Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/UEunb7TDKjMuzUhim2gbR_1GgtE.roa
File:                     UEunb7TDKjMuzUhim2gbR_1GgtE.roa (raw, json)
Hash identifier:          mRqKnNlLrpL/AZ4dNnio+RT+ivGYwxS+PsedRs+xU0E=
Subject key identifier:   50:4B:A7:6F:B4:C3:2A:33:2E:CD:48:62:9B:68:1B:47:FD:46:82:D1
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       3304EA5C
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/UEunb7TDKjMuzUhim2gbR_1GgtE.roa
Signing time:             Sat 01 Jan 2022 09:58:37 +0000
ROA not before:           Sat 01 Jan 2022 09:58:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3326
IP address blocks:        185.46.248.0/22 maxlen: 22
                          194.146.198.0/24 maxlen: 24
                          194.146.197.0/24 maxlen: 24
                          194.146.196.0/24 maxlen: 24
                          176.241.130.0/23 maxlen: 23
                          176.241.128.0/23 maxlen: 23
                          176.241.132.0/22 maxlen: 22
                          176.241.136.0/21 maxlen: 21
                          176.241.144.0/20 maxlen: 20
                          176.241.104.0/21 maxlen: 21
                          176.112.0.0/19 maxlen: 19
                          188.247.96.0/20 maxlen: 20
                          188.247.112.0/22 maxlen: 22
                          188.247.116.0/22 maxlen: 22
                          217.112.208.0/20 maxlen: 20
                          91.193.68.0/22 maxlen: 22
                          178.213.168.0/21 maxlen: 21
                          109.206.32.0/19 maxlen: 19
                          80.91.166.0/24 maxlen: 24
                          80.91.160.0/22 maxlen: 22
                          80.91.164.0/23 maxlen: 23
                          85.159.0.0/21 maxlen: 21
                          80.91.172.0/22 maxlen: 22
                          80.91.168.0/24 maxlen: 24
                          80.91.167.0/24 maxlen: 24
                          80.91.171.0/24 maxlen: 24
                          80.91.170.0/24 maxlen: 24
                          80.91.169.0/24 maxlen: 24
                          80.91.176.0/22 maxlen: 22
                          80.91.180.0/23 maxlen: 23
                          80.91.184.0/21 maxlen: 21
                          80.91.182.0/24 maxlen: 24
                          80.91.183.0/24 maxlen: 24
                          213.111.192.0/18 maxlen: 18
                          46.164.128.0/20 maxlen: 20
                          46.164.144.0/21 maxlen: 21
                          46.164.152.0/23 maxlen: 23
                          46.164.158.0/24 maxlen: 24
                          46.164.159.0/24 maxlen: 24
                          46.164.154.0/23 maxlen: 23
                          46.164.156.0/23 maxlen: 23
                          94.232.72.0/21 maxlen: 21
                          80.77.38.0/24 maxlen: 24
                          80.77.37.0/24 maxlen: 24
                          80.77.36.0/24 maxlen: 24
                          80.77.32.0/22 maxlen: 22
                          80.77.39.0/24 maxlen: 24
                          80.77.40.0/21 maxlen: 21
                          93.183.200.0/21 maxlen: 21
                          93.183.208.0/22 maxlen: 22
                          93.183.212.0/23 maxlen: 23
                          93.183.218.0/23 maxlen: 23
                          93.183.215.0/24 maxlen: 24
                          93.183.214.0/24 maxlen: 24
                          93.183.217.0/24 maxlen: 24
                          93.183.216.0/24 maxlen: 24
                          93.183.220.0/22 maxlen: 22
                          93.183.225.0/24 maxlen: 24
                          93.183.224.0/24 maxlen: 24
                          93.183.226.0/24 maxlen: 24
                          93.183.232.0/22 maxlen: 22
                          93.183.230.0/23 maxlen: 23
                          93.183.228.0/24 maxlen: 24
                          93.183.227.0/24 maxlen: 24
                          93.183.229.0/24 maxlen: 24
