Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/ITS3Cr8TjeRty8QjA4fP1RvhngY.roa
File:                     ITS3Cr8TjeRty8QjA4fP1RvhngY.roa (raw, json)
Hash identifier:          TeYBWRSXl/TxBRam39svNVgli103L+sBjMGVbcm/Xow=
Subject key identifier:   21:34:B7:0A:BF:13:8D:E4:6D:CB:C4:23:03:87:CF:D5:1B:E1:9E:06
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       01845CE85F9046040E1B2BA3BEB431A569B4
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/ITS3Cr8TjeRty8QjA4fP1RvhngY.roa
Signing time:             Wed 09 Nov 2022 15:00:43 +0000
ROA not before:           Wed 09 Nov 2022 15:00:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12491
IP address blocks:        81.199.206.0/23 maxlen: 24
                          81.199.200.0/24 maxlen: 24
                          81.199.205.0/24 maxlen: 24
                          81.199.204.0/24 maxlen: 24
                          81.199.208.0/23 maxlen: 24
                          81.199.210.0/24 maxlen: 24
                          81.199.212.0/24 maxlen: 24
                          81.199.213.0/24 maxlen: 24
                          81.199.211.0/24 maxlen: 24
                          81.199.216.0/24 maxlen: 24
                          81.199.217.0/24 maxlen: 24
                          81.199.214.0/24 maxlen: 24
                          81.199.215.0/24 maxlen: 24
                          81.199.219.0/24 maxlen: 24
                          81.199.224.0/22 maxlen: 24
                          81.199.220.0/22 maxlen: 24
                          81.199.228.0/23 maxlen: 24
                          81.199.232.0/21 maxlen: 24
                          81.199.230.0/24 maxlen: 24
                          81.199.240.0/22 maxlen: 24
                          81.199.244.0/22 maxlen: 24
                          81.199.248.0/23 maxlen: 24
                          81.199.146.0/24 maxlen: 24
                          81.199.147.0/24 maxlen: 24
                          81.199.152.0/22 maxlen: 24
                          81.199.148.0/22 maxlen: 24
                          81.199.158.0/23 maxlen: 24
                          81.199.156.0/23 maxlen: 24
                          81.199.160.0/21 maxlen: 24
                          81.199.172.0/23 maxlen: 24
                          81.199.174.0/23 maxlen: 24
                          81.199.176.0/21 maxlen: 24
                          81.199.186.0/24 maxlen: 24
                          81.199.185.0/24 maxlen: 24
                          81.199.184.0/24 maxlen: 24
                          81.199.187.0/24 maxlen: 24
                          81.199.192.0/24 maxlen: 24
                          81.199.188.0/22 maxlen: 24
                          81.199.195.0/24 maxlen: 24
                          81.199.193.0/24 maxlen: 24
                          81.199.194.0/24 maxlen: 24
                          81.199.196.0/22 maxlen: 24
                          81.199.4.0/22 maxlen: 24
                          81.199.2.0/23 maxlen: 24
                          81.199.0.0/24 maxlen: 24
                          81.199.1.0/24 maxlen: 24
                          81.199.10.0/23 maxlen: 24
                          81.199.8.0/24 maxlen: 24
                          81.199.9.0/24 maxlen: 24
                          81.199.16.0/23 maxlen: 24
                          81.199.16.0/22 maxlen: 24
                          81.199.15.0/24 maxlen: 24
                          81.199.13.0/24 maxlen: 24
                          81.199.16.0/24 maxlen: 24
                          81.199.17.0/24 maxlen: 24
                          81.199.22.0/23 maxlen: 24
                          81.199.18.0/23 maxlen: 24
                          81.199.21.0/24 maxlen: 24
                          81.199.19.0/24 maxlen: 24
                          81.199.20.0/24 maxlen: 24
