Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/04uZLqTHJO-PCDP2QgZbXP1m-gA.roa
File:                     04uZLqTHJO-PCDP2QgZbXP1m-gA.roa (raw, json)
Hash identifier:          AYEKHHki5bJL2R1eJLeZkh56SFjZF7jPvPqUcajTRYk=
Subject key identifier:   D3:8B:99:2E:A4:C7:24:EF:8F:08:33:F6:42:06:5B:5C:FD:66:FA:00
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       05DBC099
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/04uZLqTHJO-PCDP2QgZbXP1m-gA.roa
Signing time:             Sat 01 Jan 2022 15:04:05 +0000
ROA not before:           Sat 01 Jan 2022 15:04:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204601
IP address blocks:        45.12.215.0/24 maxlen: 24
                          45.12.214.0/24 maxlen: 24
                          45.147.197.0/24 maxlen: 24
                          45.147.196.0/24 maxlen: 24
                          45.147.198.0/24 maxlen: 24
                          45.147.199.0/24 maxlen: 24
                          45.12.212.0/24 maxlen: 24
                          45.12.213.0/24 maxlen: 24
                          185.235.128.0/24 maxlen: 24
                          185.235.131.0/24 maxlen: 24
                          185.235.129.0/24 maxlen: 24
                          185.235.130.0/24 maxlen: 24
                          77.220.215.0/24 maxlen: 24
                          77.220.214.0/24 maxlen: 24
                          45.66.8.0/24 maxlen: 24
                          45.66.11.0/24 maxlen: 24
                          45.66.9.0/24 maxlen: 24
                          45.66.10.0/24 maxlen: 24
                          185.241.52.0/24 maxlen: 24
                          185.241.55.0/24 maxlen: 24
                          185.241.53.0/24 maxlen: 24
                          185.241.54.0/24 maxlen: 24
                          77.220.212.0/24 maxlen: 24
                          77.220.213.0/24 maxlen: 24
                          77.220.212.0/22 maxlen: 22
                          91.201.25.0/24 maxlen: 24
                          185.154.12.0/24 maxlen: 24
                          185.154.14.0/24 maxlen: 24
                          185.154.15.0/24 maxlen: 24
                          185.154.13.0/24 maxlen: 24
                          212.86.101.0/24 maxlen: 24
                          212.86.102.0/24 maxlen: 24
                          212.86.108.0/24 maxlen: 24
                          212.86.109.0/24 maxlen: 24
                          212.86.114.0/24 maxlen: 24
                          212.86.115.0/24 maxlen: 24
                          45.132.107.0/24 maxlen: 24
                          45.132.106.0/24 maxlen: 24
                          213.166.68.0/24 maxlen: 24
                          213.166.69.0/24 maxlen: 24
                          213.166.70.0/24 maxlen: 24
                          213.166.71.0/24 maxlen: 24
                          45.91.200.0/24 maxlen: 24
                          178.159.39.0/24 maxlen: 24
                          45.91.201.0/24 maxlen: 24
                          178.159.42.0/24 maxlen: 24
                          178.159.43.0/24 maxlen: 24
                          45.91.202.0/24 maxlen: 24
                          45.91.203.0/24 maxlen: 24
                          45.132.104.0/24 maxlen: 24
                          45.132.105.0/24 maxlen: 24
                          92.119.112.0/24 maxlen: 24
                          92.119.115.0/24 maxlen: 24
                          92.119.113.0/24 maxlen: 24
