Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/t7GiAURHXf1lLGlFXnmB3vXo-aU.roa
File:                     t7GiAURHXf1lLGlFXnmB3vXo-aU.roa (raw, json)
Hash identifier:          yK62jMCxF/PKq4LXAlaJo0UOQh1Kr/r3bjlmudsjB8s=
Subject key identifier:   B7:B1:A2:01:44:47:5D:FD:65:2C:69:45:5E:79:81:DE:F5:E8:F9:A5
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       01840ABEA5AA1B7D1DEFC37DF52E92C23A78
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/t7GiAURHXf1lLGlFXnmB3vXo-aU.roa
Signing time:             Mon 24 Oct 2022 16:06:17 +0000
ROA not before:           Mon 24 Oct 2022 16:06:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206067
IP address blocks:        92.40.48.0/20 maxlen: 20
                          185.153.236.0/24 maxlen: 24
                          185.153.237.0/24 maxlen: 24
                          185.153.238.0/24 maxlen: 24
                          185.153.239.0/24 maxlen: 24
                          188.31.96.0/20 maxlen: 20
                          188.31.92.0/22 maxlen: 22
                          188.31.112.0/20 maxlen: 20
                          188.31.128.0/19 maxlen: 19
                          188.31.64.0/22 maxlen: 22
                          188.31.68.0/22 maxlen: 22
                          188.31.72.0/22 maxlen: 22
                          188.31.76.0/22 maxlen: 22
                          188.31.80.0/22 maxlen: 22
                          188.31.84.0/22 maxlen: 22
                          188.31.88.0/22 maxlen: 22
                          188.31.208.0/21 maxlen: 21
                          188.31.224.0/20 maxlen: 20
                          188.31.248.0/23 maxlen: 23
                          188.31.251.0/24 maxlen: 24
                          188.31.176.0/20 maxlen: 20
                          188.31.192.0/21 maxlen: 21
                          188.30.136.0/21 maxlen: 21
                          188.30.144.0/21 maxlen: 21
                          188.30.160.0/19 maxlen: 19
                          188.30.80.0/22 maxlen: 22
                          188.30.84.0/22 maxlen: 22
                          188.30.96.0/19 maxlen: 19
                          188.30.128.0/21 maxlen: 21
                          188.30.240.0/21 maxlen: 21
                          188.31.0.0/21 maxlen: 21
                          188.31.8.0/21 maxlen: 21
                          188.31.16.0/21 maxlen: 21
                          188.31.24.0/21 maxlen: 21
                          188.31.32.0/19 maxlen: 19
                          188.30.192.0/21 maxlen: 21
                          188.30.200.0/21 maxlen: 21
                          188.30.208.0/20 maxlen: 20
                          188.30.224.0/20 maxlen: 20
                          188.29.184.0/21 maxlen: 21
                          188.29.192.0/20 maxlen: 20
                          188.29.208.0/20 maxlen: 20
                          188.29.224.0/20 maxlen: 20
                          188.29.128.0/19 maxlen: 19
                          188.29.160.0/22 maxlen: 22
                          188.30.32.0/19 maxlen: 19
                          188.30.64.0/22 maxlen: 22
                          188.30.68.0/22 maxlen: 22
                          188.30.76.0/22 maxlen: 22
                          188.30.72.0/22 maxlen: 22
                          188.29.240.0/21 maxlen: 21
                          188.29.248.0/22 maxlen: 22
                          188.30.0.0/21 maxlen: 21
                          188.30.8.0/21 maxlen: 21
                          188.30.16.0/21 maxlen: 21
                          188.30.24.0/21 maxlen: 21
                          94.197.104.0/21 maxlen: 21
                          188.29.0.0/20 maxlen: 20
                          94.197.112.0/21 maxlen: 21
                          188.28.160.0/19 maxlen: 19
                          188.28.192.0/18 maxlen: 18
                          188.29.80.0/20 maxlen: 20
                          188.29.96.0/20 maxlen: 20
                          188.29.112.0/20 maxlen: 20
                          188.29.16.0/20 maxlen: 20
                          188.29.32.0/20 maxlen: 20
