Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/U7h_GtdfQlaNijAQB6iYeWXYMog.roa
File:                     U7h_GtdfQlaNijAQB6iYeWXYMog.roa (raw, json)
Hash identifier:          NBqyXUSyb/MIkjybJM/fSsxBxH0VLhKRxN4bLLvKaW8=
Subject key identifier:   53:B8:7F:1A:D7:5F:42:56:8D:8A:30:10:07:A8:98:79:65:D8:32:88
Certificate issuer:       /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial:       09BF8AC0
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/U7h_GtdfQlaNijAQB6iYeWXYMog.roa
Signing time:             Sat 01 Jan 2022 13:55:25 +0000
ROA not before:           Sat 01 Jan 2022 13:55:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41201
IP address blocks:        87.199.217.0/24 maxlen: 24
                          87.199.218.0/24 maxlen: 24
                          87.199.219.0/24 maxlen: 24
                          87.199.214.0/24 maxlen: 24
                          87.199.215.0/24 maxlen: 24
                          87.199.216.0/24 maxlen: 24
                          87.199.220.0/24 maxlen: 24
                          87.199.221.0/24 maxlen: 24
                          87.199.222.0/24 maxlen: 24
                          87.199.223.0/24 maxlen: 24
                          87.199.224.0/24 maxlen: 24
                          87.199.225.0/24 maxlen: 24
                          87.199.226.0/24 maxlen: 24
                          87.199.230.0/24 maxlen: 24
                          87.199.231.0/24 maxlen: 24
                          87.199.232.0/24 maxlen: 24
                          87.199.233.0/24 maxlen: 24
                          87.199.227.0/24 maxlen: 24
                          87.199.228.0/24 maxlen: 24
                          87.199.229.0/24 maxlen: 24
                          87.199.234.0/24 maxlen: 24
                          87.199.235.0/24 maxlen: 24
                          87.199.236.0/24 maxlen: 24
                          87.199.237.0/24 maxlen: 24
                          87.199.238.0/24 maxlen: 24
                          87.199.239.0/24 maxlen: 24
                          87.199.240.0/24 maxlen: 24
                          87.199.241.0/24 maxlen: 24
                          87.199.242.0/24 maxlen: 24
                          87.199.243.0/24 maxlen: 24
                          87.199.244.0/24 maxlen: 24
                          87.199.245.0/24 maxlen: 24
                          87.199.246.0/24 maxlen: 24
                          87.199.247.0/24 maxlen: 24
                          87.199.248.0/24 maxlen: 24
                          87.199.249.0/24 maxlen: 24
                          87.199.250.0/24 maxlen: 24
                          87.199.251.0/24 maxlen: 24
                          87.199.252.0/24 maxlen: 24
                          87.199.253.0/24 maxlen: 24
                          87.199.254.0/24 maxlen: 24
                          87.199.255.0/24 maxlen: 24
                          87.199.0.0/24 maxlen: 24
                          87.199.1.0/24 maxlen: 24
                          87.199.2.0/24 maxlen: 24
                          87.199.3.0/24 maxlen: 24
                          87.199.4.0/24 maxlen: 24
                          87.199.8.0/24 maxlen: 24
                          87.199.9.0/24 maxlen: 24
                          87.199.10.0/24 maxlen: 24
                          87.199.11.0/24 maxlen: 24
                          87.199.5.0/24 maxlen: 24
                          87.199.0.0/16 maxlen: 32
                          87.199.6.0/24 maxlen: 24
                          87.199.7.0/24 maxlen: 24
                          87.199.12.0/24 maxlen: 24
                          87.199.13.0/24 maxlen: 24
                          87.199.14.0/24 maxlen: 24
                          87.199.15.0/24 maxlen: 24
                          87.199.16.0/24 maxlen: 24
                          87.199.17.0/24 maxlen: 24
                          87.199.18.0/24 maxlen: 24
                          87.199.19.0/24 maxlen: 24
                          87.199.20.0/24 maxlen: 24
