Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3VRVGkfgopK8jH5cA67L7J_xT1Q.roa
File:                     3VRVGkfgopK8jH5cA67L7J_xT1Q.roa (raw, json)
Hash identifier:          mfcPhDyYDjt0zysIqkOpi/Iy1991bLlPEooph6btboE=
Subject key identifier:   DD:54:55:1A:47:E0:A2:92:BC:8C:7E:5C:03:AE:CB:EC:9F:F1:4F:54
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01820FEF7F59FC4A689EDEA425454A09F847
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3VRVGkfgopK8jH5cA67L7J_xT1Q.roa
Signing time:             Mon 18 Jul 2022 06:12:10 +0000
ROA not before:           Mon 18 Jul 2022 06:12:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3233
IP address blocks:        85.120.170.0/24 maxlen: 24
                          81.181.74.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          85.120.155.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          194.153.238.0/24 maxlen: 24
                          194.153.234.0/24 maxlen: 24
                          194.153.242.0/23 maxlen: 23
                          194.153.245.0/24 maxlen: 24
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.43.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          80.97.176.0/23 maxlen: 23
                          193.226.84.0/24 maxlen: 24
                          193.226.81.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          194.105.6.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.144.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          193.231.111.0/24 maxlen: 24
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.0.0/24 maxlen: 24
                          217.156.2.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.7.0/24 maxlen: 24
                          217.156.6.0/24 maxlen: 24
                          217.156.15.0/24 maxlen: 24
                          217.156.13.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.35.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          194.102.65.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.163.0/24 maxlen: 24
                          194.102.176.0/24 maxlen: 24
                          194.102.177.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          194.102.183.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          194.102.106.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          85.122.182.0/23 maxlen: 23
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0f:ef:7f:59:fc:4a:68:9e:de:a4:25:45:4a:09:f8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jul 18 06:12:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dd54551a47e0a292bc8c7e5c03aecbec9ff14f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:38:8b:c2:55:52:85:8d:5e:77:68:e8:8f:
                    1f:d3:e7:52:9f:8d:16:40:17:4e:70:bd:dc:63:20:
                    2d:69:65:1e:66:e1:67:ba:e9:92:87:43:7d:93:54:
                    2a:4d:cd:80:5b:f5:a6:f2:ce:ef:6f:bb:88:b5:65:
                    de:b7:8c:69:f7:18:5f:09:8c:a5:b7:43:3b:36:e0:
                    e2:62:34:6e:73:14:dc:d8:40:d0:88:61:de:f6:cd:
                    4f:df:55:66:4d:44:96:d2:33:26:ba:69:32:29:c8:
                    3f:36:ad:ad:ec:f3:63:a7:5e:ff:a0:e1:15:23:1a:
                    95:b8:39:4e:74:fb:d4:00:42:e8:7c:2b:12:ca:49:
                    e4:ab:93:59:28:dc:05:7c:30:66:e7:41:49:32:dc:
                    2a:31:b5:86:f5:fd:8a:7b:9f:12:cd:df:e3:a6:fe:
                    7e:12:40:a2:69:59:b6:d8:f0:1e:9d:29:53:45:e4:
                    44:e3:14:1a:6d:ff:61:c4:51:fd:14:00:ba:b0:35:
                    35:0e:05:2c:52:99:51:86:f7:c7:2d:7a:f2:d0:33:
                    8a:61:90:82:3f:bb:47:51:c4:3a:dc:c8:da:a4:e5:
                    5e:1c:7d:5f:ad:da:dd:91:b4:67:b3:48:d0:ec:a8:
                    70:e8:34:8b:0d:a5:c3:c9:3b:89:8c:32:a9:b9:ee:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:54:55:1A:47:E0:A2:92:BC:8C:7E:5C:03:AE:CB:EC:9F:F1:4F:54
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3VRVGkfgopK8jH5cA67L7J_xT1Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.144.0/24
                  80.97.171.0/24
                  80.97.176.0/23
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0/24
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/23
                  85.120.66.0/23
                  85.120.155.0/24
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  85.122.182.0/23
                  192.162.16.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.111.0-193.231.112.255
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.102.65.0/24
                  194.102.106.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.163.0/24
                  194.102.176.0/23
                  194.102.183.0/24
                  194.102.247.0/24
                  194.105.6.0/24
                  194.153.234.0/24
                  194.153.238.0/24
                  194.153.242.0/23
                  194.153.245.0/24
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.2.0/24
                  217.156.6.0/23
                  217.156.11.0/24
                  217.156.13.0/24
                  217.156.15.0/24
                  217.156.19.0/24
                  217.156.35.0/24
                  217.156.37.0/24
                  217.156.49.0-217.156.51.255
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0/24
                  217.156.101.0/24
                  217.156.106.0/24
                  217.156.108.0/24
                  217.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:13:c7:1f:d8:c4:38:b8:9c:0f:4c:c1:c7:35:82:85:a8:88:
         44:2d:4e:da:22:67:24:c8:4d:74:dc:40:47:13:43:5f:de:d0:
         ae:70:b5:00:b8:2e:90:53:20:21:70:18:ee:85:74:05:02:7e:
         9b:77:db:d5:d1:3b:48:3f:7a:f6:15:39:21:91:71:74:db:b7:
         a1:6a:61:a2:06:d1:7e:f7:c4:df:15:c9:af:34:c8:17:db:4c:
         5e:47:ac:82:67:14:56:a3:dc:81:d4:db:40:72:9a:9b:f3:a8:
         f8:d8:a9:61:b6:a0:58:78:fa:db:c9:30:87:11:1a:da:fe:eb:
         de:22:a2:5a:3e:51:ba:8b:39:75:ca:65:72:86:84:a7:9c:76:
         de:89:a3:c3:44:2c:a5:43:bd:58:49:86:ec:37:16:16:a5:e7:
         66:fc:7b:cf:66:d5:18:0f:e2:ef:4f:7c:7b:1e:e5:9e:41:c7:
         9c:f6:5c:7f:f7:9f:20:42:a3:90:cc:6c:34:84:f4:e6:e3:56:
         36:c5:c8:91:0b:a7:e5:6b:2f:2a:7a:28:36:a0:b0:f4:0c:74:
         fb:f5:28:0e:db:91:54:5f:5b:1f:fb:bc:67:be:f6:d9:8c:fa:
         52:32:65:81:01:33:1a:c8:64:32:a7:1a:69:c9:bb:a1:fb:58:
         f5:3b:91:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org