Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/aCrK6dVBCSAhbTCI6hWd_NLj0wY.roa
File:                     aCrK6dVBCSAhbTCI6hWd_NLj0wY.roa (raw, json)
Hash identifier:          h+bwZnVOniG2tJM3vYm6El7KO8E1G/C7UfMvuyYa1h0=
Subject key identifier:   68:2A:CA:E9:D5:41:09:20:21:6D:30:88:EA:15:9D:FC:D2:E3:D3:06
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       0185305DB8BB035C3447F263D35776715716
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/aCrK6dVBCSAhbTCI6hWd_NLj0wY.roa
Signing time:             Tue 20 Dec 2022 16:28:46 +0000
ROA not before:           Tue 20 Dec 2022 16:28:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        193.19.148.0/22 maxlen: 24
                          185.228.120.0/24 maxlen: 24
                          185.228.123.0/24 maxlen: 24
                          185.228.122.0/24 maxlen: 24
                          185.228.121.0/24 maxlen: 24
                          185.228.120.0/22 maxlen: 24
                          185.134.40.0/22 maxlen: 24
                          5.181.100.0/22 maxlen: 24
                          45.141.4.0/22 maxlen: 24
                          185.93.120.0/22 maxlen: 24
                          185.113.186.0/24 maxlen: 24
                          185.113.185.0/24 maxlen: 24
                          185.113.184.0/24 maxlen: 24
                          185.113.187.0/24 maxlen: 24
                          188.208.24.0/22 maxlen: 24
                          188.208.20.0/22 maxlen: 24
                          193.32.236.0/22 maxlen: 24
                          188.208.21.0/24 maxlen: 24
                          89.47.4.0/22 maxlen: 24
                          185.94.48.0/22 maxlen: 24
                          109.107.96.0/19 maxlen: 24
                          185.93.232.0/22 maxlen: 24
                          185.235.100.0/22 maxlen: 24
                          185.114.64.0/22 maxlen: 24
                          176.32.54.0/24 maxlen: 24
                          93.92.224.0/22 maxlen: 24
                          185.119.236.0/22 maxlen: 24
                          188.247.168.0/22 maxlen: 24
                          185.214.12.0/22 maxlen: 24
                          176.32.50.0/24 maxlen: 24
                          91.221.76.0/23 maxlen: 24
                          91.221.86.0/23 maxlen: 24
                          89.32.194.0/23 maxlen: 24
                          185.248.96.0/22 maxlen: 24
                          188.241.96.0/21 maxlen: 24
                          185.126.232.0/22 maxlen: 24
                          185.120.44.0/22 maxlen: 24
                          185.234.186.0/23 maxlen: 23
                          185.234.184.0/24 maxlen: 24
                          86.106.184.0/22 maxlen: 24
                          185.234.185.0/24 maxlen: 24
                          185.44.233.0/24 maxlen: 24
                          185.44.234.0/23 maxlen: 24
                          185.51.108.0/22 maxlen: 24
                          185.240.44.0/22 maxlen: 24
                          185.72.52.0/22 maxlen: 24
                          86.105.234.0/24 maxlen: 24
                          185.159.212.0/22 maxlen: 24
                          188.240.204.0/22 maxlen: 24
                          212.104.160.0/19 maxlen: 24
                          89.37.80.0/22 maxlen: 24
                          5.226.16.0/20 maxlen: 24
                          185.131.188.0/22 maxlen: 24
                          45.158.84.0/22 maxlen: 24
                          85.117.245.0/24 maxlen: 24
