Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/z6L1z0HxSqNKd7sT18NievQbNgg.roa
File:                     z6L1z0HxSqNKd7sT18NievQbNgg.roa (raw, json)
Hash identifier:          l5TiCvdt702jegApn9eKLubEgOpbUXDEx6H0Mu8gxBk=
Subject key identifier:   CF:A2:F5:CF:41:F1:4A:A3:4A:77:BB:13:D7:C3:62:7A:F4:1B:36:08
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       01852AFCC3F0A51CC9BDB886A08CE31A1C52
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/z6L1z0HxSqNKd7sT18NievQbNgg.roa
Signing time:             Mon 19 Dec 2022 15:24:46 +0000
ROA not before:           Mon 19 Dec 2022 15:24:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.228.120.0/24 maxlen: 24
                          185.228.123.0/24 maxlen: 24
                          185.228.122.0/24 maxlen: 24
                          185.228.121.0/24 maxlen: 24
                          185.228.120.0/22 maxlen: 24
                          185.134.40.0/22 maxlen: 24
                          5.181.100.0/22 maxlen: 24
                          45.141.4.0/22 maxlen: 24
                          185.93.120.0/22 maxlen: 24
                          185.113.186.0/24 maxlen: 24
                          185.113.185.0/24 maxlen: 24
                          185.113.184.0/24 maxlen: 24
                          185.113.187.0/24 maxlen: 24
                          188.208.20.0/22 maxlen: 24
                          193.32.236.0/22 maxlen: 24
                          188.208.21.0/24 maxlen: 24
                          89.47.4.0/22 maxlen: 24
                          185.94.48.0/22 maxlen: 24
                          185.93.232.0/22 maxlen: 24
                          176.32.54.0/24 maxlen: 24
                          93.92.224.0/22 maxlen: 24
                          185.119.236.0/22 maxlen: 24
                          176.32.50.0/24 maxlen: 24
                          185.248.96.0/22 maxlen: 24
                          188.241.96.0/21 maxlen: 24
                          185.120.44.0/22 maxlen: 24
                          185.234.186.0/23 maxlen: 23
                          86.106.184.0/22 maxlen: 24
                          185.234.184.0/24 maxlen: 24
                          185.234.185.0/24 maxlen: 24
                          185.44.233.0/24 maxlen: 24
                          185.44.234.0/23 maxlen: 24
                          185.51.108.0/22 maxlen: 24
                          185.240.44.0/22 maxlen: 24
                          185.72.52.0/22 maxlen: 24
                          86.105.234.0/24 maxlen: 24
                          188.240.204.0/22 maxlen: 24
                          212.104.160.0/19 maxlen: 24
                          5.226.16.0/20 maxlen: 24
                          185.131.188.0/22 maxlen: 24
                          85.117.245.0/24 maxlen: 24
                          193.91.0.0/24 maxlen: 24
                          85.117.244.0/22 maxlen: 24
                          193.91.10.0/24 maxlen: 24
                          185.43.252.0/22 maxlen: 24
                          185.77.168.0/22 maxlen: 24
                          88.98.98.0/24 maxlen: 24
                          86.105.28.0/22 maxlen: 24
                          88.98.96.0/20 maxlen: 24
                          88.98.96.0/23 maxlen: 23
                          88.98.99.0/24 maxlen: 24
                          88.98.104.0/23 maxlen: 24
                          88.98.100.0/22 maxlen: 24
                          88.98.111.0/24 maxlen: 24
                          88.98.110.0/24 maxlen: 24
                          88.98.108.0/23 maxlen: 24
                          88.98.108.0/22 maxlen: 24
                          88.98.106.0/23 maxlen: 24
                          88.98.112.0/20 maxlen: 24
