Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kgUOVzcpdIxCZ-rnWPbJWLZ11BQ.roa
File:                     kgUOVzcpdIxCZ-rnWPbJWLZ11BQ.roa (raw, json)
Hash identifier:          b7LHusWZTkEAH3TZf27tzhG3YmitKH2UlGu18XUSpXE=
Subject key identifier:   92:05:0E:57:37:29:74:8C:42:67:EA:E7:58:F6:C9:58:B6:75:D4:14
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01850FF1F000FAC253D705B6D39EE04E6155
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kgUOVzcpdIxCZ-rnWPbJWLZ11BQ.roa
Signing time:             Wed 14 Dec 2022 09:23:11 +0000
ROA not before:           Wed 14 Dec 2022 09:23:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3233
IP address blocks:        85.120.170.0/24 maxlen: 24
                          81.181.74.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          85.120.155.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.156.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          194.153.238.0/24 maxlen: 24
                          194.153.234.0/24 maxlen: 24
                          194.153.242.0/23 maxlen: 23
                          194.153.245.0/24 maxlen: 24
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          80.97.176.0/23 maxlen: 23
                          193.226.81.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.120.0/24 maxlen: 24
                          193.226.123.0/24 maxlen: 24
                          193.226.27.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          194.105.6.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.144.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          80.96.43.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.111.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          217.156.0.0/24 maxlen: 24
                          217.156.2.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.6.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.7.0/24 maxlen: 24
                          217.156.15.0/24 maxlen: 24
                          217.156.13.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.35.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          194.102.65.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.163.0/24 maxlen: 24
                          194.102.176.0/24 maxlen: 24
                          194.102.177.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          194.102.183.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          194.102.106.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          85.122.182.0/23 maxlen: 23
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.252.0/22 maxlen: 22
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22
                          2a03:5e80::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0f:f1:f0:00:fa:c2:53:d7:05:b6:d3:9e:e0:4e:61:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Dec 14 09:23:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=92050e573729748c4267eae758f6c958b675d414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:ad:ea:ce:d7:d3:f0:d8:88:af:c3:b0:96:
                    2d:0b:08:37:7c:06:bd:9c:60:2d:62:2d:ee:88:40:
                    bd:26:27:29:9b:ba:c6:22:9a:0e:c4:6f:28:ba:1b:
                    d2:f8:70:6f:d5:58:62:df:ba:ea:cc:0e:85:93:01:
                    63:50:cc:14:64:33:b0:07:df:a8:56:ea:33:3a:51:
                    ed:f1:f2:89:6c:77:7d:c2:04:df:65:94:61:fc:03:
                    61:27:35:81:0e:62:f4:0a:a3:ff:88:08:64:55:4f:
                    96:15:ca:01:b5:48:8c:ba:58:06:3f:68:8e:ab:c4:
                    a3:42:f2:05:39:be:12:71:b8:d2:04:dd:fd:20:47:
                    a4:fd:06:23:b9:5e:e3:b8:1d:04:f0:b7:df:11:e7:
                    a8:01:bf:51:70:22:14:45:0e:10:5e:93:0a:ac:97:
                    27:a3:b2:0b:e7:8f:ce:c6:9c:63:98:3d:a4:c0:62:
                    fe:7f:5a:a4:10:4a:bb:cb:42:2e:45:24:16:a3:4a:
                    0a:e3:ff:4b:f9:8d:de:63:69:ad:fd:ed:aa:42:6e:
                    5e:14:7b:a0:e7:da:9d:aa:90:a7:64:36:b0:f2:f5:
                    c4:3b:ec:ae:fe:6e:e9:c6:12:ae:b2:16:77:e6:1c:
                    3a:36:af:d0:c1:c0:4e:b0:0a:8c:f7:24:9a:f4:5d:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:05:0E:57:37:29:74:8C:42:67:EA:E7:58:F6:C9:58:B6:75:D4:14
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kgUOVzcpdIxCZ-rnWPbJWLZ11BQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.43.0/24
                  80.96.75.0-80.96.76.255
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.144.0/24
                  80.97.171.0/24
                  80.97.176.0/23
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0-81.181.156.255
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.155.0/24
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.121.252.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  85.122.182.0/23
                  192.162.16.0/24
                  193.226.27.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.226.120.0/24
                  193.226.123.0/24
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.111.0-193.231.112.255
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.102.65.0/24
                  194.102.106.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.163.0/24
                  194.102.176.0/23
                  194.102.183.0/24
                  194.102.247.0/24
                  194.105.6.0/24
                  194.153.234.0/24
                  194.153.238.0/24
                  194.153.242.0/23
                  194.153.245.0/24
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.2.0/24
                  217.156.6.0/23
                  217.156.11.0/24
                  217.156.13.0/24
                  217.156.15.0/24
                  217.156.19.0/24
                  217.156.35.0/24
                  217.156.37.0/24
                  217.156.49.0-217.156.51.255
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0/24
                  217.156.101.0/24
                  217.156.106.0/24
                  217.156.108.0/24
                  217.156.119.0/24
                IPv6:
                  2a03:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:b4:f9:77:2e:aa:31:03:28:bf:56:55:39:bd:47:95:ac:
         7c:5e:2e:07:97:93:3a:4c:43:e6:81:35:30:01:b8:37:4e:a4:
         ca:0f:f2:52:b0:27:ff:93:27:b9:8f:db:1e:4f:0c:a0:dc:31:
         01:73:c5:d3:65:4e:19:66:3f:73:cf:fd:a4:0c:db:04:88:dd:
         a0:f2:3d:bd:69:f9:23:97:cd:6d:4d:72:48:08:cd:54:d5:11:
         86:73:c3:33:9f:39:bf:cd:db:6e:7d:a6:52:ac:0e:4a:73:ae:
         b7:56:e9:f0:1d:d5:7e:93:74:a8:1b:6c:f8:0c:2e:fb:8f:bd:
         23:e9:64:63:91:83:b0:4d:e5:70:b0:a3:a1:a3:3d:0d:60:11:
         6a:63:c4:ac:af:0d:24:9d:e8:0f:ed:bf:75:d6:41:94:07:ef:
         cc:49:fa:78:ce:01:e1:08:04:41:96:da:18:30:ae:17:8a:9c:
         5a:bc:7a:fd:f5:2c:aa:f8:1a:67:cc:a7:f0:83:63:00:f5:d2:
         29:eb:ec:25:06:46:8b:30:27:ea:7e:79:e5:db:eb:db:5e:05:
         50:12:54:9b:5f:e8:fe:f4:2a:c5:47:6c:d1:14:de:3e:d2:2e:
         9f:0c:b7:56:a2:73:8d:e0:3b:22:39:27:0a:2c:49:df:45:e9:
         88:43:f5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org