Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/M1rofpvBwV8IMpkO4k4GEm8YFeg.roa
File:                     M1rofpvBwV8IMpkO4k4GEm8YFeg.roa (raw, json)
Hash identifier:          FDfCcxqfCk+WRW1L6WFAnvdjq/VEFbbHfhcKGY4Vubg=
Subject key identifier:   33:5A:E8:7E:9B:C1:C1:5F:08:32:99:0E:E2:4E:06:12:6F:18:15:E8
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       0CA69A04
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/M1rofpvBwV8IMpkO4k4GEm8YFeg.roa
Signing time:             Fri 04 Feb 2022 08:15:58 +0000
ROA not before:           Fri 04 Feb 2022 08:15:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8926
IP address blocks:        93.113.244.0/22 maxlen: 22
                          86.107.64.0/22 maxlen: 22
                          89.46.164.0/22 maxlen: 22
                          188.208.96.0/22 maxlen: 22
                          188.208.104.0/22 maxlen: 22
                          188.214.200.0/21 maxlen: 21
                          89.32.252.0/22 maxlen: 22
                          188.214.228.0/22 maxlen: 22
                          86.107.160.0/21 maxlen: 21
                          188.208.192.0/22 maxlen: 22
                          188.208.204.0/22 maxlen: 22
                          92.114.128.0/18 maxlen: 18
                          92.114.128.0/17 maxlen: 24
                          188.208.112.0/22 maxlen: 22
                          188.208.120.0/21 maxlen: 24
                          89.32.56.0/21 maxlen: 21
                          93.119.200.0/21 maxlen: 21
                          93.119.232.0/21 maxlen: 21
                          93.119.228.0/22 maxlen: 22
                          188.214.60.0/22 maxlen: 22
                          93.113.64.0/21 maxlen: 21
                          188.213.236.0/22 maxlen: 22
                          93.119.160.0/21 maxlen: 21
                          188.213.244.0/22 maxlen: 22
                          93.119.196.0/22 maxlen: 22
                          89.39.96.0/21 maxlen: 21
                          188.214.136.0/22 maxlen: 22
                          89.32.172.0/22 maxlen: 22
                          86.106.213.0/24 maxlen: 24
                          89.39.112.0/21 maxlen: 21
                          86.106.208.0/20 maxlen: 20
                          86.106.224.0/19 maxlen: 19
                          86.106.144.0/21 maxlen: 21
                          93.113.80.0/21 maxlen: 21
                          89.32.136.0/21 maxlen: 21
                          93.113.92.0/22 maxlen: 22
                          89.39.76.0/22 maxlen: 22
                          89.39.84.0/22 maxlen: 22
                          178.132.112.0/20 maxlen: 20
                          89.38.32.0/22 maxlen: 22
                          178.132.128.0/18 maxlen: 19
                          89.38.64.0/22 maxlen: 22
                          89.38.76.0/22 maxlen: 22
                          86.105.172.0/22 maxlen: 22
                          93.118.188.0/22 maxlen: 22
                          86.105.80.0/21 maxlen: 21
                          188.213.36.0/22 maxlen: 22
                          188.213.52.0/22 maxlen: 22
                          93.119.96.0/21 maxlen: 21
                          93.119.108.0/22 maxlen: 22
                          93.119.128.0/21 maxlen: 21
                          93.119.140.0/22 maxlen: 22
                          188.213.220.0/22 maxlen: 22
                          93.119.144.0/21 maxlen: 21
                          89.45.40.0/22 maxlen: 22