                          81.199.18.0/24 maxlen: 24
                          81.199.32.0/22 maxlen: 24
                          81.199.94.0/24 maxlen: 24
                          81.199.95.0/24 maxlen: 24
                          81.199.92.0/24 maxlen: 24
                          81.199.93.0/24 maxlen: 24
                          81.199.102.0/23 maxlen: 24
                          81.199.105.0/24 maxlen: 24
                          81.199.104.0/24 maxlen: 24
                          81.199.101.0/24 maxlen: 24
                          81.199.108.0/22 maxlen: 24
                          81.199.106.0/24 maxlen: 24
                          81.199.107.0/24 maxlen: 24
                          81.199.118.0/23 maxlen: 24
                          81.199.124.0/22 maxlen: 24
                          81.199.130.0/23 maxlen: 24
                          81.199.132.0/24 maxlen: 24
                          81.199.129.0/24 maxlen: 24
                          81.199.128.0/24 maxlen: 24
                          81.199.138.0/23 maxlen: 24
                          81.199.136.0/22 maxlen: 24
                          81.199.136.0/23 maxlen: 24
                          81.199.134.0/23 maxlen: 24
                          81.199.139.0/24 maxlen: 24
                          81.199.138.0/24 maxlen: 24
                          81.199.136.0/24 maxlen: 24
                          81.199.137.0/24 maxlen: 24
                          81.199.140.0/23 maxlen: 24
                          81.199.142.0/23 maxlen: 24
                          81.199.44.0/24 maxlen: 24
                          81.199.40.0/22 maxlen: 24
                          81.199.49.0/24 maxlen: 24
                          81.199.50.0/24 maxlen: 24
                          81.199.47.0/24 maxlen: 24
                          81.199.48.0/24 maxlen: 24
                          81.199.46.0/24 maxlen: 24
                          81.199.45.0/24 maxlen: 24
                          81.199.51.0/24 maxlen: 24
                          81.199.58.0/24 maxlen: 24
                          81.199.54.0/24 maxlen: 24
                          81.199.56.0/23 maxlen: 24
                          81.199.52.0/22 maxlen: 24
                          81.199.63.0/24 maxlen: 24
                          81.199.61.0/24 maxlen: 24
                          81.199.62.0/24 maxlen: 24
                          81.199.59.0/24 maxlen: 24
                          81.199.60.0/24 maxlen: 24
                          81.199.84.0/24 maxlen: 24
                          81.199.85.0/24 maxlen: 24
                          81.199.82.0/24 maxlen: 24
                          81.199.83.0/24 maxlen: 24
                          81.199.80.0/24 maxlen: 24
                          81.199.81.0/24 maxlen: 24
                          81.199.88.0/23 maxlen: 24
                          81.199.86.0/23 maxlen: 24
                          81.199.91.0/24 maxlen: 24
                          81.199.90.0/24 maxlen: 24
                          62.56.165.0/24 maxlen: 24
                          62.56.166.0/24 maxlen: 24
                          62.56.164.0/24 maxlen: 24
                          62.56.160.0/22 maxlen: 24
                          62.56.171.0/24 maxlen: 24
                          62.56.172.0/24 maxlen: 24
                          62.56.170.0/24 maxlen: 24
                          62.56.169.0/24 maxlen: 24
                          62.56.167.0/24 maxlen: 24
                          62.56.168.0/24 maxlen: 24
                          62.56.170.0/23 maxlen: 24
                          62.56.168.0/22 maxlen: 24
                          62.56.168.0/23 maxlen: 24
                          62.56.175.0/24 maxlen: 24
                          62.56.173.0/24 maxlen: 24
