Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/1GSSo6ZmQhJgTgodJaG3vn2t0j0.roa
File:                     1GSSo6ZmQhJgTgodJaG3vn2t0j0.roa (raw, json)
Hash identifier:          sDhZhYJ6K8LWErqnv7YyJchR+wudS+BySOhJiE5VHtE=
Subject key identifier:   D4:64:92:A3:A6:66:42:12:60:4E:0A:1D:25:A1:B7:BE:7D:AD:D2:3D
Certificate issuer:       /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial:       352D9D52
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/1GSSo6ZmQhJgTgodJaG3vn2t0j0.roa
Signing time:             Sat 01 Jan 2022 15:57:14 +0000
ROA not before:           Sat 01 Jan 2022 15:57:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5617
IP address blocks:        79.188.0.0/16 maxlen: 24
                          31.60.0.0/14 maxlen: 25
                          83.13.0.0/16 maxlen: 24
                          83.6.0.0/16 maxlen: 24
                          46.134.0.0/16 maxlen: 25
                          83.20.0.0/16 maxlen: 24
                          188.47.0.0/16 maxlen: 24
                          37.47.0.0/16 maxlen: 16
                          91.94.0.0/16 maxlen: 16
                          83.12.0.0/16 maxlen: 24
                          213.25.166.0/24 maxlen: 24
                          212.160.0.0/16 maxlen: 16
                          79.187.0.0/16 maxlen: 24
                          213.25.92.0/24 maxlen: 24
                          37.228.0.0/18 maxlen: 18
                          212.160.172.0/24 maxlen: 24
                          83.26.0.0/16 maxlen: 24
                          80.53.0.0/16 maxlen: 24
                          83.19.0.0/16 maxlen: 24
                          83.18.0.0/16 maxlen: 24
                          83.11.0.0/16 maxlen: 24
                          80.52.0.0/16 maxlen: 24
                          83.5.0.0/16 maxlen: 24
                          217.99.0.0/16 maxlen: 24
                          213.25.0.0/16 maxlen: 16
                          83.25.0.0/16 maxlen: 24
                          217.98.0.0/16 maxlen: 24
                          195.205.147.0/24 maxlen: 24
                          83.17.0.0/16 maxlen: 24
                          83.24.0.0/13 maxlen: 13
                          83.4.0.0/16 maxlen: 24
                          83.31.0.0/16 maxlen: 24
                          79.186.0.0/16 maxlen: 24
                          83.24.0.0/16 maxlen: 24
                          195.205.239.0/24 maxlen: 24
                          95.51.0.0/16 maxlen: 24
                          80.51.0.0/16 maxlen: 24
                          83.16.0.0/13 maxlen: 13
                          83.23.0.0/16 maxlen: 24
                          80.50.0.0/16 maxlen: 24
                          95.50.0.0/16 maxlen: 24
                          213.77.0.0/17 maxlen: 17
                          213.77.0.0/16 maxlen: 24
                          213.77.5.0/24 maxlen: 24
                          195.205.0.0/16 maxlen: 16
                          83.16.0.0/16 maxlen: 24
                          193.110.120.0/22 maxlen: 22
                          217.97.0.0/16 maxlen: 24
                          37.225.0.0/16 maxlen: 25
                          213.77.68.0/24 maxlen: 24
                          83.10.0.0/16 maxlen: 24
                          213.77.20.0/24 maxlen: 24
                          83.3.0.0/16 maxlen: 24
                          213.77.34.0/24 maxlen: 24
                          83.30.0.0/16 maxlen: 24
                          79.185.0.0/16 maxlen: 24
                          213.76.0.0/16 maxlen: 24
                          83.2.0.0/16 maxlen: 24
                          83.29.0.0/16 maxlen: 24