                          86.105.208.0/22 maxlen: 22
                          109.185.128.0/18 maxlen: 24
                          89.37.104.0/24 maxlen: 24
                          86.104.196.0/22 maxlen: 22
                          109.185.64.0/18 maxlen: 18
                          89.37.44.0/22 maxlen: 22
                          89.44.152.0/22 maxlen: 22
                          86.105.56.0/21 maxlen: 21
                          93.118.176.0/22 maxlen: 22
                          109.185.192.0/18 maxlen: 18
                          93.117.68.0/22 maxlen: 22
                          93.117.72.0/21 maxlen: 21
                          89.36.156.0/22 maxlen: 22
                          85.204.176.0/21 maxlen: 21
                          93.117.48.0/20 maxlen: 20
                          188.212.0.0/22 maxlen: 22
                          188.212.8.0/21 maxlen: 21
                          188.212.24.0/21 maxlen: 21
                          89.43.168.0/22 maxlen: 22
                          188.212.40.0/21 maxlen: 21
                          93.117.128.0/21 maxlen: 21
                          93.117.144.0/21 maxlen: 21
                          93.117.140.0/22 maxlen: 22
                          89.43.128.0/22 maxlen: 22
                          93.117.156.0/22 maxlen: 22
                          109.185.0.0/18 maxlen: 18
                          93.117.160.0/21 maxlen: 21
                          109.185.0.0/16 maxlen: 24
                          93.117.168.0/22 maxlen: 22
                          93.116.128.0/18 maxlen: 18
                          89.42.104.0/22 maxlen: 22
                          188.237.192.0/18 maxlen: 18
                          89.42.128.0/22 maxlen: 22
                          188.237.128.0/18 maxlen: 18
                          93.116.64.0/18 maxlen: 18
                          89.42.64.0/22 maxlen: 22
                          188.237.168.0/24 maxlen: 24
                          89.42.72.0/21 maxlen: 21
                          5.56.64.0/24 maxlen: 24
                          5.56.64.0/18 maxlen: 19
                          5.56.73.0/24 maxlen: 24
                          5.56.72.0/24 maxlen: 24
                          89.42.224.0/22 maxlen: 22
                          188.210.240.0/21 maxlen: 21
                          89.35.200.0/22 maxlen: 22
                          188.210.248.0/22 maxlen: 22
                          93.116.192.0/18 maxlen: 24
                          89.42.180.0/22 maxlen: 22
                          89.34.192.0/21 maxlen: 21
                          94.176.64.0/20 maxlen: 20
                          89.34.204.0/22 maxlen: 22
                          46.55.0.0/18 maxlen: 18
                          46.55.0.0/17 maxlen: 24
                          37.75.64.0/18 maxlen: 19
                          89.34.232.0/22 maxlen: 22
                          188.237.0.0/18 maxlen: 18
                          92.115.192.0/18 maxlen: 18
                          188.237.0.0/16 maxlen: 24
                          212.0.215.0/24 maxlen: 24
                          89.41.64.0/18 maxlen: 19
                          37.75.16.0/20 maxlen: 20
                          92.115.128.0/18 maxlen: 18
                          188.209.216.0/21 maxlen: 21
                          93.115.136.0/21 maxlen: 21
                          188.237.64.0/18 maxlen: 18
                          93.116.0.0/18 maxlen: 18
                          89.35.40.0/21 maxlen: 21
