Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/2bD3kWrtUZGixQDvn2Urm3gw7C0.roa
File:                     2bD3kWrtUZGixQDvn2Urm3gw7C0.roa (raw, json)
Hash identifier:          KEWaN+0oICqDY1NcbZYkWVb5YuNwgHCnmdTDYKSYmgA=
Subject key identifier:   D9:B0:F7:91:6A:ED:51:91:A2:C5:00:EF:9F:65:2B:9B:78:30:EC:2D
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       1DA69CFA
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/2bD3kWrtUZGixQDvn2Urm3gw7C0.roa
Signing time:             Wed 08 Jun 2022 11:31:02 +0000
ROA not before:           Wed 08 Jun 2022 11:31:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        81.161.12.0/22 maxlen: 22
                          91.228.119.0/24 maxlen: 24
                          176.107.64.0/20 maxlen: 24
                          93.120.112.0/21 maxlen: 21
                          93.120.124.0/22 maxlen: 22
                          89.46.112.0/23 maxlen: 24
                          91.235.166.0/24 maxlen: 24
                          91.235.167.0/24 maxlen: 24
                          91.229.6.0/24 maxlen: 24
                          195.80.142.0/23 maxlen: 24
                          188.213.233.0/24 maxlen: 24
                          31.133.24.0/22 maxlen: 22
                          93.120.64.0/21 maxlen: 21
                          31.133.192.0/24 maxlen: 24
                          193.221.82.0/23 maxlen: 24
                          31.133.193.0/24 maxlen: 24
                          31.133.194.0/24 maxlen: 24
                          31.133.195.0/24 maxlen: 24
                          93.120.75.0/24 maxlen: 24
                          31.133.198.0/24 maxlen: 24
                          31.133.199.0/24 maxlen: 24
                          93.120.76.0/22 maxlen: 22
                          31.133.196.0/23 maxlen: 23
                          93.120.72.0/23 maxlen: 23
                          93.120.84.0/24 maxlen: 24
                          93.120.85.0/24 maxlen: 24
                          93.120.80.0/22 maxlen: 22
                          91.234.222.0/23 maxlen: 23
                          91.234.220.0/23 maxlen: 23
                          93.120.90.0/24 maxlen: 24
                          93.120.88.0/23 maxlen: 23
                          93.120.86.0/23 maxlen: 23
                          93.120.94.0/23 maxlen: 23
                          93.120.92.0/23 maxlen: 23
                          93.120.8.0/23 maxlen: 23
                          91.234.150.0/23 maxlen: 23
                          93.120.28.0/23 maxlen: 23
                          93.120.27.0/24 maxlen: 24
                          93.120.30.0/24 maxlen: 24
                          93.120.33.0/24 maxlen: 24
                          93.120.48.0/20 maxlen: 20
                          93.120.46.0/24 maxlen: 24
                          171.25.223.0/24 maxlen: 24
                          176.112.84.0/22 maxlen: 22
                          91.246.188.0/22 maxlen: 22
                          91.246.196.0/22 maxlen: 22
                          91.246.201.0/24 maxlen: 24
                          89.45.92.0/23 maxlen: 24
                          178.159.152.0/21 maxlen: 21
                          178.159.148.0/22 maxlen: 22
                          91.233.202.0/23 maxlen: 23
                          91.240.156.0/22 maxlen: 22
                          77.232.192.0/23 maxlen: 24
                          77.232.196.0/22 maxlen: 22
                          77.232.194.0/23 maxlen: 23
                          185.104.196.0/22 maxlen: 24
                          77.232.204.0/22 maxlen: 22
                          77.232.200.0/22 maxlen: 22
                          77.232.208.0/21 maxlen: 21
                          91.218.252.0/23 maxlen: 23
                          176.124.176.0/22 maxlen: 22
                          91.218.254.0/23 maxlen: 23
                          86.104.132.0/23 maxlen: 24
                          176.124.180.0/22 maxlen: 22
                          91.246.184.0/22 maxlen: 22
                          176.118.88.0/22 maxlen: 22
                          77.232.220.0/22 maxlen: 22
                          176.118.92.0/22 maxlen: 22
                          91.239.178.0/24 maxlen: 24
                          176.98.56.0/22 maxlen: 22
                          176.98.60.0/22 maxlen: 22
                          91.232.254.0/24 maxlen: 24
                          91.233.2.0/23 maxlen: 23
                          89.44.100.0/23 maxlen: 24
                          91.231.224.0/23 maxlen: 23
                          91.225.34.0/24 maxlen: 24
                          91.225.35.0/24 maxlen: 24
                          64.43.64.0/23 maxlen: 23
                          91.245.90.0/23 maxlen: 23
