Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/rrXWVPx7dhdv828zUGvq5uE-Lv8.roa
File:                     rrXWVPx7dhdv828zUGvq5uE-Lv8.roa (raw, json)
Hash identifier:          p/pps8htuHcOMtk/G829wojNEq49y2TSCGeXn+ni3Dc=
Subject key identifier:   AE:B5:D6:54:FC:7B:76:17:6F:F3:6F:33:50:6B:EA:E6:E1:3E:2E:FF
Certificate issuer:       /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial:       0184157BCE47C430431C77DFB163E01271FF
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/rrXWVPx7dhdv828zUGvq5uE-Lv8.roa
Signing time:             Wed 26 Oct 2022 18:09:05 +0000
ROA not before:           Wed 26 Oct 2022 18:09:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54825
IP address blocks:        93.187.218.0/23 maxlen: 23
                          93.187.216.0/23 maxlen: 23
                          145.40.64.0/23 maxlen: 23
                          145.40.68.0/24 maxlen: 24
                          145.40.69.0/24 maxlen: 24
                          145.40.67.0/24 maxlen: 24
                          145.40.66.0/24 maxlen: 24
                          145.40.70.0/23 maxlen: 23
                          145.40.78.0/24 maxlen: 24
                          145.40.75.0/24 maxlen: 24
                          145.40.74.0/23 maxlen: 23
                          145.40.76.0/23 maxlen: 23
                          145.40.72.0/24 maxlen: 24
                          145.40.73.0/24 maxlen: 24
                          145.40.84.0/23 maxlen: 23
                          145.40.82.0/23 maxlen: 23
                          145.40.79.0/24 maxlen: 24
                          145.40.80.0/23 maxlen: 23
                          145.40.91.0/24 maxlen: 24
                          145.40.89.0/24 maxlen: 24
                          145.40.90.0/24 maxlen: 24
                          145.40.88.0/24 maxlen: 24
                          145.40.86.0/23 maxlen: 23
                          145.40.98.0/23 maxlen: 23
                          145.40.96.0/23 maxlen: 23
                          145.40.92.0/22 maxlen: 22
                          145.40.103.0/24 maxlen: 24
                          145.40.102.0/23 maxlen: 23
                          145.40.101.0/24 maxlen: 24
                          145.40.104.0/22 maxlen: 22
                          145.40.102.0/24 maxlen: 24
                          145.40.100.0/24 maxlen: 24
                          45.11.244.0/23 maxlen: 23
                          136.144.56.0/23 maxlen: 23
                          136.144.58.0/23 maxlen: 23
                          136.144.54.0/23 maxlen: 23
                          136.144.52.0/23 maxlen: 23
                          136.144.60.0/23 maxlen: 23
                          136.144.62.0/23 maxlen: 23
                          136.144.50.0/23 maxlen: 23
                          136.144.48.0/23 maxlen: 23
                          139.178.80.0/21 maxlen: 21
                          139.178.88.0/22 maxlen: 22
                          139.178.94.0/23 maxlen: 23
                          139.178.92.0/23 maxlen: 23
                          139.178.64.0/22 maxlen: 22
                          139.178.68.0/22 maxlen: 22
                          139.178.76.0/23 maxlen: 23
                          139.178.76.0/22 maxlen: 22
                          139.178.78.0/23 maxlen: 23
                          139.178.74.0/23 maxlen: 23
                          139.178.72.0/23 maxlen: 23
                          139.178.72.0/22 maxlen: 22
                          147.75.206.0/24 maxlen: 24
                          147.28.162.0/23 maxlen: 23
