Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/VMzLAkFCMq09odA4Ncg1aYKE508.roa
File:                     VMzLAkFCMq09odA4Ncg1aYKE508.roa (raw, json)
Hash identifier:          XiSWg4wz9N5Xs0GCZ1LtZgcd2wjvjAdhA6+KXWfob+A=
Subject key identifier:   54:CC:CB:02:41:42:32:AD:3D:A1:D0:38:35:C8:35:69:82:84:E7:4F
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       0181F6E5E37047E522F160F9D130F4D8167F
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/VMzLAkFCMq09odA4Ncg1aYKE508.roa
Signing time:             Wed 13 Jul 2022 09:31:09 +0000
ROA not before:           Wed 13 Jul 2022 09:31:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12491
IP address blocks:        81.199.200.0/24 maxlen: 24
                          81.199.204.0/24 maxlen: 24
                          81.199.210.0/24 maxlen: 24
                          81.199.208.0/23 maxlen: 23
                          81.199.212.0/24 maxlen: 24
                          81.199.213.0/24 maxlen: 24
                          81.199.211.0/24 maxlen: 24
                          81.199.216.0/24 maxlen: 24
                          81.199.217.0/24 maxlen: 24
                          81.199.214.0/24 maxlen: 24
                          81.199.215.0/24 maxlen: 24
                          81.199.219.0/24 maxlen: 24
                          81.199.220.0/22 maxlen: 22
                          81.199.220.0/24 maxlen: 24
                          81.199.230.0/24 maxlen: 24
                          81.199.232.0/21 maxlen: 24
                          81.199.240.0/22 maxlen: 22
                          81.199.146.0/24 maxlen: 24
                          81.199.147.0/24 maxlen: 24
                          81.199.152.0/22 maxlen: 22
                          81.199.156.0/23 maxlen: 23
                          81.199.160.0/21 maxlen: 21
                          81.199.172.0/23 maxlen: 23
                          81.199.174.0/23 maxlen: 23
                          81.199.176.0/21 maxlen: 21
                          81.199.186.0/24 maxlen: 24
                          81.199.185.0/24 maxlen: 24
                          81.199.184.0/24 maxlen: 24
                          81.199.188.0/22 maxlen: 22
                          81.199.187.0/24 maxlen: 24
                          81.199.192.0/24 maxlen: 24
                          81.199.195.0/24 maxlen: 24
                          81.199.194.0/24 maxlen: 24
                          81.199.4.0/22 maxlen: 22
                          81.199.2.0/23 maxlen: 23
                          81.199.0.0/24 maxlen: 24
                          81.199.1.0/24 maxlen: 24
                          81.199.8.0/24 maxlen: 24
                          81.199.9.0/24 maxlen: 24
                          81.199.10.0/23 maxlen: 23
                          81.199.13.0/24 maxlen: 24
                          81.199.16.0/24 maxlen: 24
                          81.199.16.0/22 maxlen: 22
                          81.199.16.0/23 maxlen: 23
                          81.199.17.0/24 maxlen: 24
                          81.199.21.0/24 maxlen: 24
                          81.199.19.0/24 maxlen: 24
                          81.199.18.0/24 maxlen: 24
                          81.199.18.0/23 maxlen: 23
                          81.199.32.0/24 maxlen: 24
                          81.199.32.0/22 maxlen: 22
                          81.199.94.0/24 maxlen: 24
                          81.199.95.0/24 maxlen: 24
                          81.199.92.0/24 maxlen: 24
                          81.199.93.0/24 maxlen: 24
                          81.199.105.0/24 maxlen: 24
                          81.199.104.0/24 maxlen: 24
                          81.199.101.0/24 maxlen: 24
                          81.199.102.0/23 maxlen: 23
                          81.199.108.0/22 maxlen: 22
                          81.199.108.0/24 maxlen: 24
                          81.199.106.0/24 maxlen: 24
                          81.199.118.0/23 maxlen: 23
