Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/5PzPqOK07RbkGupiNEJimTtjF4o.roa
File:                     5PzPqOK07RbkGupiNEJimTtjF4o.roa (raw, json)
Hash identifier:          KoGlnjTGJ4TaB8Y6tppk546FrL0C6Dia5YEU/ADVaKw=
Subject key identifier:   E4:FC:CF:A8:E2:B4:ED:16:E4:1A:EA:62:34:42:62:99:3B:63:17:8A
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       0181F200881B2133FCED20C96AA965836A47
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/5PzPqOK07RbkGupiNEJimTtjF4o.roa
Signing time:             Tue 12 Jul 2022 10:42:09 +0000
ROA not before:           Tue 12 Jul 2022 10:42:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12491
IP address blocks:        81.199.200.0/24 maxlen: 24
                          81.199.204.0/24 maxlen: 24
                          81.199.210.0/24 maxlen: 24
                          81.199.208.0/23 maxlen: 23
                          81.199.212.0/24 maxlen: 24
                          81.199.213.0/24 maxlen: 24
                          81.199.211.0/24 maxlen: 24
                          81.199.216.0/24 maxlen: 24
                          81.199.217.0/24 maxlen: 24
                          81.199.214.0/24 maxlen: 24
                          81.199.215.0/24 maxlen: 24
                          81.199.219.0/24 maxlen: 24
                          81.199.220.0/22 maxlen: 22
                          81.199.220.0/24 maxlen: 24
                          81.199.230.0/24 maxlen: 24
                          81.199.240.0/22 maxlen: 22
                          81.199.146.0/24 maxlen: 24
                          81.199.147.0/24 maxlen: 24
                          81.199.152.0/22 maxlen: 22
                          81.199.156.0/23 maxlen: 23
                          81.199.160.0/21 maxlen: 21
                          81.199.172.0/23 maxlen: 23
                          81.199.174.0/23 maxlen: 23
                          81.199.176.0/21 maxlen: 21
                          81.199.186.0/24 maxlen: 24
                          81.199.185.0/24 maxlen: 24
                          81.199.184.0/24 maxlen: 24
                          81.199.188.0/22 maxlen: 22
                          81.199.187.0/24 maxlen: 24
                          81.199.192.0/24 maxlen: 24
                          81.199.195.0/24 maxlen: 24
                          81.199.194.0/24 maxlen: 24
                          81.199.4.0/22 maxlen: 22
                          81.199.2.0/23 maxlen: 23
                          81.199.0.0/24 maxlen: 24
                          81.199.1.0/24 maxlen: 24
                          81.199.8.0/24 maxlen: 24
                          81.199.9.0/24 maxlen: 24
                          81.199.10.0/23 maxlen: 23
                          81.199.13.0/24 maxlen: 24
                          81.199.16.0/24 maxlen: 24
                          81.199.16.0/22 maxlen: 22
                          81.199.16.0/23 maxlen: 23
                          81.199.17.0/24 maxlen: 24
                          81.199.21.0/24 maxlen: 24
                          81.199.19.0/24 maxlen: 24
                          81.199.18.0/24 maxlen: 24
                          81.199.18.0/23 maxlen: 23
                          81.199.32.0/24 maxlen: 24
                          81.199.32.0/22 maxlen: 22
                          81.199.94.0/24 maxlen: 24
                          81.199.95.0/24 maxlen: 24
                          81.199.92.0/24 maxlen: 24
                          81.199.93.0/24 maxlen: 24
                          81.199.105.0/24 maxlen: 24
                          81.199.104.0/24 maxlen: 24
                          81.199.101.0/24 maxlen: 24
                          81.199.102.0/23 maxlen: 23
                          81.199.108.0/22 maxlen: 22
                          81.199.108.0/24 maxlen: 24
                          81.199.106.0/24 maxlen: 24
