Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NS5NfVpfy_KjCZmsNktAPHHInas.roa
File:                     NS5NfVpfy_KjCZmsNktAPHHInas.roa (raw, json)
Hash identifier:          ntXyf47VmQeAOx8RYZOC/S5fJhwp87pA+vARONK3wiA=
Subject key identifier:   35:2E:4D:7D:5A:5F:CB:F2:A3:09:99:AC:36:4B:40:3C:71:C8:9D:AB
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0184F243D043D80E1DE803F71D1133A752B2
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NS5NfVpfy_KjCZmsNktAPHHInas.roa
Signing time:             Thu 08 Dec 2022 15:04:01 +0000
ROA not before:           Thu 08 Dec 2022 15:04:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29648
IP address blocks:        193.201.228.0/22 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          31.173.119.0/24 maxlen: 24
                          212.119.160.0/19 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          77.233.160.0/19 maxlen: 19
                          77.233.161.0/24 maxlen: 24
                          77.233.164.0/24 maxlen: 24
                          77.233.160.0/24 maxlen: 24
                          77.233.162.0/24 maxlen: 24
                          77.233.166.0/24 maxlen: 24
                          77.233.167.0/24 maxlen: 24
                          77.233.170.0/24 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          31.173.104.0/24 maxlen: 24
                          31.173.105.0/24 maxlen: 24
                          31.173.112.0/24 maxlen: 24
                          31.173.108.0/24 maxlen: 24
                          31.173.109.0/24 maxlen: 24
                          31.173.110.0/24 maxlen: 24
                          31.173.106.0/24 maxlen: 24
                          31.173.111.0/24 maxlen: 24
                          31.173.107.0/24 maxlen: 24
                          31.173.116.0/24 maxlen: 24
                          31.173.113.0/24 maxlen: 24
                          31.173.117.0/24 maxlen: 24
                          31.173.114.0/24 maxlen: 24
                          31.173.118.0/24 maxlen: 24
                          31.173.115.0/24 maxlen: 24
                          77.233.173.0/24 maxlen: 24
                          77.233.178.0/24 maxlen: 24
                          77.233.185.0/24 maxlen: 24
                          77.233.181.0/24 maxlen: 24
                          77.233.180.0/24 maxlen: 24
                          77.233.186.0/24 maxlen: 24
                          77.233.182.0/24 maxlen: 24
                          77.233.188.0/24 maxlen: 24
                          77.233.191.0/24 maxlen: 24
                          77.233.190.0/24 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          188.170.98.0/24 maxlen: 24
                          86.109.192.0/19 maxlen: 19
                          86.109.192.0/20 maxlen: 20
                          188.170.96.0/24 maxlen: 24
                          188.170.97.0/24 maxlen: 24
                          188.170.102.0/24 maxlen: 24
                          86.109.193.0/24 maxlen: 24
                          188.170.103.0/24 maxlen: 24
                          188.170.99.0/24 maxlen: 24
                          188.170.100.0/24 maxlen: 24
                          188.170.104.0/24 maxlen: 24
                          86.109.195.0/24 maxlen: 24
                          188.170.101.0/24 maxlen: 24
                          188.170.105.0/24 maxlen: 24
                          188.170.110.0/24 maxlen: 24
                          188.170.106.0/24 maxlen: 24
                          188.170.111.0/24 maxlen: 24
                          188.170.107.0/24 maxlen: 24
                          86.109.200.0/23 maxlen: 23
                          188.170.108.0/24 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          188.170.109.0/24 maxlen: 24
                          188.170.112.0/24 maxlen: 24
                          188.170.114.0/24 maxlen: 24
                          86.109.213.0/24 maxlen: 24