                          193.91.0.0/24 maxlen: 24
                          85.117.244.0/22 maxlen: 24
                          193.91.10.0/24 maxlen: 24
                          185.151.176.0/22 maxlen: 24
                          185.43.252.0/22 maxlen: 24
                          185.77.168.0/22 maxlen: 24
                          88.98.98.0/24 maxlen: 24
                          86.105.28.0/22 maxlen: 24
                          88.98.96.0/20 maxlen: 24
                          88.98.96.0/23 maxlen: 23
                          88.98.99.0/24 maxlen: 24
                          88.98.104.0/23 maxlen: 24
                          88.98.100.0/22 maxlen: 24
                          88.98.111.0/24 maxlen: 24
                          88.98.110.0/24 maxlen: 24
                          88.98.108.0/23 maxlen: 24
                          88.98.108.0/22 maxlen: 24
                          88.98.106.0/23 maxlen: 24
                          88.98.112.0/20 maxlen: 24
                          141.98.52.0/22 maxlen: 24
                          188.239.184.0/22 maxlen: 24
                          212.63.116.0/22 maxlen: 24
                          212.63.118.0/24 maxlen: 24
                          212.63.117.0/24 maxlen: 24
                          212.63.116.0/24 maxlen: 24
                          212.63.121.0/24 maxlen: 24
                          212.63.119.0/24 maxlen: 24
                          212.63.123.0/24 maxlen: 24
                          212.63.122.0/24 maxlen: 24
                          185.83.104.0/22 maxlen: 24
                          45.144.12.0/22 maxlen: 24
                          45.90.52.0/22 maxlen: 24
                          185.158.52.0/22 maxlen: 24
                          91.245.200.0/21 maxlen: 24
                          185.185.52.0/22 maxlen: 24
                          185.165.4.0/22 maxlen: 24
                          185.245.132.0/22 maxlen: 24
                          185.16.120.0/22 maxlen: 24
                          185.131.13.0/24 maxlen: 24
                          185.131.12.0/22 maxlen: 24
                          85.217.132.0/24 maxlen: 24
                          85.217.129.0/24 maxlen: 24
                          85.217.139.0/24 maxlen: 24
                          85.217.138.0/24 maxlen: 24
                          85.217.137.0/24 maxlen: 24
                          85.217.136.0/24 maxlen: 24
                          85.217.135.0/24 maxlen: 24
                          85.217.134.0/24 maxlen: 24
                          85.217.133.0/24 maxlen: 24
                          85.217.141.0/24 maxlen: 24
                          85.217.143.0/24 maxlen: 24
                          85.217.142.0/24 maxlen: 24
                          85.217.152.0/24 maxlen: 24
                          85.217.151.0/24 maxlen: 24
                          85.217.150.0/24 maxlen: 24
                          85.217.147.0/24 maxlen: 24
                          85.217.146.0/24 maxlen: 24
                          85.217.159.0/24 maxlen: 24
                          85.217.155.0/24 maxlen: 24
                          185.156.248.0/22 maxlen: 24
                          85.217.154.0/24 maxlen: 24
                          85.217.153.0/24 maxlen: 24
                          85.217.158.0/24 maxlen: 24
                          85.217.157.0/24 maxlen: 24
                          85.217.156.0/24 maxlen: 24
                          185.130.24.0/23 maxlen: 24
                          185.75.200.0/22 maxlen: 24
                          185.96.24.0/22 maxlen: 24