                          92.119.114.0/24 maxlen: 24
                          185.213.210.0/24 maxlen: 24
                          185.213.208.0/22 maxlen: 22
                          185.213.208.0/24 maxlen: 24
                          185.213.209.0/24 maxlen: 24
                          185.213.211.0/24 maxlen: 24
                          80.85.136.0/21 maxlen: 21
                          185.206.213.0/24 maxlen: 24
                          185.206.212.0/24 maxlen: 24
                          185.206.214.0/24 maxlen: 24
                          185.206.215.0/24 maxlen: 24
                          185.51.246.0/24 maxlen: 24
                          185.51.247.0/24 maxlen: 24
                          185.219.82.0/24 maxlen: 24
                          185.219.80.0/22 maxlen: 22
                          185.219.83.0/24 maxlen: 24
                          185.219.80.0/24 maxlen: 24
                          185.219.81.0/24 maxlen: 24
                          176.57.69.0/24 maxlen: 24
                          176.57.70.0/24 maxlen: 24
                          176.57.68.0/24 maxlen: 24
                          176.57.71.0/24 maxlen: 24
                          103.246.144.0/22 maxlen: 22
                          81.91.176.0/22 maxlen: 22
                          81.91.178.0/24 maxlen: 24
                          178.159.38.0/24 maxlen: 24
                          77.83.172.0/24 maxlen: 24
                          77.83.173.0/24 maxlen: 24
                          77.83.174.0/24 maxlen: 24
                          77.83.175.0/24 maxlen: 24
                          91.211.249.0/24 maxlen: 24
                          91.211.248.0/24 maxlen: 24
                          91.211.250.0/24 maxlen: 24
                          91.211.251.0/24 maxlen: 24
                          46.21.250.0/24 maxlen: 24
                          185.203.240.0/22 maxlen: 22
                          185.203.240.0/24 maxlen: 24
                          185.203.242.0/24 maxlen: 24
                          185.203.243.0/24 maxlen: 24
                          185.203.241.0/24 maxlen: 24
                          185.244.216.0/24 maxlen: 24
                          185.244.216.0/22 maxlen: 22
                          185.244.219.0/24 maxlen: 24
                          185.244.217.0/24 maxlen: 24
                          185.244.218.0/24 maxlen: 24
                          185.224.132.0/22 maxlen: 22
                          185.224.132.0/24 maxlen: 24
                          185.231.70.0/24 maxlen: 24
                          185.224.134.0/24 maxlen: 24
                          185.224.133.0/24 maxlen: 24
                          185.231.68.0/22 maxlen: 22
                          212.8.246.0/24 maxlen: 24
                          185.224.135.0/24 maxlen: 24
                          185.231.68.0/24 maxlen: 24
                          185.231.71.0/24 maxlen: 24
                          212.8.244.0/24 maxlen: 24
                          185.231.69.0/24 maxlen: 24
                          45.88.106.0/24 maxlen: 24
                          45.88.107.0/24 maxlen: 24
                          212.162.152.0/22 maxlen: 24
                          185.250.206.0/24 maxlen: 24
                          185.250.204.0/24 maxlen: 24
                          185.250.205.0/24 maxlen: 24
                          185.250.207.0/24 maxlen: 24
                          95.215.204.0/22 maxlen: 22
