Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/U8Ycz6mkaPDLlojRql7uFHDmvNg.roa
File:                     U8Ycz6mkaPDLlojRql7uFHDmvNg.roa (raw, json)
Hash identifier:          M0gyVX2wbugTpL3NPESyX1DtWF2zqgODLqeV1X6LPbc=
Subject key identifier:   53:C6:1C:CF:A9:A4:68:F0:CB:96:88:D1:AA:5E:EE:14:70:E6:BC:D8
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       0182EEC71DBFE0EF3292EDB8D13B3346D107
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/U8Ycz6mkaPDLlojRql7uFHDmvNg.roa
Signing time:             Tue 30 Aug 2022 12:43:22 +0000
ROA not before:           Tue 30 Aug 2022 12:43:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3214
IP address blocks:        80.66.196.0/22 maxlen: 24
                          92.60.40.0/23 maxlen: 23
                          92.60.42.0/24 maxlen: 24
                          92.60.41.0/24 maxlen: 24
                          92.60.40.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          45.147.48.0/22 maxlen: 24
                          45.153.244.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          91.200.241.0/24 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          141.98.196.0/22 maxlen: 24
                          45.11.45.0/24 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          185.200.64.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          185.254.72.0/22 maxlen: 24
                          185.213.148.0/22 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          194.36.222.0/23 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          45.90.210.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          185.49.32.0/22 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          45.130.20.0/22 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          194.36.24.0/22 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          45.143.232.0/22 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          45.13.198.0/24 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          185.222.220.0/24 maxlen: 24
                          2a06:4fc0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a0b:4080::/32 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0c:ed40::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a0d:de80::/29 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a03:d9c0::/29 maxlen: 48
                          2a09:0:3::/48 maxlen: 48
                          2a10:2600::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a0e:6200::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a03:d9c0:3000::/48 maxlen: 64
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a0d:4bc0::/29 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a10:480::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ee:c7:1d:bf:e0:ef:32:92:ed:b8:d1:3b:33:46:d1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Aug 30 12:43:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53c61ccfa9a468f0cb9688d1aa5eee1470e6bcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:a7:b3:b1:d9:ee:23:59:f7:ce:55:75:2b:
                    1c:1a:30:ea:de:d3:60:4e:14:34:2e:ce:ae:17:cc:
                    58:3b:a6:66:6b:51:de:9b:20:98:94:6d:2d:c7:2a:
                    13:d7:0b:dc:b2:ed:48:ec:9d:53:59:eb:a4:6d:55:
                    ab:92:58:c6:db:51:b1:3d:b2:11:6e:35:b3:e2:10:
                    62:71:4d:5b:e7:73:e7:9c:9f:09:8d:ee:9a:a0:b7:
                    39:cb:6a:4e:74:6e:ad:c4:a3:60:29:69:0b:bd:a0:
                    e3:95:3a:61:ca:e3:5b:e0:1a:25:0b:d3:f7:e1:c1:
                    b1:b8:ca:cd:56:44:a9:9c:ab:4e:46:fd:1e:4a:e7:
                    2f:59:9a:6f:ff:7c:81:d1:2a:03:cf:b1:e5:e1:76:
                    8f:c2:bd:dc:3d:e3:6b:a5:ee:4d:26:74:b9:17:9b:
                    f5:ad:ca:87:0a:77:de:1e:9d:6a:a6:2f:b1:4d:f6:
                    51:97:7f:b6:45:74:95:77:f5:99:42:df:88:e7:f3:
                    57:03:04:49:d9:ef:6c:26:4c:32:81:e3:a1:26:df:
                    bd:ae:24:3c:58:4a:77:8d:08:a8:08:2a:ea:8f:2a:
                    54:37:cd:4e:6f:19:16:6f:27:a0:0b:13:06:0e:f1:
                    3e:07:da:c7:ff:d3:a9:77:9c:bd:2b:cd:0d:9c:66:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C6:1C:CF:A9:A4:68:F0:CB:96:88:D1:AA:5E:EE:14:70:E6:BC:D8
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/U8Ycz6mkaPDLlojRql7uFHDmvNg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.80.188.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.130.20.0/22
                  45.131.152.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/22
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  149.62.44.0/22
                  185.49.32.0/22
                  185.194.52.0/22
                  185.200.64.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.72.0/22
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  194.36.24.0/22
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         1f:02:33:ce:d0:1d:12:13:22:88:5f:87:76:d0:a1:a1:9f:a6:
         41:5f:94:d4:7f:f8:96:03:dd:e3:9b:e9:9f:1f:88:11:34:83:
         c0:e2:25:6e:3e:de:f9:b8:a7:d4:0a:7b:9c:ce:19:60:f9:94:
         0f:a6:e3:f5:b9:6c:ac:e3:58:be:08:a3:b2:7c:1d:b4:e1:25:
         86:ff:a2:74:fe:8a:08:e3:50:75:cd:ba:30:53:8d:b9:c7:e6:
         37:b8:83:d8:d1:9b:bd:44:01:4c:50:46:7d:f4:a4:12:10:34:
         34:60:3b:3e:79:1b:bb:a9:3d:6c:d0:a2:3b:f6:e5:fb:cb:93:
         87:69:16:c2:bd:9a:5d:1b:b4:87:32:7f:5f:ff:fa:f2:3a:2f:
         bf:63:4a:70:d9:69:9d:2f:8f:5b:4c:bc:8f:9b:ef:ef:0e:87:
         b5:69:69:9f:aa:7d:e8:77:df:42:39:1c:26:24:89:93:ae:93:
         c4:34:2c:af:41:f8:04:54:06:2d:d9:9c:a3:b8:2a:45:71:a3:
         1b:e3:9d:e3:33:3f:57:7f:dc:9c:e0:f9:42:2c:59:c7:2d:07:
         71:ea:d4:72:c7:5a:30:59:ab:41:47:d2:30:80:86:33:5f:fd:
         aa:f5:49:0b:57:d9:4b:2f:2a:ac:7e:ae:ef:2f:d5:e8:28:41:
         de:28:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org