                          188.29.48.0/20 maxlen: 20
                          188.29.64.0/20 maxlen: 20
                          188.28.0.0/20 maxlen: 20
                          188.28.16.0/20 maxlen: 20
                          92.41.144.0/21 maxlen: 21
                          92.41.156.0/22 maxlen: 22
                          94.196.144.0/20 maxlen: 20
                          188.28.32.0/20 maxlen: 20
                          92.41.160.0/21 maxlen: 21
                          188.28.48.0/20 maxlen: 20
                          188.28.112.0/20 maxlen: 20
                          94.196.224.0/19 maxlen: 19
                          188.28.128.0/19 maxlen: 19
                          188.28.64.0/20 maxlen: 20
                          188.28.80.0/20 maxlen: 20
                          92.41.208.0/20 maxlen: 20
                          188.28.96.0/20 maxlen: 20
                          92.41.224.0/20 maxlen: 20
                          94.196.208.0/20 maxlen: 20
                          92.40.160.0/21 maxlen: 21
                          92.40.168.0/23 maxlen: 23
                          92.40.170.0/23 maxlen: 23
                          92.40.172.0/23 maxlen: 23
                          92.40.174.0/23 maxlen: 23
                          92.40.176.0/23 maxlen: 23
                          92.40.178.0/23 maxlen: 23
                          92.40.186.0/23 maxlen: 23
                          92.40.180.0/23 maxlen: 23
                          92.40.182.0/23 maxlen: 23
                          92.40.184.0/23 maxlen: 23
                          92.40.188.0/23 maxlen: 23
                          92.40.190.0/23 maxlen: 23
                          92.40.192.0/23 maxlen: 23
                          92.40.194.0/23 maxlen: 23
                          92.40.196.0/23 maxlen: 23
                          92.40.198.0/23 maxlen: 23
                          92.40.200.0/23 maxlen: 23
                          92.40.202.0/23 maxlen: 23
                          92.40.204.0/23 maxlen: 23
                          92.40.210.0/23 maxlen: 23
                          92.40.212.0/23 maxlen: 23
                          92.40.208.0/23 maxlen: 23
                          92.40.112.0/20 maxlen: 20
                          92.41.16.0/20 maxlen: 20
                          94.196.0.0/18 maxlen: 18
                          92.40.216.0/23 maxlen: 23
                          92.40.218.0/23 maxlen: 23
                          92.40.245.0/24 maxlen: 24
                          92.40.248.0/24 maxlen: 24
                          92.41.0.0/20 maxlen: 20
                          2a04:4a45:b::/48 maxlen: 48
                          2a04:4a45:a::/48 maxlen: 48
                          2a04:4a45:f::/48 maxlen: 48
                          2a04:4a43:4000::/34 maxlen: 34
                          2a04:4a43:4200::/39 maxlen: 39
                          2a04:4a43:5100::/40 maxlen: 40
                          2a04:4a43:5400::/40 maxlen: 40
                          2a04:4a43:4000::/39 maxlen: 39
                          2a04:4a43:4c00::/40 maxlen: 40
                          2a04:4a43:4900::/40 maxlen: 40
                          2a04:4a43:9600::/40 maxlen: 40
                          2a04:4a43:5000::/40 maxlen: 40
                          2a04:4a43:4d00::/40 maxlen: 40
                          2a04:4a43:4a00::/40 maxlen: 40
                          2a04:4a43:9700::/40 maxlen: 40
                          2a04:4a43:5600::/40 maxlen: 40
                          2a04:4a43:5300::/40 maxlen: 40
                          2a04:4a43:4600::/40 maxlen: 40
                          2a04:4a43:5700::/40 maxlen: 40
                          2a04:4a43:4f00::/40 maxlen: 40
                          2a04:4a43:5800::/40 maxlen: 40
                          2a04:4a43:4700::/40 maxlen: 40
                          2a04:4a43:4400::/40 maxlen: 40
                          2a04:4a43:5200::/40 maxlen: 40
                          2a04:4a43:5500::/40 maxlen: 40
                          2a04:4a43:4500::/40 maxlen: 40
                          2a04:4a43:4e00::/40 maxlen: 40