                          81.199.118.0/23 maxlen: 23
                          81.199.129.0/24 maxlen: 24
                          81.199.128.0/24 maxlen: 24
                          81.199.139.0/24 maxlen: 24
                          81.199.138.0/24 maxlen: 24
                          81.199.138.0/23 maxlen: 23
                          81.199.136.0/24 maxlen: 24
                          81.199.136.0/22 maxlen: 22
                          81.199.136.0/23 maxlen: 23
                          81.199.137.0/24 maxlen: 24
                          81.199.142.0/23 maxlen: 23
                          81.199.40.0/22 maxlen: 22
                          81.199.44.0/24 maxlen: 24
                          81.199.49.0/24 maxlen: 24
                          81.199.48.0/21 maxlen: 21
                          81.199.47.0/24 maxlen: 24
                          81.199.48.0/24 maxlen: 24
                          81.199.46.0/24 maxlen: 24
                          81.199.45.0/24 maxlen: 24
                          81.199.56.0/22 maxlen: 22
                          81.199.54.0/24 maxlen: 24
                          81.199.63.0/24 maxlen: 24
                          81.199.61.0/24 maxlen: 24
                          81.199.62.0/24 maxlen: 24
                          81.199.60.0/24 maxlen: 24
                          81.199.84.0/24 maxlen: 24
                          81.199.85.0/24 maxlen: 24
                          81.199.82.0/24 maxlen: 24
                          81.199.83.0/24 maxlen: 24
                          81.199.80.0/24 maxlen: 24
                          81.199.81.0/24 maxlen: 24
                          81.199.91.0/24 maxlen: 24
                          81.199.90.0/24 maxlen: 24
                          81.199.86.0/23 maxlen: 23
                          62.56.160.0/22 maxlen: 22
                          62.56.165.0/24 maxlen: 24
                          62.56.166.0/24 maxlen: 24
                          62.56.164.0/24 maxlen: 24
                          62.56.171.0/24 maxlen: 24
                          62.56.172.0/24 maxlen: 24
                          62.56.170.0/23 maxlen: 23
                          62.56.170.0/24 maxlen: 24
                          62.56.168.0/22 maxlen: 22
                          62.56.169.0/24 maxlen: 24
                          62.56.167.0/24 maxlen: 24
                          62.56.168.0/24 maxlen: 24
                          62.56.168.0/23 maxlen: 23
                          62.56.173.0/24 maxlen: 24
                          62.56.130.0/24 maxlen: 24
                          62.56.129.0/24 maxlen: 24
                          62.56.137.0/24 maxlen: 24
                          62.56.144.0/21 maxlen: 21
                          62.56.151.0/24 maxlen: 24
                          62.56.152.0/24 maxlen: 24
                          62.56.153.0/24 maxlen: 24
                          62.56.154.0/24 maxlen: 24
                          62.56.156.0/22 maxlen: 22
                          62.56.216.0/24 maxlen: 24
                          62.56.224.0/21 maxlen: 21
                          62.56.230.0/24 maxlen: 24
                          62.56.240.0/22 maxlen: 22
                          62.56.246.0/24 maxlen: 24
                          62.56.250.0/23 maxlen: 23
                          62.56.250.0/24 maxlen: 24
                          62.56.251.0/24 maxlen: 24
                          62.56.248.0/22 maxlen: 22
                          62.56.248.0/23 maxlen: 23
                          62.56.249.0/24 maxlen: 24
                          62.56.247.0/24 maxlen: 24
                          62.56.248.0/24 maxlen: 24
                          91.203.122.0/23 maxlen: 23
                          91.203.121.0/24 maxlen: 24