                          62.56.174.0/23 maxlen: 24
                          62.56.128.0/24 maxlen: 24
                          62.56.132.0/24 maxlen: 24
                          62.56.130.0/24 maxlen: 24
                          62.56.131.0/24 maxlen: 24
                          62.56.129.0/24 maxlen: 24
                          62.56.134.0/23 maxlen: 24
                          62.56.133.0/24 maxlen: 24
                          62.56.139.0/24 maxlen: 24
                          62.56.137.0/24 maxlen: 24
                          62.56.136.0/24 maxlen: 24
                          62.56.140.0/22 maxlen: 24
                          62.56.144.0/22 maxlen: 24
                          62.56.151.0/24 maxlen: 24
                          62.56.152.0/24 maxlen: 24
                          62.56.150.0/24 maxlen: 24
                          62.56.148.0/23 maxlen: 24
                          62.56.153.0/24 maxlen: 24
                          62.56.154.0/24 maxlen: 24
                          62.56.156.0/22 maxlen: 24
                          62.56.218.0/23 maxlen: 24
                          62.56.216.0/24 maxlen: 24
                          62.56.224.0/22 maxlen: 24
                          62.56.220.0/23 maxlen: 24
                          62.56.232.0/21 maxlen: 24
                          62.56.228.0/23 maxlen: 24
                          62.56.231.0/24 maxlen: 24
                          62.56.230.0/24 maxlen: 24
                          62.56.240.0/22 maxlen: 24
                          62.56.244.0/23 maxlen: 24
                          62.56.246.0/24 maxlen: 24
                          62.56.250.0/23 maxlen: 24
                          62.56.248.0/22 maxlen: 24
                          62.56.248.0/23 maxlen: 24
                          62.56.250.0/24 maxlen: 24
                          62.56.251.0/24 maxlen: 24
                          62.56.249.0/24 maxlen: 24
                          62.56.247.0/24 maxlen: 24
                          62.56.248.0/24 maxlen: 24
                          91.203.121.0/24 maxlen: 24
                          91.203.122.0/23 maxlen: 23
                          2a02:ba0:1::/48 maxlen: 48
                          2a02:ba0:1000::/36 maxlen: 36
                          2a02:ba0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5c:e8:5f:90:46:04:0e:1b:2b:a3:be:b4:31:a5:69:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Nov  9 15:00:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2134b70abf138de46dcbc4230387cfd51be19e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:b5:30:0e:fd:7d:e1:8e:df:96:9c:8c:e1:
                    ed:d7:7a:81:26:44:7e:cc:4c:d7:f0:2f:d3:43:cb:
                    59:17:c4:f1:f5:e5:5e:5e:af:df:a7:b1:df:25:a0:
                    16:aa:95:2c:3e:bb:a5:21:bf:50:32:b8:70:11:dd:
                    1a:d4:79:9a:14:e7:7a:d9:46:e2:98:07:c8:7d:4f:
                    ae:19:76:62:9b:a0:06:6b:7b:ef:5d:80:cc:5e:c2:
                    2a:0a:43:bc:2e:bb:8a:ff:15:96:00:13:90:3c:b0:
                    2c:7f:fa:90:2b:21:f0:ef:7d:44:44:ce:cd:1e:29:
                    2a:e1:cc:49:6f:d1:34:a3:99:3f:73:7f:c7:23:41:
                    3b:f5:09:63:0a:55:10:38:f2:0c:f2:cf:da:42:2a:
                    e7:e0:f1:ce:95:96:a1:d3:4e:b9:1b:16:7d:ad:d2:
                    43:eb:e5:f3:14:01:e4:e7:f9:fc:22:24:bd:51:6e:
                    f6:9e:05:2e:8d:d5:e2:20:f7:d7:a9:0a:2c:51:39:
                    09:51:39:72:1f:2c:6b:a8:da:da:93:7f:46:77:02:
                    27:10:9c:e4:eb:06:c8:5a:a9:a3:96:68:91:b3:96:
                    bc:62:c7:c6:f8:98:46:b7:96:54:99:2a:5b:d7:8b:
                    d1:0f:ec:5f:ad:fb:49:c4:dd:65:83:c9:ea:37:8e:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:34:B7:0A:BF:13:8D:E4:6D:CB:C4:23:03:87:CF:D5:1B:E1:9E:06
