Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/F6TDw3oUay-B-kpNOI3Oycbg2K4.roa
File:                     F6TDw3oUay-B-kpNOI3Oycbg2K4.roa (raw, json)
Hash identifier:          zAiPEJCzog/xDy9BKPoeFBQ1kVVGC1MM51F09XzZhGI=
Subject key identifier:   17:A4:C3:C3:7A:14:6B:2F:81:FA:4A:4D:38:8D:CE:C9:C6:E0:D8:AE
Certificate issuer:       /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial:       089BFF4F
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/F6TDw3oUay-B-kpNOI3Oycbg2K4.roa
Signing time:             Sat 01 Jan 2022 09:58:05 +0000
ROA not before:           Sat 01 Jan 2022 09:58:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21246
IP address blocks:        80.80.162.0/24 maxlen: 24
                          80.80.161.0/24 maxlen: 24
                          80.80.160.0/20 maxlen: 20
                          80.80.160.0/24 maxlen: 24
                          80.80.166.0/24 maxlen: 24
                          80.80.164.0/23 maxlen: 23
                          80.80.163.0/24 maxlen: 24
                          80.80.169.0/24 maxlen: 24
                          80.80.168.0/24 maxlen: 24
                          80.80.167.0/24 maxlen: 24
                          80.80.172.0/24 maxlen: 24
                          80.80.171.0/24 maxlen: 24
                          80.80.170.0/24 maxlen: 24
                          80.80.173.0/24 maxlen: 24
                          80.80.175.0/24 maxlen: 24
                          80.80.174.0/24 maxlen: 24
                          46.99.149.0/24 maxlen: 24
                          46.99.148.0/24 maxlen: 24
                          46.99.147.0/24 maxlen: 24
                          46.99.146.0/24 maxlen: 24
                          46.99.152.0/22 maxlen: 22
                          46.99.151.0/24 maxlen: 24
                          46.99.150.0/24 maxlen: 24
                          46.99.156.0/23 maxlen: 23
                          46.99.159.0/24 maxlen: 24
                          46.99.158.0/24 maxlen: 24
                          46.99.163.0/24 maxlen: 24
                          46.99.162.0/24 maxlen: 24
                          46.99.161.0/24 maxlen: 24
                          46.99.160.0/24 maxlen: 24
                          46.99.166.0/24 maxlen: 24
                          46.99.165.0/24 maxlen: 24
                          46.99.164.0/24 maxlen: 24
                          46.99.170.0/24 maxlen: 24
                          46.99.169.0/24 maxlen: 24
                          46.99.168.0/24 maxlen: 24
                          46.99.167.0/24 maxlen: 24
                          46.99.171.0/24 maxlen: 24
                          46.99.179.0/24 maxlen: 24
                          46.99.178.0/24 maxlen: 24
                          46.99.173.0/24 maxlen: 24
                          46.99.177.0/24 maxlen: 24
                          46.99.176.0/24 maxlen: 24
                          46.99.175.0/24 maxlen: 24
                          46.99.174.0/24 maxlen: 24
                          46.99.180.0/24 maxlen: 24
                          46.99.184.0/24 maxlen: 24
                          46.99.183.0/24 maxlen: 24
                          46.99.182.0/24 maxlen: 24
                          46.99.181.0/24 maxlen: 24
                          46.99.186.0/24 maxlen: 24
                          46.99.185.0/24 maxlen: 24
                          46.99.187.0/24 maxlen: 24
                          46.99.190.0/24 maxlen: 24
                          46.99.189.0/24 maxlen: 24
                          46.99.188.0/24 maxlen: 24
                          46.99.192.0/24 maxlen: 24
                          46.99.199.0/24 maxlen: 24
                          46.99.128.0/24 maxlen: 24
                          46.99.131.0/24 maxlen: 24
                          46.99.130.0/24 maxlen: 24
                          46.99.129.0/24 maxlen: 24
                          46.99.132.0/24 maxlen: 24
                          46.99.135.0/24 maxlen: 24
                          46.99.134.0/24 maxlen: 24
                          46.99.133.0/24 maxlen: 24
                          46.99.138.0/24 maxlen: 24
                          46.99.137.0/24 maxlen: 24
                          46.99.136.0/24 maxlen: 24
                          46.99.139.0/24 maxlen: 24
                          46.99.142.0/24 maxlen: 24
                          46.99.141.0/24 maxlen: 24
                          46.99.140.0/24 maxlen: 24
                          46.99.145.0/24 maxlen: 24
                          46.99.144.0/24 maxlen: 24
                          46.99.143.0/24 maxlen: 24
                          46.99.254.0/23 maxlen: 23
                          91.187.97.0/24 maxlen: 24
                          91.187.96.0/19 maxlen: 19
                          91.187.96.0/24 maxlen: 24
                          46.99.203.0/24 maxlen: 24
                          46.99.202.0/23 maxlen: 23
                          46.99.202.0/24 maxlen: 24
                          91.187.98.0/24 maxlen: 24
