Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s9Zjxwz8JucNUK3yymFFwymEyVc.roa
File:                     s9Zjxwz8JucNUK3yymFFwymEyVc.roa (raw, json)
Hash identifier:          5rQGoPgCR/Gc6HaFPmbpUnefpeleTOB5i9DcEo/hwfs=
Subject key identifier:   B3:D6:63:C7:0C:FC:26:E7:0D:50:AD:F2:CA:61:45:C3:29:84:C9:57
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       19E6C33C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s9Zjxwz8JucNUK3yymFFwymEyVc.roa
Signing time:             Fri 18 Feb 2022 07:24:32 +0000
ROA not before:           Fri 18 Feb 2022 07:24:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3233
IP address blocks:        81.181.74.0/24 maxlen: 24
                          85.120.170.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          81.181.14.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.88.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          81.180.228.0/23 maxlen: 23
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.81.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          194.105.12.0/22 maxlen: 22
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.102.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.111.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          80.96.156.0/22 maxlen: 22
                          85.122.83.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          217.156.46.0/24 maxlen: 24
                          217.156.48.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.160.0/24 maxlen: 24
                          194.102.161.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.94.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434553660 (0x19e6c33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Feb 18 07:24:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3d663c70cfc26e70d50adf2ca6145c32984c957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:5b:b4:55:ef:9e:b8:8d:60:fa:d1:39:c0:
                    67:69:c0:f5:ac:60:86:3e:57:a6:38:ab:25:e7:87:
                    ea:8d:81:20:35:49:0d:2f:3d:b2:50:5e:25:29:46:
                    25:58:02:4f:48:9f:dc:33:3d:9d:43:14:2a:c9:d1:
                    7f:18:74:12:3a:f5:ec:df:76:d7:0e:c6:ca:66:68:
                    ab:a2:3c:7b:e5:07:bf:0c:0f:f7:17:02:64:80:90:
                    2a:cb:45:24:44:b1:e0:ef:cd:f0:2f:20:da:e1:fb:
                    89:62:3f:6b:83:26:2d:da:19:31:8e:3c:0b:40:31:
                    0e:f9:1b:a1:57:80:bd:7a:1d:0a:47:d7:44:09:e7:
                    8c:c3:af:4a:44:52:3c:eb:96:6e:6b:c3:1b:cc:c1:
                    76:00:15:03:a8:45:f9:90:df:17:ab:f6:ea:f6:03:
                    d7:06:43:9d:9f:15:8d:42:f4:17:66:04:be:1d:f7:
                    7e:7b:0e:4e:84:e3:86:e6:1a:26:8e:91:ca:1d:6e:
                    71:92:e9:57:52:06:51:0e:14:6c:aa:e8:34:5d:97:
                    50:f8:c9:a6:82:7d:f4:b9:27:69:ab:b1:4d:45:9f:
                    ce:87:69:06:d8:39:6c:d8:5f:af:89:aa:e5:77:c3:
                    7d:ac:99:5c:b2:5c:9b:6e:18:0c:55:86:70:10:2f:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D6:63:C7:0C:FC:26:E7:0D:50:AD:F2:CA:61:45:C3:29:84:C9:57
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s9Zjxwz8JucNUK3yymFFwymEyVc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.102.0/24
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.156.0/22
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  81.180.88.0/24
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.228.0/23
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.14.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0/24
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  192.162.16.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.111.0/24
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.102.135.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.160.0/23
                  194.102.247.0/24
                  194.105.12.0/22
                  194.153.247.0/24
                  217.156.46.0/24
                  217.156.48.0/22
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0-217.156.94.255
                  217.156.101.0/24
                  217.156.106.0/24
                  217.156.108.0/24
                  217.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:76:da:0c:5a:71:40:53:4e:3f:d6:42:cb:28:46:4a:f9:3c:
         15:95:e2:fa:9b:a2:a6:27:d6:f5:f6:fd:77:25:da:91:bc:7b:
         c4:48:06:3e:aa:a6:21:23:92:72:8a:ac:97:34:94:f6:9e:61:
         8e:24:f2:46:78:0d:1c:e2:f7:fc:00:20:d9:33:80:64:97:1b:
         06:de:e9:0a:7c:ef:67:fc:b5:9c:43:1f:a1:62:51:f2:79:ef:
         5f:c2:f2:fd:1e:a6:08:e8:54:0e:a5:f9:ed:c2:d2:73:14:39:
         0a:55:07:6a:34:43:fc:bf:cf:73:31:29:c7:47:d0:2d:26:56:
         7f:15:fe:04:13:03:e8:2e:22:6c:0c:35:8d:d9:0a:0d:83:e6:
         2d:86:54:71:fd:87:a7:2a:5d:4e:b6:55:b6:bd:ec:4e:50:25:
         2c:9f:4e:69:b9:88:d6:b3:86:5e:95:5f:9a:a0:2b:0b:2f:be:
         8b:c5:bf:e8:40:b5:78:dc:21:fa:5e:98:bd:e1:fe:89:0c:20:
         1d:b4:99:fd:4d:64:dd:0b:d6:69:35:a7:2f:46:9e:0d:00:98:
         a3:8f:6e:c8:eb:41:2d:26:1d:51:48:25:bb:dd:cd:58:08:f1:
         8b:14:b7:32:7c:f5:41:22:da:79:8c:43:39:f4:9a:d3:cd:65:
         ea:c3:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:06 2024 by rpki-client on console-ams.rpki-client.org