Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fQTPaaFCAGjDxwnAcjxnxdbBi38.roa
File:                     fQTPaaFCAGjDxwnAcjxnxdbBi38.roa (raw, json)
Hash identifier:          UpW/r2/0RfC+AHC4aYd4wKMCMvMXcbnLG+aHC0JFW48=
Subject key identifier:   7D:04:CF:69:A1:42:00:68:C3:C7:09:C0:72:3C:67:C5:D6:C1:8B:7F
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       01829275FC73EBDCA4B31B6C84218DF1BC82
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fQTPaaFCAGjDxwnAcjxnxdbBi38.roa
Signing time:             Fri 12 Aug 2022 14:29:42 +0000
ROA not before:           Fri 12 Aug 2022 14:29:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12491
IP address blocks:        81.199.200.0/24 maxlen: 24
                          81.199.204.0/24 maxlen: 24
                          81.199.210.0/24 maxlen: 24
                          81.199.208.0/23 maxlen: 23
                          81.199.212.0/24 maxlen: 24
                          81.199.213.0/24 maxlen: 24
                          81.199.211.0/24 maxlen: 24
                          81.199.216.0/24 maxlen: 24
                          81.199.217.0/24 maxlen: 24
                          81.199.214.0/24 maxlen: 24
                          81.199.215.0/24 maxlen: 24
                          81.199.219.0/24 maxlen: 24
                          81.199.220.0/22 maxlen: 22
                          81.199.220.0/24 maxlen: 24
                          81.199.230.0/24 maxlen: 24
                          81.199.232.0/21 maxlen: 24
                          81.199.240.0/22 maxlen: 22
                          81.199.146.0/24 maxlen: 24
                          81.199.147.0/24 maxlen: 24
                          81.199.152.0/22 maxlen: 22
                          81.199.156.0/23 maxlen: 23
                          81.199.160.0/21 maxlen: 21
                          81.199.172.0/23 maxlen: 23
                          81.199.174.0/23 maxlen: 23
                          81.199.176.0/21 maxlen: 21
                          81.199.186.0/24 maxlen: 24
                          81.199.185.0/24 maxlen: 24
                          81.199.184.0/24 maxlen: 24
                          81.199.188.0/22 maxlen: 22
                          81.199.187.0/24 maxlen: 24
                          81.199.192.0/24 maxlen: 24
                          81.199.195.0/24 maxlen: 24
                          81.199.194.0/24 maxlen: 24
                          81.199.4.0/22 maxlen: 22
                          81.199.2.0/23 maxlen: 23
                          81.199.0.0/24 maxlen: 24
                          81.199.1.0/24 maxlen: 24
                          81.199.8.0/24 maxlen: 24
                          81.199.9.0/24 maxlen: 24
                          81.199.10.0/23 maxlen: 23
                          81.199.13.0/24 maxlen: 24
                          81.199.16.0/24 maxlen: 24
                          81.199.16.0/22 maxlen: 22
                          81.199.16.0/23 maxlen: 23
                          81.199.17.0/24 maxlen: 24
                          81.199.21.0/24 maxlen: 24
                          81.199.22.0/24 maxlen: 24
                          81.199.19.0/24 maxlen: 24
                          81.199.20.0/24 maxlen: 24
                          81.199.18.0/24 maxlen: 24
                          81.199.18.0/23 maxlen: 23
                          81.199.32.0/24 maxlen: 24
                          81.199.32.0/22 maxlen: 22
                          81.199.94.0/24 maxlen: 24
                          81.199.95.0/24 maxlen: 24
                          81.199.92.0/24 maxlen: 24
                          81.199.93.0/24 maxlen: 24
                          81.199.105.0/24 maxlen: 24
                          81.199.104.0/24 maxlen: 24
                          81.199.101.0/24 maxlen: 24
                          81.199.102.0/23 maxlen: 23
                          81.199.108.0/22 maxlen: 22
                          81.199.108.0/24 maxlen: 24
                          81.199.106.0/24 maxlen: 24
                          81.199.118.0/23 maxlen: 23
                          81.199.129.0/24 maxlen: 24
