Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/g5kYHAI19LAdCHD-4my7qSY55O8.roa
File:                     g5kYHAI19LAdCHD-4my7qSY55O8.roa (raw, json)
Hash identifier:          mg1XSExLbJlc0XvjLXiweY0k6Zuc3bHHo8vR2wXOm+Q=
Subject key identifier:   83:99:18:1C:02:35:F4:B0:1D:08:70:FE:E2:6C:BB:A9:26:39:E4:EF
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       19E77C9A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/g5kYHAI19LAdCHD-4my7qSY55O8.roa
Signing time:             Fri 18 Feb 2022 11:48:43 +0000
ROA not before:           Fri 18 Feb 2022 11:48:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3233
IP address blocks:        81.181.74.0/24 maxlen: 24
                          85.120.170.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          81.181.14.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.88.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          81.180.228.0/23 maxlen: 23
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.81.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          194.105.12.0/22 maxlen: 22
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.102.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.111.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          80.96.156.0/22 maxlen: 22
                          85.122.83.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          217.156.46.0/24 maxlen: 24
                          217.156.48.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.160.0/24 maxlen: 24
                          194.102.161.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.94.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434601114 (0x19e77c9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Feb 18 11:48:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8399181c0235f4b01d0870fee26cbba92639e4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:8b:bf:1f:ca:f4:af:18:db:b1:ce:67:cc:
                    c8:87:74:e6:c3:dc:f5:fa:df:f6:36:29:d6:f6:88:
                    dd:ab:91:70:db:87:d7:a1:bc:10:83:ec:ae:6f:e4:
                    fd:3c:f4:1c:28:67:0f:ab:09:97:c3:34:66:06:b4:
                    a4:ea:8f:fb:23:8b:85:0c:d9:fc:e4:f9:22:7b:22:
                    0b:61:46:5b:ae:77:66:e4:4a:11:f0:a1:8b:2e:e5:
                    d5:f0:b1:3d:12:19:07:8b:2c:46:9a:d9:94:2c:53:
                    cb:c0:aa:00:1e:0a:37:b1:40:cf:5b:df:cb:2c:c4:
                    f3:c9:55:26:25:01:a5:a3:6f:6d:5a:47:25:ab:ba:
                    f6:c4:05:10:2c:4b:fe:ec:95:4e:db:3e:95:ea:60:
                    de:d4:eb:b3:d8:81:43:8b:0d:c6:04:49:f2:39:84:
                    48:19:4a:47:55:d6:f4:ab:ad:6b:f3:cf:87:0f:4d:
                    4b:7f:d4:b9:d4:ea:c9:03:f0:7c:c3:82:90:e6:73:
                    d9:ba:5d:50:8f:2c:2d:01:7a:e2:56:27:f5:a6:e0:
                    0f:f0:63:b0:ba:44:d3:67:47:84:e2:71:4e:90:62:
                    b4:32:2f:c4:33:33:71:bf:e6:f1:c8:a6:3e:f7:88:
                    9f:24:5c:5a:fe:ab:b5:90:0d:c0:d7:e3:38:0d:22:
                    75:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:99:18:1C:02:35:F4:B0:1D:08:70:FE:E2:6C:BB:A9:26:39:E4:EF
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/g5kYHAI19LAdCHD-4my7qSY55O8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.102.0/24
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.156.0/22
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  81.180.88.0/24
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.228.0/23
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.14.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0/24
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  192.162.16.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.111.0/24