                          87.96.0.0/17 maxlen: 17
                          217.96.0.0/16 maxlen: 24
                          217.96.0.0/14 maxlen: 14
                          79.163.128.0/17 maxlen: 25
                          83.22.0.0/16 maxlen: 24
                          80.49.0.0/16 maxlen: 24
                          95.49.0.0/16 maxlen: 24
                          217.116.100.0/22 maxlen: 22
                          79.184.0.0/13 maxlen: 13
                          212.244.226.0/24 maxlen: 24
                          79.191.0.0/16 maxlen: 24
                          213.76.129.0/24 maxlen: 24
                          194.204.128.0/18 maxlen: 18
                          213.76.135.0/24 maxlen: 24
                          213.76.140.0/24 maxlen: 24
                          213.76.143.0/24 maxlen: 24
                          194.204.152.0/24 maxlen: 24
                          213.76.146.0/24 maxlen: 24
                          194.204.159.0/24 maxlen: 24
                          195.117.0.0/16 maxlen: 16
                          178.56.0.0/16 maxlen: 16
                          5.184.0.0/16 maxlen: 16
                          79.184.0.0/16 maxlen: 24
                          5.184.0.0/15 maxlen: 15
                          83.9.0.0/16 maxlen: 24
                          80.48.0.0/13 maxlen: 13
                          83.28.0.0/16 maxlen: 24
                          80.55.0.0/16 maxlen: 24
                          83.0.0.0/11 maxlen: 11
                          95.48.0.0/16 maxlen: 24
                          80.48.0.0/16 maxlen: 24
                          80.48.0.0/14 maxlen: 14
                          95.48.0.0/14 maxlen: 14
                          83.1.0.0/16 maxlen: 24
                          83.8.0.0/13 maxlen: 13
                          213.77.68.192/26 maxlen: 26
                          195.116.0.0/16 maxlen: 16
                          212.244.0.0/16 maxlen: 16
                          83.15.0.0/16 maxlen: 24
                          46.170.0.0/15 maxlen: 24
                          178.42.0.0/15 maxlen: 24
                          83.8.0.0/16 maxlen: 24
                          79.163.0.0/16 maxlen: 25
                          79.190.0.0/16 maxlen: 24
                          83.0.0.0/13 maxlen: 13
                          37.108.0.0/16 maxlen: 25
                          83.7.0.0/16 maxlen: 24
                          79.162.0.0/15 maxlen: 24
                          79.189.0.0/16 maxlen: 24
                          83.0.0.0/16 maxlen: 24
                          83.27.0.0/16 maxlen: 24
                          80.54.0.0/16 maxlen: 24
                          83.21.0.0/16 maxlen: 24
                          83.14.0.0/16 maxlen: 24
                          2a01:1140::/28 maxlen: 28
                          2a01:1700:3::/48 maxlen: 48
                          2a01:1160::/28 maxlen: 28
                          2a01:1120::/28 maxlen: 28
                          2a01:11a0::/28 maxlen: 28
                          2a01:1100::/28 maxlen: 28
                          2a01:11d0::/28 maxlen: 28
                          2a01:1700:2::/48 maxlen: 48
                          2a01:1130::/28 maxlen: 28
                          2a01:1150::/28 maxlen: 28
                          2a01:11c0::/28 maxlen: 28
                          2a01:1170::/28 maxlen: 28
                          2a01:1000::/21 maxlen: 21
                          2a01:1190::/28 maxlen: 28
                          2a01:11b0::/28 maxlen: 28
                          2a01:1110::/28 maxlen: 28
