Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/ww-9tc5UtaEt_88oZFlo9WVTVGg.roa
File:                     ww-9tc5UtaEt_88oZFlo9WVTVGg.roa (raw, json)
Hash identifier:          BmxXAUSJrd8SjDZsHb16m8j/fW4PbP572LAlPFlVERc=
Subject key identifier:   C3:0F:BD:B5:CE:54:B5:A1:2D:FF:CF:28:64:59:68:F5:65:53:54:68
Certificate issuer:       /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial:       248CF0BB
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/ww-9tc5UtaEt_88oZFlo9WVTVGg.roa
Signing time:             Wed 18 May 2022 08:09:16 +0000
ROA not before:           Wed 18 May 2022 08:09:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39611
IP address blocks:        185.49.24.0/24 maxlen: 24
                          185.49.25.0/24 maxlen: 24
                          185.49.26.0/24 maxlen: 24
                          213.207.39.0/24 maxlen: 24
                          213.207.40.0/24 maxlen: 24
                          213.207.40.0/22 maxlen: 22
                          213.207.43.0/24 maxlen: 24
                          213.207.41.0/24 maxlen: 24
                          213.207.42.0/24 maxlen: 24
                          213.207.44.0/22 maxlen: 22
                          213.207.44.0/24 maxlen: 24
                          213.207.45.0/24 maxlen: 24
                          213.207.46.0/24 maxlen: 24
                          213.207.47.0/24 maxlen: 24
                          213.207.48.0/21 maxlen: 21
                          213.207.48.0/20 maxlen: 20
                          213.207.50.0/24 maxlen: 24
                          213.207.48.0/24 maxlen: 24
                          213.207.48.0/22 maxlen: 22
                          213.207.49.0/24 maxlen: 24
                          213.207.51.0/24 maxlen: 24
                          213.207.55.0/24 maxlen: 24
                          213.207.57.0/24 maxlen: 24
                          213.207.52.0/22 maxlen: 22
                          213.207.53.0/24 maxlen: 24
                          213.207.54.0/24 maxlen: 24
                          213.207.52.0/24 maxlen: 24
                          213.207.56.0/22 maxlen: 22
                          213.207.56.0/21 maxlen: 21
                          213.207.56.0/24 maxlen: 24
                          213.207.58.0/24 maxlen: 24
                          213.207.60.0/24 maxlen: 24
                          213.207.60.0/22 maxlen: 22
                          213.207.61.0/24 maxlen: 24
                          213.207.59.0/24 maxlen: 24
                          213.207.63.0/24 maxlen: 24
                          213.207.62.0/24 maxlen: 24
                          213.207.37.0/24 maxlen: 24
                          213.207.38.0/24 maxlen: 24
                          213.207.35.0/24 maxlen: 24
                          213.207.32.0/22 maxlen: 22
                          213.207.32.0/24 maxlen: 24
                          213.207.33.0/24 maxlen: 24
                          213.207.34.0/24 maxlen: 24
                          213.207.32.0/19 maxlen: 19
                          213.207.32.0/20 maxlen: 20
                          213.207.36.0/22 maxlen: 22
                          213.207.36.0/24 maxlen: 24
                          2a01:9d24::/31 maxlen: 31
                          2a01:9d20::/29 maxlen: 29
                          2a01:9d22::/31 maxlen: 31
                          2a01:9d20::/31 maxlen: 31
                          2a01:9d26::/31 maxlen: 31

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613216443 (0x248cf0bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
        Validity
            Not Before: May 18 08:09:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c30fbdb5ce54b5a12dffcf28645968f565535468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2a:98:94:fe:cd:72:80:6f:74:00:fd:ca:5e:
                    9c:93:47:1b:09:f4:90:58:a6:8b:c1:a3:79:c1:e1:
                    df:ad:ef:fe:b9:1c:b5:fb:7b:f1:bb:d5:b5:94:33:
                    a0:4c:8c:fa:17:82:40:77:7f:8e:9b:e4:55:ee:33:
                    53:39:ba:ab:41:47:31:b7:52:7b:a4:23:98:47:3f:
                    1d:42:ff:87:9c:c8:fa:91:d1:4b:3a:12:d9:f0:8e:
                    f5:d4:3c:ec:27:ac:9a:2d:38:5b:77:89:de:6a:86:
                    be:10:35:88:94:9f:a2:c7:8b:3e:31:e4:73:6f:9f:
                    28:b8:52:89:ab:9e:f3:1b:b5:1a:42:79:d9:e2:61:
                    26:3f:d6:e6:2a:a3:4f:31:88:13:e0:0c:5a:b5:36:
                    78:d9:a7:f6:9e:c9:75:d4:80:23:10:c4:5d:fc:2c:
                    f0:39:bc:11:be:2e:ac:3e:4f:20:f8:68:12:c4:af:
                    7e:02:5e:2e:cf:e3:bd:69:40:d8:00:28:1c:5b:2d:
                    17:2a:9f:57:22:28:c8:b9:d2:5c:af:93:df:67:8e:
                    13:ac:45:b0:e2:41:b8:04:c7:8e:9b:cb:06:b4:3b:
                    84:7b:e6:3b:c0:56:85:f4:c7:37:70:12:0d:ef:88:
                    27:97:67:52:2b:42:4b:ff:b0:60:e3:ea:6a:63:f5:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0F:BD:B5:CE:54:B5:A1:2D:FF:CF:28:64:59:68:F5:65:53:54:68
            X509v3 Authority Key Identifier:
                keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/ww-9tc5UtaEt_88oZFlo9WVTVGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.49.24.0-185.49.26.255
                  213.207.32.0/19
                IPv6:
                  2a01:9d20::/29

    Signature Algorithm: sha256WithRSAEncryption
         a7:e4:4a:ee:c7:7d:63:52:1f:d9:b1:a3:84:a7:0b:fd:d2:ae:
         7d:32:90:74:9a:ad:66:6c:8f:c8:4f:91:b8:5a:b1:b2:dc:9c:
         d8:85:a3:43:28:e1:79:e8:eb:db:a3:be:1c:f5:92:94:8d:2f:
         0a:e6:1d:59:a2:8d:3d:d0:ee:0c:36:10:27:e0:e5:4e:7b:32:
         61:ee:3f:c7:b9:6c:a8:55:6d:69:85:f9:89:9f:31:3f:29:bb:
         a5:e6:14:53:a2:3a:6d:36:ee:f2:a6:96:54:0d:27:e3:d3:4c:
         bc:56:fb:8a:84:07:99:d3:3d:23:fa:08:17:22:10:f9:26:fc:
         4f:c6:bb:56:61:5e:e2:d3:d3:e2:cf:73:fa:66:02:0d:9e:58:
         47:c2:a4:88:28:2e:0e:92:7e:20:31:66:4f:e9:85:40:ea:34:
         51:74:ce:fd:e0:82:4f:a7:0a:05:70:ec:dd:78:32:0c:90:7d:
         54:29:55:a7:7e:e0:ad:0d:c2:27:03:7f:9e:de:64:d6:6a:1f:
         15:f5:76:7f:f9:b6:e9:4b:44:e4:c8:b8:1e:53:a1:21:10:58:
         18:99:01:19:78:22:04:3a:32:ac:c2:f4:84:aa:a5:7b:44:a9:
         22:cc:83:f1:22:fd:0b:33:be:5a:16:10:0e:a7:cd:d6:48:63:
         7a:26:87:42
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEJIzwuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NTdlNThjMzQ2ZTdiNDE1NTUwYzEzYWVhZGQyY2Y5MGVkZDA3ODk1MB4XDTIyMDUx
ODA4MDkxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzMwZmJkYjVjZTU0
YjVhMTJkZmZjZjI4NjQ1OTY4ZjU2NTUzNTQ2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOQqmJT+zXKAb3QA/cpenJNHGwn0kFimi8GjecHh363v/rkc
tft78bvVtZQzoEyM+heCQHd/jpvkVe4zUzm6q0FHMbdSe6QjmEc/HUL/h5zI+pHR
SzoS2fCO9dQ87Cesmi04W3eJ3mqGvhA1iJSfoseLPjHkc2+fKLhSiaue8xu1GkJ5
2eJhJj/W5iqjTzGIE+AMWrU2eNmn9p7JddSAIxDEXfws8Dm8Eb4urD5PIPhoEsSv
fgJeLs/jvWlA2AAoHFstFyqfVyIoyLnSXK+T32eOE6xFsOJBuATHjpvLBrQ7hHvm
O8BWhfTHN3ASDe+IJ5dnUitCS/+wYOPqamP1Vm0CAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBTDD721zlS1oS3/zyhkWWj1ZVNUaDAfBgNVHSMEGDAWgBTFfljDRue0FVUM
E66t0s+Q7dB4lTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hYNVl3MGJudEJWVkRCT3VyZExQa08zUWVKVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvY2VlNzBkLThiNTItNGMxMS1hNzdjLTA3NDMwNTczNWFjMi8x
L3d3LTl0YzVVdGFFdF84OG9aRmxvOVdWVFZHZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
Y2VlNzBkLThiNTItNGMxMS1hNzdjLTA3NDMwNTczNWFjMi8xL3hYNVl3MGJudEJW
VkRCT3VyZExQa08zUWVKVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFDAMAwQDuTEYAwQAuTEaAwQF1c8gMA0E
AgACMAcDBQMqAZ0gMA0GCSqGSIb3DQEBCwUAA4IBAQCn5Erux31jUh/ZsaOEpwv9
0q59MpB0mq1mbI/IT5G4WrGy3JzYhaNDKOF56Ovbo74c9ZKUjS8K5h1Zoo090O4M
NhAn4OVOezJh7j/HuWyoVW1phfmJnzE/Kbul5hRTojptNu7yppZUDSfj00y8VvuK
hAeZ0z0j+ggXIhD5JvxPxrtWYV7i09Piz3P6ZgINnlhHwqSIKC4Okn4gMWZP6YVA
6jRRdM794IJPpwoFcOzdeDIMkH1UKVWnfuCtDcInA3+e3mTWah8V9XZ/+bbpS0Tk
yLgeU6EhEFgYmQEZeCIEOjKswvSEqqV7RKkizIPxIv0LM75aFhAOp83WSGN6JodC
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net