                          139.28.188.0/22 maxlen: 24
                          194.8.140.0/22 maxlen: 24
                          194.49.0.0/22 maxlen: 24
                          185.210.184.0/22 maxlen: 24
                          89.36.40.0/22 maxlen: 24
                          89.42.236.0/23 maxlen: 24
                          185.130.26.0/23 maxlen: 24
                          185.123.136.0/22 maxlen: 24
                          45.157.56.0/22 maxlen: 24
                          185.216.168.0/22 maxlen: 24
                          185.48.84.0/22 maxlen: 24
                          185.176.84.0/22 maxlen: 24
                          185.210.16.0/22 maxlen: 24
                          79.142.184.0/22 maxlen: 24
                          185.162.172.0/23 maxlen: 24
                          185.162.175.0/24 maxlen: 24
                          185.162.174.0/24 maxlen: 24
                          185.210.88.0/22 maxlen: 24
                          195.82.105.0/24 maxlen: 24
                          195.82.104.0/24 maxlen: 24
                          195.82.106.0/24 maxlen: 24
                          195.82.124.0/24 maxlen: 24
                          195.82.123.0/24 maxlen: 24
                          195.82.122.0/24 maxlen: 24
                          195.82.121.0/24 maxlen: 24
                          195.82.120.0/24 maxlen: 24
                          194.35.88.0/22 maxlen: 24
                          185.216.216.0/22 maxlen: 22
                          185.216.218.0/23 maxlen: 23
                          185.216.217.0/24 maxlen: 24
                          139.28.76.0/22 maxlen: 22
                          185.196.200.0/23 maxlen: 24
                          185.196.203.0/24 maxlen: 24
                          185.196.202.0/24 maxlen: 24
                          185.229.96.0/22 maxlen: 24
                          45.67.184.0/22 maxlen: 24
                          91.242.144.0/22 maxlen: 24
                          45.80.224.0/22 maxlen: 24
                          185.229.44.0/22 maxlen: 24
                          185.202.188.0/22 maxlen: 24
                          2a09:55c0::/29 maxlen: 48
                          2a06:8840::/29 maxlen: 29
                          2a06:8f40::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:30:5d:b8:bb:03:5c:34:47:f2:63:d3:57:76:71:57:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Dec 20 16:28:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=682acae9d5410920216d3088ea159dfcd2e3d306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:09:82:8f:ec:05:31:40:b8:b2:1b:8f:d2:
                    f3:9d:de:16:cf:13:dd:90:68:ef:c0:25:96:fd:83:
                    7b:ba:e9:9c:3a:11:bc:de:fd:36:9b:a5:54:40:1b:
                    2a:44:f0:e5:0f:ca:73:77:13:59:08:47:74:a3:95:
                    c6:42:61:84:29:81:09:b1:f9:d2:bb:97:05:2c:85:
                    21:ac:5a:c1:6b:c4:96:78:85:cd:e0:0e:bb:66:92:
                    e0:da:8b:2c:bf:0b:a8:b2:be:19:1f:82:de:0f:a6:
                    5c:e6:80:f3:d5:31:dc:56:56:1c:31:25:a1:17:c2:
                    bf:e0:02:e8:f5:85:83:d0:54:9e:9c:77:62:cd:43:
                    6c:b8:38:09:d9:ec:2a:81:8e:62:99:5f:d0:3d:91:
                    bb:8c:73:3d:89:18:92:19:11:6a:a8:25:ee:20:20:
                    69:0b:b8:89:ef:d3:4e:1b:57:1e:4e:c7:ca:65:22:
                    1e:8e:c8:cb:1a:65:a9:d9:d3:f3:a1:dc:6c:2e:51:
                    24:dc:ac:23:cf:97:3e:bd:45:95:bf:88:f5:0e:bf:
                    b8:ec:d7:8f:4f:82:ab:a5:66:a9:c4:dc:a0:79:10:
                    9b:ad:45:7e:19:c6:37:e6:db:d7:d8:1b:b8:10:6b:
