Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/eZEei8Vo66GCV_tTVfYBSuC1Xhw.roa
File:                     eZEei8Vo66GCV_tTVfYBSuC1Xhw.roa (raw, json)
Hash identifier:          HQSZ0MuwAHz0czuhjm63+nCAkIca2WhwBIyh50kcoX4=
Subject key identifier:   79:91:1E:8B:C5:68:EB:A1:82:57:FB:53:55:F6:01:4A:E0:B5:5E:1C
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       018241A0F3137C77ADA08BD1CBDFA3CB4514
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/eZEei8Vo66GCV_tTVfYBSuC1Xhw.roa
Signing time:             Wed 27 Jul 2022 21:47:23 +0000
ROA not before:           Wed 27 Jul 2022 21:47:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206067
IP address blocks:        188.29.184.0/21 maxlen: 21
                          188.29.192.0/20 maxlen: 20
                          188.29.208.0/20 maxlen: 20
                          188.29.128.0/19 maxlen: 19
                          188.30.64.0/22 maxlen: 22
                          188.30.76.0/22 maxlen: 22
                          188.29.240.0/21 maxlen: 21
                          188.29.248.0/22 maxlen: 22
                          188.30.0.0/21 maxlen: 21
                          92.40.48.0/20 maxlen: 20
                          94.197.104.0/21 maxlen: 21
                          188.29.0.0/20 maxlen: 20
                          94.197.112.0/21 maxlen: 21
                          188.28.192.0/18 maxlen: 18
                          188.29.80.0/20 maxlen: 20
                          188.29.96.0/20 maxlen: 20
                          188.29.112.0/20 maxlen: 20
                          188.29.16.0/20 maxlen: 20
                          188.29.32.0/20 maxlen: 20
                          188.29.64.0/20 maxlen: 20
                          188.31.96.0/20 maxlen: 20
                          188.28.16.0/20 maxlen: 20
                          92.41.144.0/21 maxlen: 21
                          92.41.156.0/22 maxlen: 22
                          94.196.144.0/20 maxlen: 20
                          92.41.160.0/21 maxlen: 21
                          188.31.208.0/21 maxlen: 21
                          94.196.224.0/19 maxlen: 19
                          188.31.224.0/20 maxlen: 20
                          188.28.64.0/20 maxlen: 20
                          188.31.176.0/20 maxlen: 20
                          188.28.80.0/20 maxlen: 20
                          92.41.208.0/20 maxlen: 20
                          92.41.224.0/20 maxlen: 20
                          94.196.208.0/20 maxlen: 20
                          188.30.136.0/21 maxlen: 21
                          92.40.160.0/21 maxlen: 21
                          92.40.168.0/23 maxlen: 23
                          92.40.170.0/23 maxlen: 23
                          92.40.172.0/23 maxlen: 23
                          92.40.174.0/23 maxlen: 23
                          92.40.186.0/23 maxlen: 23
                          92.40.182.0/23 maxlen: 23
                          188.30.160.0/19 maxlen: 19
                          92.40.196.0/23 maxlen: 23
                          92.40.198.0/23 maxlen: 23
                          92.40.208.0/23 maxlen: 23
                          92.40.210.0/23 maxlen: 23
                          188.30.80.0/22 maxlen: 22
                          92.40.112.0/20 maxlen: 20
                          188.30.96.0/19 maxlen: 19
                          92.41.16.0/20 maxlen: 20
                          94.196.0.0/18 maxlen: 18
                          188.31.8.0/21 maxlen: 21
                          188.31.24.0/21 maxlen: 21
