Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/uQjbAuPMcqIxzN5IqchYKCPdack.roa
File:                     uQjbAuPMcqIxzN5IqchYKCPdack.roa (raw, json)
Hash identifier:          iAea1iYxRkyZz/+Vy4wCdg04vleNXh2C/UVxjNdUwRQ=
Subject key identifier:   B9:08:DB:02:E3:CC:72:A2:31:CC:DE:48:A9:C8:58:28:23:DD:69:C9
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1A4CBA42
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/uQjbAuPMcqIxzN5IqchYKCPdack.roa
Signing time:             Wed 16 Mar 2022 15:57:41 +0000
ROA not before:           Wed 16 Mar 2022 15:57:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3233
IP address blocks:        81.181.74.0/24 maxlen: 24
                          85.120.170.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          81.181.14.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.88.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          194.153.230.0/23 maxlen: 23
                          194.153.244.0/24 maxlen: 24
                          194.153.242.0/23 maxlen: 23
                          81.180.228.0/23 maxlen: 23
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.81.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          194.105.12.0/22 maxlen: 22
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.144.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.102.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          193.231.111.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          80.96.156.0/22 maxlen: 22
                          217.156.0.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.7.0/24 maxlen: 24
                          217.156.13.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          217.156.32.0/23 maxlen: 23
                          217.156.37.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          194.102.65.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          217.156.46.0/24 maxlen: 24
                          217.156.48.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.163.0/24 maxlen: 24
                          194.102.160.0/24 maxlen: 24
                          194.102.161.0/24 maxlen: 24
                          194.102.176.0/24 maxlen: 24
                          194.102.177.0/24 maxlen: 24
                          194.102.183.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.94.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441236034 (0x1a4cba42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Mar 16 15:57:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b908db02e3cc72a231ccde48a9c8582823dd69c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b6:3e:b9:a2:e9:3d:c2:08:48:57:15:ab:b2:
                    5f:af:ce:ae:df:ce:83:a8:2b:fa:c7:66:f4:f3:aa:
                    18:f1:40:d6:7e:5b:aa:a8:64:d5:b3:48:51:3d:ee:
                    8c:54:c8:30:1e:00:ab:b7:d3:03:91:9d:37:6d:c4:
                    92:b8:28:4f:5b:e3:a7:97:f4:09:f3:31:b2:7a:08:
                    a6:b5:06:04:4e:89:f2:48:60:c5:4e:0c:a4:69:75:
                    3c:49:aa:73:af:b0:72:99:0d:21:03:c2:c1:4d:8a:
                    b8:12:ee:02:94:59:e6:a9:9b:03:a1:6c:f6:72:0e:
                    56:f2:26:67:93:d0:20:15:74:14:e4:1a:8c:4c:fe:
                    df:8c:84:78:90:b3:e3:74:d0:20:c2:53:2e:af:cf:
                    de:49:81:e4:b9:58:6f:72:fb:bf:d8:a4:24:4e:fe:
                    7f:22:84:01:56:c3:dc:5e:14:b4:4b:10:34:58:bc:
                    6c:24:5b:e4:83:16:0b:35:ca:2c:f7:b1:8f:76:1b:
                    06:5e:6d:16:12:0f:a2:48:17:fa:24:08:4e:e3:f1:
                    cc:e8:66:e0:bd:a3:39:60:90:32:d6:14:b4:c1:15:
                    f9:f6:7c:36:cd:1c:e6:31:ae:d3:8c:6a:78:c6:d0:
                    4e:a2:4c:75:b4:e8:8c:07:b5:33:71:94:ed:09:07:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:08:DB:02:E3:CC:72:A2:31:CC:DE:48:A9:C8:58:28:23:DD:69:C9
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/uQjbAuPMcqIxzN5IqchYKCPdack.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.102.0/24
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.156.0/22
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.144.0/24
                  80.97.171.0/24
                  81.180.88.0/24
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.228.0/23
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.14.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0/24
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  192.162.16.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.111.0-193.231.112.255
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.102.65.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.160.0/23
                  194.102.163.0/24
                  194.102.176.0/23
                  194.102.183.0/24
                  194.102.247.0/24
                  194.105.12.0/22
                  194.153.230.0/23
                  194.153.242.0-194.153.244.255
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.7.0/24
                  217.156.11.0/24
                  217.156.13.0/24
                  217.156.19.0/24
                  217.156.32.0/23
                  217.156.37.0/24
                  217.156.46.0/24
                  217.156.48.0/22
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0-217.156.94.255
                  217.156.101.0/24
                  217.156.106.0/24
                  217.156.108.0/24
                  217.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:c2:55:93:95:c3:81:e1:c9:87:9e:e0:d5:74:78:7b:08:
         da:88:09:21:be:bf:ba:2c:8c:30:a5:ab:2f:6d:11:64:11:38:
         a7:25:01:2e:47:1f:a2:5e:56:c7:e8:d3:be:c6:43:fb:86:d7:
         68:37:84:0e:13:0d:db:1d:d8:6f:4b:a4:d0:86:e1:61:6f:e1:
         76:3c:85:46:28:da:13:97:c0:fc:b9:ae:54:70:65:54:ec:ec:
         3d:d5:6b:78:7a:48:1d:17:7d:5b:26:ff:d6:52:f6:dc:93:5c:
         4b:8f:60:99:ec:da:bd:08:ad:30:2c:3d:2d:7d:b4:bc:76:99:
         5e:ce:b0:32:e4:b8:c2:d3:48:4c:d3:28:56:b3:4b:70:dc:84:
         ef:df:43:51:07:f8:85:12:0a:b6:49:f5:ff:1b:84:00:35:66:
         73:85:45:f3:d9:3e:e7:62:18:ad:40:5c:02:8d:eb:e1:73:67:
         62:95:da:82:0a:a0:84:eb:b2:85:44:0e:eb:53:51:4c:4e:ca:
         b4:56:26:1d:1b:a5:64:d0:bc:b3:fe:04:62:62:ed:bb:eb:66:
         1c:78:36:f4:df:24:13:a6:dd:32:b7:70:0e:2a:ad:93:63:00:
         82:c5:e0:88:a3:6f:a9:a5:3f:96:90:54:f4:de:cf:54:47:08:
         48:06:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:06 2024 by rpki-client on console-ams.rpki-client.org