                          93.116.0.0/16 maxlen: 24
                          46.55.111.0/24 maxlen: 24
                          89.35.84.0/22 maxlen: 22
                          89.35.8.0/21 maxlen: 21
                          46.55.64.0/18 maxlen: 18
                          185.28.104.0/22 maxlen: 22
                          92.114.192.0/20 maxlen: 20
                          92.114.192.0/18 maxlen: 18
                          188.215.236.0/22 maxlen: 22
                          188.215.252.0/22 maxlen: 22
                          92.114.144.0/20 maxlen: 20
                          92.114.160.0/20 maxlen: 20
                          92.114.176.0/20 maxlen: 20
                          92.115.64.0/18 maxlen: 18
                          212.0.192.0/22 maxlen: 22
                          212.0.192.0/19 maxlen: 32
                          212.0.199.0/24 maxlen: 24
                          212.0.195.0/24 maxlen: 24
                          212.0.193.0/24 maxlen: 24
                          89.34.112.0/21 maxlen: 21
                          212.0.198.0/24 maxlen: 24
                          212.0.196.0/24 maxlen: 24
                          212.0.200.0/21 maxlen: 24
                          212.0.203.0/24 maxlen: 24
                          212.0.208.0/20 maxlen: 24
                          212.0.210.0/24 maxlen: 24
                          92.115.0.0/18 maxlen: 18
                          89.40.228.0/22 maxlen: 22
                          92.115.0.0/16 maxlen: 24
                          89.34.64.0/21 maxlen: 21
                          2a02:a30:1600::/48 maxlen: 48
                          2a02:a30:172::/48 maxlen: 48
                          2a02:a30:6330:103::/64 maxlen: 64
                          2a02:a30:f090::/44 maxlen: 48
                          2a02:a30::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212244996 (0xca69a04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Feb  4 08:15:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=335ae87e9bc1c15f0832990ee24e06126f1815e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:49:1d:e1:f2:1b:80:09:bb:be:3e:16:90:
                    30:00:97:88:7d:1b:d6:34:e5:cf:a3:da:3a:7c:4d:
                    89:b1:01:7e:5a:42:a7:e4:bb:de:2a:f7:31:61:f8:
                    b3:27:db:74:ba:16:83:ff:ca:b5:a9:83:39:4c:b1:
                    a2:7d:ff:58:a2:74:6f:d1:ad:3c:31:70:49:8d:a6:
                    4e:9d:c1:14:20:db:35:42:92:5f:92:d0:ec:76:17:
                    0e:c2:c6:bf:6b:5f:9b:db:6d:da:3d:76:8d:f3:ce:
                    43:93:03:3d:5a:39:48:53:6b:87:b5:64:34:0a:fe:
                    5a:0c:e8:c1:7b:5b:75:91:48:01:70:40:c4:f7:eb:
                    66:0a:99:9c:1e:76:63:5a:66:ec:1f:b3:5b:52:13:
                    2e:b1:29:dd:e4:ae:42:8e:bb:a6:b6:5a:43:fb:ec:
                    0d:12:20:02:9b:a1:ed:36:79:51:e8:35:27:d3:d5:
                    c7:c0:0e:07:4b:63:b7:de:30:91:d0:6c:8c:db:b9:
                    a7:96:a0:59:1a:bd:63:3f:5c:39:57:70:53:fa:14:
                    ed:60:28:88:c9:df:aa:55:c2:62:e7:45:cc:cb:37:
                    e8:c4:4c:67:84:ad:2d:ce:4a:81:3b:6d:ba:d1:69:
                    31:47:56:a5:a5:98:f3:18:7d:51:05:df:fb:b6:ef:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5A:E8:7E:9B:C1:C1:5F:08:32:99:0E:E2:4E:06:12:6F:18:15:E8
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/M1rofpvBwV8IMpkO4k4GEm8YFeg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.64.0/18
                  37.75.16.0/20
                  37.75.64.0/18