                          87.199.21.0/24 maxlen: 24
                          87.199.22.0/24 maxlen: 24
                          87.199.23.0/24 maxlen: 24
                          87.199.24.0/24 maxlen: 24
                          87.199.25.0/24 maxlen: 24
                          87.199.26.0/24 maxlen: 24
                          87.199.27.0/24 maxlen: 24
                          87.199.28.0/24 maxlen: 24
                          87.199.29.0/24 maxlen: 24
                          87.199.30.0/24 maxlen: 24
                          87.199.31.0/24 maxlen: 24
                          87.199.36.0/24 maxlen: 24
                          87.199.37.0/24 maxlen: 24
                          87.199.38.0/24 maxlen: 24
                          87.199.32.0/24 maxlen: 24
                          87.199.33.0/24 maxlen: 24
                          87.199.34.0/24 maxlen: 24
                          87.199.35.0/24 maxlen: 24
                          87.199.39.0/24 maxlen: 24
                          87.199.40.0/24 maxlen: 24
                          87.199.41.0/24 maxlen: 24
                          87.199.42.0/24 maxlen: 24
                          87.199.43.0/24 maxlen: 24
                          87.199.44.0/24 maxlen: 24
                          87.199.50.0/24 maxlen: 24
                          87.199.51.0/24 maxlen: 24
                          87.199.45.0/24 maxlen: 24
                          87.199.46.0/24 maxlen: 24
                          87.199.47.0/24 maxlen: 24
                          87.199.48.0/24 maxlen: 24
                          87.199.49.0/24 maxlen: 24
                          87.199.52.0/24 maxlen: 24
                          87.199.53.0/24 maxlen: 24
                          87.199.54.0/24 maxlen: 24
                          87.199.55.0/24 maxlen: 24
                          87.199.56.0/24 maxlen: 24
                          87.199.57.0/24 maxlen: 24
                          87.199.58.0/24 maxlen: 24
                          87.199.64.0/24 maxlen: 24
                          87.199.59.0/24 maxlen: 24
                          87.199.60.0/24 maxlen: 24
                          87.199.61.0/24 maxlen: 24
                          87.199.62.0/24 maxlen: 24
                          87.199.63.0/24 maxlen: 24
                          87.199.65.0/24 maxlen: 24
                          87.199.66.0/24 maxlen: 24
                          87.199.67.0/24 maxlen: 24
                          87.199.68.0/24 maxlen: 24
                          87.199.69.0/24 maxlen: 24
                          87.199.70.0/24 maxlen: 24
                          87.199.71.0/24 maxlen: 24
                          87.199.72.0/24 maxlen: 24
                          87.199.73.0/24 maxlen: 24
                          87.199.74.0/24 maxlen: 24
                          87.199.75.0/24 maxlen: 24
                          87.199.76.0/24 maxlen: 24
                          87.199.77.0/24 maxlen: 24
                          87.199.78.0/24 maxlen: 24
                          87.199.79.0/24 maxlen: 24
                          87.199.80.0/24 maxlen: 24
                          87.199.81.0/24 maxlen: 24
                          87.199.82.0/24 maxlen: 24
                          87.199.83.0/24 maxlen: 24
                          87.199.84.0/24 maxlen: 24
                          87.199.85.0/24 maxlen: 24
                          87.199.86.0/24 maxlen: 24
                          87.199.87.0/24 maxlen: 24
                          87.199.88.0/24 maxlen: 24
                          87.199.89.0/24 maxlen: 24
                          87.199.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163547840 (0x9bf8ac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
        Validity
            Not Before: Jan  1 13:55:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53b87f1ad75f42568d8a301007a8987965d83288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:90:29:21:84:2c:a5:1b:3b:2c:73:37:04:23:
                    ce:0e:b2:d1:a0:4d:81:13:9c:43:8e:4d:77:f3:f5:
                    44:7e:f2:3d:38:6c:2c:62:fa:05:8f:01:4b:51:b1:
                    8c:5c:17:10:61:46:96:97:f6:b1:8c:39:d0:d6:d5:
                    4b:2b:b7:7d:77:19:28:7f:b1:98:68:52:59:5f:02:
                    6a:4f:bf:81:d9:c8:b8:db:51:da:12:1e:d4:88:80:
                    2b:b9:27:ef:b5:6c:c2:29:8d:c8:2f:2d:9d:05:34:
                    76:21:c7:75:2b:df:a4:e1:81:f8:46:10:8b:42:b0:
                    ac:d5:df:1e:36:4c:77:51:b3:30:56:0d:1a:c6:ef:
                    80:1a:b7:10:83:7e:37:bd:ee:43:2f:1c:f7:cf:45:
                    60:cd:66:a8:84:89:7c:36:8f:c8:fa:7f:20:22:08:
                    39:60:b7:ba:8a:ff:e1:8a:15:fb:5b:2e:1d:d8:33:
                    cf:9a:f8:c8:86:99:d7:29:45:9c:2f:8c:9c:68:f0:
                    b3:dd:6b:37:ae:2d:5c:91:72:cd:b1:7c:e4:2e:02:
                    b8:75:e7:b0:db:2a:2f:5c:5e:3c:ce:65:fe:ac:3c:
                    90:33:6c:17:c3:73:e0:7c:4a:d4:24:29:30:52:27:
                    9d:49:3b:c4:9f:e8:d7:7a:5e:ff:67:b6:94:31:db:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B8:7F:1A:D7:5F:42:56:8D:8A:30:10:07:A8:98:79:65:D8:32:88
            X509v3 Authority Key Identifier:
                keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/U7h_GtdfQlaNijAQB6iYeWXYMog.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:f4:2e:9f:5d:45:30:f8:d5:d3:24:6e:1f:a3:48:dc:c5:a5:
         b4:64:74:a8:d9:91:3e:a3:53:33:71:e4:89:43:f8:40:dd:62:
         80:55:a4:9d:50:df:7a:7a:68:05:38:b5:e5:53:fb:5c:f7:e2:
         65:cb:f8:9c:7e:80:f7:bf:40:40:e1:1a:1e:18:4d:68:57:d3:
         f9:75:ce:6d:76:0e:ce:7c:f7:11:28:d2:ae:e6:38:af:8c:5c:
         da:41:31:b2:f4:82:fc:4b:b0:d7:a6:21:a4:d4:82:c7:06:42:
         81:e8:9a:27:37:35:6c:78:09:ee:0f:f7:59:2f:79:15:78:33:
         de:64:b3:8d:24:f3:df:97:85:f6:0f:f4:ee:de:38:74:db:0b:
         57:9a:39:47:3b:77:f4:01:11:99:c1:2d:02:bb:3d:c3:f2:3f:
         b3:63:03:6a:07:d4:61:9d:25:38:e8:3b:18:71:10:d3:c8:96:
         f4:48:f9:8e:15:b6:9a:a2:f1:76:88:f0:c5:c0:68:4b:bb:fd:
         39:74:bf:2b:3f:62:40:96:96:c5:86:11:ae:4f:6d:8e:3b:82:
         42:f1:d4:85:1d:5d:5a:f1:60:c3:76:a8:d9:fb:a7:57:3b:b2:
         e1:20:f2:89:ca:c2:fb:1e:06:82:59:c1:52:85:32:db:05:93:
         a2:62:c5:b0
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIECb+KwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MzcwODQ3MTJmZGViYjFiZmM1YThjMDI2MmQ5MTlhOGFhNDQwNjAzMB4XDTIyMDEw
MTEzNTUyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTNiODdmMWFkNzVm
NDI1NjhkOGEzMDEwMDdhODk4Nzk2NWQ4MzI4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOqQKSGELKUbOyxzNwQjzg6y0aBNgROcQ45Nd/P1RH7yPThs
LGL6BY8BS1GxjFwXEGFGlpf2sYw50NbVSyu3fXcZKH+xmGhSWV8Cak+/gdnIuNtR
2hIe1IiAK7kn77VswimNyC8tnQU0diHHdSvfpOGB+EYQi0KwrNXfHjZMd1GzMFYN
GsbvgBq3EIN+N73uQy8c989FYM1mqISJfDaPyPp/ICIIOWC3uor/4YoV+1suHdgz
z5r4yIaZ1ylFnC+MnGjws91rN64tXJFyzbF85C4CuHXnsNsqL1xePM5l/qw8kDNs
F8Nz4HxK1CQpMFInnUk7xJ/o13pe/2e2lDHbdjMCAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBRTuH8a119CVo2KMBAHqJh5ZdgyiDAfBgNVHSMEGDAWgBQjcIRxL967G/xa
jAJi2RmoqkQGAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0kzQ0VjU19ldXh2OFdvd0NZdGtacUtwRUJnTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvZTdlOWVlLTE3ZDgtNGU3ZS1iYzI4LTdlMTMyOWUwNWZmNC8x
L1U3aF9HdGRmUWxhTmlqQVFCNmlZZVdYWU1vZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
ZTdlOWVlLTE3ZDgtNGU3ZS1iYzI4LTdlMTMyOWUwNWZmNC8xL0kzQ0VjU19ldXh2
OFdvd0NZdGtacUtwRUJnTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAFfHMA0GCSqGSIb3DQEBCwUAA4IB
AQB49C6fXUUw+NXTJG4fo0jcxaW0ZHSo2ZE+o1MzceSJQ/hA3WKAVaSdUN96emgF
OLXlU/tc9+Jly/icfoD3v0BA4RoeGE1oV9P5dc5tdg7OfPcRKNKu5jivjFzaQTGy
9IL8S7DXpiGk1ILHBkKB6JonNzVseAnuD/dZL3kVeDPeZLONJPPfl4X2D/Tu3jh0
2wtXmjlHO3f0ARGZwS0Cuz3D8j+zYwNqB9RhnSU46DsYcRDTyJb0SPmOFbaaovF2
iPDFwGhLu/05dL8rP2JAlpbFhhGuT22OO4JC8dSFHV1a8WDDdqjZ+6dXO7LhIPKJ
ysL7HgaCWcFShTLbBZOiYsWw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:30 2024 by rpki-client on console-ams.rpki-client.org