Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bKEJGPFFbdlUUDPkOZbmsj3MUWI.roa
File:                     bKEJGPFFbdlUUDPkOZbmsj3MUWI.roa (raw, json)
Hash identifier:          Eo40EjiMWFhDhlNvui9SEztNlM6fZi7IptrXnr/TmFM=
Subject key identifier:   6C:A1:09:18:F1:45:6D:D9:54:50:33:E4:39:96:E6:B2:3D:CC:51:62
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       19DF1C70
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bKEJGPFFbdlUUDPkOZbmsj3MUWI.roa
Signing time:             Wed 16 Feb 2022 04:16:54 +0000
ROA not before:           Wed 16 Feb 2022 04:16:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3233
IP address blocks:        81.181.74.0/24 maxlen: 24
                          85.120.170.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          81.181.14.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.88.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          81.180.228.0/23 maxlen: 23
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.81.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          194.105.12.0/22 maxlen: 22
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.102.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.111.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          80.96.156.0/22 maxlen: 22
                          85.122.83.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          217.156.46.0/24 maxlen: 24
                          217.156.48.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          194.102.160.0/24 maxlen: 24
                          194.102.161.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.94.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434052208 (0x19df1c70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Feb 16 04:16:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ca10918f1456dd9545033e43996e6b23dcc5162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:cd:a6:75:56:62:90:1c:13:2b:75:13:04:
                    49:a6:eb:14:be:83:40:f0:23:0d:55:2f:f4:de:65:
                    d3:c7:0e:1a:af:0f:36:d2:2a:94:62:39:f5:8e:d5:
                    cb:3f:30:bb:97:ea:d3:f8:f9:16:db:06:b5:a9:8d:
                    43:fb:b9:a9:9c:07:22:86:44:a8:cf:c3:f9:75:b3:
                    e0:be:f3:28:01:cf:7e:2f:5b:fe:78:0b:cb:d8:37:
                    1b:d6:c4:9b:c7:ad:f7:0e:31:97:f5:38:72:72:10:
                    c4:00:6e:a1:32:c8:a4:00:9e:24:2b:34:32:bc:a7:
                    f4:5a:1e:3d:13:ff:e6:cc:3b:df:3a:44:58:e8:ac:
                    c4:cb:27:13:49:3f:1b:9d:de:3e:64:63:96:dd:c0:
                    c4:df:81:e4:bc:e8:ee:81:d4:96:39:7b:ca:7a:09:
                    56:e0:46:fc:69:f8:65:e6:52:67:4b:b8:52:a5:ab:
                    47:b3:2e:5a:d2:f3:81:a6:77:9e:85:c8:3f:a0:6b:
                    b6:bc:99:19:d1:ea:6f:ad:a7:1c:5c:87:0b:07:ae:
                    b6:7c:c9:be:25:3f:b0:b2:75:ed:18:c7:14:e4:d9:
                    a9:a9:4a:44:82:3e:d9:ed:9f:8f:bc:f4:88:34:b1:
                    90:31:03:be:63:22:e0:cf:4f:74:57:69:54:38:a0:
                    0b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A1:09:18:F1:45:6D:D9:54:50:33:E4:39:96:E6:B2:3D:CC:51:62
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bKEJGPFFbdlUUDPkOZbmsj3MUWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.102.0/24
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.156.0/22
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  81.180.88.0/24
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.228.0/23
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.14.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0/24
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  192.162.16.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.111.0/24
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.102.135.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.160.0/23
                  194.102.247.0/24
                  194.105.12.0/22
                  194.153.247.0/24
                  217.156.46.0/24
                  217.156.48.0/22
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0-217.156.94.255
                  217.156.101.0/24
                  217.156.106.0/24
                  217.156.108.0/24
                  217.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:7b:4a:58:7e:01:f9:bb:bb:38:64:e0:5e:95:ac:99:c7:a2:
         57:78:41:7d:4b:44:65:9b:ee:7f:31:e6:3f:bf:ea:75:0f:c2:
         49:a7:8c:3d:cc:9b:fd:04:2f:c1:a7:7f:b7:60:b9:6c:51:e6:
         f4:58:a3:33:39:0f:08:77:45:74:cb:c4:4d:d6:b8:7b:52:69:
         20:e4:3e:85:ba:5c:9e:6e:8c:ed:bb:12:cd:6a:75:97:8a:bf:
         db:7a:02:94:69:f9:fa:d7:1b:58:c9:b0:70:82:f3:22:82:f7:
         35:00:de:c9:33:74:17:1b:74:3a:db:d7:4c:e3:90:9c:80:07:
         18:dd:b7:86:0a:9e:92:6d:ca:8e:3a:10:5e:40:76:b7:dc:12:
         9c:a2:d3:9a:f9:f1:d1:1f:f0:33:c9:4e:a6:1e:bc:7c:a7:08:
         74:b4:de:d6:e1:97:60:c4:78:f8:03:55:d8:78:a0:1f:5c:a5:
         02:bf:13:c1:62:07:da:35:5e:cb:51:01:70:66:01:2f:fe:a4:
         93:08:9d:d1:e5:08:40:b0:2f:3e:13:0f:58:e2:03:ed:e0:bd:
         45:a1:ca:5e:68:ea:58:44:43:84:ea:ba:31:78:91:fc:84:b4:
         90:3f:85:5d:48:72:94:42:34:8f:30:48:af:b4:25:52:d1:04:
         7c:81:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org