                  46.55.0.0/17
                  85.204.176.0/21
                  86.104.196.0/22
                  86.105.56.0/21
                  86.105.80.0/21
                  86.105.172.0/22
                  86.105.208.0/22
                  86.106.144.0/21
                  86.106.208.0-86.106.255.255
                  86.107.64.0/22
                  86.107.160.0/21
                  89.32.56.0/21
                  89.32.136.0/21
                  89.32.172.0/22
                  89.32.252.0/22
                  89.34.64.0/21
                  89.34.112.0/21
                  89.34.192.0/21
                  89.34.204.0/22
                  89.34.232.0/22
                  89.35.8.0/21
                  89.35.40.0/21
                  89.35.84.0/22
                  89.35.200.0/22
                  89.36.156.0/22
                  89.37.44.0/22
                  89.37.104.0/24
                  89.38.32.0/22
                  89.38.64.0/22
                  89.38.76.0/22
                  89.39.76.0/22
                  89.39.84.0/22
                  89.39.96.0/21
                  89.39.112.0/21
                  89.40.228.0/22
                  89.41.64.0/18
                  89.42.64.0/22
                  89.42.72.0/21
                  89.42.104.0/22
                  89.42.128.0/22
                  89.42.180.0/22
                  89.42.224.0/22
                  89.43.128.0/22
                  89.43.168.0/22
                  89.44.152.0/22
                  89.45.40.0/22
                  89.46.164.0/22
                  92.114.128.0-92.115.255.255
                  93.113.64.0/21
                  93.113.80.0/21
                  93.113.92.0/22
                  93.113.244.0/22
                  93.115.136.0/21
                  93.116.0.0/16
                  93.117.48.0/20
                  93.117.68.0-93.117.79.255
                  93.117.128.0/21
                  93.117.140.0-93.117.151.255
                  93.117.156.0-93.117.171.255
                  93.118.176.0/22
                  93.118.188.0/22
                  93.119.96.0/21
                  93.119.108.0/22
                  93.119.128.0/21
                  93.119.140.0-93.119.151.255
                  93.119.160.0/21
                  93.119.196.0-93.119.207.255
                  93.119.228.0-93.119.239.255
                  94.176.64.0/20
                  109.185.0.0/16
                  178.132.112.0-178.132.191.255
                  185.28.104.0/22
                  188.208.96.0/22
                  188.208.104.0/22
                  188.208.112.0/22
                  188.208.120.0/21
                  188.208.192.0/22
                  188.208.204.0/22
                  188.209.216.0/21
                  188.210.240.0-188.210.251.255
                  188.212.0.0/22
                  188.212.8.0/21
                  188.212.24.0/21
                  188.212.40.0/21
                  188.213.36.0/22
                  188.213.52.0/22
                  188.213.220.0/22
                  188.213.236.0/22
                  188.213.244.0/22
                  188.214.60.0/22
                  188.214.136.0/22
                  188.214.200.0/21
                  188.214.228.0/22
                  188.215.236.0/22
                  188.215.252.0/22
                  188.237.0.0/16
                  212.0.192.0/19
                IPv6:
                  2a02:a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:a5:a5:93:80:b2:2e:a9:38:22:5e:b6:ee:47:92:27:85:a5:
         5c:69:1a:34:59:88:34:f2:f3:cc:c0:35:63:99:7c:d4:e9:33:
         21:c7:f4:90:d8:0d:2d:92:48:3a:be:95:ea:e2:69:36:47:29:
         67:4e:0e:29:bb:c6:d2:03:f2:3f:a7:70:4c:47:91:21:93:2e:
         33:97:b2:c8:fc:7c:4f:24:c4:b9:6c:78:7c:57:4d:65:b5:6f:
         dc:84:4f:03:1c:6b:e1:db:5f:61:e5:31:3f:c6:43:7f:e1:78:
         87:50:94:c3:20:36:0e:82:d0:e0:ab:17:18:96:67:41:c6:78:
         9f:1c:f6:aa:08:57:ba:8a:d8:48:a6:38:bd:d0:9d:e2:a4:01:
         c2:c5:80:77:62:32:7d:6c:1c:3e:e3:27:ad:6a:d6:1c:a7:e5:
         b4:40:e8:3a:db:da:d4:7f:e6:72:58:ef:62:79:02:42:b9:1f:
         e8:e2:fa:ab:41:f0:39:06:bf:4c:71:fa:9f:2b:30:cb:34:13:
         37:30:d8:52:9a:87:cf:94:2e:01:2a:db:61:2f:8a:1a:1b:34:
         2d:97:2d:c9:c2:7e:88:00:06:69:55:f6:18:1f:9e:24:eb:e0:
         1f:35:26:07:91:cd:02:68:b3:97:0e:d8:a1:39:9b:41:c5:65:
         2c:21:7a:37
-----BEGIN CERTIFICATE-----
MIIHpTCCBo2gAwIBAgIEDKaaBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MjA4OGUwNmQ1NTNjZmYyOTNkMjc3ZjRkNzZjM2E3MTBiZDhiMmY3MB4XDTIyMDIw
NDA4MTU1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzM1YWU4N2U5YmMx
YzE1ZjA4MzI5OTBlZTI0ZTA2MTI2ZjE4MTVlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALqPSR3h8huACbu+PhaQMACXiH0b1jTlz6PaOnxNibEBflpC
p+S73ir3MWH4syfbdLoWg//KtamDOUyxon3/WKJ0b9GtPDFwSY2mTp3BFCDbNUKS
X5LQ7HYXDsLGv2tfm9tt2j12jfPOQ5MDPVo5SFNrh7VkNAr+WgzowXtbdZFIAXBA
xPfrZgqZnB52Y1pm7B+zW1ITLrEp3eSuQo67prZaQ/vsDRIgApuh7TZ5Ueg1J9PV
x8AOB0tjt94wkdBsjNu5p5agWRq9Yz9cOVdwU/oU7WAoiMnfqlXCYudFzMs36MRM
Z4StLc5KgTttutFpMUdWpaWY8xh9UQXf+7bv2qsCAwEAAaOCBL8wggS7MB0GA1Ud
DgQWBBQzWuh+m8HBXwgymQ7iTgYSbxgV6DAfBgNVHSMEGDAWgBSiCI4G1VPP8pPS
d/TXbDpxC9iy9zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29naU9CdFZUel9LVDBuZjAxMnc2Y1F2WXN2Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTEvYjQ1ZDc5LWE0ZDctNDQ2MC1iZmU3LWJiZWEyOTE4ZTEwMi8x
L00xcm9mcHZCd1Y4SU1wa080azRHRW04WUZlZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEv
YjQ1ZDc5LWE0ZDctNDQ2MC1iZmU3LWJiZWEyOTE4ZTEwMi8xL29naU9CdFZUel9L
VDBuZjAxMnc2Y1F2WXN2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AtMGCCsGAQUFBwEHAQH/BIICwjCCAr4wggKrBAIAATCCAqMDBAYFOEADBAQlSxAD
BAYlS0ADBAcuNwADBANVzLADBAJWaMQDBANWaTgDBANWaVADBAJWaawDBAJWadAD
BANWapAwCwMEBFZq0AMDAFZqAwQCVmtAAwQDVmugAwQDWSA4AwQDWSCIAwQCWSCs
AwQCWSD8AwQDWSJAAwQDWSJwAwQDWSLAAwQCWSLMAwQCWSLoAwQDWSMIAwQDWSMo
AwQCWSNUAwQCWSPIAwQCWSScAwQCWSUsAwQAWSVoAwQCWSYgAwQCWSZAAwQCWSZM
AwQCWSdMAwQCWSdUAwQDWSdgAwQDWSdwAwQCWSjkAwQGWSlAAwQCWSpAAwQDWSpI
AwQCWSpoAwQCWSqAAwQCWSq0AwQCWSrgAwQCWSuAAwQCWSuoAwQCWSyYAwQCWS0o
AwQCWS6kMAsDBAdccoADAwJccAMEA11xQAMEA11xUAMEAl1xXAMEAl1x9AMEA11z
iAMDAF10AwQEXXUwMAwDBAJddUQDBARddUADBANddYAwDAMEAl11jAMEA111kDAM
AwQCXXWcAwQCXXWoAwQCXXawAwQCXXa8AwQDXXdgAwQCXXdsAwQDXXeAMAwDBAJd
d4wDBANdd5ADBANdd6AwDAMEAl13xAMEBF13wDAMAwQCXXfkAwQEXXfgAwQEXrBA
AwMAbbkwDAMEBLKEcAMEBrKEgAMEArkcaAMEArzQYAMEArzQaAMEArzQcAMEA7zQ
eAMEArzQwAMEArzQzAMEA7zR2DAMAwQEvNLwAwQCvNL4AwQCvNQAAwQDvNQIAwQD
vNQYAwQDvNQoAwQCvNUkAwQCvNU0AwQCvNXcAwQCvNXsAwQCvNX0AwQCvNY8AwQC
vNaIAwQDvNbIAwQCvNbkAwQCvNfsAwQCvNf8AwMAvO0DBAXUAMAwDQQCAAIwBwMF
ACoCCjAwDQYJKoZIhvcNAQELBQADggEBAC6lpZOAsi6pOCJetu5HkieFpVxpGjRZ
iDTy88zANWOZfNTpMyHH9JDYDS2SSDq+leriaTZHKWdODim7xtID8j+ncExHkSGT
LjOXssj8fE8kxLlseHxXTWW1b9yETwMca+HbX2HlMT/GQ3/heIdQlMMgNg6C0OCr
FxiWZ0HGeJ8c9qoIV7qK2EimOL3QneKkAcLFgHdiMn1sHD7jJ61q1hyn5bRA6Drb
2tR/5nJY72J5AkK5H+ji+qtB8DkGv0xx+p8rMMs0Ezcw2FKah8+ULgEq22Evihob
NC2XLcnCfogABmlV9hgfniTr4B81JgeRzQJos5cO2KE5m0HFZSwhejc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-fra.rpki-client.org