                          2a01:1180::/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892181842 (0x352d9d52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
        Validity
            Not Before: Jan  1 15:57:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d46492a3a6664212604e0a1d25a1b7be7dadd23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:90:ce:62:4c:53:2c:ab:a6:bf:60:f6:1e:
                    85:d0:d0:06:98:18:ce:7f:14:c3:78:00:56:f1:1f:
                    f7:df:4b:dc:fd:44:87:a7:a7:9b:c8:3d:94:e0:00:
                    08:73:17:1d:83:4b:15:ba:21:4d:fd:e6:55:1e:86:
                    b0:49:05:77:49:86:73:e1:2d:1b:73:34:c2:5a:e9:
                    cb:55:8e:da:bd:e8:b4:52:eb:47:20:81:12:83:9e:
                    20:41:f9:a8:3a:f8:14:c0:0a:8b:f5:de:e8:67:e2:
                    e7:b7:d0:bd:9d:ab:86:8a:f6:c5:76:aa:4c:bc:70:
                    b5:22:cb:c6:8e:31:3d:2e:be:21:20:e9:15:71:e7:
                    14:86:1d:ca:35:63:33:77:4e:66:76:d9:34:f4:c1:
                    4d:b2:cb:f3:ec:67:f2:1d:73:2f:c5:a0:30:ff:de:
                    47:b9:c7:c4:ce:04:40:05:7e:ea:77:56:fa:42:b0:
                    18:e3:4c:8c:6b:45:37:f9:16:3c:54:b4:e5:35:fc:
                    7b:f1:ae:50:73:4d:58:7b:70:17:41:c7:a5:b6:51:
                    85:a9:7c:da:e2:b6:60:a2:a9:c1:10:c4:97:b8:f4:
                    21:79:fb:72:e9:3c:cc:73:40:9f:20:ea:79:0b:2b:
                    e8:b6:7e:e6:3f:5c:28:63:77:d0:b6:69:aa:fb:40:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:64:92:A3:A6:66:42:12:60:4E:0A:1D:25:A1:B7:BE:7D:AD:D2:3D
            X509v3 Authority Key Identifier:
                keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/1GSSo6ZmQhJgTgodJaG3vn2t0j0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.184.0.0/15
                  31.60.0.0/14
                  37.47.0.0/16
                  37.108.0.0/16
                  37.225.0.0/16
                  37.228.0.0/18
                  46.134.0.0/16
                  46.170.0.0/15
                  79.162.0.0/15
                  79.184.0.0/13
                  80.48.0.0/13
                  83.0.0.0/11
                  87.96.0.0/17
                  91.94.0.0/16
                  95.48.0.0/14
                  178.42.0.0/15
                  178.56.0.0/16
                  188.47.0.0/16
                  193.110.120.0/22
                  194.204.128.0/18
                  195.116.0.0/15
                  195.205.0.0/16
                  212.160.0.0/16
                  212.244.0.0/16
                  213.25.0.0/16
                  213.76.0.0/15
                  217.96.0.0/14
                  217.116.100.0/22
                IPv6:
                  2a01:1000::/21

    Signature Algorithm: sha256WithRSAEncryption
         05:d9:1f:46:d9:a6:1e:cc:5e:ab:64:7a:8e:b0:04:a9:5f:c6:
         a4:61:8d:26:04:88:b6:71:9c:72:ec:1a:7d:5c:53:5f:65:e4:
         c8:15:00:00:ea:33:13:b7:b4:3e:ad:16:0c:f6:1d:ec:7e:3e:
         f6:b5:92:be:4c:0d:b0:10:96:9e:1b:68:5f:92:35:88:4a:35:
         e6:1c:93:e5:26:bf:93:47:7c:a3:f2:86:99:d7:2d:ed:7d:04:
         8c:72:a6:dc:80:d9:e9:de:2b:86:99:ca:f1:75:c3:29:2a:40:
         b3:b5:54:1b:e6:7d:29:81:10:29:fe:01:9f:6f:48:c5:eb:c0:
         2e:a5:77:70:76:6c:e5:b9:d5:bf:cc:bd:54:81:ef:e7:3f:a5:
         5f:12:4a:8d:67:f1:f4:92:04:cf:40:80:52:4d:74:ea:6f:65:
         df:f1:dc:d9:f3:e0:89:91:7f:9d:ec:a7:fe:93:d7:7e:ca:e8:
         bb:ab:b0:4c:bb:0a:a6:4d:65:a0:df:52:93:da:13:b7:2c:7c:
         e3:04:43:61:12:4a:0c:4f:b9:07:6d:56:e0:c6:61:44:a9:cc:
         5a:3d:78:3f:f7:70:a0:e0:94:06:86:e4:60:0c:de:2d:c5:1b:
         c1:f7:c3:01:6e:02:5d:9f:d3:1d:e4:68:fd:01:19:44:03:15:
         f8:35:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-fra.rpki-client.org