                          147.28.164.0/23 maxlen: 23
                          147.75.204.0/23 maxlen: 23
                          147.28.160.0/23 maxlen: 23
                          147.75.200.0/22 maxlen: 22
                          147.28.170.0/23 maxlen: 23
                          147.28.172.0/23 maxlen: 23
                          147.28.166.0/23 maxlen: 23
                          147.28.168.0/23 maxlen: 23
                          147.75.207.0/24 maxlen: 24
                          147.28.176.0/23 maxlen: 23
                          147.28.178.0/23 maxlen: 23
                          147.28.174.0/23 maxlen: 23
                          147.28.184.0/23 maxlen: 23
                          147.28.186.0/23 maxlen: 23
                          147.28.180.0/23 maxlen: 23
                          147.28.182.0/23 maxlen: 23
                          147.28.188.0/24 maxlen: 24
                          147.75.43.0/24 maxlen: 24
                          147.75.44.0/24 maxlen: 24
                          147.75.40.0/23 maxlen: 23
                          147.75.42.0/24 maxlen: 24
                          147.75.51.0/24 maxlen: 24
                          147.75.50.0/23 maxlen: 23
                          147.75.50.0/24 maxlen: 24
                          147.75.48.0/24 maxlen: 24
                          147.75.49.0/24 maxlen: 24
                          147.75.46.0/24 maxlen: 24
                          147.75.47.0/24 maxlen: 24
                          147.75.45.0/24 maxlen: 24
                          147.75.58.0/24 maxlen: 24
                          147.75.57.0/24 maxlen: 24
                          147.75.55.0/24 maxlen: 24
                          147.75.56.0/24 maxlen: 24
                          147.75.53.0/24 maxlen: 24
                          147.75.54.0/24 maxlen: 24
                          147.75.52.0/24 maxlen: 24
                          147.75.64.0/22 maxlen: 22
                          147.75.62.0/24 maxlen: 24
                          147.75.63.0/24 maxlen: 24
                          147.75.60.0/24 maxlen: 24
                          147.75.61.0/24 maxlen: 24
                          147.75.59.0/24 maxlen: 24
                          147.75.68.0/22 maxlen: 22
                          147.75.78.0/24 maxlen: 24
                          147.75.76.0/24 maxlen: 24
                          147.75.77.0/24 maxlen: 24
                          147.75.74.0/24 maxlen: 24
                          147.75.75.0/24 maxlen: 24
                          147.75.72.0/24 maxlen: 24
                          147.75.73.0/24 maxlen: 24
                          147.75.72.0/21 maxlen: 21
                          86.109.4.0/24 maxlen: 24
                          86.109.4.0/23 maxlen: 23
                          147.75.84.0/23 maxlen: 23
                          86.109.2.0/24 maxlen: 24
                          86.109.3.0/24 maxlen: 24
                          86.109.0.0/24 maxlen: 24
                          86.109.2.0/23 maxlen: 23
                          86.109.1.0/24 maxlen: 24
                          147.75.79.0/24 maxlen: 24
                          147.75.80.0/22 maxlen: 22
                          86.109.9.0/24 maxlen: 24
                          147.75.88.0/22 maxlen: 22
                          86.109.10.0/23 maxlen: 23
                          86.109.7.0/24 maxlen: 24
                          86.109.8.0/24 maxlen: 24
                          86.109.5.0/24 maxlen: 24
                          86.109.6.0/24 maxlen: 24
                          147.75.86.0/23 maxlen: 23
