Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RBhAne3oYbxBPP77sQYW-WGfjZo.roa
File:                     RBhAne3oYbxBPP77sQYW-WGfjZo.roa (raw, json)
Hash identifier:          XgqhOpSxkJ1K4a+huYivLXZlhAbUDUb2i13rayNfNm8=
Subject key identifier:   44:18:40:9D:ED:E8:61:BC:41:3C:FE:FB:B1:06:16:F9:61:9F:8D:9A
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       19FBE97A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RBhAne3oYbxBPP77sQYW-WGfjZo.roa
Signing time:             Wed 23 Feb 2022 11:18:19 +0000
ROA not before:           Wed 23 Feb 2022 11:18:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3233
IP address blocks:        81.181.74.0/24 maxlen: 24
                          85.120.170.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          81.181.14.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.88.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          81.180.228.0/23 maxlen: 23
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.81.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          194.105.12.0/22 maxlen: 22
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.102.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          193.231.111.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          80.96.156.0/22 maxlen: 22
                          85.122.83.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          217.156.46.0/24 maxlen: 24
                          217.156.48.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.160.0/24 maxlen: 24
                          194.102.161.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.94.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435939706 (0x19fbe97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Feb 23 11:18:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4418409dede861bc413cfefbb10616f9619f8d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:7e:72:86:06:13:4f:5d:9f:4f:76:f3:bc:
                    8e:90:bd:83:88:9d:ce:db:d0:9f:51:ab:24:09:52:
                    04:d9:89:21:60:89:8e:e2:82:af:88:48:e6:e0:66:
                    e7:d8:15:24:ff:83:23:4c:25:9c:8a:02:52:3c:1c:
                    b4:fd:9b:0f:c1:5d:cc:09:6b:32:b3:84:6a:34:1d:
                    3b:ae:1b:62:87:0a:d3:5a:85:b6:b0:05:96:16:36:
                    5c:7d:b6:c3:25:9c:21:12:09:09:23:9e:69:08:87:
                    90:53:36:fb:e6:72:f0:3e:47:11:23:25:b0:62:6d:
                    f2:9f:45:71:2b:2b:0d:65:c1:50:82:3e:fa:d0:26:
                    58:72:fc:a1:14:19:19:74:9b:05:fe:95:31:91:ab:
                    f5:70:0c:e1:22:98:b4:64:01:69:61:a0:f8:5b:af:
                    e4:e6:44:ec:36:d7:d5:9f:38:3a:46:41:31:09:1e:
                    8c:f4:2b:24:f1:dd:08:34:ee:89:d9:32:14:aa:47:
                    04:03:6b:5a:fd:0d:e7:52:e9:b2:37:a0:60:18:ab:
                    60:ea:9f:4e:c1:bd:4c:e1:1a:9e:d5:eb:4c:70:2c:
                    0e:28:91:68:88:5e:a6:52:f2:94:af:75:5f:de:22:
                    e4:1b:98:a4:44:80:f0:ca:af:90:6e:94:cf:e5:9e:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:18:40:9D:ED:E8:61:BC:41:3C:FE:FB:B1:06:16:F9:61:9F:8D:9A
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RBhAne3oYbxBPP77sQYW-WGfjZo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.102.0/24
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.156.0/22
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.171.0/24
                  81.180.88.0/24
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.228.0/23
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.14.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0/24
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  192.162.16.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.111.0-193.231.112.255
