Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m0paD7vMKmMHV297OrNK2PjGV5M.roa
File:                     m0paD7vMKmMHV297OrNK2PjGV5M.roa (raw, json)
Hash identifier:          uoRjcNVaPc/NvoUYVnjRom0i8y6tFwW/hLDn6qdMIiU=
Subject key identifier:   9B:4A:5A:0F:BB:CC:2A:63:07:57:6F:7B:3A:B3:4A:D8:F8:C6:57:93
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1A2896BF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m0paD7vMKmMHV297OrNK2PjGV5M.roa
Signing time:             Mon 07 Mar 2022 18:26:34 +0000
ROA not before:           Mon 07 Mar 2022 18:26:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3233
IP address blocks:        81.181.74.0/24 maxlen: 24
                          85.120.170.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          81.181.14.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.88.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          194.153.230.0/23 maxlen: 23
                          81.180.228.0/23 maxlen: 23
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.81.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          194.105.12.0/22 maxlen: 22
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.102.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          193.231.111.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          80.96.156.0/22 maxlen: 22
                          217.156.0.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          194.102.65.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          217.156.46.0/24 maxlen: 24
                          217.156.48.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.163.0/24 maxlen: 24
                          194.102.160.0/24 maxlen: 24
                          194.102.161.0/24 maxlen: 24
                          194.102.183.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.94.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438867647 (0x1a2896bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Mar  7 18:26:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b4a5a0fbbcc2a6307576f7b3ab34ad8f8c65793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:3c:79:15:a9:1c:db:1f:ae:c6:81:f2:80:
                    6f:56:50:0d:4e:c0:ff:f9:d3:9b:7c:fd:f9:56:7d:
                    95:d2:15:d8:00:7f:c8:44:52:86:65:3f:da:be:48:
                    dd:23:d3:59:8c:a0:d5:d7:c5:41:fe:6d:cb:31:ce:
                    81:44:f8:ab:cd:22:7a:c7:a9:09:c1:63:30:58:14:
                    a8:57:59:89:f0:19:8c:85:7f:a2:28:dc:1e:ec:44:
                    d5:81:50:cb:0c:ae:65:e7:f7:cf:b4:0a:65:18:cd:
                    66:c9:37:5f:ac:22:65:bd:cc:da:28:29:63:7e:e8:
                    d4:ba:48:21:33:93:e3:6f:9f:35:a4:64:6b:ff:c5:
                    81:e6:b6:ce:e5:0d:7b:e8:7d:a7:3f:a8:0c:eb:ee:
                    c1:df:4a:ac:0c:4a:3f:98:9a:18:01:25:8e:70:be:
                    7c:a6:fe:c5:e2:66:23:3d:8c:f0:92:84:a0:3a:d4:
                    0c:8f:ed:ac:36:fa:39:83:ea:70:29:2a:0e:17:7a:
                    75:2e:4d:17:f7:ba:7e:48:88:5d:05:27:0c:7a:da:
                    f8:42:9b:b8:34:f4:f8:a8:c4:8e:61:9d:a6:75:a1:
                    0e:fc:66:d2:73:84:7d:7e:8e:d3:a6:11:ff:d1:51:
                    cd:48:97:37:fe:c6:60:d6:3f:d9:f9:ed:d4:39:a6:
                    ff:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:5A:0F:BB:CC:2A:63:07:57:6F:7B:3A:B3:4A:D8:F8:C6:57:93
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m0paD7vMKmMHV297OrNK2PjGV5M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.102.0/24
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.156.0/22
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.171.0/24
                  81.180.88.0/24
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.228.0/23
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.14.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0/24
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  192.162.16.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.111.0-193.231.112.255
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.102.65.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.160.0/23
                  194.102.163.0/24
                  194.102.183.0/24
                  194.102.247.0/24
                  194.105.12.0/22
                  194.153.230.0/23
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.11.0/24
                  217.156.19.0/24
                  217.156.37.0/24
                  217.156.46.0/24
                  217.156.48.0/22
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0-217.156.94.255
                  217.156.101.0/24
                  217.156.106.0/24
                  217.156.108.0/24
                  217.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:62:1a:e3:5c:16:d3:f2:83:9d:b1:5c:9b:f5:82:6d:33:
         ac:55:35:b1:1d:b8:3a:10:3e:3b:9f:f5:79:aa:78:dc:4e:ee:
         d0:09:ff:8b:90:f4:26:53:4b:0c:d5:62:61:3b:28:a3:37:d5:
         30:a8:ae:ec:ac:17:f8:43:93:15:16:57:01:6e:76:96:ce:9c:
         18:2c:76:b2:a3:3c:63:58:fd:94:56:a2:82:c4:47:05:28:33:
         e9:7b:23:ad:53:27:0e:74:4a:fd:e6:92:47:98:f7:f7:67:b1:
         69:63:a4:24:cb:19:ef:3b:c0:7f:99:23:bd:f6:be:8c:b1:84:
         05:ca:f9:ff:b4:26:d6:76:bb:a3:f8:e3:e5:07:38:6e:fa:74:
         eb:94:ec:78:03:2d:23:b5:47:ac:fa:fd:93:f3:41:1d:7d:30:
         f4:a5:a6:05:9b:86:bd:52:20:b5:4b:0c:c8:e5:ec:01:0d:45:
         b3:4f:bd:c4:23:8a:b4:d7:fc:f4:be:4c:39:33:44:34:b2:af:
         4a:ab:65:18:17:5c:4c:e0:44:6c:d7:20:3a:77:35:96:ba:f2:
         e2:79:e4:b2:40:f3:9d:12:72:84:c2:f9:42:35:0c:a8:4c:33:
         69:7e:16:4b:71:63:32:85:a3:74:c1:4f:96:14:07:29:cb:47:
         f7:88:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org