                          141.98.52.0/22 maxlen: 24
                          212.63.116.0/22 maxlen: 24
                          212.63.118.0/24 maxlen: 24
                          212.63.117.0/24 maxlen: 24
                          212.63.116.0/24 maxlen: 24
                          212.63.121.0/24 maxlen: 24
                          212.63.119.0/24 maxlen: 24
                          212.63.123.0/24 maxlen: 24
                          212.63.122.0/24 maxlen: 24
                          185.83.104.0/22 maxlen: 24
                          45.144.12.0/22 maxlen: 24
                          45.90.52.0/22 maxlen: 24
                          185.158.52.0/22 maxlen: 24
                          91.245.200.0/21 maxlen: 24
                          185.131.13.0/24 maxlen: 24
                          185.131.12.0/22 maxlen: 24
                          85.217.132.0/24 maxlen: 24
                          85.217.129.0/24 maxlen: 24
                          85.217.139.0/24 maxlen: 24
                          85.217.138.0/24 maxlen: 24
                          85.217.137.0/24 maxlen: 24
                          85.217.136.0/24 maxlen: 24
                          85.217.135.0/24 maxlen: 24
                          85.217.134.0/24 maxlen: 24
                          85.217.133.0/24 maxlen: 24
                          85.217.141.0/24 maxlen: 24
                          85.217.143.0/24 maxlen: 24
                          85.217.142.0/24 maxlen: 24
                          85.217.152.0/24 maxlen: 24
                          85.217.151.0/24 maxlen: 24
                          85.217.150.0/24 maxlen: 24
                          85.217.147.0/24 maxlen: 24
                          85.217.146.0/24 maxlen: 24
                          85.217.159.0/24 maxlen: 24
                          85.217.155.0/24 maxlen: 24
                          185.156.248.0/22 maxlen: 24
                          85.217.154.0/24 maxlen: 24
                          85.217.153.0/24 maxlen: 24
                          85.217.158.0/24 maxlen: 24
                          85.217.157.0/24 maxlen: 24
                          85.217.156.0/24 maxlen: 24
                          185.130.24.0/23 maxlen: 24
                          185.75.200.0/22 maxlen: 24
                          194.8.140.0/22 maxlen: 24
                          194.49.0.0/22 maxlen: 24
                          185.130.26.0/23 maxlen: 24
                          185.123.136.0/22 maxlen: 24
                          45.157.56.0/22 maxlen: 24
                          185.48.84.0/22 maxlen: 24
                          185.176.84.0/22 maxlen: 24
                          185.210.16.0/22 maxlen: 24
                          79.142.184.0/22 maxlen: 24
                          185.162.172.0/23 maxlen: 24
                          185.162.175.0/24 maxlen: 24
                          185.162.174.0/24 maxlen: 24
                          195.82.105.0/24 maxlen: 24
                          195.82.104.0/24 maxlen: 24
                          195.82.106.0/24 maxlen: 24
                          195.82.124.0/24 maxlen: 24
                          195.82.123.0/24 maxlen: 24
                          195.82.122.0/24 maxlen: 24
                          195.82.121.0/24 maxlen: 24
                          195.82.120.0/24 maxlen: 24
                          185.216.216.0/22 maxlen: 22
                          185.216.218.0/23 maxlen: 23
                          185.216.217.0/24 maxlen: 24
                          139.28.76.0/22 maxlen: 22
                          185.196.200.0/23 maxlen: 24
                          185.196.203.0/24 maxlen: 24
                          185.196.202.0/24 maxlen: 24
