/24 maxlen: 24
                          95.210.73.0/24 maxlen: 24
                          95.210.72.0/24 maxlen: 24
                          88.202.116.0/22 maxlen: 22
                          5.175.64.0/20 maxlen: 20
                          88.202.68.0/23 maxlen: 23
                          88.202.70.0/23 maxlen: 23
                          88.202.76.0/23 maxlen: 23
                          88.202.72.0/22 maxlen: 22
                          213.209.164.0/24 maxlen: 24
                          213.209.163.0/24 maxlen: 24
                          213.209.161.0/24 maxlen: 24
                          213.209.162.0/24 maxlen: 24
                          213.209.169.0/24 maxlen: 24
                          213.209.170.0/24 maxlen: 24
                          88.202.0.0/17 maxlen: 17
                          88.202.0.0/18 maxlen: 18
                          84.254.164.0/23 maxlen: 23
                          84.254.176.0/21 maxlen: 21
                          84.254.184.0/22 maxlen: 22
                          176.227.128.0/20 maxlen: 20
                          84.254.128.0/18 maxlen: 18
                          84.254.188.0/23 maxlen: 23
                          95.210.192.0/20 maxlen: 20
                          95.210.192.0/19 maxlen: 19
                          95.210.224.0/20 maxlen: 20
                          95.210.160.0/19 maxlen: 19
                          95.210.240.0/21 maxlen: 21
                          95.210.252.0/23 maxlen: 23
                          95.210.248.0/22 maxlen: 22
                          5.61.192.0/21 maxlen: 21
                          95.210.0.0/22 maxlen: 22
                          95.210.8.0/21 maxlen: 21
                          95.210.0.0/16 maxlen: 16
                          213.209.184.0/22 maxlen: 22
                          95.210.112.0/22 maxlen: 22
                          95.210.116.0/22 maxlen: 22
                          185.28.64.0/24 maxlen: 24
                          95.210.32.0/23 maxlen: 23
                          95.210.44.0/23 maxlen: 23
                          185.28.65.0/24 maxlen: 24
                          95.210.46.0/23 maxlen: 23
                          95.210.48.0/22 maxlen: 22
                          95.210.64.0/20 maxlen: 20
                          88.202.85.0/24 maxlen: 24
                          88.202.81.0/24 maxlen: 24
                          88.202.84.0/24 maxlen: 24
                          88.202.79.0/24 maxlen: 24
                          88.202.88.0/24 maxlen: 24
                          88.202.90.0/24 maxlen: 24
                          88.202.87.0/24 maxlen: 24
                          88.202.86.0/24 maxlen: 24
                          88.202.96.0/24 maxlen: 24
                          88.202.95.0/24 maxlen: 24
                          88.202.98.0/24 maxlen: 24
                          88.202.97.0/24 maxlen: 24
                          88.202.93.0/24 maxlen: 24
                          88.202.105.0/24 maxlen: 24
                          88.202.103.0/24 maxlen: 24
                          88.202.102.0/24 maxlen: 24
                          88.202.104.0/24 maxlen: 24
                          88.202.99.0/24 maxlen: 24
                          88.202.101.0/24 maxlen: 24
                          88.202.100.0/24 maxlen: 24
                          88.202.112.0/24 maxlen: 24
                          88.202.106.0/24 maxlen: 24
                          88.202.107.0/24 maxlen: 24
                          88.202.123.0/24 maxlen: 24
                          88.202.122.0/24 maxlen: 24
                          88.202.121.0/24 maxlen: 24
                          88.202.30.0/24 maxlen: 24
                          88.202.32.0/24 maxlen: 24
                          5.175.64.0/24 maxlen: 24
                          88.202.51.0/24 maxlen: 24
                          88.202.47.0/24 maxlen: 24
                          88.202.46.0/24 maxlen: 24
                          88.202.48.0/24 maxlen: 24
                          5.175.68.0/24 maxlen: 24
                          5.175.71.0/24 maxlen: 24
                          5.175.70.0/24 maxlen: 24
                          5.175.67.0/24 maxlen: 24
                          5.175.69.0/24 maxlen: 24
                          88.202.55.0/24 maxlen: 24
                          5.175.66.0/24 maxlen: 24
                          5.175.65.0/24 maxlen: 24
                          5.175.74.0/24 maxlen: 24
                          5.175.78.0/24 maxlen: 24
                          5.175.77.0/24 maxlen: 24
                          88.202.64.0/24 maxlen: 24
                          88.202.61.0/24 maxlen: 24