                          81.199.128.0/24 maxlen: 24
                          81.199.139.0/24 maxlen: 24
                          81.199.138.0/24 maxlen: 24
                          81.199.138.0/23 maxlen: 23
                          81.199.136.0/24 maxlen: 24
                          81.199.136.0/22 maxlen: 22
                          81.199.136.0/23 maxlen: 23
                          81.199.137.0/24 maxlen: 24
                          81.199.142.0/23 maxlen: 23
                          81.199.40.0/22 maxlen: 22
                          81.199.44.0/24 maxlen: 24
                          81.199.49.0/24 maxlen: 24
                          81.199.48.0/21 maxlen: 21
                          81.199.47.0/24 maxlen: 24
                          81.199.48.0/24 maxlen: 24
                          81.199.46.0/24 maxlen: 24
                          81.199.45.0/24 maxlen: 24
                          81.199.51.0/24 maxlen: 24
                          81.199.58.0/24 maxlen: 24
                          81.199.56.0/22 maxlen: 22
                          81.199.54.0/24 maxlen: 24
                          81.199.63.0/24 maxlen: 24
                          81.199.61.0/24 maxlen: 24
                          81.199.62.0/24 maxlen: 24
                          81.199.60.0/24 maxlen: 24
                          81.199.84.0/24 maxlen: 24
                          81.199.85.0/24 maxlen: 24
                          81.199.82.0/24 maxlen: 24
                          81.199.83.0/24 maxlen: 24
                          81.199.80.0/24 maxlen: 24
                          81.199.81.0/24 maxlen: 24
                          81.199.91.0/24 maxlen: 24
                          81.199.90.0/24 maxlen: 24
                          81.199.86.0/23 maxlen: 23
                          62.56.160.0/22 maxlen: 22
                          62.56.165.0/24 maxlen: 24
                          62.56.166.0/24 maxlen: 24
                          62.56.164.0/24 maxlen: 24
                          62.56.171.0/24 maxlen: 24
                          62.56.172.0/24 maxlen: 24
                          62.56.170.0/23 maxlen: 23
                          62.56.170.0/24 maxlen: 24
                          62.56.168.0/22 maxlen: 22
                          62.56.169.0/24 maxlen: 24
                          62.56.167.0/24 maxlen: 24
                          62.56.168.0/24 maxlen: 24
                          62.56.168.0/23 maxlen: 23
                          62.56.175.0/24 maxlen: 24
                          62.56.174.0/24 maxlen: 24
                          62.56.174.0/23 maxlen: 23
                          62.56.173.0/24 maxlen: 24
                          62.56.132.0/24 maxlen: 24
                          62.56.130.0/24 maxlen: 24
                          62.56.131.0/24 maxlen: 24
                          62.56.129.0/24 maxlen: 24
                          62.56.134.0/24 maxlen: 24
                          62.56.133.0/24 maxlen: 24
                          62.56.137.0/24 maxlen: 24
                          62.56.136.0/24 maxlen: 24
                          62.56.144.0/21 maxlen: 21
                          62.56.151.0/24 maxlen: 24
                          62.56.152.0/24 maxlen: 24
                          62.56.153.0/24 maxlen: 24
                          62.56.154.0/24 maxlen: 24
                          62.56.156.0/22 maxlen: 22
                          62.56.216.0/24 maxlen: 24
                          62.56.224.0/21 maxlen: 21
                          62.56.220.0/23 maxlen: 23
                          62.56.232.0/21 maxlen: 21
                          62.56.230.0/24 maxlen: 24
                          62.56.240.0/22 maxlen: 22
                          62.56.246.0/24 maxlen: 24
                          62.56.244.0/23 maxlen: 23
                          62.56.250.0/23 maxlen: 23
                          62.56.250.0/24 maxlen: 24
                          62.56.251.0/24 maxlen: 24
                          62.56.248.0/22 maxlen: 22
                          62.56.248.0/23 maxlen: 23
                          62.56.249.0/24 maxlen: 24
                          62.56.247.0/24 maxlen: 24