                          185.229.96.0/22 maxlen: 24
                          91.242.144.0/22 maxlen: 24
                          185.229.44.0/22 maxlen: 24
                          185.202.188.0/22 maxlen: 24
                          2a06:8840::/29 maxlen: 29
                          2a06:8f40::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2a:fc:c3:f0:a5:1c:c9:bd:b8:86:a0:8c:e3:1a:1c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Dec 19 15:24:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cfa2f5cf41f14aa34a77bb13d7c3627af41b3608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:64:eb:0f:11:4c:96:b5:81:5a:c3:fd:ac:
                    74:fe:52:6a:46:46:64:2c:ce:8a:73:12:91:98:b0:
                    60:5e:4b:c3:51:6a:9c:11:03:66:e5:68:f5:01:01:
                    ec:a9:76:07:46:f0:66:43:fa:f7:ce:6c:ed:d6:ee:
                    0d:44:6d:93:fa:4b:52:49:5b:3a:7a:52:0f:e5:ec:
                    bc:91:da:35:91:8c:ea:26:75:81:7e:8a:45:0f:d3:
                    fa:39:7c:cb:e5:d3:6f:60:75:74:26:e7:a8:04:1d:
                    39:e9:cc:a2:df:30:c4:d0:96:a9:f6:85:52:84:98:
                    35:28:4d:5a:80:62:1a:aa:fc:c3:3d:f0:8f:17:5c:
                    2f:4a:89:bd:f5:de:ac:3b:c3:3b:47:f0:e7:0e:1a:
                    43:99:65:97:3b:47:95:bd:88:f8:11:14:49:91:87:
                    ee:91:be:f8:b3:5d:51:1a:88:97:15:57:ef:9d:c0:
                    b4:88:f0:a7:03:e6:6a:b6:62:6b:31:dd:a6:29:4e:
                    5f:b8:d2:68:1a:02:dd:47:06:e8:55:4c:8d:d2:99:
                    bf:da:69:d7:1b:e7:25:67:81:1f:4a:d1:68:ac:3f:
                    5b:3c:6b:c8:16:cd:33:7b:8b:0a:ac:01:55:8e:b9:
                    60:e6:7f:00:99:77:a0:c1:df:f5:01:bf:db:43:d6:
                    3f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A2:F5:CF:41:F1:4A:A3:4A:77:BB:13:D7:C3:62:7A:F4:1B:36:08
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/z6L1z0HxSqNKd7sT18NievQbNgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.100.0/22
                  5.226.16.0/20
                  45.90.52.0/22
                  45.141.4.0/22
                  45.144.12.0/22
                  45.157.56.0/22
                  79.142.184.0/22
                  85.117.244.0/22
                  85.217.129.0/24
                  85.217.132.0-85.217.139.255
                  85.217.141.0-85.217.143.255
                  85.217.146.0/23
                  85.217.150.0-85.217.159.255
                  86.105.28.0/22
                  86.105.234.0/24
                  86.106.184.0/22
                  88.98.96.0/19
                  89.47.4.0/22
                  91.242.144.0/22
                  91.245.200.0/21
                  93.92.224.0/22
                  139.28.76.0/22
                  141.98.52.0/22
                  176.32.50.0/24
                  176.32.54.0/24
                  185.43.252.0/22
                  185.44.233.0-185.44.235.255
                  185.48.84.0/22
                  185.51.108.0/22
                  185.72.52.0/22
                  185.75.200.0/22
                  185.77.168.0/22
                  185.83.104.0/22
                  185.93.120.0/22
                  185.93.232.0/22
                  185.94.48.0/22
                  185.113.184.0/22
                  185.119.236.0/22
                  185.120.44.0/22
                  185.123.136.0/22
                  185.130.24.0/22
                  185.131.12.0/22
                  185.131.188.0/22
                  185.134.40.0/22
                  185.156.248.0/22
                  185.158.52.0/22
                  185.162.172.0/22
                  185.176.84.0/22
                  185.196.200.0/22
                  185.202.188.0/22
                  185.210.16.0/22
                  185.216.216.0/22