                          93.183.239.0/24 maxlen: 24
                          93.183.237.0/24 maxlen: 24
                          93.183.240.0/21 maxlen: 21
                          93.183.248.0/21 maxlen: 21
                          93.183.192.0/24 maxlen: 24
                          193.109.164.0/22 maxlen: 24
                          93.183.193.0/24 maxlen: 24
                          93.183.197.0/24 maxlen: 24
                          93.183.196.0/24 maxlen: 24
                          93.183.194.0/23 maxlen: 23
                          93.183.198.0/23 maxlen: 23
                          195.69.176.0/23 maxlen: 23
                          195.69.177.0/24 maxlen: 24
                          195.69.176.0/24 maxlen: 24
                          195.69.179.0/24 maxlen: 24
                          195.69.178.0/24 maxlen: 24
                          91.197.222.0/24 maxlen: 24
                          91.197.221.0/24 maxlen: 24
                          91.197.220.0/24 maxlen: 24
                          91.197.223.0/24 maxlen: 24
                          91.204.92.0/23 maxlen: 23
                          91.204.95.0/24 maxlen: 24
                          91.204.94.0/24 maxlen: 24
                          194.29.60.0/22 maxlen: 22
                          5.1.16.0/20 maxlen: 20
                          88.81.232.0/22 maxlen: 22
                          176.102.32.0/21 maxlen: 21
                          88.81.237.0/24 maxlen: 24
                          88.81.236.0/24 maxlen: 24
                          88.81.238.0/23 maxlen: 23
                          88.81.240.0/22 maxlen: 22
                          176.102.40.0/21 maxlen: 21
                          88.81.246.0/24 maxlen: 24
                          88.81.244.0/22 maxlen: 22
                          88.81.248.0/24 maxlen: 24
                          88.81.251.0/24 maxlen: 24
                          176.102.48.0/23 maxlen: 23
                          88.81.249.0/24 maxlen: 24
                          88.81.252.0/23 maxlen: 23
                          176.102.50.0/24 maxlen: 24
                          176.102.51.0/24 maxlen: 24
                          176.102.52.0/22 maxlen: 22
                          176.102.56.0/21 maxlen: 21
                          88.81.254.0/23 maxlen: 23
                          77.88.202.0/24 maxlen: 24
                          77.88.201.0/24 maxlen: 24
                          77.88.206.0/24 maxlen: 24
                          77.88.208.0/23 maxlen: 23
                          77.88.207.0/24 maxlen: 24
                          77.88.212.0/24 maxlen: 24
                          77.88.211.0/24 maxlen: 24
                          77.88.210.0/24 maxlen: 24
                          5.1.0.0/23 maxlen: 23
                          5.1.4.0/22 maxlen: 22
                          5.1.8.0/21 maxlen: 21
                          88.81.224.0/21 maxlen: 21
                          77.88.216.0/22 maxlen: 22
                          77.88.214.0/23 maxlen: 23
                          77.88.221.0/24 maxlen: 24
                          77.88.220.0/24 maxlen: 24
                          77.88.248.0/24 maxlen: 24
                          77.88.253.0/24 maxlen: 24
                          77.88.252.0/24 maxlen: 24
                          77.88.254.0/24 maxlen: 24
                          185.8.41.0/24 maxlen: 24
                          185.8.40.0/24 maxlen: 24
                          77.88.255.0/24 maxlen: 24
                          185.8.40.0/22 maxlen: 22
                          77.222.137.0/24 maxlen: 24
                          77.222.136.0/24 maxlen: 24
                          77.222.139.0/24 maxlen: 24
                          77.222.138.0/24 maxlen: 24
                          77.222.140.0/22 maxlen: 22
                          77.222.144.0/21 maxlen: 21
                          188.0.64.0/22 maxlen: 22
                          188.0.64.0/23 maxlen: 23
                          188.0.66.0/24 maxlen: 24
                          31.128.68.0/22 maxlen: 22