                          62.56.248.0/24 maxlen: 24
                          91.203.122.0/23 maxlen: 23
                          91.203.121.0/24 maxlen: 24
                          2a02:ba0:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:92:75:fc:73:eb:dc:a4:b3:1b:6c:84:21:8d:f1:bc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Aug 12 14:29:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d04cf69a1420068c3c709c0723c67c5d6c18b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ba:e1:a1:6c:1c:ac:a2:f9:c5:02:b8:02:99:
                    e6:19:35:54:04:f8:a0:d1:de:ed:24:e7:e3:2b:e9:
                    be:d5:81:e0:20:25:cf:3c:7c:61:97:05:e4:62:cc:
                    de:7a:24:71:f6:23:1e:7f:27:97:f9:4e:9d:9c:b5:
                    d7:49:05:b4:bf:2f:09:ee:6a:b2:ac:de:97:4b:72:
                    c5:54:d8:96:95:b0:a3:71:e0:f1:2a:0f:9c:32:24:
                    df:50:f0:bf:cf:7f:f1:a1:7f:63:a9:40:7a:00:0a:
                    ba:b8:c2:fd:0b:3a:5e:96:f6:59:fe:61:df:2e:6c:
                    5e:17:a5:a5:4f:18:0b:b9:01:b2:e9:e5:d5:92:80:
                    fc:8d:ca:d8:a6:5e:0a:c9:f5:ff:12:d1:de:dc:ff:
                    9c:28:d1:32:0a:96:5c:b2:f1:23:ea:f7:5e:8b:09:
                    a5:4e:c7:b4:7e:f3:d5:b6:14:10:c6:d5:34:33:5f:
                    df:14:23:23:d9:6a:de:c7:b7:ea:15:62:d3:7c:27:
                    67:70:c7:30:65:3a:bc:35:f2:d2:86:4e:49:2d:fb:
                    e8:b1:1f:d4:eb:f0:1b:9a:59:d8:7b:d7:6b:91:f0:
                    05:38:8a:72:70:cb:f4:2b:16:68:bb:fc:c5:09:81:
                    26:d4:b5:45:87:03:b1:8c:ce:17:c4:15:ab:b8:29:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:04:CF:69:A1:42:00:68:C3:C7:09:C0:72:3C:67:C5:D6:C1:8B:7F
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fQTPaaFCAGjDxwnAcjxnxdbBi38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.56.129.0-62.56.134.255
                  62.56.136.0/23
                  62.56.144.0-62.56.154.255
                  62.56.156.0-62.56.175.255
                  62.56.216.0/24
                  62.56.220.0/23
                  62.56.224.0-62.56.251.255
                  81.199.0.0-81.199.11.255
                  81.199.13.0/24
                  81.199.16.0-81.199.22.255
                  81.199.32.0/22
                  81.199.40.0-81.199.63.255
                  81.199.80.0/21
                  81.199.90.0-81.199.95.255
                  81.199.101.0-81.199.106.255
                  81.199.108.0/22
                  81.199.118.0/23
                  81.199.128.0/23
                  81.199.136.0/22
                  81.199.142.0/23
                  81.199.146.0/23
                  81.199.152.0-81.199.157.255
                  81.199.160.0/21
                  81.199.172.0-81.199.192.255
                  81.199.194.0/23
                  81.199.200.0/24
                  81.199.204.0/24
                  81.199.208.0-81.199.217.255
                  81.199.219.0-81.199.223.255
                  81.199.230.0/24
                  81.199.232.0-81.199.243.255
                  91.203.121.0-91.203.123.255
                IPv6:
                  2a02:ba0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:a4:f3:9e:28:07:ab:ab:b3:c9:a3:5c:63:51:b7:48:20:12:
         bb:68:57:b9:22:e6:68:69:9f:96:58:60:3e:8a:6d:82:83:a6:
         b1:44:64:a2:17:26:59:dd:95:d0:47:f9:79:94:ca:8b:30:c5:
         db:5c:7e:af:6f:c8:a8:bc:0a:d2:a7:f7:e6:73:3b:78:ca:58:
         bd:e5:cb:a5:89:aa:4b:d2:5a:f8:b2:3a:9c:d4:58:d8:04:8f:
         ce:69:3a:c8:29:5b:fa:1a:21:dc:c1:72:af:97:e4:2f:1c:5c:
         d4:7f:29:1a:7d:c2:41:20:84:4d:98:8a:e3:8e:f3:09:e0:68:
         b3:a7:8a:ae:84:20:95:be:2f:81:2c:52:e1:6f:94:0c:84:28:
         4b:6e:e0:a6:6b:31:37:04:04:6a:53:f4:22:5a:13:a2:e2:16:
         e1:0b:ab:0b:6e:9d:e4:43:0f:f8:fa:66:2c:4b:b3:42:52:ae:
         84:9c:7c:fa:39:bb:98:c8:d8:dd:70:98:76:6f:56:ef:ba:46:
         5a:97:e3:c5:08:94:39:36:a7:8a:39:31:32:bb:d6:ee:63:9e:
         58:c6:07:98:28:1c:f6:28:78:8b:8c:49:e4:02:e5:19:86:79:
         3a:e5:5d:53:39:4a:7e:a6:4e:f7:b5:b5:55:1c:00:b9:f6:1f:
         8e:56:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org