                          147.75.36.0/22 maxlen: 22
                          147.75.34.0/24 maxlen: 24
                          147.75.35.0/24 maxlen: 24
                          147.75.32.0/23 maxlen: 23
                          147.28.132.0/22 maxlen: 22
                          147.28.131.0/24 maxlen: 24
                          147.28.128.0/23 maxlen: 23
                          147.28.136.0/23 maxlen: 23
                          145.40.79.0/26 maxlen: 26
                          147.28.138.0/23 maxlen: 23
                          147.28.142.0/23 maxlen: 23
                          147.28.141.0/24 maxlen: 24
                          147.28.144.0/23 maxlen: 23
                          147.75.192.0/21 maxlen: 21
                          147.75.192.0/24 maxlen: 24
                          147.28.152.0/24 maxlen: 24
                          147.28.148.0/23 maxlen: 23
                          147.28.150.0/23 maxlen: 23
                          147.28.146.0/23 maxlen: 23
                          147.75.199.0/24 maxlen: 24
                          147.75.197.0/24 maxlen: 24
                          147.28.156.0/23 maxlen: 23
                          147.75.198.0/24 maxlen: 24
                          147.28.158.0/23 maxlen: 23
                          147.75.196.0/24 maxlen: 24
                          147.28.154.0/23 maxlen: 23
                          147.28.153.0/24 maxlen: 24
                          147.75.193.0/24 maxlen: 24
                          147.75.194.0/23 maxlen: 23
                          147.75.98.0/24 maxlen: 24
                          147.75.96.0/22 maxlen: 22
                          147.75.97.0/24 maxlen: 24
                          86.109.14.0/23 maxlen: 23
                          147.75.96.0/24 maxlen: 24
                          86.109.12.0/24 maxlen: 24
                          147.75.92.0/22 maxlen: 22
                          86.109.13.0/24 maxlen: 24
                          147.75.104.0/22 maxlen: 22
                          147.75.100.0/22 maxlen: 22
                          147.75.99.0/24 maxlen: 24
                          147.75.110.0/23 maxlen: 23
                          147.75.108.0/23 maxlen: 23
                          145.40.112.0/22 maxlen: 22
                          145.40.108.0/22 maxlen: 22
                          145.40.116.0/22 maxlen: 22
                          145.40.124.0/22 maxlen: 22
                          145.40.120.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:15:7b:ce:47:c4:30:43:1c:77:df:b1:63:e0:12:71:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
        Validity
            Not Before: Oct 26 18:09:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aeb5d654fc7b76176ff36f33506beae6e13e2eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7b:89:d8:10:b1:3b:8b:ef:21:b7:6d:f3:2d:
                    d8:d1:f5:40:03:d2:7d:17:d3:c2:69:0d:67:b2:a3:
                    10:a1:8f:f8:0a:8d:8e:89:d8:2b:85:59:65:b7:b4:
                    83:e0:11:ec:f3:84:b1:2e:fc:ef:34:77:e5:2e:13:
                    6f:f7:96:f2:b5:54:7d:4c:35:fb:a6:17:a2:2b:e4:
                    b8:ef:c1:08:35:e5:d5:52:b2:cc:18:0f:65:43:de:
                    f5:37:64:a7:d3:ef:ba:88:02:0b:e4:65:05:63:fe:
                    65:e0:a7:35:fc:f1:0c:e2:fa:0a:16:cb:2d:c9:1b:
                    dc:07:a0:5b:07:45:d3:36:59:40:21:1c:da:1e:8b:
                    a4:9e:58:ce:de:34:03:d3:34:46:28:d6:81:4f:d0:
                    22:56:0b:9e:8e:0e:cc:a6:b0:00:09:7a:1b:d3:c9:
                    61:62:f0:06:c0:7d:d2:c2:1c:7d:8e:b9:ab:6b:d0:
                    12:6b:69:5c:32:98:5b:1d:c0:8d:94:8b:8c:81:fc:
                    84:e6:80:9c:87:bf:cc:ad:ac:c8:f0:d7:4b:a0:50:
                    bc:ae:b2:71:38:7f:61:7a:b1:0b:b8:e8:8a:43:fa:
                    2b:7e:61:f9:8e:e0:cd:f2:4f:88:a8:00:eb:2d:e0:
                    c2:6f:c8:36:72:fe:ad:dd:8a:c2:97:48:54:8d:cc:
                    c6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B5:D6:54:FC:7B:76:17:6F:F3:6F:33:50:6B:EA:E6:E1:3E:2E:FF
            X509v3 Authority Key Identifier:
                keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/rrXWVPx7dhdv828zUGvq5uE-Lv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.244.0/23
                  86.109.0.0/20
                  93.187.216.0/22
                  136.144.48.0/20
                  139.178.64.0/19
                  145.40.64.0/18
                  147.28.128.0/23
                  147.28.131.0-147.28.139.255
                  147.28.141.0-147.28.188.255
                  147.75.32.0-147.75.111.255
                  147.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:e5:e8:f7:0a:8e:24:62:2e:75:04:b0:b1:6e:05:44:11:74:
         34:3e:f7:d5:24:4c:cf:95:db:0f:89:fd:c6:cb:31:cb:59:77:
         0c:26:51:cc:42:23:cc:21:10:70:73:7a:56:25:54:cb:16:67:
         33:46:87:71:ad:07:7c:aa:d1:84:57:6f:95:d9:83:4e:12:fa:
         46:1e:7c:cc:94:f4:c3:16:66:01:77:d6:f2:43:0a:22:3f:fe:
         9f:6d:dd:57:63:9d:31:23:64:31:64:55:9c:8c:19:4b:92:3a:
         c2:40:17:ce:8a:5d:a7:f4:e9:f6:30:26:59:f3:00:14:1e:57:
         72:3d:fc:a3:0d:b9:9e:cd:47:9b:b3:60:c3:12:9c:a2:30:21:
         0f:c1:9f:0e:fb:fd:aa:b5:06:2f:1d:37:74:81:b0:6b:54:0f:
         10:20:bc:8a:1b:a1:1b:de:96:94:d0:d6:1d:9e:9b:25:a7:65:
         c6:7d:4a:60:8b:92:b1:56:86:19:ae:61:9e:a4:cd:87:08:55:
         9f:9c:dd:a9:9c:29:72:e5:42:ab:e9:5f:8a:be:4c:d9:0f:35:
         02:a7:c9:14:95:83:68:85:d7:30:78:f2:59:4a:a9:3b:72:49:
         e9:b9:06:9a:be:d7:fe:9e:d6:8a:ed:72:47:93:a1:f9:0e:74:
         03:39:0c:38
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYQVe85HxDBDHHffsWPgEnH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4
ZDRhNGMwHhcNMjIxMDI2MTgwOTA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWI1ZDY1NGZjN2I3NjE3NmZmMzZmMzM1MDZiZWFlNmUxM2UyZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3uJ2BCxO4vvIbdt8y3Y0fVAA9J9
F9PCaQ1nsqMQoY/4Co2OidgrhVllt7SD4BHs84SxLvzvNHflLhNv95bytVR9TDX7
pheiK+S478EINeXVUrLMGA9lQ971N2Sn0++6iAIL5GUFY/5l4Kc1/PEM4voKFsst
yRvcB6BbB0XTNllAIRzaHouknljO3jQD0zRGKNaBT9AiVguejg7MprAACXob08lh
YvAGwH3Swhx9jrmra9ASa2lcMphbHcCNlIuMgfyE5oCch7/MrazI8NdLoFC8rrJx
OH9herELuOiKQ/orfmH5juDN8k+IqADrLeDCb8g2cv6t3YrCl0hUjczGVQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFK611lT8e3YXb/NvM1Br6ubhPi7/MB8GA1UdIwQY
MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt
YWM0YTQwNjE3NDZkLzEvcnJYV1ZQeDdkaGR2ODI4elVHdnE1dUUtTHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk
LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQBLQv0AwQE
Vm0AAwQCXbvYAwQEiJAwAwQFi7JAAwQGkShAAwQBkxyAMAwDBACTHIMDBAKTHIgw
DAMEAJMcjQMEAJMcvDAMAwQFk0sgAwQEk0tgAwQEk0vAMA0GCSqGSIb3DQEBCwUA
A4IBAQCM5ej3Co4kYi51BLCxbgVEEXQ0PvfVJEzPldsPif3GyzHLWXcMJlHMQiPM
IRBwc3pWJVTLFmczRodxrQd8qtGEV2+V2YNOEvpGHnzMlPTDFmYBd9byQwoiP/6f
bd1XY50xI2QxZFWcjBlLkjrCQBfOil2n9On2MCZZ8wAUHldyPfyjDbmezUebs2DD
EpyiMCEPwZ8O+/2qtQYvHTd0gbBrVA8QILyKG6Eb3paU0NYdnpslp2XGfUpgi5Kx
VoYZrmGepM2HCFWfnN2pnCly5UKr6V+KvkzZDzUCp8kUlYNohdcwePJZSqk7cknp
uQaavtf+ntaK7XJHk6H5DnQDOQw4
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:59 2023 by rpki-client on console.sobornost.net