                  185.228.120.0/22
                  185.229.44.0/22
                  185.229.96.0/22
                  185.234.184.0/22
                  185.240.44.0/22
                  185.248.96.0/22
                  188.208.20.0/22
                  188.240.204.0/22
                  188.241.96.0/21
                  193.32.236.0/22
                  193.91.0.0/24
                  193.91.10.0/24
                  194.8.140.0/22
                  194.49.0.0/22
                  195.82.104.0-195.82.106.255
                  195.82.120.0-195.82.124.255
                  212.63.116.0/22
                  212.63.121.0-212.63.123.255
                  212.104.160.0/19
                IPv6:
                  2a06:8840::/29
                  2a06:8f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         36:e5:8d:3f:7b:f8:ed:9b:fc:cf:c2:a7:65:12:14:85:7c:44:
         08:13:23:41:73:8b:e5:3f:5e:35:74:69:c8:1a:ae:dd:01:b8:
         81:7c:8e:c5:60:ad:da:80:36:8f:f3:54:2d:39:8a:b2:c2:08:
         8c:79:e4:5c:3d:1d:cf:f0:1b:92:0d:4d:a7:f7:26:e4:ea:32:
         d0:1d:3a:56:8b:0a:e6:6f:bd:01:52:b7:6c:ad:9e:51:e6:4a:
         0a:86:15:35:e8:82:24:7d:47:f1:b2:45:3f:f7:3c:28:44:a4:
         8d:08:8d:35:77:b1:98:e8:79:1c:d6:52:47:fd:a0:d0:d0:88:
         b6:54:45:fe:d1:2f:73:c1:91:8b:9e:3e:9c:cc:10:55:b4:70:
         a7:bf:af:4a:09:c0:a1:0c:0a:7d:c7:08:87:22:c2:46:b7:c3:
         4d:85:4e:b7:0a:17:9e:12:87:f1:36:71:12:20:d2:4a:5c:ac:
         c3:51:9e:80:93:71:5f:70:f0:50:0b:28:df:4f:37:a0:48:dc:
         22:5e:92:10:55:c9:17:8c:d1:7f:28:ec:ab:0d:14:3f:79:e4:
         31:91:a0:36:b6:e9:c6:98:43:8a:3e:9e:9b:8f:ab:fa:fd:a9:
         d8:a3:81:cc:e6:0b:bf:42:62:51:d8:74:a6:a5:22:82:f3:60:
         26:0f:56:c3
-----BEGIN CERTIFICATE-----
MIIG+TCCBeGgAwIBAgISAYUq/MPwpRzJvbiGoIzjGhxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMjE5MTUyNDQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmEyZjVjZjQxZjE0YWEzNGE3N2JiMTNkN2MzNjI3YWY0MWIzNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx9k6w8RTJa1gVrD/ax0/lJqRkZk
LM6KcxKRmLBgXkvDUWqcEQNm5Wj1AQHsqXYHRvBmQ/r3zmzt1u4NRG2T+ktSSVs6
elIP5ey8kdo1kYzqJnWBfopFD9P6OXzL5dNvYHV0JueoBB056cyi3zDE0Jap9oVS
hJg1KE1agGIaqvzDPfCPF1wvSom99d6sO8M7R/DnDhpDmWWXO0eVvYj4ERRJkYfu
kb74s11RGoiXFVfvncC0iPCnA+ZqtmJrMd2mKU5fuNJoGgLdRwboVUyN0pm/2mnX
G+clZ4EfStForD9bPGvIFs0ze4sKrAFVjrlg5n8AmXegwd/1Ab/bQ9Y/1wIDAQAB
o4IEBTCCBAEwHQYDVR0OBBYEFM+i9c9B8UqjSne7E9fDYnr0GzYIMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvejZMMXowSHhTcU5LZDdzVDE4TmlldlFiTmdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICGQYIKwYBBQUHAQcBAf8EggIIMIICBDCCAeoEAgABMIIB
4gMEAgW1ZAMEBAXiEAMEAi1aNAMEAi2NBAMEAi2QDAMEAi2dOAMEAk+OuAMEAlV1
9AMEAFXZgTAMAwQCVdmEAwQCVdmIMAwDBABV2Y0DBARV2YADBAFV2ZIwDAMEAVXZ
lgMEBVXZgAMEAlZpHAMEAFZp6gMEAlZquAMEBVhiYAMEAlkvBAMEAlvykAMEA1v1
yAMEAl1c4AMEAoscTAMEAo1iNAMEALAgMgMEALAgNgMEArkr/DAMAwQAuSzpAwQC
uSzoAwQCuTBUAwQCuTNsAwQCuUg0AwQCuUvIAwQCuU2oAwQCuVNoAwQCuV14AwQC
uV3oAwQCuV4wAwQCuXG4AwQCuXfsAwQCuXgsAwQCuXuIAwQCuYIYAwQCuYMMAwQC
uYO8AwQCuYYoAwQCuZz4AwQCuZ40AwQCuaKsAwQCubBUAwQCucTIAwQCucq8AwQC
udIQAwQCudjYAwQCueR4AwQCueUsAwQCueVgAwQCueq4AwQCufAsAwQCufhgAwQC
vNAUAwQCvPDMAwQDvPFgAwQCwSDsAwQAwVsAAwQAwVsKAwQCwgiMAwQCwjEAMAwD
BAPDUmgDBADDUmowDAMEA8NSeAMEAMNSfAMEAtQ/dDAMAwQA1D95AwQC1D94AwQF
1GigMBQEAgACMA4DBQMqBohAAwUDKgaPQDANBgkqhkiG9w0BAQsFAAOCAQEANuWN
P3v47Zv8z8KnZRIUhXxECBMjQXOL5T9eNXRpyBqu3QG4gXyOxWCt2oA2j/NULTmK
ssIIjHnkXD0dz/Abkg1Np/cm5Ooy0B06VosK5m+9AVK3bK2eUeZKCoYVNeiCJH1H
8bJFP/c8KESkjQiNNXexmOh5HNZSR/2g0NCItlRF/tEvc8GRi54+nMwQVbRwp7+v
SgnAoQwKfccIhyLCRrfDTYVOtwoXnhKH8TZxEiDSSlysw1GegJNxX3DwUAso3083
oEjcIl6SEFXJF4zRfyjsqw0UP3nkMZGgNrbpxphDij6em4+r+v2p2KOBzOYLv0Ji
Udh0pqUigvNgJg9Www==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org