                          2a04:4a43:9800::/40 maxlen: 40
                          2a04:4a43:4800::/40 maxlen: 40
                          2a04:4a43:4b00::/40 maxlen: 40
                          2a04:4a43:9500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0a:be:a5:aa:1b:7d:1d:ef:c3:7d:f5:2e:92:c2:3a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Oct 24 16:06:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7b1a20144475dfd652c69455e7981def5e8f9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:60:41:91:78:26:7b:a6:3e:7a:83:c5:07:
                    cb:37:a6:e3:91:25:01:70:a6:03:f5:01:85:42:3a:
                    f0:23:84:0e:e7:97:9e:57:7b:ad:36:20:3b:de:15:
                    d3:3e:ba:07:ef:81:6c:38:dd:9a:7e:e4:cd:32:25:
                    66:c1:dc:44:a9:b8:91:80:14:4e:00:d2:76:7d:2d:
                    0d:81:f8:f6:15:9f:57:56:f9:b3:ed:25:9a:6a:70:
                    cc:ee:81:f5:18:cb:f4:50:2e:24:f9:8e:e8:29:53:
                    84:4f:d6:57:20:1d:d6:da:3f:b8:67:e6:cf:d9:60:
                    da:f2:42:42:19:24:95:9e:53:27:84:f7:50:cf:ee:
                    b6:a2:89:61:e6:b9:54:0f:92:8a:da:53:e6:8f:06:
                    b2:e4:1d:b6:c9:ce:dd:20:ba:49:64:86:93:c9:b5:
                    e4:dc:71:37:4d:b0:b7:04:a3:dc:9f:8d:f0:76:11:
                    5a:07:eb:f6:d9:6b:c8:37:fe:8d:51:4a:6b:c1:22:
                    c1:30:2c:06:ff:55:42:5e:9c:65:ec:a1:06:36:6e:
                    76:dd:cd:6b:bc:27:27:fe:6b:f4:d6:2c:0a:91:d6:
                    7a:ae:71:6c:1f:11:73:6e:5f:76:59:61:b0:67:27:
                    e5:ed:b8:73:8f:21:4e:54:5b:27:1d:e4:57:50:7a:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B1:A2:01:44:47:5D:FD:65:2C:69:45:5E:79:81:DE:F5:E8:F9:A5
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/t7GiAURHXf1lLGlFXnmB3vXo-aU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.40.48.0/20
                  92.40.112.0/20
                  92.40.160.0-92.40.205.255
                  92.40.208.0-92.40.213.255
                  92.40.216.0/22
                  92.40.245.0/24
                  92.40.248.0/24
                  92.41.0.0/19
                  92.41.144.0/21
                  92.41.156.0-92.41.167.255
                  92.41.208.0-92.41.239.255
                  94.196.0.0/18
                  94.196.144.0/20
                  94.196.208.0-94.196.255.255
                  94.197.104.0-94.197.119.255
                  185.153.236.0/22
                  188.28.0.0-188.29.163.255
                  188.29.184.0-188.29.251.255
                  188.30.0.0-188.30.87.255
                  188.30.96.0-188.30.151.255
                  188.30.160.0-188.30.247.255
                  188.31.0.0-188.31.159.255
                  188.31.176.0-188.31.199.255
                  188.31.208.0/21
                  188.31.224.0/20
                  188.31.248.0/23
                  188.31.251.0/24
                IPv6:
                  2a04:4a43:4000::/34
                  2a04:4a43:9500::-2a04:4a43:98ff:ffff:ffff:ffff:ffff:ffff
                  2a04:4a45:a::/47
                  2a04:4a45:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:d2:75:8f:a5:79:d1:3a:dc:ae:27:5c:d0:71:06:bb:af:b1:
         c8:c3:5f:6f:41:74:77:36:d1:77:13:f1:73:28:ad:07:d3:4a:
         ac:a0:71:59:82:e4:ff:ef:d6:e6:88:54:ec:f6:1c:4d:ff:e5:
         d9:2a:22:71:26:0a:61:b5:27:8a:53:93:b7:24:5c:c1:7c:3c:
         ee:52:8f:ad:6a:ff:eb:59:d8:d5:c7:c9:fb:ae:f0:aa:28:35:
         0c:fe:38:92:c1:98:d2:68:d2:2e:35:ad:30:93:15:85:8c:16:
         1b:f2:32:86:ce:c8:5d:a0:60:c5:12:f3:29:d4:b0:63:95:06:
         f9:45:96:ef:92:86:0d:44:a3:39:e6:31:20:68:8a:6c:42:07:
         52:f0:91:a7:c3:c2:9f:c3:0e:55:08:59:4e:dc:2f:3c:a6:de:
         91:c9:be:27:1e:bd:31:c6:d2:80:2e:c8:99:2a:b4:58:30:e4:
         09:b7:68:79:e0:a0:79:7b:29:e6:a5:06:79:cc:7f:1b:c1:93:
         d4:42:81:77:16:26:a6:20:96:7c:81:d3:e8:87:f1:2d:32:e9:
         18:f2:14:25:77:fe:f6:b1:a8:16:41:4a:ef:34:d5:b7:0f:e8:
         30:bb:55:dd:fc:b8:b6:d9:fe:e5:49:e4:60:7e:1b:cc:36:1f:
         a4:a2:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:21 2023 by rpki-client on console-ams.rpki-client.org