                    48:d3:0a:13:31:7e:81:ca:9e:f0:e2:b1:eb:1a:1c:
                    92:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2A:CA:E9:D5:41:09:20:21:6D:30:88:EA:15:9D:FC:D2:E3:D3:06
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/aCrK6dVBCSAhbTCI6hWd_NLj0wY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.100.0/22
                  5.226.16.0/20
                  45.67.184.0/22
                  45.80.224.0/22
                  45.90.52.0/22
                  45.141.4.0/22
                  45.144.12.0/22
                  45.157.56.0/22
                  45.158.84.0/22
                  79.142.184.0/22
                  85.117.244.0/22
                  85.217.129.0/24
                  85.217.132.0-85.217.139.255
                  85.217.141.0-85.217.143.255
                  85.217.146.0/23
                  85.217.150.0-85.217.159.255
                  86.105.28.0/22
                  86.105.234.0/24
                  86.106.184.0/22
                  88.98.96.0/19
                  89.32.194.0/23
                  89.36.40.0/22
                  89.37.80.0/22
                  89.42.236.0/23
                  89.47.4.0/22
                  91.221.76.0/23
                  91.221.86.0/23
                  91.242.144.0/22
                  91.245.200.0/21
                  93.92.224.0/22
                  109.107.96.0/19
                  139.28.76.0/22
                  139.28.188.0/22
                  141.98.52.0/22
                  176.32.50.0/24
                  176.32.54.0/24
                  185.16.120.0/22
                  185.43.252.0/22
                  185.44.233.0-185.44.235.255
                  185.48.84.0/22
                  185.51.108.0/22
                  185.72.52.0/22
                  185.75.200.0/22
                  185.77.168.0/22
                  185.83.104.0/22
                  185.93.120.0/22
                  185.93.232.0/22
                  185.94.48.0/22
                  185.96.24.0/22
                  185.113.184.0/22
                  185.114.64.0/22
                  185.119.236.0/22
                  185.120.44.0/22
                  185.123.136.0/22
                  185.126.232.0/22
                  185.130.24.0/22
                  185.131.12.0/22
                  185.131.188.0/22
                  185.134.40.0/22
                  185.151.176.0/22
                  185.156.248.0/22
                  185.158.52.0/22
                  185.159.212.0/22
                  185.162.172.0/22
                  185.165.4.0/22
                  185.176.84.0/22
                  185.185.52.0/22
                  185.196.200.0/22
                  185.202.188.0/22
                  185.210.16.0/22
                  185.210.88.0/22
                  185.210.184.0/22
                  185.214.12.0/22
                  185.216.168.0/22
                  185.216.216.0/22
                  185.228.120.0/22
                  185.229.44.0/22
                  185.229.96.0/22
                  185.234.184.0/22
                  185.235.100.0/22
                  185.240.44.0/22
                  185.245.132.0/22
                  185.248.96.0/22
                  188.208.20.0-188.208.27.255
                  188.239.184.0/22
                  188.240.204.0/22
                  188.241.96.0/21
                  188.247.168.0/22
                  193.19.148.0/22
                  193.32.236.0/22
                  193.91.0.0/24
                  193.91.10.0/24
                  194.8.140.0/22
                  194.35.88.0/22