                          77.222.152.0/22 maxlen: 22
                          31.128.72.0/22 maxlen: 22
                          77.222.158.0/23 maxlen: 23
                          31.128.76.0/23 maxlen: 23
                          77.222.156.0/23 maxlen: 23
                          31.128.78.0/23 maxlen: 23
                          31.128.80.0/20 maxlen: 20
                          193.108.51.0/24 maxlen: 24
                          193.108.50.0/24 maxlen: 24
                          193.108.49.0/24 maxlen: 24
                          193.108.48.0/24 maxlen: 24
                          195.114.139.0/24 maxlen: 24
                          195.114.137.0/24 maxlen: 24
                          195.114.142.0/24 maxlen: 24
                          195.114.141.0/24 maxlen: 24
                          195.114.143.0/24 maxlen: 24
                          195.114.144.0/20 maxlen: 20
                          77.222.128.0/21 maxlen: 21
                          193.108.129.0/24 maxlen: 24
                          193.108.128.0/24 maxlen: 24
                          193.41.48.0/22 maxlen: 22
                          80.249.224.0/20 maxlen: 20
                          2a01:758::/32 maxlen: 48
                          2a01:758:ffe0::/48 maxlen: 48
                          2a02:70:1::/48 maxlen: 48
                          2a02:70::/32 maxlen: 32
                          2a02:70:100::/40 maxlen: 40
                          2a01:758:fff3::/48 maxlen: 48
                          2a01:758:ffe8::/48 maxlen: 48
                          2a02:70::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855960156 (0x3304ea5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Jan  1 09:58:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=504ba76fb4c32a332ecd48629b681b47fd4682d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:15:38:52:ad:9b:be:e8:b2:fc:00:9b:3d:
                    ea:c0:c8:f3:0d:e6:9f:cb:56:00:c4:5e:a3:23:df:
                    cf:fb:88:81:de:b8:37:e9:45:5c:21:63:cc:f4:65:
                    e0:57:0f:3a:53:e0:c5:8a:00:26:5f:28:7d:86:00:
                    0e:fa:45:4c:2d:44:31:af:bf:4b:38:d7:1c:3d:a8:
                    aa:24:7e:83:ca:91:ad:72:cf:84:92:14:a7:ff:a5:
                    9c:a0:eb:2d:c8:b8:b1:0d:0a:1f:e0:f8:96:6d:77:
                    d8:36:f7:4c:60:9a:19:74:0b:ad:e3:d1:17:24:fc:
                    de:59:f2:df:20:2d:f8:89:38:a9:0f:4d:1e:3d:f4:
                    13:f9:56:86:b3:47:fd:93:f6:f0:b1:1a:74:12:92:
                    d6:34:db:f7:87:13:4b:4f:f7:29:42:e4:37:d2:d4:
                    ec:17:e8:2d:d5:76:39:d7:3e:ea:98:3a:87:b1:e0:
                    56:0d:b2:90:b3:ac:3c:f6:2c:fc:68:2c:4b:7b:fc:
                    b9:4c:7e:12:c2:28:b1:6d:40:8d:fd:38:8c:62:1d:
                    44:76:63:75:ba:a0:ec:f1:2d:63:64:9c:68:f4:d7:
                    8b:48:77:e1:3d:e7:ce:cd:77:7a:8c:81:b9:0a:e6:
                    14:f2:07:3c:61:84:d9:2d:5e:48:29:93:35:25:a8:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:A7:6F:B4:C3:2A:33:2E:CD:48:62:9B:68:1B:47:FD:46:82:D1
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/UEunb7TDKjMuzUhim2gbR_1GgtE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.0.0/23
                  5.1.4.0-5.1.31.255
                  31.128.68.0-31.128.95.255
                  46.164.128.0/19
                  77.88.201.0-77.88.202.255
                  77.88.206.0-77.88.212.255
                  77.88.214.0-77.88.221.255
                  77.88.248.0/24
                  77.88.252.0/22
                  77.222.128.0/19
                  80.77.32.0/20
                  80.91.160.0/19
                  80.249.224.0/20
                  85.159.0.0/21
                  88.81.224.0-88.81.249.255
                  88.81.251.0-88.81.255.255
                  91.193.68.0/22
                  91.197.220.0/22
                  91.204.92.0/22
                  93.183.192.0-93.183.235.255
                  93.183.237.0/24
                  93.183.239.0-93.183.255.255
                  94.232.72.0/21
                  109.206.32.0/19
