Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/0QHNuc72TSy6ssP2VSrYh_ZIEOg.roa
File:                     0QHNuc72TSy6ssP2VSrYh_ZIEOg.roa (raw, json)
Hash identifier:          /FjYLqXkn2O69r4O33U0i2J/KZ54UNAn0c/MU8JSND4=
Subject key identifier:   D1:01:CD:B9:CE:F6:4D:2C:BA:B2:C3:F6:55:2A:D8:87:F6:48:10:E8
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       018289F96F39AE6C3A9DC8E18380FAD697C2
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/0QHNuc72TSy6ssP2VSrYh_ZIEOg.roa
Signing time:             Wed 10 Aug 2022 22:56:41 +0000
ROA not before:           Wed 10 Aug 2022 22:56:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12491
IP address blocks:        81.199.200.0/24 maxlen: 24
                          81.199.204.0/24 maxlen: 24
                          81.199.210.0/24 maxlen: 24
                          81.199.208.0/23 maxlen: 23
                          81.199.212.0/24 maxlen: 24
                          81.199.213.0/24 maxlen: 24
                          81.199.211.0/24 maxlen: 24
                          81.199.216.0/24 maxlen: 24
                          81.199.217.0/24 maxlen: 24
                          81.199.214.0/24 maxlen: 24
                          81.199.215.0/24 maxlen: 24
                          81.199.219.0/24 maxlen: 24
                          81.199.220.0/22 maxlen: 22
                          81.199.220.0/24 maxlen: 24
                          81.199.230.0/24 maxlen: 24
                          81.199.232.0/21 maxlen: 24
                          81.199.240.0/22 maxlen: 22
                          81.199.146.0/24 maxlen: 24
                          81.199.147.0/24 maxlen: 24
                          81.199.152.0/22 maxlen: 22
                          81.199.156.0/23 maxlen: 23
                          81.199.160.0/21 maxlen: 21
                          81.199.172.0/23 maxlen: 23
                          81.199.174.0/23 maxlen: 23
                          81.199.176.0/21 maxlen: 21
                          81.199.186.0/24 maxlen: 24
                          81.199.185.0/24 maxlen: 24
                          81.199.184.0/24 maxlen: 24
                          81.199.188.0/22 maxlen: 22
                          81.199.187.0/24 maxlen: 24
                          81.199.192.0/24 maxlen: 24
                          81.199.195.0/24 maxlen: 24
                          81.199.194.0/24 maxlen: 24
                          81.199.4.0/22 maxlen: 22
                          81.199.2.0/23 maxlen: 23
                          81.199.0.0/24 maxlen: 24
                          81.199.1.0/24 maxlen: 24
                          81.199.8.0/24 maxlen: 24
                          81.199.9.0/24 maxlen: 24
                          81.199.10.0/23 maxlen: 23
                          81.199.13.0/24 maxlen: 24
                          81.199.16.0/24 maxlen: 24
                          81.199.16.0/22 maxlen: 22
                          81.199.16.0/23 maxlen: 23
                          81.199.17.0/24 maxlen: 24
                          81.199.21.0/24 maxlen: 24
                          81.199.22.0/24 maxlen: 24
                          81.199.19.0/24 maxlen: 24
                          81.199.20.0/24 maxlen: 24
                          81.199.18.0/24 maxlen: 24
                          81.199.18.0/23 maxlen: 23
                          81.199.32.0/24 maxlen: 24
                          81.199.32.0/22 maxlen: 22
                          81.199.94.0/24 maxlen: 24
                          81.199.95.0/24 maxlen: 24
                          81.199.92.0/24 maxlen: 24
                          81.199.93.0/24 maxlen: 24
                          81.199.105.0/24 maxlen: 24
                          81.199.104.0/24 maxlen: 24
                          81.199.101.0/24 maxlen: 24
                          81.199.102.0/23 maxlen: 23
                          81.199.108.0/22 maxlen: 22
                          81.199.108.0/24 maxlen: 24
                          81.199.106.0/24 maxlen: 24
                          81.199.118.0/23 maxlen: 23
                          81.199.129.0/24 maxlen: 24
