Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/5teY6JZ6ExFavj4DQdZcf543NVI.roa
File:                     5teY6JZ6ExFavj4DQdZcf543NVI.roa (raw, json)
Hash identifier:          GtLN3CbTYB9kQFFqK7Yczxq7J0ZCFx/+3jr8V3xxhdU=
Subject key identifier:   E6:D7:98:E8:96:7A:13:11:5A:BE:3E:03:41:D6:5C:7F:9E:37:35:52
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       014B820C
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/5teY6JZ6ExFavj4DQdZcf543NVI.roa
Signing time:             Tue 08 Feb 2022 09:56:48 +0000
ROA not before:           Tue 08 Feb 2022 09:56:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206067
IP address blocks:        188.29.184.0/21 maxlen: 21
                          188.29.192.0/20 maxlen: 20
                          188.29.208.0/20 maxlen: 20
                          188.29.128.0/19 maxlen: 19
                          188.30.64.0/22 maxlen: 22
                          188.30.76.0/22 maxlen: 22
                          188.29.240.0/21 maxlen: 21
                          188.29.248.0/22 maxlen: 22
                          188.30.0.0/21 maxlen: 21
                          92.40.48.0/20 maxlen: 20
                          94.197.104.0/21 maxlen: 21
                          188.29.0.0/20 maxlen: 20
                          94.197.112.0/21 maxlen: 21
                          188.28.192.0/18 maxlen: 18
                          188.29.80.0/20 maxlen: 20
                          188.29.96.0/20 maxlen: 20
                          188.29.112.0/20 maxlen: 20
                          188.29.16.0/20 maxlen: 20
                          188.29.32.0/20 maxlen: 20
                          188.29.64.0/20 maxlen: 20
                          188.31.96.0/20 maxlen: 20
                          188.28.16.0/20 maxlen: 20
                          92.41.144.0/21 maxlen: 21
                          92.41.156.0/22 maxlen: 22
                          94.196.144.0/20 maxlen: 20
                          92.41.160.0/21 maxlen: 21
                          188.31.208.0/21 maxlen: 21
                          94.196.224.0/19 maxlen: 19
                          188.31.224.0/20 maxlen: 20
                          188.28.64.0/20 maxlen: 20
                          188.31.176.0/20 maxlen: 20
                          188.28.80.0/20 maxlen: 20
                          92.41.208.0/20 maxlen: 20
                          92.41.224.0/20 maxlen: 20
                          94.196.208.0/20 maxlen: 20
                          188.30.136.0/21 maxlen: 21
                          92.40.160.0/21 maxlen: 21
                          92.40.168.0/23 maxlen: 23
                          92.40.170.0/23 maxlen: 23
                          92.40.172.0/23 maxlen: 23
                          92.40.174.0/23 maxlen: 23
                          92.40.186.0/23 maxlen: 23
                          92.40.182.0/23 maxlen: 23
                          188.30.160.0/19 maxlen: 19
                          92.40.196.0/23 maxlen: 23
                          92.40.198.0/23 maxlen: 23
                          92.40.208.0/23 maxlen: 23
                          92.40.210.0/23 maxlen: 23
                          188.30.80.0/22 maxlen: 22
                          92.40.112.0/20 maxlen: 20
                          188.30.96.0/19 maxlen: 19
                          92.41.16.0/20 maxlen: 20
                          94.196.0.0/18 maxlen: 18
                          188.31.8.0/21 maxlen: 21
                          188.31.24.0/21 maxlen: 21
                          92.40.248.0/24 maxlen: 24