                          81.199.129.0/24 maxlen: 24
                          81.199.128.0/24 maxlen: 24
                          81.199.139.0/24 maxlen: 24
                          81.199.138.0/24 maxlen: 24
                          81.199.138.0/23 maxlen: 23
                          81.199.136.0/24 maxlen: 24
                          81.199.136.0/22 maxlen: 22
                          81.199.136.0/23 maxlen: 23
                          81.199.137.0/24 maxlen: 24
                          81.199.142.0/23 maxlen: 23
                          81.199.40.0/22 maxlen: 22
                          81.199.44.0/24 maxlen: 24
                          81.199.49.0/24 maxlen: 24
                          81.199.48.0/21 maxlen: 21
                          81.199.47.0/24 maxlen: 24
                          81.199.48.0/24 maxlen: 24
                          81.199.46.0/24 maxlen: 24
                          81.199.45.0/24 maxlen: 24
                          81.199.56.0/22 maxlen: 22
                          81.199.54.0/24 maxlen: 24
                          81.199.63.0/24 maxlen: 24
                          81.199.61.0/24 maxlen: 24
                          81.199.62.0/24 maxlen: 24
                          81.199.60.0/24 maxlen: 24
                          81.199.84.0/24 maxlen: 24
                          81.199.85.0/24 maxlen: 24
                          81.199.82.0/24 maxlen: 24
                          81.199.83.0/24 maxlen: 24
                          81.199.80.0/24 maxlen: 24
                          81.199.81.0/24 maxlen: 24
                          81.199.91.0/24 maxlen: 24
                          81.199.90.0/24 maxlen: 24
                          81.199.86.0/23 maxlen: 23
                          62.56.160.0/22 maxlen: 22
                          62.56.165.0/24 maxlen: 24
                          62.56.166.0/24 maxlen: 24
                          62.56.164.0/24 maxlen: 24
                          62.56.171.0/24 maxlen: 24
                          62.56.172.0/24 maxlen: 24
                          62.56.170.0/23 maxlen: 23
                          62.56.170.0/24 maxlen: 24
                          62.56.168.0/22 maxlen: 22
                          62.56.169.0/24 maxlen: 24
                          62.56.167.0/24 maxlen: 24
                          62.56.168.0/24 maxlen: 24
                          62.56.168.0/23 maxlen: 23
                          62.56.175.0/24 maxlen: 24
                          62.56.174.0/24 maxlen: 24
                          62.56.174.0/23 maxlen: 23
                          62.56.173.0/24 maxlen: 24
                          62.56.130.0/24 maxlen: 24
                          62.56.129.0/24 maxlen: 24
                          62.56.137.0/24 maxlen: 24
                          62.56.144.0/21 maxlen: 21
                          62.56.151.0/24 maxlen: 24
                          62.56.152.0/24 maxlen: 24
                          62.56.153.0/24 maxlen: 24
                          62.56.154.0/24 maxlen: 24
                          62.56.156.0/22 maxlen: 22
                          62.56.216.0/24 maxlen: 24
                          62.56.224.0/21 maxlen: 21
                          62.56.220.0/23 maxlen: 23
                          62.56.232.0/21 maxlen: 21
                          62.56.230.0/24 maxlen: 24
                          62.56.240.0/22 maxlen: 22
                          62.56.246.0/24 maxlen: 24
                          62.56.244.0/23 maxlen: 23
                          62.56.250.0/23 maxlen: 23
                          62.56.250.0/24 maxlen: 24
                          62.56.251.0/24 maxlen: 24
                          62.56.248.0/22 maxlen: 22
                          62.56.248.0/23 maxlen: 23
                          62.56.249.0/24 maxlen: 24
                          62.56.247.0/24 maxlen: 24
                          62.56.248.0/24 maxlen: 24
                          91.203.122.0/23 maxlen: 23
                          91.203.121.0/24 maxlen: 24