                          81.199.128.0/24 maxlen: 24
                          81.199.139.0/24 maxlen: 24
                          81.199.138.0/24 maxlen: 24
                          81.199.138.0/23 maxlen: 23
                          81.199.136.0/24 maxlen: 24
                          81.199.136.0/22 maxlen: 22
                          81.199.136.0/23 maxlen: 23
                          81.199.137.0/24 maxlen: 24
                          81.199.142.0/23 maxlen: 23
                          81.199.40.0/22 maxlen: 22
                          81.199.44.0/24 maxlen: 24
                          81.199.49.0/24 maxlen: 24
                          81.199.48.0/21 maxlen: 21
                          81.199.47.0/24 maxlen: 24
                          81.199.48.0/24 maxlen: 24
                          81.199.46.0/24 maxlen: 24
                          81.199.45.0/24 maxlen: 24
                          81.199.51.0/24 maxlen: 24
                          81.199.58.0/24 maxlen: 24
                          81.199.56.0/22 maxlen: 22
                          81.199.54.0/24 maxlen: 24
                          81.199.63.0/24 maxlen: 24
                          81.199.61.0/24 maxlen: 24
                          81.199.62.0/24 maxlen: 24
                          81.199.60.0/24 maxlen: 24
                          81.199.84.0/24 maxlen: 24
                          81.199.85.0/24 maxlen: 24
                          81.199.82.0/24 maxlen: 24
                          81.199.83.0/24 maxlen: 24
                          81.199.80.0/24 maxlen: 24
                          81.199.81.0/24 maxlen: 24
                          81.199.91.0/24 maxlen: 24
                          81.199.90.0/24 maxlen: 24
                          81.199.86.0/23 maxlen: 23
                          62.56.160.0/22 maxlen: 22
                          62.56.165.0/24 maxlen: 24
                          62.56.166.0/24 maxlen: 24
                          62.56.164.0/24 maxlen: 24
                          62.56.171.0/24 maxlen: 24
                          62.56.172.0/24 maxlen: 24
                          62.56.170.0/23 maxlen: 23
                          62.56.170.0/24 maxlen: 24
                          62.56.168.0/22 maxlen: 22
                          62.56.169.0/24 maxlen: 24
                          62.56.167.0/24 maxlen: 24
                          62.56.168.0/24 maxlen: 24
                          62.56.168.0/23 maxlen: 23
                          62.56.175.0/24 maxlen: 24
                          62.56.174.0/24 maxlen: 24
                          62.56.174.0/23 maxlen: 23
                          62.56.173.0/24 maxlen: 24
                          62.56.132.0/24 maxlen: 24
                          62.56.130.0/24 maxlen: 24
                          62.56.131.0/24 maxlen: 24
                          62.56.129.0/24 maxlen: 24
                          62.56.134.0/24 maxlen: 24
                          62.56.137.0/24 maxlen: 24
                          62.56.144.0/21 maxlen: 21
                          62.56.151.0/24 maxlen: 24
                          62.56.152.0/24 maxlen: 24
                          62.56.153.0/24 maxlen: 24
                          62.56.154.0/24 maxlen: 24
                          62.56.156.0/22 maxlen: 22
                          62.56.216.0/24 maxlen: 24
                          62.56.224.0/21 maxlen: 21
                          62.56.220.0/23 maxlen: 23
                          62.56.232.0/21 maxlen: 21
                          62.56.230.0/24 maxlen: 24
                          62.56.240.0/22 maxlen: 22
                          62.56.246.0/24 maxlen: 24
                          62.56.244.0/23 maxlen: 23
                          62.56.250.0/23 maxlen: 23
                          62.56.250.0/24 maxlen: 24
                          62.56.251.0/24 maxlen: 24
                          62.56.248.0/22 maxlen: 22
                          62.56.248.0/23 maxlen: 23
                          62.56.249.0/24 maxlen: 24
                          62.56.247.0/24 maxlen: 24
                          62.56.248.0/24 maxlen: 24