                          92.41.0.0/20 maxlen: 20
                          2a04:4a45:a::/48 maxlen: 48
                          2a04:4a45:b::/48 maxlen: 48
                          2a04:4a43:4700::/40 maxlen: 40
                          2a04:4a43:4000::/39 maxlen: 39
                          2a04:4a43:4200::/39 maxlen: 39
                          2a04:4a43:5200::/40 maxlen: 40
                          2a04:4a43:5300::/40 maxlen: 40
                          2a04:4a43:4500::/40 maxlen: 40
                          2a04:4a43:4b00::/40 maxlen: 40
                          2a04:4a43:5400::/40 maxlen: 40
                          2a04:4a43:4900::/40 maxlen: 40
                          2a04:4a43:4400::/40 maxlen: 40
                          2a04:4a43:4d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21725708 (0x14b820c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Feb  8 09:56:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6d798e8967a13115abe3e0341d65c7f9e373552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:27:1c:42:18:11:26:3e:62:ae:72:82:4a:
                    5a:7c:2c:f1:cf:2d:dc:13:0c:ec:3a:a8:c2:61:db:
                    55:c7:7e:6e:03:47:e6:4b:f5:2d:0e:9e:9f:71:95:
                    38:9d:b4:35:0e:05:81:9b:19:e7:cf:10:70:06:70:
                    26:a6:ac:1b:a9:18:c5:da:24:ad:7b:54:2d:85:38:
                    99:ae:05:43:dd:17:ad:2a:c4:3b:66:54:73:91:ba:
                    09:09:4c:7e:a5:39:06:ac:16:d5:fc:79:af:70:ff:
                    30:27:21:8f:59:63:0d:02:19:51:26:c0:cc:c5:21:
                    9a:0f:99:52:4f:78:f2:15:13:70:d6:13:7e:4d:c3:
                    66:18:bd:8c:94:2a:4b:dc:20:bc:e6:fc:73:1f:58:
                    01:c9:06:8e:39:cd:86:9c:cf:5c:23:73:2b:92:b0:
                    57:f9:82:6b:6b:ac:2e:78:58:b0:3b:29:55:1d:4c:
                    44:f7:7c:9e:1c:7c:a5:ab:50:c9:0b:20:70:c8:74:
                    d0:20:2b:1a:47:b9:d1:e0:45:9b:d5:7f:7e:36:06:
                    b1:a5:ee:bd:d4:fb:af:47:f0:90:e9:9c:27:d7:4c:
                    82:5f:fd:2e:a8:de:8d:78:41:04:b7:ad:73:8d:be:
                    29:7d:ec:33:40:92:0f:da:53:14:2b:c2:d7:98:cb:
                    09:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D7:98:E8:96:7A:13:11:5A:BE:3E:03:41:D6:5C:7F:9E:37:35:52
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/5teY6JZ6ExFavj4DQdZcf543NVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.40.48.0/20
                  92.40.112.0/20
                  92.40.160.0/20
                  92.40.182.0/23
                  92.40.186.0/23
                  92.40.196.0/22
                  92.40.208.0/22
                  92.40.248.0/24
                  92.41.0.0/19
                  92.41.144.0/21
                  92.41.156.0-92.41.167.255
                  92.41.208.0-92.41.239.255
                  94.196.0.0/18
                  94.196.144.0/20
                  94.196.208.0-94.196.255.255
                  94.197.104.0-94.197.119.255
                  188.28.16.0/20
                  188.28.64.0/19
                  188.28.192.0-188.29.47.255
                  188.29.64.0-188.29.159.255
                  188.29.184.0-188.29.223.255
                  188.29.240.0-188.29.251.255
                  188.30.0.0/21
                  188.30.64.0/22
                  188.30.76.0-188.30.83.255
                  188.30.96.0/19
                  188.30.136.0/21
                  188.30.160.0/19
                  188.31.8.0/21
                  188.31.24.0/21
                  188.31.96.0/20
                  188.31.176.0/20
                  188.31.208.0/21
