Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OUKfg_q3tt7302aS5OSa5Mdwee0.roa
File:                     OUKfg_q3tt7302aS5OSa5Mdwee0.roa (raw, json)
Hash identifier:          KZ7CjFkulizBRJdfVB0eVKUtQ0rlzxOMiokIbW2ay4I=
Subject key identifier:   39:42:9F:83:FA:B7:B6:DE:F7:D3:66:92:E4:E4:9A:E4:C7:70:79:ED
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1A0F8F57
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OUKfg_q3tt7302aS5OSa5Mdwee0.roa
Signing time:             Mon 28 Feb 2022 14:30:21 +0000
ROA not before:           Mon 28 Feb 2022 14:30:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3233
IP address blocks:        81.181.74.0/24 maxlen: 24
                          85.120.170.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          81.181.14.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.88.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          81.180.228.0/23 maxlen: 23
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.81.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          194.105.12.0/22 maxlen: 22
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.102.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          193.231.111.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          80.96.156.0/22 maxlen: 22
                          217.156.0.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          217.156.46.0/24 maxlen: 24
                          217.156.48.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.160.0/24 maxlen: 24
                          194.102.161.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.94.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437227351 (0x1a0f8f57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Feb 28 14:30:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=39429f83fab7b6def7d36692e4e49ae4c77079ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:c8:4c:82:e9:81:ba:4d:e1:40:bf:72:9d:
                    dc:62:ec:d2:ae:b1:fb:73:e9:1f:74:30:69:58:ed:
                    e9:b9:41:4e:04:9e:f5:15:51:3b:cc:fd:43:d2:12:
                    83:d2:ec:99:ad:51:05:9a:e1:65:1a:de:1a:ac:75:
                    d7:a5:8b:f8:87:e9:40:bf:53:fd:89:06:e8:39:7f:
                    59:f1:3f:1b:8c:e2:6f:32:a2:7d:28:0b:60:90:7c:
                    10:55:a1:91:91:e3:79:61:aa:c5:9d:8a:cc:0b:7a:
                    a0:4a:72:cb:0b:31:56:1b:db:f9:60:2d:08:df:55:
                    d5:01:c4:7e:fe:4b:2c:42:97:aa:c9:a0:df:b9:04:
                    72:77:b4:dd:10:63:13:7c:96:c7:72:ff:c1:1b:7e:
                    04:1c:04:30:35:da:10:bf:04:e6:9d:60:14:82:d5:
                    f6:ad:9a:51:2f:8a:d4:ac:2a:89:67:bd:5a:38:97:
                    1f:9f:7a:e7:30:c3:86:24:b6:2c:86:94:e2:42:fc:
                    1e:40:ee:c7:41:4a:09:53:f7:4d:2d:80:4f:d3:df:
                    6a:9e:9f:7f:4e:87:c0:4d:ab:8a:59:8c:9d:f9:72:
                    f6:48:0f:94:4e:38:32:ab:a3:d2:ec:27:8d:73:53:
                    39:e4:f3:7e:c8:3f:81:a3:41:39:b2:fe:fb:52:3f:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:42:9F:83:FA:B7:B6:DE:F7:D3:66:92:E4:E4:9A:E4:C7:70:79:ED
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OUKfg_q3tt7302aS5OSa5Mdwee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.102.0/24
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.156.0/22
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.171.0/24
                  81.180.88.0/24
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.228.0/23
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.14.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0/24
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  192.162.16.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.111.0-193.231.112.255
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.160.0/23
                  194.102.247.0/24
                  194.105.12.0/22
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.11.0/24
                  217.156.19.0/24
                  217.156.37.0/24
                  217.156.46.0/24
                  217.156.48.0/22
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0-217.156.94.255
                  217.156.101.0/24
                  217.156.106.0/24
                  217.156.108.0/24
                  217.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:a7:4c:4c:73:7e:5c:13:79:7d:ca:9d:f8:dc:53:34:cb:69:
         0b:69:32:f2:b8:04:ed:b0:0f:95:b8:1e:e6:9b:f8:79:41:86:
         de:fd:9e:67:3e:75:ea:c8:1a:5e:0c:30:5d:82:90:43:ed:7d:
         56:3c:70:05:a6:3f:93:f1:e1:c1:bb:89:27:11:5a:7b:01:4c:
         30:45:01:c4:59:6d:34:46:64:87:ca:f1:0f:9e:9d:f3:ea:fb:
         5b:fd:72:8e:1e:79:fc:ec:fb:fd:0d:f4:1e:bb:27:19:0f:fd:
         5c:07:6f:6c:7a:80:11:27:89:87:59:65:49:24:9e:e5:cc:99:
         7e:1d:ac:5f:fc:5e:49:7c:85:30:d9:18:a1:ce:81:1a:b3:b6:
         4b:6c:0a:bc:46:c7:09:ad:76:d5:f3:5e:b5:17:63:15:45:58:
         26:04:f6:04:00:c3:34:54:1a:1c:9d:20:5d:2f:2b:6e:12:d6:
         38:43:c7:5e:ca:cf:bd:f7:9e:fd:25:a7:6d:f4:2c:e7:18:63:
         48:d9:98:e6:7b:1b:3e:85:5f:70:36:54:62:33:9c:45:b5:42:
         f5:ec:19:66:05:40:1f:58:63:c3:f5:59:ec:c0:04:a6:fe:1f:
         01:cd:1a:6f:aa:b6:54:b2:9a:80:f9:99:42:7d:c6:04:35:60:
         fc:3d:36:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org