                          188.170.115.0/24 maxlen: 24
                          188.170.116.0/24 maxlen: 24
                          86.109.212.0/24 maxlen: 24
                          86.109.208.0/24 maxlen: 24
                          188.170.118.0/24 maxlen: 24
                          188.170.117.0/24 maxlen: 24
                          188.170.113.0/24 maxlen: 24
                          86.109.210.0/24 maxlen: 24
                          188.170.119.0/24 maxlen: 24
                          188.170.123.0/24 maxlen: 24
                          86.109.216.0/24 maxlen: 24
                          188.170.122.0/24 maxlen: 24
                          86.109.215.0/24 maxlen: 24
                          86.109.218.0/23 maxlen: 23
                          188.170.125.0/24 maxlen: 24
                          188.170.121.0/24 maxlen: 24
                          188.170.120.0/24 maxlen: 24
                          86.109.214.0/24 maxlen: 24
                          188.170.124.0/24 maxlen: 24
                          188.170.127.0/24 maxlen: 24
                          86.109.220.0/24 maxlen: 24
                          188.170.126.0/24 maxlen: 24
                          86.109.223.0/24 maxlen: 24
                          86.109.222.0/24 maxlen: 24
                          78.109.120.0/24 maxlen: 24
                          78.109.121.0/24 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          178.176.98.0/24 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          178.176.96.0/24 maxlen: 24
                          178.176.97.0/24 maxlen: 24
                          178.176.102.0/24 maxlen: 24
                          178.176.103.0/24 maxlen: 24
                          178.176.99.0/24 maxlen: 24
                          178.176.100.0/24 maxlen: 24
                          178.176.101.0/24 maxlen: 24
                          178.176.118.0/24 maxlen: 24
                          178.176.114.0/24 maxlen: 24
                          178.176.115.0/24 maxlen: 24
                          178.176.116.0/24 maxlen: 24
                          178.176.117.0/24 maxlen: 24
                          178.176.122.0/24 maxlen: 24
                          178.176.123.0/24 maxlen: 24
                          178.176.119.0/24 maxlen: 24
                          178.176.124.0/24 maxlen: 24
                          178.176.120.0/24 maxlen: 24
                          178.176.125.0/24 maxlen: 24
                          178.176.121.0/24 maxlen: 24
                          178.176.126.0/24 maxlen: 24
                          178.176.127.0/24 maxlen: 24
                          83.169.217.0/24 maxlen: 24
                          83.169.218.0/24 maxlen: 24
                          83.169.219.0/24 maxlen: 24
                          83.169.220.0/24 maxlen: 24
                          83.169.221.0/24 maxlen: 24
                          83.169.222.0/24 maxlen: 24
                          83.169.223.0/24 maxlen: 24
                          188.94.168.0/24 maxlen: 24
                          188.94.172.0/24 maxlen: 24
                          188.94.169.0/24 maxlen: 24
                          188.94.170.0/24 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          188.94.171.0/24 maxlen: 24
                          188.94.173.0/24 maxlen: 24
                          188.94.174.0/24 maxlen: 24
                          188.94.175.0/24 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          217.115.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f2:43:d0:43:d8:0e:1d:e8:03:f7:1d:11:33:a7:52:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec  8 15:04:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=352e4d7d5a5fcbf2a30999ac364b403c71c89dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:ea:04:59:d4:50:c1:75:29:44:7d:63:5a:
                    80:4b:d4:f0:47:02:e3:ae:15:c2:3a:f0:44:ce:4f:
                    43:b0:6d:de:f7:96:cf:4f:ba:bb:f5:ed:ce:bd:1c:
                    08:3c:08:33:86:98:d2:24:42:3d:75:4a:5b:06:a1:
                    e7:83:5c:72:87:83:ec:67:a9:38:db:ab:a4:08:3b:
                    b4:5e:9b:80:e3:50:0f:67:58:d8:79:e3:03:f7:20:
                    4a:46:07:c3:67:6b:7d:ee:25:56:5f:87:59:b3:22:
                    3e:2a:75:6d:34:07:81:18:b0:e2:de:e6:86:e5:82:
                    15:71:79:6c:e8:e5:3a:f1:56:e3:56:76:ae:59:1f:
                    24:68:bc:8e:54:e6:09:30:11:ca:98:a8:3d:ee:b4:
                    15:8d:25:0f:3a:c0:98:66:30:9a:2f:52:b6:37:e5:
                    0c:01:bf:66:18:9e:25:c5:28:34:39:ba:d1:e4:3b:
                    fb:2e:4c:ee:fe:a4:9c:80:bf:34:bb:b1:b3:66:0d:
                    da:91:b3:a8:52:69:47:75:7d:b2:49:21:6c:0f:5b:
                    c1:0b:bd:d6:6b:c9:76:c1:89:e0:4f:e1:0e:d5:e2:
                    1c:30:0f:12:f9:02:6d:9e:b2:bc:9c:44:6a:3d:62:
                    f9:d8:d0:c5:7b:41:5b:11:55:dc:4a:d1:0a:3e:aa:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2E:4D:7D:5A:5F:CB:F2:A3:09:99:AC:36:4B:40:3C:71:C8:9D:AB
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NS5NfVpfy_KjCZmsNktAPHHInas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.104.0-31.173.119.255
                  77.233.160.0/19
                  78.109.120.0/23
                  83.169.217.0-83.169.223.255
                  86.109.192.0/19
                  178.176.96.0/21
                  178.176.114.0-178.176.127.255
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.96.0/19
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:33:a0:33:03:55:80:86:97:06:dc:66:0f:d8:ea:e5:6e:f2:
         f5:89:c8:55:cb:7c:f2:74:b1:bb:81:5f:f6:2e:c0:7c:bf:be:
         b9:c4:5a:be:c5:f8:54:ec:92:e3:a3:da:b8:53:86:a0:5d:5e:
         18:58:f7:1b:80:27:71:02:20:50:7d:1e:48:0a:97:97:53:88:
         91:0d:61:27:2a:e9:82:aa:de:be:9e:92:23:34:67:82:ed:c6:
         93:42:9b:89:f4:ee:2d:c2:5a:45:42:8c:02:7d:fc:76:87:1e:
         42:34:e0:bd:16:61:1e:58:b6:2c:15:84:98:93:6d:9a:65:65:
         f5:5a:3c:11:54:20:3b:87:31:c0:77:ec:fb:6c:6e:d5:2d:6d:
         a9:94:12:99:32:16:bf:49:52:5b:6c:fa:51:16:5f:dd:ae:b0:
         b5:78:3c:92:89:42:b9:96:ff:ad:9e:20:71:64:2b:20:9e:24:
         78:06:ea:24:42:fd:cd:ef:0f:e7:9d:a1:76:d7:61:af:ee:96:
         9d:a5:6c:f7:72:2c:13:8b:28:d1:14:13:30:24:ef:37:61:c3:
         0f:eb:48:50:2a:75:e4:6a:e2:e3:ba:c6:ed:78:24:e2:f0:ae:
         5d:dc:e3:7b:a7:c5:bc:3d:1a:ba:d6:2e:e5:88:3e:bd:85:47:
         cc:36:0c:fd
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYTyQ9BD2A4d6AP3HREzp1KyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTUwNDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTJlNGQ3ZDVhNWZjYmYyYTMwOTk5YWMzNjRiNDAzYzcxYzg5ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIfqBFnUUMF1KUR9Y1qAS9TwRwLj
rhXCOvBEzk9DsG3e95bPT7q79e3OvRwIPAgzhpjSJEI9dUpbBqHng1xyh4PsZ6k4
26ukCDu0XpuA41APZ1jYeeMD9yBKRgfDZ2t97iVWX4dZsyI+KnVtNAeBGLDi3uaG
5YIVcXls6OU68VbjVnauWR8kaLyOVOYJMBHKmKg97rQVjSUPOsCYZjCaL1K2N+UM
Ab9mGJ4lxSg0ObrR5Dv7Lkzu/qScgL80u7GzZg3akbOoUmlHdX2ySSFsD1vBC73W
a8l2wYngT+EO1eIcMA8S+QJtnrK8nERqPWL52NDFe0FbEVXcStEKPqrxoQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDUuTX1aX8vyowmZrDZLQDxxyJ2rMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvTlM1TmZWcGZ5X0tqQ1ptc05rdEFQSEhJbmFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTCBrgQCAAEwgacwDAME
Ax+taAMEAx+tcAMEBU3poAMEAU5teDAMAwQAU6nZAwQFU6nAAwQFVm3AAwQDsrBg
MAwDBAGysHIDBAeysAADBAO8XqgDAwC8ogMEBbyqYAMEAsHJ5AMEBcMFgAMEBcMQ
YAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQOoAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWa
oAMEBdWoIAMEBtXzQAMEBNlzUDANBgkqhkiG9w0BAQsFAAOCAQEAgTOgMwNVgIaX
BtxmD9jq5W7y9YnIVct88nSxu4Ff9i7AfL++ucRavsX4VOyS46PauFOGoF1eGFj3
G4AncQIgUH0eSAqXl1OIkQ1hJyrpgqrevp6SIzRngu3Gk0KbifTuLcJaRUKMAn38
doceQjTgvRZhHli2LBWEmJNtmmVl9Vo8EVQgO4cxwHfs+2xu1S1tqZQSmTIWv0lS
W2z6URZf3a6wtXg8kolCuZb/rZ4gcWQrIJ4keAbqJEL9ze8P552hdtdhr+6WnaVs
93IsE4so0RQTMCTvN2HDD+tIUCp15Gri47rG7Xgk4vCuXdzje6fFvD0autYu5Yg+
vYVHzDYM/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org