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.160.0/23
                  194.102.247.0/24
                  194.105.12.0/22
                  194.153.247.0/24
                  217.156.19.0/24
                  217.156.37.0/24
                  217.156.46.0/24
                  217.156.48.0/22
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0-217.156.94.255
                  217.156.101.0/24
                  217.156.106.0/24
                  217.156.108.0/24
                  217.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:95:e0:1e:7c:fe:e0:cf:9a:c9:a3:6f:16:0a:72:3e:d8:fe:
         dc:bf:7c:b6:6e:89:5d:2d:45:bc:db:33:33:c6:00:ef:ca:cf:
         8c:13:9e:0a:85:ea:73:16:be:19:a6:fd:52:e1:a3:d6:86:51:
         87:01:ad:fc:cf:e8:9d:67:ef:54:f1:d0:05:19:eb:62:19:1f:
         29:78:9f:61:4c:b1:f9:ee:7b:f4:28:b6:1d:3b:42:34:c4:7f:
         d9:6c:42:23:d8:6d:93:39:5c:a0:9b:1b:12:d2:81:70:8f:06:
         5b:49:19:08:d2:4e:70:f0:d8:a6:3b:9e:05:5f:7c:f6:7b:a7:
         cb:cc:4d:ab:fa:94:e4:3e:f5:df:e9:2c:eb:fa:78:58:60:f2:
         84:f7:53:c1:d0:5c:12:6a:8a:aa:95:9d:b4:19:0f:fc:30:e6:
         1d:fd:6d:dd:79:56:08:db:5e:05:13:8d:da:c6:7a:81:46:3f:
         8c:69:be:65:93:57:a7:b3:1b:66:c4:8f:99:7c:31:32:ee:f6:
         90:16:52:d4:9e:3c:7d:71:8d:00:5d:42:a7:c3:29:fe:0a:be:
         98:a3:53:ba:6b:b5:8e:6d:73:18:69:9a:89:81:f3:a9:d8:3d:
         80:9c:c3:d8:7a:98:3b:c7:bd:98:28:85:b1:29:bd:5c:85:93:
         bd:91:22:2c
-----BEGIN CERTIFICATE-----
MIIHozCCBougAwIBAgIEGfvpejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDIy
MzExMTgxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDQxODQwOWRlZGU4
NjFiYzQxM2NmZWZiYjEwNjE2Zjk2MTlmOGQ5YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMMnfnKGBhNPXZ9PdvO8jpC9g4idztvQn1GrJAlSBNmJIWCJ
juKCr4hI5uBm59gVJP+DI0wlnIoCUjwctP2bD8FdzAlrMrOEajQdO64bYocK01qF
trAFlhY2XH22wyWcIRIJCSOeaQiHkFM2++Zy8D5HESMlsGJt8p9FcSsrDWXBUII+
+tAmWHL8oRQZGXSbBf6VMZGr9XAM4SKYtGQBaWGg+Fuv5OZE7DbX1Z84OkZBMQke
jPQrJPHdCDTuidkyFKpHBANrWv0N51LpsjegYBirYOqfTsG9TOEantXrTHAsDiiR
aIheplLylK91X94i5BuYpESA8MqvkG6Uz+WeuJUCAwEAAaOCBL0wggS5MB0GA1Ud
DgQWBBREGECd7ehhvEE8/vuxBhb5YZ+NmjAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L1JCaEFuZTNvWWJ4QlBQNzdzUVlXLVdHZmpaby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AtEGCCsGAQUFBwEHAQH/BIICwDCCArwwggK4BAIAATCCArADBABQYBEwDAMEAFBg
SwMEAFBgTAMEAFBgZgMEAVBgbAMEAFBgiAMEAlBgnAMEAFBgqgMEAFBgtQMEAFBg
vgMEAFBgzwMEAFBg0QMEAFBg2AMEAFBg3AMEAFBg5AMEAFBg7gMEAFBg/wMEAFBh
NgMEAFBhqwMEAFG0WAMEAlG0YAMEAFG0jwMEAVG05AMEAFG06gMEAFG07wMEAFG1
AAMEAFG1DgMEAFG1SgMEAFG1VgMEAFG1ZAMEAFG1lAMEAFG1mAMEAFG1mwMEAFG1
wAMEAFG1xwMEAVG11AMEAFG19AMEAFV4KgMEAVV4QgMEAFV4qgMEAFV4sgMEA1V4
wAMEAVV5BgMEAFV5JgMEA1V5KAMEAlV5PAMEA1V5WAMEAlV5nAMEAFV5xgMEAlV5
3AMEAFV6UwMEAFV6agMEAFV6cgMEAMCiEAMEAMHiIwMEAMHiQQMEAcHiUAMEAMHi
VAMEAMHiYwMEAMHiZTAMAwQAweJvAwQAweJwAwQHweYAAwQBweaGAwQAweaNAwQA
weaPAwQBweakAwQBwea4AwQAwebQMAwDBADB5tMDBADB5tQDBADB5tsDBADB5uED
BADB5vQDBADB51EwDAMEAMHnbwMEAMHncAMEAMHncgMEAcHndAMEAMHndwMEAMHn
owMEAMHnqAMEAMHnwAMEAMHnzAMEAMHn8AMEAMHn9AMEAMHn9wMEAMHn+QMEAMHn
/gMEAMJmhwMEAMJmjwMEAMJmmgMEAMJmnQMEAcJmoAMEAMJm9wMEAsJpDAMEAMKZ
9wMEANmcEwMEANmcJQMEANmcLgMEAtmcMAMEANmcOQMEANmcOwMEANmcPgMEAdmc
QgMEANmcRwMEANmcTTAMAwQA2ZxdAwQA2ZxeAwQA2ZxlAwQA2ZxqAwQA2ZxsAwQA
2Zx3MA0GCSqGSIb3DQEBCwUAA4IBAQCHleAefP7gz5rJo28WCnI+2P7cv3y2bold
LUW82zMzxgDvys+ME54KhepzFr4Zpv1S4aPWhlGHAa38z+idZ+9U8dAFGetiGR8p
eJ9hTLH57nv0KLYdO0I0xH/ZbEIj2G2TOVygmxsS0oFwjwZbSRkI0k5w8NimO54F
X3z2e6fLzE2r+pTkPvXf6Szr+nhYYPKE91PB0FwSaoqqlZ20GQ/8MOYd/W3deVYI
214FE43axnqBRj+Mab5lk1ensxtmxI+ZfDEy7vaQFlLUnjx9cY0AXUKnwyn+Cr6Y
o1O6a7WObXMYaZqJgfOp2D2AnMPYepg7x72YKIWxKb1chZO9kSIs
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org