Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/SkoNpVfGwCtFmKCSMv4nsvAfBHI.roa
File:                     SkoNpVfGwCtFmKCSMv4nsvAfBHI.roa (raw, json)
Hash identifier:          fFnNzzlHgBlUoVao5e94+7X0PLtZHa2Y2z8p3x6a2YA=
Subject key identifier:   4A:4A:0D:A5:57:C6:C0:2B:45:98:A0:92:32:FE:27:B2:F0:1F:04:72
Certificate issuer:       /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial:       35C262C7
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/SkoNpVfGwCtFmKCSMv4nsvAfBHI.roa
Signing time:             Tue 01 Mar 2022 13:02:24 +0000
ROA not before:           Tue 01 Mar 2022 13:02:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5617
IP address blocks:        79.188.0.0/16 maxlen: 24
                          31.60.0.0/14 maxlen: 25
                          83.13.0.0/16 maxlen: 24
                          83.6.0.0/16 maxlen: 24
                          46.134.0.0/16 maxlen: 25
                          83.20.0.0/16 maxlen: 24
                          188.47.0.0/16 maxlen: 24
                          37.47.0.0/16 maxlen: 16
                          91.94.0.0/16 maxlen: 16
                          213.25.125.0/24 maxlen: 24
                          83.12.0.0/16 maxlen: 24
                          213.25.166.0/24 maxlen: 24
                          212.160.0.0/16 maxlen: 16
                          79.187.0.0/16 maxlen: 24
                          213.25.92.0/24 maxlen: 24
                          37.228.0.0/18 maxlen: 18
                          212.160.172.0/24 maxlen: 24
                          83.26.0.0/16 maxlen: 24
                          80.53.0.0/16 maxlen: 24
                          83.19.0.0/16 maxlen: 24
                          83.18.0.0/16 maxlen: 24
                          83.11.0.0/16 maxlen: 24
                          80.52.0.0/16 maxlen: 24
                          83.5.0.0/16 maxlen: 24
                          217.99.0.0/16 maxlen: 24
                          213.25.0.0/16 maxlen: 16
                          83.25.0.0/16 maxlen: 24
                          217.98.0.0/16 maxlen: 24
                          195.205.147.0/24 maxlen: 24
                          83.17.0.0/16 maxlen: 24
                          83.24.0.0/13 maxlen: 13
                          83.4.0.0/16 maxlen: 24
                          83.31.0.0/16 maxlen: 24
                          79.186.0.0/16 maxlen: 24
                          83.24.0.0/16 maxlen: 24
                          195.205.239.0/24 maxlen: 24
                          95.51.0.0/16 maxlen: 24
                          80.51.0.0/16 maxlen: 24
                          83.16.0.0/13 maxlen: 13
                          83.23.0.0/16 maxlen: 24
                          80.50.0.0/16 maxlen: 24
                          95.50.0.0/16 maxlen: 24
                          213.77.0.0/17 maxlen: 17
                          213.77.0.0/16 maxlen: 24
                          213.77.5.0/24 maxlen: 24
                          195.205.0.0/16 maxlen: 16
                          83.16.0.0/16 maxlen: 24
                          193.110.120.0/22 maxlen: 22
                          217.97.0.0/16 maxlen: 24
                          37.225.0.0/16 maxlen: 25
                          213.77.68.0/24 maxlen: 24
                          83.10.0.0/16 maxlen: 24
                          213.77.20.0/24 maxlen: 24
                          83.3.0.0/16 maxlen: 24
                          213.77.34.0/24 maxlen: 24
                          83.30.0.0/16 maxlen: 24
                          79.185.0.0/16 maxlen: 24
                          213.76.0.0/16 maxlen: 24
                          83.2.0.0/16 maxlen: 24