                  194.49.0.0/22
                  195.82.104.0-195.82.106.255
                  195.82.120.0-195.82.124.255
                  212.63.116.0/22
                  212.63.121.0-212.63.123.255
                  212.104.160.0/19
                IPv6:
                  2a06:8840::/29
                  2a06:8f40::/29
                  2a09:55c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         95:ce:36:92:33:38:06:a2:04:78:92:7d:47:57:d2:25:ab:c3:
         5e:f4:fd:92:34:6b:20:f4:fa:a9:7a:08:3e:d5:45:3d:8a:d2:
         4b:f9:c8:0f:e3:37:fc:d7:7f:68:f7:a5:e3:69:ad:86:ab:bc:
         e4:f4:9c:bf:9d:a4:a2:8e:d0:42:5e:5f:a6:f7:40:a1:20:e0:
         5c:c3:c7:c5:91:63:e3:8d:01:53:0a:44:ba:46:ba:5c:25:e0:
         c5:13:a8:d5:66:82:84:0c:54:52:a2:73:6e:52:6d:4e:37:bc:
         a6:52:d3:04:19:da:8c:69:3c:b3:65:b7:02:8e:76:12:d6:44:
         2c:27:40:6b:87:73:52:6b:af:2e:3d:67:50:89:54:78:25:e0:
         2a:7a:44:5e:fc:f4:2a:ac:3e:da:43:6d:d2:db:41:c9:c4:aa:
         4f:97:88:cd:cb:b4:bd:99:ff:d3:bb:8a:1d:32:d5:8e:7e:55:
         38:e7:91:8e:7c:52:f8:00:4e:c7:39:07:6e:2a:20:94:19:65:
         3b:5b:df:e5:4f:10:f5:ef:d4:bb:8e:b3:f9:0b:3e:d3:8f:1a:
         25:26:02:a2:93:42:e2:71:61:33:5d:f8:3a:8b:fc:7b:95:39:
         a1:6d:b0:cb:a3:5d:ad:56:e9:db:1c:77:74:dd:6f:19:c8:41:
         c1:f6:c9:c3
-----BEGIN CERTIFICATE-----
MIIHtjCCBp6gAwIBAgISAYUwXbi7A1w0R/Jj01d2cVcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMjIwMTYyODQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODJhY2FlOWQ1NDEwOTIwMjE2ZDMwODhlYTE1OWRmY2QyZTNkMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOAJgo/sBTFAuLIbj9Lznd4WzxPd
kGjvwCWW/YN7uumcOhG83v02m6VUQBsqRPDlD8pzdxNZCEd0o5XGQmGEKYEJsfnS
u5cFLIUhrFrBa8SWeIXN4A67ZpLg2ossvwuosr4ZH4LeD6Zc5oDz1THcVlYcMSWh
F8K/4ALo9YWD0FSenHdizUNsuDgJ2ewqgY5imV/QPZG7jHM9iRiSGRFqqCXuICBp
C7iJ79NOG1ceTsfKZSIejsjLGmWp2dPzodxsLlEk3Kwjz5c+vUWVv4j1Dr+47NeP
T4KrpWapxNygeRCbrUV+GcY35tvX2Bu4EGtI0woTMX6Byp7w4rHrGhySDQIDAQAB
o4IEwjCCBL4wHQYDVR0OBBYEFGgqyunVQQkgIW0wiOoVnfzS49MGMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvYUNySzZkVkJDU0FoYlRDSTZoV2RfTkxqMHdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIC1gYIKwYBBQUHAQcBAf8EggLFMIICwTCCAqAEAgABMIIC
mAMEAgW1ZAMEBAXiEAMEAi1DuAMEAi1Q4AMEAi1aNAMEAi2NBAMEAi2QDAMEAi2d
OAMEAi2eVAMEAk+OuAMEAlV19AMEAFXZgTAMAwQCVdmEAwQCVdmIMAwDBABV2Y0D
BARV2YADBAFV2ZIwDAMEAVXZlgMEBVXZgAMEAlZpHAMEAFZp6gMEAlZquAMEBVhi
YAMEAVkgwgMEAlkkKAMEAlklUAMEAVkq7AMEAlkvBAMEAVvdTAMEAVvdVgMEAlvy
kAMEA1v1yAMEAl1c4AMEBW1rYAMEAoscTAMEAoscvAMEAo1iNAMEALAgMgMEALAg
NgMEArkQeAMEArkr/DAMAwQAuSzpAwQCuSzoAwQCuTBUAwQCuTNsAwQCuUg0AwQC
uUvIAwQCuU2oAwQCuVNoAwQCuV14AwQCuV3oAwQCuV4wAwQCuWAYAwQCuXG4AwQC
uXJAAwQCuXfsAwQCuXgsAwQCuXuIAwQCuX7oAwQCuYIYAwQCuYMMAwQCuYO8AwQC
uYYoAwQCuZewAwQCuZz4AwQCuZ40AwQCuZ/UAwQCuaKsAwQCuaUEAwQCubBUAwQC
ubk0AwQCucTIAwQCucq8AwQCudIQAwQCudJYAwQCudK4AwQCudYMAwQCudioAwQC
udjYAwQCueR4AwQCueUsAwQCueVgAwQCueq4AwQCuetkAwQCufAsAwQCufWEAwQC
ufhgMAwDBAK80BQDBAK80BgDBAK877gDBAK88MwDBAO88WADBAK896gDBALBE5QD
BALBIOwDBADBWwADBADBWwoDBALCCIwDBALCI1gDBALCMQAwDAMEA8NSaAMEAMNS
ajAMAwQDw1J4AwQAw1J8AwQC1D90MAwDBADUP3kDBALUP3gDBAXUaKAwGwQCAAIw
FQMFAyoGiEADBQMqBo9AAwUDKglVwDANBgkqhkiG9w0BAQsFAAOCAQEAlc42kjM4
BqIEeJJ9R1fSJavDXvT9kjRrIPT6qXoIPtVFPYrSS/nID+M3/Nd/aPel42mthqu8
5PScv52koo7QQl5fpvdAoSDgXMPHxZFj440BUwpEuka6XCXgxROo1WaChAxUUqJz
blJtTje8plLTBBnajGk8s2W3Ao52EtZELCdAa4dzUmuvLj1nUIlUeCXgKnpEXvz0
Kqw+2kNt0ttBycSqT5eIzcu0vZn/07uKHTLVjn5VOOeRjnxS+ABOxzkHbioglBll
O1vf5U8Q9e/Uu46z+Qs+048aJSYCopNC4nFhM134Oov8e5U5oW2wy6NdrVbp2xx3
dN1vGchBwfbJww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org