                          91.245.88.0/23 maxlen: 23
                          91.231.223.0/24 maxlen: 24
                          64.43.64.0/24 maxlen: 24
                          91.231.226.0/24 maxlen: 24
                          64.43.68.0/22 maxlen: 22
                          64.43.66.0/23 maxlen: 23
                          64.43.65.0/24 maxlen: 24
                          64.43.72.0/24 maxlen: 24
                          64.43.76.0/24 maxlen: 24
                          64.43.80.0/21 maxlen: 21
                          64.43.88.0/22 maxlen: 22
                          77.36.52.0/23 maxlen: 23
                          77.36.72.0/21 maxlen: 21
                          176.110.106.0/24 maxlen: 24
                          176.110.107.0/24 maxlen: 24
                          77.36.80.0/21 maxlen: 21
                          77.36.90.0/23 maxlen: 23
                          85.204.196.0/23 maxlen: 24
                          77.36.89.0/24 maxlen: 24
                          176.110.114.0/23 maxlen: 23
                          77.36.96.0/20 maxlen: 20
                          77.36.92.0/22 maxlen: 22
                          91.245.176.0/21 maxlen: 21
                          37.97.122.0/23 maxlen: 23
                          185.9.240.0/22 maxlen: 22
                          185.9.236.0/22 maxlen: 22
                          176.111.4.0/22 maxlen: 22
                          176.111.0.0/22 maxlen: 22
                          91.239.0.0/22 maxlen: 22
                          176.97.144.0/22 maxlen: 22
                          176.97.148.0/22 maxlen: 22
                          188.191.248.0/22 maxlen: 22
                          91.232.16.0/23 maxlen: 23
                          91.232.20.0/24 maxlen: 24
                          193.36.192.0/21 maxlen: 21
                          31.131.12.0/22 maxlen: 22
                          193.36.200.0/23 maxlen: 23
                          193.36.200.0/24 maxlen: 24
                          193.36.201.0/24 maxlen: 24
                          193.36.202.0/24 maxlen: 24
                          176.96.56.0/21 maxlen: 21
                          91.237.194.0/23 maxlen: 23
                          77.36.8.0/21 maxlen: 21
                          176.96.176.0/22 maxlen: 22
                          176.96.180.0/22 maxlen: 22
                          77.36.30.0/24 maxlen: 24
                          176.103.120.0/21 maxlen: 24
                          77.36.28.0/23 maxlen: 23
                          77.36.36.0/23 maxlen: 23
                          77.36.32.0/22 maxlen: 22
                          89.42.232.0/23 maxlen: 24
                          77.36.40.0/21 maxlen: 21
                          77.36.38.0/23 maxlen: 23
                          77.36.48.0/22 maxlen: 22
                          91.236.237.0/24 maxlen: 24
                          176.116.40.0/21 maxlen: 21
                          91.223.158.0/24 maxlen: 24
                          91.237.48.0/24 maxlen: 24
                          31.135.4.0/23 maxlen: 23
                          31.135.0.0/23 maxlen: 23
                          31.135.2.0/24 maxlen: 24
                          31.135.3.0/24 maxlen: 24
                          31.135.4.0/24 maxlen: 24
                          31.135.6.0/23 maxlen: 23
                          31.135.5.0/24 maxlen: 24
                          31.135.6.0/24 maxlen: 24
                          31.135.7.0/24 maxlen: 24
                          91.229.16.0/23 maxlen: 23
                          91.229.31.0/24 maxlen: 24
                          176.121.96.0/21 maxlen: 21
                          193.0.190.0/24 maxlen: 24
                          91.236.77.0/24 maxlen: 24
                          91.229.156.0/23 maxlen: 23
                          91.229.158.0/24 maxlen: 24
                          91.229.159.0/24 maxlen: 24
                          89.34.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497458426 (0x1da69cfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jun  8 11:31:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d9b0f7916aed5191a2c500ef9f652b9b7830ec2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:78:0f:c8:80:f1:3b:f7:a8:5b:9b:c4:4d:
                    03:e1:10:46:a1:d0:a7:b4:8a:5b:fe:78:e7:f0:4a:
                    2c:2d:c2:20:a9:7f:f6:5c:a8:69:fc:f5:81:f0:73:
                    86:f8:d8:aa:7c:36:7f:dc:79:79:36:1c:68:9b:f4:
                    a6:91:9b:ce:d0:2d:16:3c:79:a4:1b:fb:89:77:4c:
                    5d:a2:91:c0:e4:1d:45:44:2d:21:2c:ce:c2:f3:82:
                    41:8a:a8:2e:3a:21:70:17:60:08:50:55:29:6a:62:
                    39:d0:8c:8b:57:3c:ca:74:93:38:cb:56:d4:c8:2c:
                    68:0e:20:78:b3:23:2f:b9:77:85:4d:44:25:33:9e:
                    90:b4:9a:da:91:9b:36:87:b9:af:08:a3:ab:6f:47:
                    07:a3:a3:59:bb:75:57:d9:4b:1f:43:86:d1:3d:6a:
                    ab:6a:85:83:54:99:67:ac:b0:89:6a:cb:aa:b2:b3:
                    ea:60:8e:14:8d:76:da:a1:83:38:8d:9e:2c:73:8e:
                    12:04:ec:bb:75:9c:b5:17:be:55:14:fc:1a:6f:02:
                    c5:f9:b8:2c:4b:89:a9:82:b1:57:c4:80:79:48:00:
                    bd:83:f5:29:a4:9f:fa:e1:b3:7b:f5:32:80:73:d5:
                    74:cb:e0:96:d3:ee:04:5a:d7:eb:1a:c5:27:44:04:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B0:F7:91:6A:ED:51:91:A2:C5:00:EF:9F:65:2B:9B:78:30:EC:2D
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/2bD3kWrtUZGixQDvn2Urm3gw7C0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.131.12.0/22
                  31.133.24.0/22
                  31.133.192.0/21
                  31.135.0.0/21
                  37.97.122.0/23
                  64.43.64.0-64.43.72.255
                  64.43.76.0/24
                  64.43.80.0-64.43.91.255
                  77.36.8.0/21
                  77.36.28.0-77.36.30.255
                  77.36.32.0-77.36.53.255
                  77.36.72.0-77.36.87.255
                  77.36.89.0-77.36.111.255
                  77.232.192.0-77.232.215.255
                  77.232.220.0/22
                  81.161.12.0/22
                  85.204.196.0/23
                  86.104.132.0/23
                  89.34.74.0/23
                  89.42.232.0/23
                  89.44.100.0/23
                  89.45.92.0/23
                  89.46.112.0/23
                  91.218.252.0/22
                  91.223.158.0/24
                  91.225.34.0/23
                  91.228.119.0/24
                  91.229.6.0/24
                  91.229.16.0/23
                  91.229.31.0/24
                  91.229.156.0/22
                  91.231.223.0-91.231.226.255
                  91.232.16.0/23
                  91.232.20.0/24
                  91.232.254.0/24
                  91.233.2.0/23
                  91.233.202.0/23
                  91.234.150.0/23
                  91.234.220.0/22
                  91.235.166.0/23
                  91.236.77.0/24
                  91.236.237.0/24
                  91.237.48.0/24
                  91.237.194.0/23
                  91.239.0.0/22
                  91.239.178.0/24
                  91.240.156.0/22
                  91.245.88.0/22
                  91.245.176.0/21
                  91.246.184.0/21
                  91.246.196.0/22
                  91.246.201.0/24
                  93.120.8.0/23
                  93.120.27.0-93.120.30.255
                  93.120.33.0/24
                  93.120.46.0/24
                  93.120.48.0-93.120.73.255
                  93.120.75.0-93.120.90.255
                  93.120.92.0/22
                  93.120.112.0/21
                  93.120.124.0/22
                  171.25.223.0/24
                  176.96.56.0/21
                  176.96.176.0/21
                  176.97.144.0/21
                  176.98.56.0/21
                  176.103.120.0/21
                  176.107.64.0/20
                  176.110.106.0/23
                  176.110.114.0/23
                  176.111.0.0/21
                  176.112.84.0/22
                  176.116.40.0/21
                  176.118.88.0/21
                  176.121.96.0/21
                  176.124.176.0/21
                  178.159.148.0-178.159.159.255
                  185.9.236.0-185.9.243.255
                  185.104.196.0/22
                  188.191.248.0/22
                  188.213.233.0/24
                  193.0.190.0/24
                  193.36.192.0-193.36.202.255
                  193.221.82.0/23
                  195.80.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:15:0b:b8:68:84:8a:9d:6d:6b:40:c4:9e:30:12:7e:cc:cf:
         54:ce:c4:fc:31:1f:34:30:bc:8c:7e:92:a6:dc:f2:f9:7d:2e:
         1e:84:e7:77:40:0d:93:cc:36:d9:53:94:13:06:07:ac:e9:93:
         48:a5:09:96:29:eb:89:a6:4c:5b:18:08:a3:c2:b6:ca:46:bf:
         2b:c4:27:2a:9d:66:97:5c:f7:63:00:75:d8:0a:40:b5:55:8c:
         60:62:b8:a4:b2:12:23:cf:67:8e:12:4b:38:f5:73:d2:03:fa:
         cc:3c:31:50:e1:87:18:41:22:bd:4b:cf:29:a8:35:7f:74:45:
         f8:6a:a9:35:9c:03:3e:b4:1d:e9:5d:e7:80:2d:ed:42:5c:58:
         13:91:9e:93:da:9b:9f:1f:fd:ad:e0:cd:0a:87:cf:05:8f:c8:
         55:a1:d6:59:f1:2d:2e:ed:86:e2:7e:5d:d2:71:0d:80:7a:35:
         db:3a:da:59:ec:da:d1:40:b1:3b:33:49:25:31:84:ef:d2:fc:
         52:be:72:6a:3b:39:5a:41:98:aa:30:fb:18:ae:e8:39:3c:b0:
         3c:40:35:a0:48:79:aa:4f:a0:a5:41:36:69:c8:2b:d1:0e:53:
         fb:bf:2c:ae:7d:41:74:26:13:8c:90:c0:47:63:57:fa:89:ce:
         a7:3e:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:47 2024 by rpki-client on console-ams.rpki-client.org