                          83.29.0.0/16 maxlen: 24
                          87.96.0.0/17 maxlen: 17
                          217.96.0.0/16 maxlen: 24
                          217.96.0.0/14 maxlen: 14
                          79.163.128.0/17 maxlen: 25
                          83.22.0.0/16 maxlen: 24
                          80.49.0.0/16 maxlen: 24
                          95.49.0.0/16 maxlen: 24
                          217.116.100.0/22 maxlen: 22
                          79.184.0.0/13 maxlen: 13
                          212.244.226.0/24 maxlen: 24
                          79.191.0.0/16 maxlen: 24
                          213.76.129.0/24 maxlen: 24
                          194.204.128.0/18 maxlen: 18
                          213.76.135.0/24 maxlen: 24
                          213.76.140.0/24 maxlen: 24
                          213.76.143.0/24 maxlen: 24
                          194.204.152.0/24 maxlen: 24
                          213.76.146.0/24 maxlen: 24
                          194.204.159.0/24 maxlen: 24
                          195.117.0.0/16 maxlen: 16
                          178.56.0.0/16 maxlen: 16
                          5.184.0.0/16 maxlen: 16
                          79.184.0.0/16 maxlen: 24
                          5.184.0.0/15 maxlen: 15
                          83.9.0.0/16 maxlen: 24
                          80.48.0.0/13 maxlen: 13
                          83.28.0.0/16 maxlen: 24
                          80.55.0.0/16 maxlen: 24
                          83.0.0.0/11 maxlen: 11
                          95.48.0.0/16 maxlen: 24
                          80.48.0.0/16 maxlen: 24
                          80.48.0.0/14 maxlen: 14
                          95.48.0.0/14 maxlen: 14
                          83.1.0.0/16 maxlen: 24
                          83.8.0.0/13 maxlen: 13
                          213.77.68.192/26 maxlen: 26
                          195.116.0.0/16 maxlen: 16
                          212.244.0.0/16 maxlen: 16
                          83.15.0.0/16 maxlen: 24
                          46.170.0.0/15 maxlen: 24
                          178.42.0.0/15 maxlen: 24
                          83.8.0.0/16 maxlen: 24
                          79.163.0.0/16 maxlen: 25
                          79.190.0.0/16 maxlen: 24
                          83.0.0.0/13 maxlen: 13
                          37.108.0.0/16 maxlen: 25
                          83.7.0.0/16 maxlen: 24
                          79.162.0.0/15 maxlen: 24
                          79.189.0.0/16 maxlen: 24
                          83.0.0.0/16 maxlen: 24
                          83.27.0.0/16 maxlen: 24
                          80.54.0.0/16 maxlen: 24
                          83.21.0.0/16 maxlen: 24
                          83.14.0.0/16 maxlen: 24
                          2a01:1140::/28 maxlen: 28
                          2a01:1700:3::/48 maxlen: 48
                          2a01:1160::/28 maxlen: 28
                          2a01:1120::/28 maxlen: 28
                          2a01:11a0::/28 maxlen: 28
                          2a01:1100::/28 maxlen: 28
                          2a01:11d0::/28 maxlen: 28
                          2a01:1700:2::/48 maxlen: 48
                          2a01:1130::/28 maxlen: 28
                          2a01:1150::/28 maxlen: 28
                          2a01:11c0::/28 maxlen: 28
                          2a01:1170::/28 maxlen: 28
                          2a01:1000::/21 maxlen: 21
                          2a01:1190::/28 maxlen: 28
                          2a01:11b0::/28 maxlen: 28
                          2a01:1110::/28 maxlen: 28