                          185.209.20.0/24 maxlen: 24
                          185.209.21.0/24 maxlen: 24
                          185.209.20.0/22 maxlen: 22
                          185.209.22.0/24 maxlen: 24
                          185.209.23.0/24 maxlen: 24
                          185.107.237.0/24 maxlen: 24
                          45.88.78.0/24 maxlen: 24
                          45.88.76.0/24 maxlen: 24
                          45.88.77.0/24 maxlen: 24
                          45.88.79.0/24 maxlen: 24
                          45.88.104.0/24 maxlen: 24
                          45.88.105.0/24 maxlen: 24
                          85.209.90.0/24 maxlen: 24
                          85.209.88.0/24 maxlen: 24
                          85.209.89.0/24 maxlen: 24
                          85.209.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98287769 (0x5dbc099)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Jan  1 15:04:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d38b992ea4c724ef8f0833f642065b5cfd66fa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:f2:a3:c4:a9:db:03:0c:c4:1c:db:93:fc:
                    91:47:73:4a:b6:ad:2d:b0:d3:ab:cd:c4:3b:93:73:
                    91:e9:c7:dd:af:c0:d4:44:c6:7e:11:fd:4d:ca:a9:
                    ae:62:e4:6a:09:86:b9:42:e4:b3:67:45:7d:a0:d8:
                    ea:ae:0b:3b:e1:d0:dd:26:14:6c:1c:f2:90:48:d0:
                    18:59:48:5e:df:1b:62:0f:71:d4:8c:3b:48:58:81:
                    c2:23:3b:d3:3d:ed:0c:ec:fe:e9:f6:ea:86:a9:55:
                    67:9e:53:9b:2d:b6:25:1c:51:b6:cd:e4:7f:ad:2d:
                    42:ef:86:08:a6:55:c8:e9:64:5a:e8:27:1d:ab:33:
                    1f:6e:cf:5b:6a:5e:54:de:df:9d:8c:da:97:41:bb:
                    20:9e:7b:1c:fb:10:ee:21:fa:fa:0f:e7:ee:5f:44:
                    2b:aa:85:80:75:d9:3c:a4:99:7c:b0:12:33:12:7d:
                    1b:8a:f9:76:a8:e3:f6:25:25:00:38:70:ca:2e:d4:
                    e5:f0:ff:0b:c7:20:83:a8:20:dc:fa:6f:64:14:64:
                    36:7b:02:e4:58:f0:bc:21:79:ac:32:aa:29:59:9d:
                    5a:cf:9b:9f:60:50:43:0b:86:b2:df:42:30:18:89:
                    30:b0:21:4c:16:6f:46:cd:0c:08:47:de:f1:53:b1:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8B:99:2E:A4:C7:24:EF:8F:08:33:F6:42:06:5B:5C:FD:66:FA:00
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/04uZLqTHJO-PCDP2QgZbXP1m-gA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.212.0/22
                  45.66.8.0/22
                  45.88.76.0/22
                  45.88.104.0/22
                  45.91.200.0/22
                  45.132.104.0/22
                  45.147.196.0/22
                  46.21.250.0/24
                  77.83.172.0/22
                  77.220.212.0/22
                  80.85.136.0/21
                  81.91.176.0/22
                  85.209.88.0/22
                  91.201.25.0/24
                  91.211.248.0/22
                  92.119.112.0/22
                  95.215.204.0/22
                  103.246.144.0/22
                  176.57.68.0/22
                  178.159.38.0/23
                  178.159.42.0/23
                  185.51.246.0/23
                  185.107.237.0/24
                  185.154.12.0/22
                  185.203.240.0/22
                  185.206.212.0/22
                  185.209.20.0/22
                  185.213.208.0/22
                  185.219.80.0/22
                  185.224.132.0/22