                          5.175.76.0/24 maxlen: 24
                          88.202.63.0/24 maxlen: 24
                          5.175.75.0/24 maxlen: 24
                          88.202.62.0/24 maxlen: 24
                          5.175.73.0/24 maxlen: 24
                          5.175.72.0/24 maxlen: 24
                          88.202.66.0/24 maxlen: 24
                          5.175.79.0/24 maxlen: 24
                          213.209.160.0/19 maxlen: 19
                          213.209.172.0/22 maxlen: 24
                          2a00:ca0:201e::/48 maxlen: 48
                          2a00:ca0:2008::/48 maxlen: 48
                          2a00:ca0:2005::/48 maxlen: 48
                          2a00:ca0:2002::/48 maxlen: 48
                          2a00:ca0:2003::/48 maxlen: 48
                          2a00:ca0:2000::/48 maxlen: 48
                          2a00:ca0:2012::/48 maxlen: 48
                          2a00:ca0:200c::/48 maxlen: 48
                          2a00:ca0:200f::/48 maxlen: 48
                          2a00:ca0:2006::/48 maxlen: 48
                          2a00:ca0:200a::/48 maxlen: 48
                          2a00:ca0:2004::/48 maxlen: 48
                          2a00:ca0:2001::/48 maxlen: 48
                          2a00:ca0:2016::/48 maxlen: 48
                          2a00:ca0::/32 maxlen: 32
                          2a00:ca0:2013::/48 maxlen: 48
                          2a00:ca0:2017::/48 maxlen: 48
                          2a00:ca0:200e::/48 maxlen: 48
                          2a00:ca0:201d::/48 maxlen: 48
                          2a00:ca0:201a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d1:ed:4f:0a:31:0b:e8:e2:22:9a:1e:27:bb:0c:15:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Dec  2 08:21:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84038bbff5b4ee7b30931d9d51ae1058ba22729f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:84:f0:1a:78:e5:f5:48:9d:21:79:96:77:
                    a7:27:b2:9d:aa:91:21:2f:ae:1e:06:66:0a:d1:c9:
                    d9:2b:6a:ed:a9:b9:0c:0b:41:73:e8:1f:35:e0:0d:
                    6a:5f:26:6d:e2:2b:4e:75:09:e5:7d:48:63:e9:ee:
                    53:bd:9e:63:76:8c:63:e4:37:72:f4:55:2d:d0:b0:
                    54:90:4c:06:b9:c5:95:04:57:fd:01:fb:52:fa:c9:
                    91:ce:8d:8b:f6:94:2b:b8:41:d8:7c:c5:fb:90:17:
                    ad:6c:3b:67:b5:9f:66:f0:89:00:5b:39:0c:8a:da:
                    09:0d:c0:9d:30:03:84:ab:68:ab:ae:90:28:bc:05:
                    92:71:2b:0a:43:c3:73:8b:fd:80:7c:12:b6:ce:f3:
                    ea:af:d1:8f:d0:5e:b4:a9:95:16:2d:86:c7:d0:f9:
                    89:2a:18:f1:9c:32:ed:ac:5e:cb:ad:b1:ef:dd:9f:
                    85:78:7b:5e:1e:59:b9:d2:b9:cb:a5:6f:4a:0e:0a:
                    f3:9d:01:68:da:d2:4c:f0:d7:2c:5b:6d:1e:d2:c6:
                    da:1d:5d:8a:00:9b:3b:bd:1f:f9:98:64:7b:34:fb:
                    9d:5c:74:f9:6b:45:77:51:2f:ae:dc:8f:34:87:3f:
                    ba:62:82:bc:de:b1:b3:f3:ab:53:74:fa:79:62:4d:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:03:8B:BF:F5:B4:EE:7B:30:93:1D:9D:51:AE:10:58:BA:22:72:9F
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/hAOLv_W07nswkx2dUa4QWLoicp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.61.192.0/21
                  5.175.64.0/20
                  84.254.128.0/18
                  88.202.0.0/17
                  95.210.0.0/16
                  176.227.128.0/20
                  185.28.64.0/23
                  213.209.160.0/19
                IPv6:
                  2a00:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:08:ff:8a:c8:70:a0:a6:08:3f:a4:54:ef:0a:fc:d2:05:05:
         2d:63:0d:cb:22:36:be:1d:26:56:4c:b4:58:1b:86:fd:51:80:
         31:37:b1:1b:06:4d:91:0b:4b:94:40:35:e7:e0:7f:90:ab:b3:
         a7:dc:07:2b:f0:36:4d:05:c7:4c:2a:d6:6c:b9:c2:d8:f4:e7:
         80:b9:86:47:ca:6b:fb:f0:6c:42:77:74:dc:8c:51:72:78:4e:
         e5:fe:a8:d8:2f:5c:af:61:fe:70:06:31:90:5a:72:9e:d9:9f:
         ab:90:dd:7f:7f:c4:e0:f3:c9:b9:f1:81:f5:a3:b8:de:d1:6b:
         a5:be:48:a1:67:af:65:08:d4:fa:dc:7a:a2:e7:9d:ef:dc:fe:
         e5:52:92:7f:74:86:d4:1e:76:1b:d7:8d:cf:d4:0d:20:0b:61:
         f8:e3:43:30:54:cd:71:51:19:b0:5b:a3:6f:b2:f5:c6:77:4e:
         8d:86:a2:00:cd:18:00:90:6b:4d:b8:2f:c8:23:f3:8c:91:06:
         79:87:46:9f:0d:9a:fa:2a:e4:23:4f:24:fb:86:db:69:3e:97:
         df:1f:b3:3a:95:81:aa:f9:00:70:2a:47:54:a8:39:4d:ec:5a:
         aa:11:ed:02:e6:e8:56:00:cb:eb:2b:21:b2:a2:5a:2d:c0:c9:
         69:9a:a1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:26 2024 by rpki-client on console-ams.rpki-client.org