                          92.40.248.0/24 maxlen: 24
                          92.41.0.0/20 maxlen: 20
                          2a04:4a45:a::/48 maxlen: 48
                          2a04:4a45:b::/48 maxlen: 48
                          2a04:4a43:4700::/40 maxlen: 40
                          2a04:4a43:4200::/39 maxlen: 39
                          2a04:4a43:8000::/34 maxlen: 34
                          2a04:4a43:5400::/40 maxlen: 40
                          2a04:4a43:4000::/39 maxlen: 39
                          2a04:4a43:4500::/40 maxlen: 40
                          2a04:4a43:4b00::/40 maxlen: 40
                          2a04:4a43:9500::/40 maxlen: 40
                          2a04:4a43:5300::/40 maxlen: 40
                          2a04:4a43:4d00::/40 maxlen: 40
                          2a04:4a43:4400::/40 maxlen: 40
                          2a04:4a43:5200::/40 maxlen: 40
                          2a04:4a43:4900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:41:a0:f3:13:7c:77:ad:a0:8b:d1:cb:df:a3:cb:45:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Jul 27 21:47:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79911e8bc568eba18257fb5355f6014ae0b55e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:11:60:e2:4c:2c:71:06:e0:0d:de:d0:e0:
                    1a:88:f2:53:57:28:2f:5c:22:9d:1b:87:3e:2f:f9:
                    f2:30:af:99:4e:ef:a5:be:c2:42:f5:a9:2d:61:70:
                    ba:e6:f1:a2:70:26:f7:08:33:6f:d6:17:32:29:7e:
                    cb:34:e9:5e:3c:7f:7d:4b:e6:cf:72:c2:87:02:ca:
                    d9:07:79:cd:b3:83:86:b2:b3:83:25:22:95:cf:3b:
                    cd:06:60:65:91:25:73:ca:e3:3b:12:66:3f:0c:ea:
                    15:7f:6d:20:4d:74:1b:d2:1a:91:cb:b4:39:84:90:
                    2b:4f:90:8d:47:f9:25:d1:1b:28:bb:71:1c:cb:e8:
                    73:a2:d4:47:12:04:56:70:19:d9:06:c0:ee:cd:1b:
                    d5:73:ec:65:44:79:ec:6a:1a:30:30:03:14:5a:d9:
                    73:8b:2c:0b:d6:29:cd:d8:78:39:26:1f:a5:9e:1e:
                    1e:1b:2e:bb:97:b3:04:77:c6:5b:cc:9c:73:4e:7f:
                    cc:93:b6:a4:a3:2b:54:da:89:69:c4:dc:68:be:b0:
                    2f:12:ab:13:33:a9:3a:fd:86:33:9e:64:7c:92:2e:
                    8f:ef:df:6b:d5:e5:14:3a:0a:cd:73:63:c3:bd:86:
                    94:55:e3:86:b1:10:1c:99:01:54:77:2d:a5:e9:6a:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:91:1E:8B:C5:68:EB:A1:82:57:FB:53:55:F6:01:4A:E0:B5:5E:1C
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/eZEei8Vo66GCV_tTVfYBSuC1Xhw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.40.48.0/20
                  92.40.112.0/20
                  92.40.160.0/20
                  92.40.182.0/23
                  92.40.186.0/23
                  92.40.196.0/22
                  92.40.208.0/22
                  92.40.248.0/24
                  92.41.0.0/19
                  92.41.144.0/21
                  92.41.156.0-92.41.167.255
                  92.41.208.0-92.41.239.255
                  94.196.0.0/18
                  94.196.144.0/20
                  94.196.208.0-94.196.255.255
                  94.197.104.0-94.197.119.255
                  188.28.16.0/20
                  188.28.64.0/19
                  188.28.192.0-188.29.47.255
                  188.29.64.0-188.29.159.255
                  188.29.184.0-188.29.223.255
                  188.29.240.0-188.29.251.255
                  188.30.0.0/21
                  188.30.64.0/22
                  188.30.76.0-188.30.83.255
                  188.30.96.0/19
                  188.30.136.0/21
                  188.30.160.0/19