                          2a02:ba0:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f2:00:88:1b:21:33:fc:ed:20:c9:6a:a9:65:83:6a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Jul 12 10:42:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e4fccfa8e2b4ed16e41aea62344262993b63178a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d6:e7:23:de:ab:0d:4d:62:9b:07:e4:67:db:
                    6c:70:de:9e:ef:09:bf:fe:9d:19:80:d9:2f:d2:46:
                    24:a6:5a:0a:e9:46:46:59:27:f2:3a:09:b6:48:17:
                    8d:6c:0d:64:ae:17:d0:07:10:87:09:aa:0b:85:4b:
                    95:b4:1a:0f:aa:04:1a:ff:c4:73:86:6f:14:42:94:
                    7e:9f:1b:81:83:be:f8:39:9d:0a:d2:10:b6:fc:8e:
                    9b:ef:cc:22:b6:da:22:e5:58:fc:1a:45:eb:33:51:
                    55:89:a9:b6:28:cb:b8:51:1c:30:5b:3f:f2:e2:77:
                    bd:59:a1:90:b6:ea:2a:9d:19:fc:07:7e:9c:a2:f8:
                    d8:2d:37:d2:d1:80:b0:1d:72:39:53:86:41:e3:39:
                    9d:4d:7b:40:33:65:7d:91:fe:fb:78:42:10:c9:20:
                    d6:9a:7c:f0:5a:ee:9d:b3:34:19:32:6f:14:78:aa:
                    a5:0b:0a:86:22:b3:25:20:63:15:f7:ed:91:08:88:
                    08:2d:c6:31:3d:20:ae:b8:26:ab:c2:f4:fc:13:78:
                    24:58:ac:16:26:ba:0f:a1:8b:b1:af:8b:d9:e7:bf:
                    2a:fd:86:a2:e4:34:24:c1:b2:bd:3b:f9:aa:5b:3e:
                    04:59:0c:b9:86:47:f7:a7:13:52:93:fa:07:48:9f:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FC:CF:A8:E2:B4:ED:16:E4:1A:EA:62:34:42:62:99:3B:63:17:8A
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/5PzPqOK07RbkGupiNEJimTtjF4o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.56.129.0-62.56.130.255
                  62.56.137.0/24
                  62.56.144.0-62.56.154.255
                  62.56.156.0-62.56.173.255
                  62.56.216.0/24
                  62.56.224.0/21
                  62.56.240.0/22
                  62.56.246.0-62.56.251.255
                  81.199.0.0-81.199.11.255
                  81.199.13.0/24
                  81.199.16.0/22
                  81.199.21.0/24
                  81.199.32.0/22
                  81.199.40.0-81.199.63.255
                  81.199.80.0/21
                  81.199.90.0-81.199.95.255
                  81.199.101.0-81.199.106.255
                  81.199.108.0/22
                  81.199.118.0/23
                  81.199.128.0/23
                  81.199.136.0/22
                  81.199.142.0/23
                  81.199.146.0/23
                  81.199.152.0-81.199.157.255
                  81.199.160.0/21
                  81.199.172.0-81.199.192.255
                  81.199.194.0/23
                  81.199.200.0/24
                  81.199.204.0/24
                  81.199.208.0-81.199.217.255
                  81.199.219.0-81.199.223.255
                  81.199.230.0/24
                  81.199.240.0/22
                  91.203.121.0-91.203.123.255
                IPv6:
                  2a02:ba0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:18:c8:9c:5d:21:cb:cb:71:3e:da:62:f2:23:8f:db:a5:77:
         91:51:25:b9:8f:8d:7f:ad:9c:cf:0c:fe:10:26:e5:de:8c:87:
         92:83:c9:2c:38:65:4b:2e:8c:2d:a4:76:45:a4:21:63:ce:e2:
         e1:14:bd:58:64:f8:60:3c:01:f6:7a:41:0f:a0:66:fe:30:d0:
         7d:4c:67:a1:c3:3c:9c:2c:97:68:d2:83:5c:45:99:fc:8f:0b:
         60:59:45:67:1f:78:2d:29:5a:0a:0d:97:82:6b:21:56:e5:7f:
         28:a9:78:d9:15:61:45:40:2b:d4:a9:82:a9:6a:c4:52:b9:5b:
         6f:7a:dc:b5:8f:f9:e4:b4:57:3c:a3:6c:02:62:8b:b8:e6:06:
         f2:27:a3:89:62:a7:2c:38:0e:fc:b2:0c:f0:56:fc:a2:99:28:
         95:b1:5a:82:8c:5f:4f:9c:ec:f9:3b:0b:e3:74:fe:62:57:eb:
         1f:49:6f:b8:44:7d:7d:66:30:e6:dd:6c:2e:07:e7:2b:b7:eb:
         53:ef:4e:64:b5:2d:a0:50:15:73:a8:85:43:1d:d1:43:21:55:
         e0:16:ba:fe:9c:45:ff:e3:b1:7e:c6:33:ce:f3:23:1b:fc:53:
         4b:52:f4:12:94:3b:2c:77:96:4e:ee:03:15:79:01:cc:c9:56:
         b2:b6:b4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org