Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/C0M3GZNLwwOrzRz1I423VfqU_Ok.roa
File:                     C0M3GZNLwwOrzRz1I423VfqU_Ok.roa (raw, json)
Hash identifier:          Qe1jJ1xsWoYlmuEEJUJKctUebPZkkvhMLWdZRNAAI30=
Subject key identifier:   0B:43:37:19:93:4B:C3:03:AB:CD:1C:F5:23:8D:B7:55:FA:94:FC:E9
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1A07C00A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/C0M3GZNLwwOrzRz1I423VfqU_Ok.roa
Signing time:             Mon 28 Feb 2022 09:27:47 +0000
ROA not before:           Mon 28 Feb 2022 09:27:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3233
IP address blocks:        81.181.74.0/24 maxlen: 24
                          85.120.170.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          81.181.14.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.88.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          81.180.228.0/23 maxlen: 23
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.81.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          194.105.12.0/22 maxlen: 22
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.102.0/24 maxlen: 24
                          80.96.4.0/23 maxlen: 23
                          80.96.17.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          193.231.111.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.106.0/23 maxlen: 23
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          80.96.156.0/22 maxlen: 22
                          85.122.83.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          217.156.46.0/24 maxlen: 24
                          217.156.48.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.160.0/24 maxlen: 24
                          194.102.161.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.94.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436715530 (0x1a07c00a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Feb 28 09:27:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b433719934bc303abcd1cf5238db755fa94fce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:6d:03:21:ae:55:05:05:6e:67:56:12:25:
                    65:48:2c:6e:6c:ed:cf:51:1a:46:d2:75:8e:4f:05:
                    80:09:4f:d1:b3:12:22:cc:7b:97:f0:1e:50:95:c3:
                    18:50:09:fb:bd:ab:81:72:30:f9:d4:5f:37:b2:fc:
                    e4:f3:3c:7e:4b:6f:73:c0:78:fa:a6:a2:bc:0e:c7:
                    e2:c0:76:36:c0:4f:30:f7:09:0c:3e:78:c2:1b:d6:
                    16:49:a0:51:33:ba:4e:ba:d2:b6:d8:d0:67:39:79:
                    05:f6:90:87:bc:35:db:56:1f:fc:61:2f:d2:8f:c6:
                    d0:d0:ea:d0:f3:e2:33:5f:44:f4:74:d9:a9:48:ee:
                    d1:38:12:61:23:0a:f7:af:bc:14:ed:86:bd:62:88:
                    3c:e3:b4:f3:34:99:63:c4:ba:5b:31:47:00:12:72:
                    24:10:e7:2c:18:f4:a7:60:ae:95:7c:57:c1:42:07:
                    9c:15:76:f0:df:3b:bf:9f:cc:ee:dc:1c:90:77:3f:
                    22:f7:12:df:dc:53:ae:dd:11:df:19:d8:6d:16:a1:
                    99:30:fd:68:58:8a:ae:85:e0:bd:c2:42:02:6e:51:
                    d0:99:0d:fd:40:ba:3f:31:55:88:23:75:bf:5a:ed:
                    77:17:03:22:c8:03:f6:bc:6e:7b:b9:7f:8d:04:7f:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:43:37:19:93:4B:C3:03:AB:CD:1C:F5:23:8D:B7:55:FA:94:FC:E9
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/C0M3GZNLwwOrzRz1I423VfqU_Ok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.4.0/23
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.102.0/24
                  80.96.106.0-80.96.109.255
                  80.96.136.0/24
                  80.96.156.0/22
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.171.0/24
                  81.180.88.0/24
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.228.0/23
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.14.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0/24
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  192.162.16.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.111.0-193.231.112.255
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.160.0/23
                  194.102.247.0/24
                  194.105.12.0/22
                  194.153.247.0/24
                  217.156.19.0/24
                  217.156.37.0/24
                  217.156.46.0/24
                  217.156.48.0/22
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0-217.156.94.255
                  217.156.101.0/24
                  217.156.106.0/24
                  217.156.108.0/24
                  217.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:f0:9c:e0:ba:d5:e7:7b:54:5e:56:b9:fc:39:3b:4c:f2:a9:
         a3:65:c4:ad:fb:21:6a:b6:50:c1:62:9e:e7:0b:d9:60:42:c4:
         99:0e:7d:91:6b:7b:10:b2:6c:5a:cd:34:a7:0b:67:ad:2e:e7:
         fc:f9:ff:a4:40:4b:d5:aa:8c:f9:ea:e5:f6:cf:4b:5b:7a:df:
         ce:41:e5:42:16:ca:06:50:e3:20:36:9a:ec:43:e7:11:7c:b4:
         73:d7:13:7c:ce:14:3a:c5:34:3b:42:69:6c:4d:b8:81:2f:8d:
         e8:9f:ba:60:c3:a3:3c:02:c0:81:ef:f6:ce:6c:69:b6:c4:a9:
         90:b2:6a:61:cc:7c:83:68:b0:ed:8c:33:94:9e:0e:59:9d:d5:
         83:56:36:26:32:b4:96:76:03:12:26:76:ed:c0:00:ad:2d:70:
         ea:bf:cd:6f:40:f3:63:11:b5:9d:ff:af:35:9b:0e:a9:fa:88:
         87:7b:07:08:2c:01:4e:59:2d:8d:af:04:03:8c:4f:a4:55:b4:
         d8:a8:fa:e4:fd:27:b1:f0:8c:93:7e:d2:a6:af:5e:3f:cb:fb:
         30:9d:c6:b9:4c:6d:f4:de:c9:72:39:a5:1a:7a:17:91:e3:09:
         e1:e9:d9:ce:61:2d:e3:2a:ad:c6:5c:7c:72:bd:e4:17:ca:c0:
         06:8b:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org