Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/swjtuScXts3_cbxWhjM8ezDArjA.roa
File:                     swjtuScXts3_cbxWhjM8ezDArjA.roa (raw, json)
Hash identifier:          gEkW+2kPk1LUBmk2H4uAsZNOo0N4x55F1T1vIESm/BE=
Subject key identifier:   B3:08:ED:B9:27:17:B6:CD:FF:71:BC:56:86:33:3C:7B:30:C0:AE:30
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       0184856CB38FBFFC36040D2F3C75869D0F7D
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/swjtuScXts3_cbxWhjM8ezDArjA.roa
Signing time:             Thu 17 Nov 2022 11:50:04 +0000
ROA not before:           Thu 17 Nov 2022 11:50:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30781
IP address blocks:        46.231.216.0/21 maxlen: 24
                          185.53.80.0/22 maxlen: 24
                          141.255.128.0/21 maxlen: 24
                          212.114.16.0/20 maxlen: 24
                          46.22.192.0/20 maxlen: 24
                          45.80.8.0/22 maxlen: 24
                          45.80.20.0/22 maxlen: 24
                          45.80.24.0/22 maxlen: 24
                          45.80.32.0/22 maxlen: 24
                          46.255.200.0/21 maxlen: 24
                          95.178.88.0/22 maxlen: 24
                          185.114.100.0/22 maxlen: 24
                          94.100.160.0/20 maxlen: 24
                          37.110.192.0/21 maxlen: 24
                          193.151.84.0/24 maxlen: 24
                          193.151.87.0/24 maxlen: 24
                          37.26.184.0/21 maxlen: 24
                          185.146.220.0/22 maxlen: 24
                          194.116.142.0/23 maxlen: 24
                          185.15.140.0/22 maxlen: 24
                          185.62.184.0/22 maxlen: 24
                          212.85.229.0/24 maxlen: 24
                          212.85.230.0/23 maxlen: 24
                          195.234.35.0/24 maxlen: 24
                          95.143.64.0/20 maxlen: 24
                          91.224.162.0/23 maxlen: 24
                          176.241.120.0/21 maxlen: 24
                          212.18.240.0/21 maxlen: 24
                          130.180.208.0/20 maxlen: 24
                          78.153.224.0/19 maxlen: 24
                          91.226.193.0/24 maxlen: 24
                          185.61.184.0/22 maxlen: 24
                          185.61.184.0/21 maxlen: 24
                          185.61.188.0/22 maxlen: 24
                          31.172.232.0/21 maxlen: 24
                          31.172.238.0/24 maxlen: 24
                          185.78.156.0/22 maxlen: 24
                          185.92.36.0/22 maxlen: 24
                          31.7.248.0/21 maxlen: 24
                          31.172.160.0/22 maxlen: 24
                          193.189.124.0/23 maxlen: 24
                          185.4.60.0/23 maxlen: 24
                          185.4.62.0/24 maxlen: 24
                          185.91.220.0/22 maxlen: 24
                          185.91.224.0/22 maxlen: 24
                          77.72.88.0/21 maxlen: 24
                          91.203.92.0/22 maxlen: 24
                          37.61.240.0/21 maxlen: 24
                          85.31.192.0/19 maxlen: 24
                          82.163.36.0/22 maxlen: 24
                          5.226.0.0/21 maxlen: 24
                          88.212.144.0/21 maxlen: 24
                          88.212.152.0/22 maxlen: 24
                          185.209.52.0/22 maxlen: 24
                          82.196.24.0/21 maxlen: 24
                          88.202.236.0/22 maxlen: 24
                          77.246.80.0/20 maxlen: 24
                          185.44.88.0/22 maxlen: 24
                          195.128.147.0/24 maxlen: 24
                          2a05:6e00::/29 maxlen: 48
                          2a03:bdc0::/32 maxlen: 48
                          2a02:398::/32 maxlen: 48
                          2a0b:41c0::/29 maxlen: 48
                          2a00:68c0::/32 maxlen: 48
                          2a04:cc00::/29 maxlen: 48
                          2a01:240::/32 maxlen: 48
                          2a01:290::/32 maxlen: 48
                          2a00:78c0::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:85:6c:b3:8f:bf:fc:36:04:0d:2f:3c:75:86:9d:0f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Nov 17 11:50:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b308edb92717b6cdff71bc5686333c7b30c0ae30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:e2:91:9e:c8:c8:6c:2a:db:ac:22:9c:4b:
                    d8:85:ab:a0:29:95:b1:fd:59:d3:d8:e1:d5:4b:4e:
                    d5:86:25:9c:69:bd:fb:76:80:82:9d:ec:c1:bb:47:
                    55:81:e6:45:3a:b9:c3:56:71:ff:12:c2:7a:f2:98:
                    d8:e2:d8:55:0b:0c:ff:1c:66:d2:43:71:81:dd:0a:
                    8d:42:69:95:60:24:26:e4:71:c9:c5:da:4f:25:23:
                    ab:90:2f:2b:3a:d9:c1:b2:f4:84:a8:12:9a:d3:5a:
                    53:08:71:38:7c:45:87:56:16:d8:8f:de:8c:72:8a:
                    09:73:04:a6:6c:42:41:42:0d:49:f9:4f:c5:f8:ab:
                    a0:ed:a4:0b:4b:4d:a9:60:88:d7:7c:c5:ab:40:78:
                    51:fc:99:70:55:b9:34:a1:64:54:c2:84:c8:a0:43:
                    0e:c6:a5:93:9f:59:6e:42:2b:60:01:ad:86:b9:c0:
                    15:8a:17:12:1e:a3:dd:08:86:b3:e4:08:96:3a:6a:
                    3e:58:50:b5:13:b8:1a:42:2d:4f:69:38:f3:9d:91:
                    77:ce:5b:76:09:5e:af:26:cb:e8:36:98:57:bc:d1:
                    a4:06:4d:e0:df:65:dd:57:3e:01:09:e2:b6:0b:6f:
                    1e:45:f4:18:c2:b6:9f:4c:b1:10:63:70:25:02:c9:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:08:ED:B9:27:17:B6:CD:FF:71:BC:56:86:33:3C:7B:30:C0:AE:30
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/swjtuScXts3_cbxWhjM8ezDArjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.0.0/21
                  31.7.248.0/21
                  31.172.160.0/22
                  31.172.232.0/21
                  37.26.184.0/21
                  37.61.240.0/21
                  37.110.192.0/21
                  45.80.8.0/22
                  45.80.20.0-45.80.27.255
                  45.80.32.0/22
                  46.22.192.0/20
                  46.231.216.0/21
                  46.255.200.0/21
                  77.72.88.0/21
                  77.246.80.0/20
                  78.153.224.0/19
                  82.163.36.0/22
                  82.196.24.0/21
                  85.31.192.0/19
                  88.202.236.0/22
                  88.212.144.0-88.212.155.255
                  91.203.92.0/22
                  91.224.162.0/23
                  91.226.193.0/24
                  94.100.160.0/20
                  95.143.64.0/20
                  95.178.88.0/22
                  130.180.208.0/20
                  141.255.128.0/21
                  176.241.120.0/21
                  185.4.60.0-185.4.62.255
                  185.15.140.0/22
                  185.44.88.0/22
                  185.53.80.0/22
                  185.61.184.0/21
                  185.62.184.0/22
                  185.78.156.0/22
                  185.91.220.0-185.91.227.255
                  185.92.36.0/22
                  185.114.100.0/22
                  185.146.220.0/22
                  185.209.52.0/22
                  193.151.84.0/24
                  193.151.87.0/24
                  193.189.124.0/23
                  194.116.142.0/23
                  195.128.147.0/24
                  195.234.35.0/24
                  212.18.240.0/21
                  212.85.229.0-212.85.231.255
                  212.114.16.0/20
                IPv6:
                  2a00:68c0::/32
                  2a00:78c0::/29
                  2a01:240::/32
                  2a01:290::/32
                  2a02:398::/32
                  2a03:bdc0::/32
                  2a04:cc00::/29
                  2a05:6e00::/29
                  2a0b:41c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         b2:77:be:d7:78:b7:64:f4:97:d7:10:53:ce:db:be:3a:ca:3a:
         0a:95:43:17:f0:9c:c0:a9:38:e6:19:dd:7b:86:78:b4:18:f0:
         a5:d1:42:b3:0b:79:a8:12:f5:92:55:d9:d1:e6:07:e8:cf:3a:
         b7:a1:1f:50:de:45:c1:26:d7:f8:47:dc:3c:25:60:90:cc:c9:
         b5:60:b0:92:4c:4c:e1:4c:85:ca:4b:37:c9:35:52:36:df:1b:
         6a:51:85:d5:13:70:c7:7c:6e:47:70:c2:fc:d6:79:1f:f1:dd:
         6b:bf:11:d9:16:88:f3:fd:57:41:05:9e:62:98:5e:67:03:fd:
         c1:5e:8d:ac:07:74:37:05:80:91:43:86:88:ff:96:fe:ff:5c:
         22:aa:f3:4e:61:ef:84:89:04:7c:26:f8:8a:80:77:01:22:5c:
         cd:3e:e1:bf:9f:45:03:14:13:1f:aa:dc:f5:b0:a7:4d:a5:42:
         9b:cc:80:18:63:f0:48:77:d4:b6:ce:ff:da:8a:6f:6f:dc:01:
         9f:89:72:ac:91:b6:5c:2a:d1:9f:a3:0e:3d:c3:c1:06:68:7a:
         d5:9a:69:96:67:50:a5:1d:77:4d:d0:99:c7:94:24:24:cf:1c:
         23:85:27:12:f5:57:c6:18:dd:e9:a3:65:6b:4d:06:2a:f0:86:
         0b:57:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org