                  188.31.8.0/21
                  188.31.24.0/21
                  188.31.96.0/20
                  188.31.176.0/20
                  188.31.208.0/21
                  188.31.224.0/20
                IPv6:
                  2a04:4a43:4000::-2a04:4a43:45ff:ffff:ffff:ffff:ffff:ffff
                  2a04:4a43:4700::/40
                  2a04:4a43:4900::/40
                  2a04:4a43:4b00::/40
                  2a04:4a43:4d00::/40
                  2a04:4a43:5200::-2a04:4a43:54ff:ffff:ffff:ffff:ffff:ffff
                  2a04:4a43:8000::/34
                  2a04:4a45:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         41:89:6c:1d:1c:e0:44:33:bc:dc:4d:bd:e5:da:5e:2c:32:7c:
         29:7b:6e:59:b9:d4:15:66:60:b4:e0:c0:f6:e8:8c:ec:d1:a0:
         b3:32:2e:f0:2d:58:13:50:8c:1f:08:5e:48:c2:d8:46:16:48:
         d9:19:0f:7d:de:c3:e3:94:e1:b8:4a:e9:a7:e5:79:e2:78:3a:
         f2:fa:7e:8a:b3:76:c4:17:8f:6a:6f:bc:b2:cf:f4:6b:4e:e1:
         1e:52:44:d7:e1:a9:89:d6:36:b4:51:e4:53:9b:27:4b:49:e2:
         be:d5:9a:a5:ac:37:68:66:6d:60:8c:c8:40:14:57:ef:60:7c:
         66:ad:1f:2c:10:c5:05:18:a2:9c:ee:b7:59:c6:6d:80:63:ea:
         9e:0c:9f:08:61:e0:84:64:34:ac:d1:e2:ae:28:3b:87:8f:83:
         63:8f:df:18:1d:c8:57:1a:65:8d:11:88:6a:c2:e4:7f:e7:51:
         64:ac:00:ee:50:02:e6:cb:86:69:04:4d:bc:4b:53:2e:32:be:
         ad:13:31:6b:6f:61:f9:68:0d:c7:75:c5:1d:71:1f:ac:49:16:
         a1:d6:8c:86:21:c3:83:7a:1d:4b:26:a1:3f:2b:b9:18:ba:a7:
         89:5b:f3:32:91:56:15:ce:e3:24:7e:e4:41:59:c7:49:3f:68:
         2e:27:53:51
-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgISAYJBoPMTfHetoIvRy9+jy0UUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl
MzIyZGQwHhcNMjIwNzI3MjE0NzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTkxMWU4YmM1NjhlYmExODI1N2ZiNTM1NWY2MDE0YWUwYjU1ZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbgRYOJMLHEG4A3e0OAaiPJTVygv
XCKdG4c+L/nyMK+ZTu+lvsJC9aktYXC65vGicCb3CDNv1hcyKX7LNOlePH99S+bP
csKHAsrZB3nNs4OGsrODJSKVzzvNBmBlkSVzyuM7EmY/DOoVf20gTXQb0hqRy7Q5
hJArT5CNR/kl0Rsou3Ecy+hzotRHEgRWcBnZBsDuzRvVc+xlRHnsahowMAMUWtlz
iywL1inN2Hg5Jh+lnh4eGy67l7MEd8ZbzJxzTn/Mk7akoytU2olpxNxovrAvEqsT
M6k6/YYznmR8ki6P799r1eUUOgrNc2PDvYaUVeOGsRAcmQFUdy2l6WoEOQIDAQAB
o4IDfTCCA3kwHQYDVR0OBBYEFHmRHovFaOuhglf7U1X2AUrgtV4cMB8GA1UdIwQY
MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt
NTlmYzczZDYwMzIyLzEvZVpFZWk4Vm82NkdDVl90VFZmWUJTdUMxWGh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy
LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBkQYIKwYBBQUHAQcBAf8EggGAMIIBfDCCARsEAgABMIIB
EwMEBFwoMAMEBFwocAMEBFwooAMEAVwotgMEAVwougMEAlwoxAMEAlwo0AMEAFwo
+AMEBVwpAAMEA1wpkDAMAwQCXCmcAwQDXCmgMAwDBARcKdADBARcKeADBAZexAAD
BARexJAwCwMEBF7E0AMDAF7EMAwDBANexWgDBANexXADBAS8HBADBAW8HEAwDAME
BrwcwAMEBLwdIDAMAwQGvB1AAwQFvB2AMAwDBAO8HbgDBAW8HcAwDAMEBLwd8AME
Arwd+AMEA7weAAMEArweQDAMAwQCvB5MAwQCvB5QAwQFvB5gAwQDvB6IAwQFvB6g
AwQDvB8IAwQDvB8YAwQEvB9gAwQEvB+wAwQDvB/QAwQEvB/gMFsEAgACMFUwEAMG
BioESkNAAwYBKgRKQ0QDBgAqBEpDRwMGACoESkNJAwYAKgRKQ0sDBgAqBEpDTTAQ
AwYBKgRKQ1IDBgAqBEpDVAMGBioESkOAAwcBKgRKRQAKMA0GCSqGSIb3DQEBCwUA
A4IBAQBBiWwdHOBEM7zcTb3l2l4sMnwpe25ZudQVZmC04MD26Izs0aCzMi7wLVgT
UIwfCF5IwthGFkjZGQ993sPjlOG4Sumn5XnieDry+n6Ks3bEF49qb7yyz/RrTuEe
UkTX4amJ1ja0UeRTmydLSeK+1ZqlrDdoZm1gjMhAFFfvYHxmrR8sEMUFGKKc7rdZ
xm2AY+qeDJ8IYeCEZDSs0eKuKDuHj4Njj98YHchXGmWNEYhqwuR/51FkrADuUALm
y4ZpBE28S1MuMr6tEzFrb2H5aA3HdcUdcR+sSRah1oyGIcODeh1LJqE/K7kYuqeJ
W/MykVYVzuMkfuRBWcdJP2guJ1NR
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:21 2023 by rpki-client on console-ams.rpki-client.org