                          2a02:ba0:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f6:e5:e3:70:47:e5:22:f1:60:f9:d1:30:f4:d8:16:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Jul 13 09:31:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=54cccb02414232ad3da1d03835c835698284e74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2b:23:70:5a:87:de:0a:54:24:e6:33:8d:bd:
                    fb:e3:b3:53:3e:a9:2c:05:ef:f4:0f:4a:61:c6:cc:
                    05:a2:e8:c4:03:92:a2:c5:48:5a:3b:da:f4:70:3f:
                    98:c0:08:cd:50:f7:29:79:51:8a:0a:67:0e:d2:41:
                    47:35:3d:60:ce:00:2d:06:8a:30:b1:57:f1:a0:f0:
                    0d:70:14:d3:4b:44:f0:7e:b2:16:da:65:a7:56:da:
                    21:3f:5e:2b:9f:8d:df:9f:64:1c:c6:c8:a0:67:1e:
                    28:b3:43:de:6c:6f:8f:43:4c:b2:17:b1:47:e1:63:
                    d2:72:01:cd:7e:eb:0b:14:3f:61:fe:40:a6:fb:97:
                    c3:c0:74:bc:ad:ff:b1:a7:f5:d1:f6:4f:1a:68:f7:
                    cf:20:48:f4:eb:ea:66:7b:d4:37:56:b7:9b:1d:c1:
                    a2:23:aa:ab:be:69:5c:c4:f8:52:41:de:7b:69:ce:
                    d4:9b:31:49:30:22:3c:c7:a0:7d:2a:64:43:83:1d:
                    dd:b8:b4:41:bc:44:14:c7:0d:85:78:25:61:69:3b:
                    52:54:50:09:c7:e0:df:b4:fa:f9:9d:53:9f:72:c7:
                    fa:aa:12:8c:53:0b:3e:a5:b0:fc:0d:d6:04:26:7f:
                    00:d4:59:87:3d:7b:00:4a:9c:e7:9a:01:2e:04:9e:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:CB:02:41:42:32:AD:3D:A1:D0:38:35:C8:35:69:82:84:E7:4F
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/VMzLAkFCMq09odA4Ncg1aYKE508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.56.129.0-62.56.130.255
                  62.56.137.0/24
                  62.56.144.0-62.56.154.255
                  62.56.156.0-62.56.175.255
                  62.56.216.0/24
                  62.56.220.0/23
                  62.56.224.0-62.56.251.255
                  81.199.0.0-81.199.11.255
                  81.199.13.0/24
                  81.199.16.0/22
                  81.199.21.0/24
                  81.199.32.0/22
                  81.199.40.0-81.199.63.255
                  81.199.80.0/21
                  81.199.90.0-81.199.95.255
                  81.199.101.0-81.199.106.255
                  81.199.108.0/22
                  81.199.118.0/23
                  81.199.128.0/23
                  81.199.136.0/22
                  81.199.142.0/23
                  81.199.146.0/23
                  81.199.152.0-81.199.157.255
                  81.199.160.0/21
                  81.199.172.0-81.199.192.255
                  81.199.194.0/23
                  81.199.200.0/24
                  81.199.204.0/24
                  81.199.208.0-81.199.217.255
                  81.199.219.0-81.199.223.255
                  81.199.230.0/24
                  81.199.232.0-81.199.243.255
                  91.203.121.0-91.203.123.255
                IPv6:
                  2a02:ba0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:05:b9:83:5d:11:b5:2d:3a:2f:a4:fb:50:6e:56:ef:4a:ca:
         1f:90:22:fc:9f:4c:4c:7f:35:d0:b4:cc:eb:cc:22:28:a4:48:
         5e:e5:23:da:ec:90:99:39:29:04:fa:7f:f5:d7:9c:e2:91:a3:
         1d:59:89:15:8f:61:cf:0a:9c:fc:7d:ed:b7:ce:f6:82:48:2b:
         dd:1d:6a:04:e0:ae:83:f4:3a:82:d5:a3:4e:e0:bb:ec:ae:cf:
         dd:1a:0c:19:2c:75:1d:74:51:96:41:ce:21:7a:9f:71:bd:1b:
         5b:5c:90:2d:18:88:08:8f:cd:7f:fe:fb:73:e2:cd:6c:c6:e8:
         4b:06:56:64:e1:dd:36:e6:81:0a:5a:c7:ba:1e:3e:2e:c2:ad:
         d2:04:bd:78:a6:ad:42:3a:2e:2e:07:7c:64:d4:63:68:ae:e1:
         7c:1a:f1:a3:c5:94:9f:84:2c:38:90:87:1a:f9:90:a9:61:6b:
         04:71:86:3b:81:ed:c7:47:55:6b:fa:4c:52:93:74:6a:8b:46:
         5b:a0:35:49:5c:88:ed:2a:ba:00:ec:69:3d:57:86:96:c6:19:
         c7:b2:cb:be:3f:86:5c:06:ce:1e:1e:4e:dd:20:1b:ac:51:65:
         5b:51:37:5b:03:71:21:6f:6f:14:42:21:11:95:64:89:5d:73:
         3a:83:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org