                  185.231.68.0/22
                  185.235.128.0/22
                  185.241.52.0/22
                  185.244.216.0/22
                  185.250.204.0/22
                  212.8.244.0/24
                  212.8.246.0/24
                  212.86.101.0-212.86.102.255
                  212.86.108.0/23
                  212.86.114.0/23
                  212.162.152.0/22
                  213.166.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:9f:44:ac:d7:a4:ff:9e:25:50:d0:c5:26:a3:7c:66:23:
         4a:46:33:3a:fb:53:e8:14:2e:45:16:88:17:f0:cc:6e:b0:63:
         df:16:bd:85:90:b7:1a:83:2f:b6:f4:73:3d:78:8c:0b:ca:80:
         f6:6f:5e:53:38:45:a2:30:1c:8f:2f:f1:3b:a6:fc:dc:79:0f:
         96:49:42:87:31:34:fd:24:0f:31:31:fe:26:1d:9e:45:30:1c:
         05:ef:ab:ff:e6:9e:54:d2:d9:12:58:34:5b:8c:1f:74:f9:bc:
         3a:09:f1:dc:8d:3c:96:fe:26:98:87:a3:0a:9f:fb:80:4f:b8:
         93:f3:19:dd:36:0e:c9:8f:bb:87:02:a2:e5:0f:7a:96:e1:6a:
         aa:c4:94:c7:36:25:74:55:58:1b:85:e3:31:59:de:ea:eb:b1:
         63:b5:16:31:d3:75:05:d1:5a:7d:01:4c:6f:d9:0a:92:d3:97:
         a0:3c:f8:40:92:2d:c7:60:1c:20:69:6d:98:29:23:5d:b6:58:
         67:1a:92:08:10:9e:12:7b:8e:50:92:14:d8:44:22:7b:c7:31:
         14:6d:1e:b2:1d:03:ab:82:3a:48:6e:bc:bb:7c:ef:ef:4b:1b:
         39:b7:a9:cb:f0:ef:89:a9:6c:d5:ed:89:35:ad:08:7f:11:d0:
         8c:7a:a5:e4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIEBdvAmTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZmNhZDg5ZGYxYmY5OWEzNmYyOTBjYzNlZjBmMWU3YjRkMDI3NTMzMB4XDTIyMDEw
MTE1MDQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDM4Yjk5MmVhNGM3
MjRlZjhmMDgzM2Y2NDIwNjViNWNmZDY2ZmEwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxm8qPEqdsDDMQc25P8kUdzSratLbDTq83EO5NzkenH3a/A
1ETGfhH9TcqprmLkagmGuULks2dFfaDY6q4LO+HQ3SYUbBzykEjQGFlIXt8bYg9x
1Iw7SFiBwiM70z3tDOz+6fbqhqlVZ55Tmy22JRxRts3kf60tQu+GCKZVyOlkWugn
HaszH27PW2peVN7fnYzal0G7IJ57HPsQ7iH6+g/n7l9EK6qFgHXZPKSZfLASMxJ9
G4r5dqjj9iUlADhwyi7U5fD/C8cgg6gg3PpvZBRkNnsC5FjwvCF5rDKqKVmdWs+b
n2BQQwuGst9CMBiJMLAhTBZvRs0MCEfe8VOxaD0CAwEAAaOCAxEwggMNMB0GA1Ud
DgQWBBTTi5kupMck748IM/ZCBltc/Wb6ADAfBgNVHSMEGDAWgBR/ytid8b+Zo28p
DMPvDx57TQJ1MzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Y4clluZkdfbWFOdktRekQ3dzhlZTAwQ2RUTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTUvOWY4YjE2LTI4NGYtNDUxMi1iM2RjLTAxNWQ5ZjFiNGI1MC8x
LzA0dVpMcVRISk8tUENEUDJRZ1piWFAxbS1nQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUv
OWY4YjE2LTI4NGYtNDUxMi1iM2RjLTAxNWQ5ZjFiNGI1MC8xL2Y4clluZkdfbWFO
dktRekQ3dzhlZTAwQ2RUTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ASUGCCsGAQUFBwEHAQH/BIIBFDCCARAwggEMBAIAATCCAQQDBAItDNQDBAItQggD
BAItWEwDBAItWGgDBAItW8gDBAIthGgDBAItk8QDBAAuFfoDBAJNU6wDBAJN3NQD
BANQVYgDBAJRW7ADBAJV0VgDBABbyRkDBAJb0/gDBAJcd3ADBAJf18wDBAJn9pAD
BAKwOUQDBAGynyYDBAGynyoDBAG5M/YDBAC5a+0DBAK5mgwDBAK5y/ADBAK5ztQD
BAK50RQDBAK51dADBAK521ADBAK54IQDBAK550QDBAK564ADBAK58TQDBAK59NgD
BAK5+swDBADUCPQDBADUCPYwDAMEANRWZQMEANRWZgMEAdRWbAMEAdRWcgMEAtSi
mAMEAtWmRDANBgkqhkiG9w0BAQsFAAOCAQEAkoufRKzXpP+eJVDQxSajfGYjSkYz
OvtT6BQuRRaIF/DMbrBj3xa9hZC3GoMvtvRzPXiMC8qA9m9eUzhFojAcjy/xO6b8
3HkPlklChzE0/SQPMTH+Jh2eRTAcBe+r/+aeVNLZElg0W4wfdPm8Ognx3I08lv4m
mIejCp/7gE+4k/MZ3TYOyY+7hwKi5Q96luFqqsSUxzYldFVYG4XjMVne6uuxY7UW
MdN1BdFafQFMb9kKktOXoDz4QJItx2AcIGltmCkjXbZYZxqSCBCeEnuOUJIU2EQi
e8cxFG0esh0Dq4I6SG68u3zv70sbObepy/Dvials1e2JNa0IfxHQjHql5A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:34 2023 by rpki-client on console-fra.rpki-client.org