Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L4SvfWMna7XzVHC-Rf8EBLRQJG0.roa
File:                     L4SvfWMna7XzVHC-Rf8EBLRQJG0.roa (raw, json)
Hash identifier:          91DVctQ5TGyZB98wsccmbBCMuL7N8aOf4+dTlNPCdoY=
Subject key identifier:   2F:84:AF:7D:63:27:6B:B5:F3:54:70:BE:45:FF:04:04:B4:50:24:6D
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       07D080FE
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L4SvfWMna7XzVHC-Rf8EBLRQJG0.roa
Signing time:             Fri 14 Jan 2022 12:10:04 +0000
ROA not before:           Fri 14 Jan 2022 12:10:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3214
IP address blocks:        80.66.196.0/22 maxlen: 24
                          92.60.42.0/24 maxlen: 24
                          92.60.41.0/24 maxlen: 24
                          92.60.40.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          45.147.48.0/22 maxlen: 24
                          45.153.244.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          91.200.241.0/24 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          141.98.196.0/22 maxlen: 24
                          45.11.45.0/24 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          185.200.64.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          185.254.72.0/22 maxlen: 24
                          185.213.148.0/22 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          194.36.222.0/23 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          45.90.210.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          185.49.32.0/22 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          194.36.24.0/22 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          45.143.232.0/22 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          45.13.198.0/24 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          2a06:4fc0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a0b:4080::/32 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0c:ed40::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a0d:de80::/29 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a03:d9c0::/29 maxlen: 48
                          2a09:0:3::/48 maxlen: 48
                          2a10:2600::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a0e:6200::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a03:d9c0:3000::/48 maxlen: 64
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a0d:4bc0::/29 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a10:480::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131105022 (0x7d080fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan 14 12:10:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f84af7d63276bb5f35470be45ff0404b450246d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7d:c1:02:c6:b0:79:62:a4:9a:dc:96:ee:5d:
                    a9:df:33:33:1a:7b:ea:39:56:3f:10:18:5b:87:88:
                    84:0e:54:28:88:cc:2f:a2:28:40:78:1b:6a:7b:68:
                    9f:d9:f5:9e:ec:51:3f:b5:00:d8:dc:f5:4a:b4:9d:
                    e5:43:38:47:a3:62:cd:2e:6e:b4:ce:13:a2:63:19:
                    bc:b5:da:83:82:ac:29:41:10:48:04:cc:48:7d:60:
                    88:f5:ab:ed:6c:ec:75:09:cc:ee:33:f7:43:65:8f:
                    98:9f:e4:cb:04:7c:20:2b:f0:a8:6a:4e:0b:8d:93:
                    6b:3b:15:57:41:49:d2:f5:68:61:ca:a6:d3:83:92:
                    e5:a3:da:3a:ec:97:5b:e7:0c:31:9e:2b:df:24:e5:
                    c8:f3:75:c3:42:eb:d8:aa:2d:1c:0a:80:a1:bb:54:
                    8c:73:76:07:eb:29:ef:55:83:c0:d4:60:9d:69:37:
                    f2:ca:40:0b:54:4f:ca:8b:a4:9a:4d:9a:3e:93:97:
                    54:59:9e:01:9f:4d:df:d1:54:af:fc:32:17:db:25:
                    40:29:c7:ee:2e:88:4b:5a:59:21:04:8b:ef:cf:f4:
                    c3:66:1c:53:67:68:d5:df:f2:f8:c0:4a:cf:bd:f0:
                    2c:18:96:e9:2e:06:72:89:91:a8:b8:e4:25:f6:1c:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:84:AF:7D:63:27:6B:B5:F3:54:70:BE:45:FF:04:04:B4:50:24:6D
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L4SvfWMna7XzVHC-Rf8EBLRQJG0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.80.188.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.130.20.0/22
                  45.131.152.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/22
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  149.62.44.0/22
                  185.49.32.0/22
                  185.194.52.0/22
                  185.200.64.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.72.0/22
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  194.36.24.0/22
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:0e:2a:a2:08:43:4d:39:56:fd:d0:9f:3c:28:b3:8f:b9:
         93:c8:ac:42:ba:94:00:fc:aa:8c:7d:8a:18:fd:14:d4:74:bc:
         e6:41:de:3c:2d:78:f4:ee:08:2a:53:c9:83:b7:13:53:d1:f7:
         02:22:3c:63:10:62:4d:88:5b:f2:b2:87:3c:0a:d5:15:e4:21:
         60:fb:2a:33:bc:8f:a6:70:93:1c:7a:7a:8e:d8:9b:58:ca:f3:
         09:33:8e:8a:c5:bf:e1:4f:e9:16:16:4e:e0:2f:d3:0e:36:56:
         f0:25:38:fd:ed:c3:75:55:53:10:f3:d8:c1:32:14:f4:89:5e:
         1d:e8:55:c8:8d:c4:3a:b6:b0:0f:e8:7a:fa:d7:32:6b:5b:eb:
         8b:f6:b1:c7:6f:89:5b:ed:9f:c6:e0:44:36:d0:c9:f7:db:d0:
         72:ad:b3:31:92:a7:91:a0:32:8b:19:6c:34:62:6a:a9:1f:a6:
         5e:fb:15:70:6e:61:33:30:f7:9f:2f:f4:c0:00:93:06:2a:35:
         da:09:94:f8:a2:36:35:3d:f2:fc:b7:59:fb:65:ae:70:41:f8:
         3e:c6:b3:49:f7:6a:20:64:c6:21:69:4d:2c:66:51:dd:1e:f6:
         0b:bc:ad:26:0e:7c:a7:69:be:05:ac:c6:54:94:4e:ba:5f:b4:
         96:d8:96:cb
-----BEGIN CERTIFICATE-----
MIIGlTCCBX2gAwIBAgIEB9CA/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMB4XDTIyMDEx
NDEyMTAwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmY4NGFmN2Q2MzI3
NmJiNWYzNTQ3MGJlNDVmZjA0MDRiNDUwMjQ2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOB9wQLGsHlipJrclu5dqd8zMxp76jlWPxAYW4eIhA5UKIjM
L6IoQHgbanton9n1nuxRP7UA2Nz1SrSd5UM4R6NizS5utM4TomMZvLXag4KsKUEQ
SATMSH1giPWr7WzsdQnM7jP3Q2WPmJ/kywR8ICvwqGpOC42TazsVV0FJ0vVoYcqm
04OS5aPaOuyXW+cMMZ4r3yTlyPN1w0Lr2KotHAqAobtUjHN2B+sp71WDwNRgnWk3
8spAC1RPyoukmk2aPpOXVFmeAZ9N39FUr/wyF9slQCnH7i6IS1pZIQSL78/0w2Yc
U2do1d/y+MBKz73wLBiW6S4GcomRqLjkJfYcHoUCAwEAAaOCA68wggOrMB0GA1Ud
DgQWBBQvhK99YydrtfNUcL5F/wQEtFAkbTAfBgNVHSMEGDAWgBSldussxGLm5L8N
5pufY0h13ruq4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYYnJMTVJpNXVTX0RlYWJuMk5JZGQ2N3F1SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvOTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8x
L0w0U3ZmV01uYTdYelZIQy1SZjhFQkxSUUpHMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
OTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVT
X0RlYWJuMk5JZGQ2N3F1SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AcMGCCsGAQUFBwEHAQH/BIIBsjCCAa4wggEUBAIAATCCAQwDBAAtCy0DBAEtDcYD
BAItULwDBAAtWtIDBAAtXJ0DBAItghQDBAItg5gDBAIti8ADBAItj+gDBAItkzAD
BAItmfQDBAI+hSADBAJOjsADBAJPj4wDBAJQQsQDBABbyPEwDAMEA1w8KAMEAFw8
KgMEAl58dAMEAl/WpAMEAm1eqAMEAo1ixAMEApNOsAMEApU+LAMEArkxIAMEArnC
NAMEArnIQAMEArnVlAMEA7ne2AMEArn4VAMEArn+SAMEArn/NAMEAcFvHgMEAcFv
WgMEAsGx3AMEAsIkGAMEAcIk3gMEAsJomAMEAMJ81QMEAMJ82DAMAwQAwnzjAwQA
wnzkAwQBwqk2AwQBwqm0MIGTBAIAAjCBjAMFAyoD2cADBQMqBk/AAwUDKgZXwAMF
AyoH6QADBQMqB/oAAwUDKgf+AAMFAyoJAAADBQAqC0CAAwUDKguJwAMFAyoMWcAD
BQMqDO1AAwUDKg0fwAMFAyoNNkADBQMqDUNAAwUDKg1LwAMFAyoNdUADBQMqDd6A
AwUDKg5iAAMFAyoQBIADBQMqECYAMA0GCSqGSIb3DQEBCwUAA4IBAQCZKg4qoghD
TTlW/dCfPCizj7mTyKxCupQA/KqMfYoY/RTUdLzmQd48LXj07ggqU8mDtxNT0fcC
IjxjEGJNiFvysoc8CtUV5CFg+yozvI+mcJMcenqO2JtYyvMJM46Kxb/hT+kWFk7g
L9MONlbwJTj97cN1VVMQ89jBMhT0iV4d6FXIjcQ6trAP6Hr61zJrW+uL9rHHb4lb
7Z/G4EQ20Mn329ByrbMxkqeRoDKLGWw0YmqpH6Ze+xVwbmEzMPefL/TAAJMGKjXa
CZT4ojY1PfL8t1n7Za5wQfg+xrNJ92ogZMYhaU0sZlHdHvYLvK0mDnynab4FrMZU
lE66X7SW2JbL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:58 2023 by rpki-client on console-fra.rpki-client.org