                          91.203.122.0/23 maxlen: 23
                          91.203.121.0/24 maxlen: 24
                          2a02:ba0:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:89:f9:6f:39:ae:6c:3a:9d:c8:e1:83:80:fa:d6:97:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Aug 10 22:56:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d101cdb9cef64d2cbab2c3f6552ad887f64810e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:99:18:4a:21:0a:7f:2d:0e:f4:31:87:38:13:
                    86:e3:26:83:8e:8c:17:47:f0:38:0c:9c:5c:56:71:
                    8e:fc:36:3b:b4:3e:7d:ef:5e:e9:82:48:4e:f6:92:
                    81:d2:c8:15:ae:c2:40:25:f3:78:33:0c:53:5a:25:
                    aa:da:c0:db:62:f3:5a:5a:58:cd:73:f8:dd:d1:70:
                    a7:59:a5:f2:54:9e:0f:67:de:de:51:12:7a:35:dd:
                    cb:67:49:9d:f4:e5:86:37:37:30:9a:e2:21:eb:b0:
                    0b:fa:6c:58:e4:91:fd:f4:0c:b2:a4:0e:4e:86:12:
                    ac:99:48:2b:36:f8:ee:31:99:5f:df:4e:84:3c:af:
                    d4:28:fa:23:28:c0:67:2d:23:48:34:80:53:63:98:
                    24:6e:44:e0:fc:40:f6:87:e4:4d:65:3a:13:08:b9:
                    45:98:ef:a1:ae:39:1c:03:b6:93:b3:82:13:64:e4:
                    46:49:07:69:bd:69:a9:c5:38:2e:08:b7:ff:fb:31:
                    09:41:d1:d5:90:93:53:c9:bd:13:b8:32:94:1f:af:
                    58:37:0d:ae:95:1f:ec:7f:20:db:24:7b:36:0d:aa:
                    c4:d0:85:af:5a:90:f6:b1:08:b1:07:fc:a6:44:82:
                    0a:5f:c9:1a:67:6e:3b:34:c7:b6:34:b6:74:e9:d2:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:01:CD:B9:CE:F6:4D:2C:BA:B2:C3:F6:55:2A:D8:87:F6:48:10:E8
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/0QHNuc72TSy6ssP2VSrYh_ZIEOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.56.129.0-62.56.132.255
                  62.56.134.0/24
                  62.56.137.0/24
                  62.56.144.0-62.56.154.255
                  62.56.156.0-62.56.175.255
                  62.56.216.0/24
                  62.56.220.0/23
                  62.56.224.0-62.56.251.255
                  81.199.0.0-81.199.11.255
                  81.199.13.0/24
                  81.199.16.0-81.199.22.255
                  81.199.32.0/22
                  81.199.40.0-81.199.63.255
                  81.199.80.0/21
                  81.199.90.0-81.199.95.255
                  81.199.101.0-81.199.106.255
                  81.199.108.0/22
                  81.199.118.0/23
                  81.199.128.0/23
                  81.199.136.0/22
                  81.199.142.0/23
                  81.199.146.0/23
                  81.199.152.0-81.199.157.255
                  81.199.160.0/21
                  81.199.172.0-81.199.192.255
                  81.199.194.0/23
                  81.199.200.0/24
                  81.199.204.0/24
                  81.199.208.0-81.199.217.255
                  81.199.219.0-81.199.223.255
                  81.199.230.0/24
                  81.199.232.0-81.199.243.255
                  91.203.121.0-91.203.123.255
                IPv6:
                  2a02:ba0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:26:09:b2:91:06:38:f8:d7:d4:6f:29:ff:67:5a:ca:a4:76:
         aa:05:d5:71:9a:97:86:fc:d9:bb:57:71:43:7d:ed:7e:28:a0:
         b5:eb:c8:d1:b6:be:00:08:b0:52:42:db:5b:01:02:ab:06:0c:
         b6:63:7b:40:db:e3:0f:0c:5d:b9:91:61:a3:40:aa:fb:3c:c7:
         8d:6f:e5:e9:ad:76:a6:20:0e:06:86:54:44:d4:c9:46:8d:0f:
         40:fa:16:89:7f:22:ba:52:76:49:d4:9f:47:59:25:a0:9a:d0:
         95:27:33:d9:a2:b7:b6:5d:67:de:c6:5f:73:8d:29:fb:c4:72:
         36:00:12:60:10:b9:1b:78:d2:6b:46:25:f1:20:99:05:aa:51:
         67:18:4e:b9:2f:f1:0c:33:9e:9e:2a:fd:f9:c8:51:6b:ec:9f:
         1c:a6:98:ba:b6:fd:52:59:d6:f9:65:a5:95:7e:f6:b3:8a:a3:
         b5:fc:0d:02:29:56:bb:d2:ad:66:47:e8:ac:f1:61:ca:88:4a:
         cc:93:43:80:70:6d:47:0b:bd:a5:97:9a:1b:eb:fb:a3:2f:a7:
         1d:b2:a1:38:d2:0d:ef:1e:4e:61:01:b0:86:30:52:6f:35:72:
         b7:40:33:25:14:e2:25:44:30:3f:39:73:6a:ef:9d:24:23:1d:
         da:23:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org