                          91.187.100.0/24 maxlen: 24
                          91.187.99.0/24 maxlen: 24
                          91.187.104.0/24 maxlen: 24
                          91.187.104.0/23 maxlen: 23
                          91.187.103.0/24 maxlen: 24
                          91.187.102.0/24 maxlen: 24
                          91.187.101.0/24 maxlen: 24
                          91.187.107.0/24 maxlen: 24
                          91.187.106.0/24 maxlen: 24
                          91.187.111.0/24 maxlen: 24
                          91.187.110.0/24 maxlen: 24
                          91.187.109.0/24 maxlen: 24
                          91.187.108.0/24 maxlen: 24
                          91.187.112.0/24 maxlen: 24
                          91.187.114.0/24 maxlen: 24
                          91.187.113.0/24 maxlen: 24
                          46.99.224.0/20 maxlen: 20
                          91.187.117.0/24 maxlen: 24
                          91.187.116.0/24 maxlen: 24
                          91.187.115.0/24 maxlen: 24
                          91.187.118.0/24 maxlen: 24
                          91.187.125.0/24 maxlen: 24
                          91.187.121.0/24 maxlen: 24
                          91.187.120.0/24 maxlen: 24
                          91.187.119.0/24 maxlen: 24
                          91.187.124.0/24 maxlen: 24
                          91.187.123.0/24 maxlen: 24
                          91.187.122.0/24 maxlen: 24
                          91.187.127.0/24 maxlen: 24
                          91.187.126.0/24 maxlen: 24
                          46.99.250.0/24 maxlen: 24
                          46.99.249.0/24 maxlen: 24
                          46.99.252.0/23 maxlen: 23
                          46.99.251.0/24 maxlen: 24
                          46.99.64.0/19 maxlen: 19
                          46.99.64.0/18 maxlen: 18
                          46.99.0.0/18 maxlen: 18
                          46.99.0.0/16 maxlen: 16
                          46.99.32.0/19 maxlen: 19
                          2a03:4b80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144441167 (0x89bff4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
        Validity
            Not Before: Jan  1 09:58:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17a4c3c37a146b2f81fa4a4d388dcec9c6e0d8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:b8:ee:89:03:d3:2b:4e:ed:11:0f:85:8c:
                    e2:25:82:2d:f0:27:3e:4c:bf:51:33:f2:74:a1:6b:
                    81:b9:35:16:9d:00:d8:0e:f5:b2:06:74:1d:63:dc:
                    3c:31:20:35:8b:fb:aa:10:9a:5e:58:30:9b:3a:b7:
                    37:15:d4:5d:f2:15:22:e9:91:0f:72:b5:08:96:18:
                    ba:e1:bc:c5:ee:1a:39:80:41:8e:b8:f8:a5:6b:46:
                    3c:ff:41:a4:87:35:65:09:f5:b3:fa:f9:96:2e:46:
                    7b:ce:cd:83:97:ab:ef:31:80:29:df:e3:c1:e1:9c:
                    72:ca:68:bf:9f:d6:88:5f:69:c8:0d:25:cf:c7:6b:
                    a4:60:f2:cc:25:d7:14:f6:42:a9:9a:a3:25:ff:e3:
                    2e:cb:2e:19:11:27:3f:35:95:80:ae:71:b0:96:76:
                    84:da:74:33:d7:ba:b6:ea:08:9d:4a:60:a3:ca:8c:
                    3e:17:f8:51:67:f9:0c:bd:6b:9b:46:cf:5b:f5:72:
                    fc:8e:e6:e0:30:8d:67:f3:e0:2c:bc:f6:53:c3:51:
                    f0:2b:90:dd:e6:fa:b1:62:62:9c:c2:4e:61:f1:65:
                    89:33:b9:7a:24:88:9a:a5:ea:3b:21:55:df:62:f2:
                    66:7b:b9:35:93:dc:89:e5:ae:6a:d5:b3:d9:95:9e:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A4:C3:C3:7A:14:6B:2F:81:FA:4A:4D:38:8D:CE:C9:C6:E0:D8:AE
            X509v3 Authority Key Identifier:
                keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/F6TDw3oUay-B-kpNOI3Oycbg2K4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.99.0.0/16
                  80.80.160.0/20
                  91.187.96.0/19
                IPv6:
                  2a03:4b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:3d:c6:a6:be:17:24:c7:29:48:28:2b:9d:3a:15:01:c3:bc:
         6f:c0:ef:c9:16:b1:cc:97:de:80:20:e5:aa:43:cd:25:68:d0:
         ca:c5:0b:64:56:49:a6:6c:13:18:a7:6b:f0:ec:44:52:9b:8f:
         c7:19:50:55:d6:ca:f3:4d:88:9e:77:b2:66:6d:c1:ab:5f:16:
         0f:94:51:b7:be:5d:64:b6:17:21:73:bc:ec:7d:90:22:2c:ef:
         3b:54:a6:46:a3:fe:90:af:7b:1a:32:88:23:ad:5a:3c:50:83:
         e9:97:1e:61:81:5e:44:fb:c3:d8:eb:2e:4f:6e:42:a6:46:80:
         75:da:db:2a:c7:6c:70:8d:bf:8a:8a:4d:f9:72:4d:3f:9a:5b:
         fe:87:b1:7c:27:37:66:85:f1:b7:ca:99:f9:9c:41:a9:de:02:
         c4:de:7b:e1:0e:42:7f:18:8f:87:d6:e2:ff:08:76:e5:b3:76:
         f4:d6:a3:35:68:1c:b7:e5:fe:53:d2:cd:de:df:e1:77:c3:3d:
         35:62:73:63:16:3d:af:19:2d:57:14:01:d8:ce:3e:8b:72:c7:
         cf:ea:88:f1:fc:8c:d4:19:e4:a4:30:2e:6c:8a:6a:99:c5:69:
         a2:2f:c6:d2:56:2a:32:eb:5e:83:b5:d0:c7:be:e9:6c:16:14:
         12:1d:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:21 2023 by rpki-client on console-ams.rpki-client.org