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/ITS3Cr8TjeRty8QjA4fP1RvhngY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.56.128.0-62.56.137.255
                  62.56.139.0-62.56.154.255
                  62.56.156.0-62.56.175.255
                  62.56.216.0/24
                  62.56.218.0-62.56.221.255
                  62.56.224.0-62.56.251.255
                  81.199.0.0-81.199.11.255
                  81.199.13.0/24
                  81.199.15.0-81.199.23.255
                  81.199.32.0/22
                  81.199.40.0-81.199.63.255
                  81.199.80.0/20
                  81.199.101.0-81.199.111.255
                  81.199.118.0/23
                  81.199.124.0-81.199.132.255
                  81.199.134.0-81.199.143.255
                  81.199.146.0-81.199.167.255
                  81.199.172.0-81.199.200.255
                  81.199.204.0-81.199.217.255
                  81.199.219.0-81.199.230.255
                  81.199.232.0-81.199.249.255
                  91.203.121.0-91.203.123.255
                IPv6:
                  2a02:ba0::/47
                  2a02:ba0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:21:57:9a:fd:60:0f:41:3a:16:c2:7c:96:8c:b5:b3:e8:59:
         cb:05:f2:9b:5f:05:67:c6:9a:ea:b4:d4:98:30:fd:9a:20:d8:
         e9:87:da:33:69:a6:29:75:a5:08:23:ef:dc:c8:95:d9:df:67:
         20:03:a0:49:50:e5:1f:0c:2e:70:a0:72:47:c8:ef:9c:dd:3e:
         ad:4e:bb:d7:de:41:fa:f3:93:a5:fe:06:e5:21:6a:7c:db:3f:
         0c:65:fc:c9:dd:c4:26:bb:81:70:c7:95:73:ab:0e:a4:18:06:
         7d:a7:a0:74:31:59:f3:7e:cf:5b:a1:28:a4:d6:d6:d6:ea:f3:
         e5:81:9c:36:88:d4:07:30:27:9d:ef:bf:7d:69:33:8e:08:c4:
         f1:44:7e:40:73:e8:86:ae:25:86:11:1e:9d:60:51:c7:79:95:
         82:f5:34:47:28:34:d9:98:4a:0a:e3:99:2f:e1:16:de:88:96:
         b9:cf:ed:e3:7a:f4:b9:c9:8e:6f:0c:6f:3c:ad:68:d9:c2:ed:
         9b:03:de:0a:9a:2a:78:df:a1:77:4a:d3:e7:96:5f:55:48:be:
         cf:fc:53:30:4d:98:cb:55:85:5a:fe:cf:e4:38:18:db:dc:da:
         5a:7f:5d:7b:1c:ab:09:0d:f8:eb:12:7f:45:f4:a3:83:d3:de:
         cb:57:42:d7
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgISAYRc6F+QRgQOGyujvrQxpWm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjIxMTA5MTUwMDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTM0YjcwYWJmMTM4ZGU0NmRjYmM0MjMwMzg3Y2ZkNTFiZTE5ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkny1MA79feGO35acjOHt13qBJkR+
zEzX8C/TQ8tZF8Tx9eVeXq/fp7HfJaAWqpUsPrulIb9QMrhwEd0a1HmaFOd62Ubi
mAfIfU+uGXZim6AGa3vvXYDMXsIqCkO8LruK/xWWABOQPLAsf/qQKyHw731ERM7N
Hikq4cxJb9E0o5k/c3/HI0E79QljClUQOPIM8s/aQirn4PHOlZah0065GxZ9rdJD
6+XzFAHk5/n8IiS9UW72ngUujdXiIPfXqQosUTkJUTlyHyxrqNrak39GdwInEJzk
6wbIWqmjlmiRs5a8YsfG+JhGt5ZUmSpb14vRD+xfrftJxN1lg8nqN45cLwIDAQAB
o4IDMTCCAy0wHQYDVR0OBBYEFCE0twq/E43kbcvEIwOHz9Ub4Z4GMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvSVRTM0NyOFRqZVJ0eThRakE0ZlAxUnZobmdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRQYIKwYBBQUHAQcBAf8EggE0MIIBMDCCARMEAgABMIIB
CzAMAwQHPjiAAwQBPjiIMAwDBAA+OIsDBAA+OJowDAMEAj44nAMEBD44oAMEAD44
2DAMAwQBPjjaAwQBPjjcMAwDBAU+OOADBAI+OPgwCwMDAFHHAwQCUccIAwQAUccN
MAwDBABRxw8DBANRxxADBAJRxyAwDAMEA1HHKAMEBlHHAAMEBFHHUDAMAwQAUcdl
AwQEUcdgAwQBUcd2MAwDBAJRx3wDBABRx4QwDAMEAVHHhgMEBFHHgDAMAwQBUceS
AwQDUcegMAwDBAJRx6wDBABRx8gwDAMEAlHHzAMEAVHH2DAMAwQAUcfbAwQAUcfm
MAwDBANRx+gDBAFRx/gwDAMEAFvLeQMEAlvLeDAXBAIAAjARAwcBKgILoAAAAwYE
KgILoBAwDQYJKoZIhvcNAQELBQADggEBAGshV5r9YA9BOhbCfJaMtbPoWcsF8ptf
BWfGmuq01Jgw/Zog2OmH2jNppil1pQgj79zIldnfZyADoElQ5R8MLnCgckfI75zd
Pq1Ou9feQfrzk6X+BuUhanzbPwxl/MndxCa7gXDHlXOrDqQYBn2noHQxWfN+z1uh
KKTW1tbq8+WBnDaI1AcwJ53vv31pM44IxPFEfkBz6IauJYYRHp1gUcd5lYL1NEco
NNmYSgrjmS/hFt6IlrnP7eN69LnJjm8MbzytaNnC7ZsD3gqaKnjfoXdK0+eWX1VI
vs/8UzBNmMtVhVr+z+Q4GNvc2lp/XXscqwkN+OsSf0X0o4PT3stXQtc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org