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.102.135.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.160.0/23
                  194.102.247.0/24
                  194.105.12.0/22
                  194.153.247.0/24
                  217.156.37.0/24
                  217.156.46.0/24
                  217.156.48.0/22
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0-217.156.94.255
                  217.156.101.0/24
                  217.156.106.0/24
                  217.156.108.0/24
                  217.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:0d:8a:3a:3d:e4:a1:48:6a:64:94:42:19:d1:b5:eb:eb:0c:
         78:7b:d9:b2:11:41:b5:4f:0f:d4:14:ab:85:4e:e3:e8:d0:92:
         6a:c5:3e:9c:21:19:e8:ac:4e:64:49:36:7a:76:9b:e1:91:3a:
         5f:c0:21:d7:5a:14:73:b4:6e:81:9e:9a:fd:7e:61:8b:fd:80:
         ed:19:37:b8:1f:df:46:b8:26:69:3d:22:a8:0f:84:c3:37:79:
         9a:8c:8f:40:b4:5c:1d:4f:10:75:62:5d:1b:19:84:f5:85:10:
         ab:bc:39:ef:38:0a:67:6b:02:d0:14:1a:4e:59:4f:12:0f:6f:
         14:4c:59:66:d6:f2:27:c4:00:60:39:0f:2f:a2:13:63:9e:87:
         ae:e3:67:27:6c:47:00:98:52:83:fa:06:7e:ba:2c:23:f6:69:
         e9:87:49:3c:98:ec:41:0e:1d:d8:48:7c:fe:4b:97:4d:6d:37:
         01:6e:ec:4c:e5:60:d6:0e:cc:84:8c:da:a4:6f:a4:59:93:fb:
         ef:e5:87:3b:63:6a:71:1b:c0:11:4a:0b:51:e1:fc:a7:96:e0:
         5d:34:2a:1f:1a:8c:db:8d:06:89:e5:c8:0b:e2:03:86:e7:d9:
         3d:33:5d:ef:c7:f8:09:c9:f7:b4:19:f2:cf:ca:47:ab:8d:97:
         7c:ef:06:b2
-----BEGIN CERTIFICATE-----
MIIHfTCCBmWgAwIBAgIEGed8mjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDIx
ODExNDg0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODM5OTE4MWMwMjM1
ZjRiMDFkMDg3MGZlZTI2Y2JiYTkyNjM5ZTRlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMmfi78fyvSvGNuxzmfMyId05sPc9frf9jYp1vaI3auRcNuH
16G8EIPsrm/k/Tz0HChnD6sJl8M0Zga0pOqP+yOLhQzZ/OT5InsiC2FGW653ZuRK
EfChiy7l1fCxPRIZB4ssRprZlCxTy8CqAB4KN7FAz1vfyyzE88lVJiUBpaNvbVpH
Jau69sQFECxL/uyVTts+lepg3tTrs9iBQ4sNxgRJ8jmESBlKR1XW9Kuta/PPhw9N
S3/UudTqyQPwfMOCkOZz2bpdUI8sLQF64lYn9abgD/BjsLpE02dHhOJxTpBitDIv
xDMzcb/m8cimPveInyRcWv6rtZANwNfjOA0idasCAwEAAaOCBJcwggSTMB0GA1Ud
DgQWBBSDmRgcAjX0sB0IcP7ibLupJjnk7zAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L2c1a1lIQUkxOUxBZENIRC00bXk3cVNZNTVPOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AqsGCCsGAQUFBwEHAQH/BIICmjCCApYwggKSBAIAATCCAooDBABQYBEwDAMEAFBg
SwMEAFBgTAMEAFBgZgMEAVBgbAMEAFBgiAMEAlBgnAMEAFBgqgMEAFBgtQMEAFBg
vgMEAFBgzwMEAFBg0QMEAFBg2AMEAFBg3AMEAFBg5AMEAFBg7gMEAFBg/wMEAFBh
NgMEAFG0WAMEAlG0YAMEAFG0jwMEAVG05AMEAFG06gMEAFG07wMEAFG1AAMEAFG1
DgMEAFG1SgMEAFG1VgMEAFG1ZAMEAFG1lAMEAFG1mAMEAFG1mwMEAFG1wAMEAFG1
xwMEAVG11AMEAFG19AMEAFV4KgMEAVV4QgMEAFV4qgMEAFV4sgMEA1V4wAMEAVV5
BgMEAFV5JgMEA1V5KAMEAlV5PAMEA1V5WAMEAlV5nAMEAFV5xgMEAlV53AMEAFV6
UwMEAFV6agMEAFV6cgMEAMCiEAMEAMHiIwMEAMHiQQMEAcHiUAMEAMHiVAMEAMHi
YwMEAMHiZTAMAwQAweJvAwQAweJwAwQHweYAAwQBweaGAwQAweaNAwQAweaPAwQB
weakAwQBwea4AwQAwebQMAwDBADB5tMDBADB5tQDBADB5tsDBADB5uEDBADB5vQD
BADB51EDBADB528DBADB53IDBAHB53QDBADB53cDBADB56MDBADB56gDBADB58AD
BADB5/ADBADB5/QDBADB5/cDBADB5/kDBADB5/4DBADCZocDBADCZpoDBADCZp0D
BAHCZqADBADCZvcDBALCaQwDBADCmfcDBADZnCUDBADZnC4DBALZnDADBADZnDkD
BADZnDsDBAHZnEIDBADZnEcDBADZnE0wDAMEANmcXQMEANmcXgMEANmcZQMEANmc
agMEANmcbAMEANmcdzANBgkqhkiG9w0BAQsFAAOCAQEACw2KOj3koUhqZJRCGdG1
6+sMeHvZshFBtU8P1BSrhU7j6NCSasU+nCEZ6KxOZEk2enab4ZE6X8Ah11oUc7Ru
gZ6a/X5hi/2A7Rk3uB/fRrgmaT0iqA+Ewzd5moyPQLRcHU8QdWJdGxmE9YUQq7w5
7zgKZ2sC0BQaTllPEg9vFExZZtbyJ8QAYDkPL6ITY56HruNnJ2xHAJhSg/oGfros
I/Zp6YdJPJjsQQ4d2Eh8/kuXTW03AW7sTOVg1g7MhIzapG+kWZP77+WHO2NqcRvA
EUoLUeH8p5bgXTQqHxqM240GieXIC+IDhufZPTNd78f4Ccn3tBnyz8pHq42XfO8G
sg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org