                  188.31.224.0/20
                IPv6:
                  2a04:4a43:4000::-2a04:4a43:45ff:ffff:ffff:ffff:ffff:ffff
                  2a04:4a43:4700::/40
                  2a04:4a43:4900::/40
                  2a04:4a43:4b00::/40
                  2a04:4a43:4d00::/40
                  2a04:4a43:5200::-2a04:4a43:54ff:ffff:ffff:ffff:ffff:ffff
                  2a04:4a45:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:f0:6e:1f:08:47:a2:89:da:dc:2f:43:5b:99:41:b9:2b:
         a8:35:53:33:57:b0:f2:9b:da:12:4a:33:77:c7:1a:9c:4a:cd:
         cd:e4:73:f4:89:f4:dc:42:db:4c:ac:b8:a2:c1:b4:72:25:b2:
         c2:58:39:dc:b4:c7:cb:e9:33:a0:a1:bf:67:6c:a6:dc:aa:bc:
         da:35:61:f9:1a:58:f1:a7:e0:4b:93:3f:92:de:92:72:5f:13:
         fa:d3:7a:88:86:83:07:e9:c7:58:03:01:07:b5:f3:21:22:b7:
         d1:f4:c1:db:e1:80:14:f0:30:f8:9d:75:12:af:5e:62:9a:bb:
         88:78:ee:a0:26:9f:2a:49:cd:34:39:8a:39:c7:0e:47:cc:af:
         99:3d:08:81:f8:0e:fd:cc:5e:84:64:b3:b3:ba:fc:df:08:4c:
         cd:ea:a4:c4:38:f3:4d:6b:cc:7b:d7:09:87:a5:76:1b:cc:c6:
         53:37:ae:b7:d2:79:3d:8e:c5:c9:6f:d1:3a:ed:82:e4:68:a5:
         f0:35:7f:e0:0f:78:0c:72:fc:01:4d:91:0b:ba:97:44:ed:74:
         c4:0c:07:45:dc:1d:85:20:74:5d:a6:08:76:96:03:bb:78:7e:
         f3:c6:07:de:f3:33:0f:9f:74:3a:0a:ed:3c:cf:cc:d1:9f:3d:
         1b:6d:c0:a5
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIEAUuCDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YjUxMzU5Yzk5ODliOTYzZTk1OTRjMTkyOWM4MjAzNjdkZTMyMmRkMB4XDTIyMDIw
ODA5NTY0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTZkNzk4ZTg5Njdh
MTMxMTVhYmUzZTAzNDFkNjVjN2Y5ZTM3MzU1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJSbJxxCGBEmPmKucoJKWnws8c8t3BMM7DqowmHbVcd+bgNH
5kv1LQ6en3GVOJ20NQ4FgZsZ588QcAZwJqasG6kYxdokrXtULYU4ma4FQ90XrSrE
O2ZUc5G6CQlMfqU5BqwW1fx5r3D/MCchj1ljDQIZUSbAzMUhmg+ZUk948hUTcNYT
fk3DZhi9jJQqS9wgvOb8cx9YAckGjjnNhpzPXCNzK5KwV/mCa2usLnhYsDspVR1M
RPd8nhx8patQyQsgcMh00CArGke50eBFm9V/fjYGsaXuvdT7r0fwkOmcJ9dMgl/9
LqjejXhBBLetc42+KX3sM0CSD9pTFCvC15jLCUsCAwEAAaOCA3UwggNxMB0GA1Ud
DgQWBBTm15jolnoTEVq+PgNB1lx/njc1UjAfBgNVHSMEGDAWgBTrUTWcmYm5Y+lZ
TBkpyCA2feMi3TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYxRTFuSm1KdVdQcFdVd1pLY2dnTm4zakl0MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjQvZDk3ZDI4LWEyZTItNDAxZC04ZmYwLTU5ZmM3M2Q2MDMyMi8x
LzV0ZVk2Slo2RXhGYXZqNERRZFpjZjU0M05WSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQv
ZDk3ZDI4LWEyZTItNDAxZC04ZmYwLTU5ZmM3M2Q2MDMyMi8xLzYxRTFuSm1KdVdQ
cFdVd1pLY2dnTm4zakl0MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AYkGCCsGAQUFBwEHAQH/BIIBeDCCAXQwggEbBAIAATCCARMDBARcKDADBARcKHAD
BARcKKADBAFcKLYDBAFcKLoDBAJcKMQDBAJcKNADBABcKPgDBAVcKQADBANcKZAw
DAMEAlwpnAMEA1wpoDAMAwQEXCnQAwQEXCngAwQGXsQAAwQEXsSQMAsDBARexNAD
AwBexDAMAwQDXsVoAwQDXsVwAwQEvBwQAwQFvBxAMAwDBAa8HMADBAS8HSAwDAME
BrwdQAMEBbwdgDAMAwQDvB24AwQFvB3AMAwDBAS8HfADBAK8HfgDBAO8HgADBAK8
HkAwDAMEArweTAMEArweUAMEBbweYAMEA7weiAMEBbweoAMEA7wfCAMEA7wfGAME
BLwfYAMEBLwfsAMEA7wf0AMEBLwf4DBTBAIAAjBNMBADBgYqBEpDQAMGASoESkNE
AwYAKgRKQ0cDBgAqBEpDSQMGACoESkNLAwYAKgRKQ00wEAMGASoESkNSAwYAKgRK
Q1QDBwEqBEpFAAowDQYJKoZIhvcNAQELBQADggEBAI3V8G4fCEeiidrcL0NbmUG5
K6g1UzNXsPKb2hJKM3fHGpxKzc3kc/SJ9NxC20ysuKLBtHIlssJYOdy0x8vpM6Ch
v2dsptyqvNo1YfkaWPGn4EuTP5LeknJfE/rTeoiGgwfpx1gDAQe18yEit9H0wdvh
gBTwMPiddRKvXmKau4h47qAmnypJzTQ5ijnHDkfMr5k9CIH4Dv3MXoRks7O6/N8I
TM3qpMQ4801rzHvXCYeldhvMxlM3rrfSeT2Oxclv0TrtguRopfA1f+APeAxy/AFN
kQu6l0TtdMQMB0XcHYUgdF2mCHaWA7t4fvPGB97zMw+fdDoK7TzPzNGfPRttwKU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:26 2023 by rpki-client on console-fra.rpki-client.org