                  176.102.32.0/19
                  176.112.0.0/19
                  176.241.104.0/21
                  176.241.128.0/19
                  178.213.168.0/21
                  185.8.40.0/22
                  185.46.248.0/22
                  188.0.64.0/22
                  188.247.96.0-188.247.119.255
                  193.41.48.0/22
                  193.108.48.0/22
                  193.108.128.0/23
                  193.109.164.0/22
                  194.29.60.0/22
                  194.146.196.0-194.146.198.255
                  195.69.176.0/22
                  195.114.137.0/24
                  195.114.139.0/24
                  195.114.141.0-195.114.159.255
                  213.111.192.0/18
                  217.112.208.0/20
                IPv6:
                  2a01:758::/32
                  2a02:70::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:be:50:d0:7e:da:04:cf:d2:43:32:62:c3:ea:e5:70:ef:44:
         c5:cb:68:22:51:ff:82:97:35:46:d2:43:82:3c:41:04:97:35:
         95:07:07:49:f3:83:97:10:0e:51:52:d3:07:b9:ef:11:86:fa:
         99:ed:0b:6a:2a:58:f0:0c:b0:75:79:70:4e:4e:78:e1:7c:fd:
         19:f6:78:1a:a2:e5:5f:39:70:44:21:97:5d:d6:2d:fa:8b:b5:
         71:96:b9:59:cf:83:2e:8a:ff:a7:a1:4a:0d:2c:0e:5e:e0:f0:
         09:31:33:ab:56:23:6c:1d:99:02:9b:f1:de:b2:30:17:e2:6a:
         fa:b8:55:6a:4c:2a:fe:e7:6c:8b:08:93:94:91:e6:fe:19:ce:
         bf:5b:ac:34:fc:82:6b:28:ce:af:fa:e9:b2:17:b7:85:38:b4:
         6a:0e:e7:98:08:c3:7d:6d:8b:00:05:c8:2f:cd:74:21:97:7e:
         da:d3:e4:af:0e:d6:10:00:2f:52:05:8d:04:b1:39:36:ca:25:
         82:61:e2:28:4d:1d:9a:60:26:ef:91:01:05:85:75:94:e8:46:
         86:e6:59:48:f0:0c:ae:c6:93:23:0d:46:2e:a7:6c:69:ab:ed:
         97:f0:21:e0:12:99:b3:f7:59:2f:cb:64:d9:0e:3f:a0:df:8e:
         38:81:a4:20
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIEMwTqXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YmM4ZGJlNTIwODNhZDMzNWM5ZjFmZGU2MDE2ZWM4YjQ5MjkzMTQwMB4XDTIyMDEw
MTA5NTgzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTA0YmE3NmZiNGMz
MmEzMzJlY2Q0ODYyOWI2ODFiNDdmZDQ2ODJkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANRqFThSrZu+6LL8AJs96sDI8w3mn8tWAMReoyPfz/uIgd64
N+lFXCFjzPRl4FcPOlPgxYoAJl8ofYYADvpFTC1EMa+/SzjXHD2oqiR+g8qRrXLP
hJIUp/+lnKDrLci4sQ0KH+D4lm132Db3TGCaGXQLrePRFyT83lny3yAt+Ik4qQ9N
Hj30E/lWhrNH/ZP28LEadBKS1jTb94cTS0/3KULkN9LU7BfoLdV2Odc+6pg6h7Hg
Vg2ykLOsPPYs/GgsS3v8uUx+EsIosW1Ajf04jGIdRHZjdbqg7PEtY2ScaPTXi0h3
4T3nzs13eoyBuQrmFPIHPGGE2S1eSCmTNSWoDJcCAwEAAaOCA48wggOLMB0GA1Ud
DgQWBBRQS6dvtMMqMy7NSGKbaBtH/UaC0TAfBgNVHSMEGDAWgBSryNvlIIOtM1yf
H95gFuyLSSkxQDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3E4amI1U0NEclROY254X2VZQmJzaTBrcE1VQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvY2U2Y2NiLTI1Y2YtNDkxNy1iM2NkLTMwNTZhZjlhMzM1ZS8x
L1VFdW5iN1RES2pNdXpVaGltMmdiUl8xR2d0RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
Y2U2Y2NiLTI1Y2YtNDkxNy1iM2NkLTMwNTZhZjlhMzM1ZS8xL3E4amI1U0NEclRO
Y254X2VZQmJzaTBrcE1VQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AaMGCCsGAQUFBwEHAQH/BIIBkjCCAY4wggF0BAIAATCCAWwDBAEFAQAwDAMEAgUB
BAMEBQUBADAMAwQCH4BEAwQFH4BAAwQFLqSAMAwDBABNWMkDBABNWMowDAMEAU1Y
zgMEAE1Y1DAMAwQBTVjWAwQBTVjcAwQATVj4AwQCTVj8AwQFTd6AAwQEUE0gAwQF
UFugAwQEUPngAwQDVZ8AMAwDBAVYUeADBAFYUfgwCwMEAFhR+wMDAVhQAwQCW8FE
AwQCW8XcAwQCW8xcMAwDBAZdt8ADBAJdt+gDBABdt+0wCwMEAF237wMDA12wAwQD
XuhIAwQFbc4gAwQFsGYgAwQFsHAAAwQDsPFoAwQFsPGAAwQDstWoAwQCuQgoAwQC
uS74AwQCvABAMAwDBAW892ADBAO893ADBALBKTADBALBbDADBAHBbIADBALBbaQD
BALCHTwwDAMEAsKSxAMEAMKSxgMEAsNFsAMEAMNyiQMEAMNyizAMAwQAw3KNAwQF
w3KAAwQG1W/AAwQE2XDQMBQEAgACMA4DBQAqAQdYAwUAKgIAcDANBgkqhkiG9w0B
AQsFAAOCAQEAAL5Q0H7aBM/SQzJiw+rlcO9ExctoIlH/gpc1RtJDgjxBBJc1lQcH
SfODlxAOUVLTB7nvEYb6me0LaipY8AywdXlwTk544Xz9GfZ4GqLlXzlwRCGXXdYt
+ou1cZa5Wc+DLor/p6FKDSwOXuDwCTEzq1YjbB2ZApvx3rIwF+Jq+rhVakwq/uds
iwiTlJHm/hnOv1usNPyCayjOr/rpshe3hTi0ag7nmAjDfW2LAAXIL810IZd+2tPk
rw7WEAAvUgWNBLE5NsolgmHiKE0dmmAm75EBBYV1lOhGhuZZSPAMrsaTIw1GLqds
aavtl/Ah4BKZs/dZL8tk2Q4/oN+OOIGkIA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:04 2024 by rpki-client on console-ams.rpki-client.org