                          2a01:1180::/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901931719 (0x35c262c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
        Validity
            Not Before: Mar  1 13:02:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a4a0da557c6c02b4598a09232fe27b2f01f0472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:01:75:5d:da:2f:a0:9d:d7:1c:4f:bc:ba:
                    94:47:56:e1:c2:bb:78:96:d7:2e:43:1d:b1:af:b3:
                    6d:58:80:9d:3c:18:44:ca:26:4a:6b:ac:9a:5f:82:
                    70:a0:a6:bf:8f:c4:09:d9:20:ed:45:17:0e:96:dd:
                    3d:c9:ca:af:06:41:fe:df:bd:c5:c4:c5:c5:6e:2d:
                    12:e1:ae:ce:37:86:7a:8f:0b:f7:62:2e:47:3e:d5:
                    c8:74:2a:b0:c9:e6:d4:0f:cd:12:44:ca:05:f9:fb:
                    a2:3c:b0:cf:22:53:f9:9e:c2:22:86:f9:d5:4f:f4:
                    ee:56:3b:2e:c3:96:ee:b8:45:42:f3:4b:ae:db:16:
                    e3:7c:dd:ad:1f:e9:32:f2:1f:d6:3a:8f:f4:65:7c:
                    63:81:ce:72:f6:77:bb:2d:98:93:54:a4:c5:43:59:
                    28:94:f7:d6:3c:7b:de:25:ad:6d:67:06:5a:56:a6:
                    d7:a3:05:1d:6f:8a:3e:9d:5c:d2:49:43:a8:c8:91:
                    52:73:12:7b:0a:b9:5e:f8:aa:b3:bd:8b:a2:62:18:
                    9e:c2:5c:bc:35:99:cf:76:01:ce:d9:ac:40:7f:e6:
                    c5:c3:88:e0:51:c6:e9:1c:72:92:ae:30:2a:06:34:
                    72:17:af:f0:a1:24:4f:4f:4c:19:0b:64:91:46:e1:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4A:0D:A5:57:C6:C0:2B:45:98:A0:92:32:FE:27:B2:F0:1F:04:72
            X509v3 Authority Key Identifier:
                keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/SkoNpVfGwCtFmKCSMv4nsvAfBHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.184.0.0/15
                  31.60.0.0/14
                  37.47.0.0/16
                  37.108.0.0/16
                  37.225.0.0/16
                  37.228.0.0/18
                  46.134.0.0/16
                  46.170.0.0/15
                  79.162.0.0/15
                  79.184.0.0/13
                  80.48.0.0/13
                  83.0.0.0/11
                  87.96.0.0/17
                  91.94.0.0/16
                  95.48.0.0/14
                  178.42.0.0/15
                  178.56.0.0/16
                  188.47.0.0/16
                  193.110.120.0/22
                  194.204.128.0/18
                  195.116.0.0/15
                  195.205.0.0/16
                  212.160.0.0/16
                  212.244.0.0/16
                  213.25.0.0/16
                  213.76.0.0/15
                  217.96.0.0/14
                  217.116.100.0/22
                IPv6:
                  2a01:1000::/21

    Signature Algorithm: sha256WithRSAEncryption
         77:24:88:30:2b:ad:0f:02:ee:f3:a1:83:fd:e3:91:0c:6b:f1:
         ac:97:77:3d:ec:57:df:57:05:da:3b:5b:ca:56:bc:a6:52:69:
         96:f5:bb:38:3b:ac:72:90:2a:3b:df:19:a8:98:39:f8:a0:07:
         29:0f:8e:a1:ba:19:eb:c6:f5:b1:56:50:de:ff:49:8b:17:d4:
         e2:a3:f7:c3:97:80:91:1e:ec:65:d2:ce:49:70:6b:40:fa:87:
         ce:e0:d0:71:08:8c:54:cc:cb:ef:24:f4:58:77:87:a9:5e:a3:
         0f:bf:8c:38:94:90:20:f9:cc:4a:07:20:d1:9d:4f:32:17:a2:
         4b:62:11:e6:2e:cb:c7:7d:eb:9a:d3:22:21:32:1a:52:ac:62:
         96:a2:27:b2:ca:19:2a:57:86:83:59:81:3d:8c:c8:a0:98:d9:
         f9:52:8c:f3:38:c6:cf:9c:da:24:3d:78:da:28:40:08:5a:ed:
         8c:71:28:1b:60:45:fb:fe:4b:2b:da:59:31:02:bc:e0:be:70:
         bf:f9:58:29:6f:15:e5:84:29:fc:e2:f9:a2:40:30:1d:da:ad:
         30:7c:93:c4:9d:0d:49:f8:8d:0e:4b:11:b1:29:76:2b:be:01:
         0a:8b:93:c2:5d:74:10:d9:3a:a6:fb:9b:90:84:2d:aa:86:b9:
         8b:a3:66:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-fra.rpki-client.org