Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/QRWAueuz0vTpIHBjrcP2GDbR3hE.roa
File:                     QRWAueuz0vTpIHBjrcP2GDbR3hE.roa (raw, json)
Hash identifier:          xfE2ApXrVr82fKv3NXOUCXxl66SPl+TF55q4g9OiZPM=
Subject key identifier:   41:15:80:B9:EB:B3:D2:F4:E9:20:70:63:AD:C3:F6:18:36:D1:DE:11
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       01821B71DD8C641AC13CDB217DFFC46A7567
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/QRWAueuz0vTpIHBjrcP2GDbR3hE.roa
Signing time:             Wed 20 Jul 2022 11:50:23 +0000
ROA not before:           Wed 20 Jul 2022 11:50:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        81.161.12.0/22 maxlen: 22
                          91.228.119.0/24 maxlen: 24
                          176.107.64.0/20 maxlen: 24
                          93.120.112.0/21 maxlen: 21
                          93.120.124.0/22 maxlen: 22
                          89.46.112.0/23 maxlen: 24
                          91.235.166.0/24 maxlen: 24
                          91.235.167.0/24 maxlen: 24
                          91.229.6.0/24 maxlen: 24
                          195.80.142.0/23 maxlen: 24
                          188.213.233.0/24 maxlen: 24
                          31.133.24.0/22 maxlen: 22
                          93.120.64.0/21 maxlen: 21
                          31.133.192.0/24 maxlen: 24
                          193.221.82.0/23 maxlen: 24
                          31.133.193.0/24 maxlen: 24
                          31.133.194.0/24 maxlen: 24
                          31.133.195.0/24 maxlen: 24
                          93.120.75.0/24 maxlen: 24
                          31.133.198.0/24 maxlen: 24
                          31.133.199.0/24 maxlen: 24
                          93.120.76.0/22 maxlen: 22
                          31.133.196.0/23 maxlen: 23
                          93.120.72.0/23 maxlen: 23
                          93.120.84.0/24 maxlen: 24
                          93.120.85.0/24 maxlen: 24
                          93.120.80.0/22 maxlen: 22
                          91.234.222.0/23 maxlen: 23
                          91.234.220.0/23 maxlen: 23
                          93.120.90.0/24 maxlen: 24
                          93.120.88.0/23 maxlen: 23
                          93.120.86.0/23 maxlen: 23
                          93.120.94.0/23 maxlen: 23
                          93.120.92.0/23 maxlen: 23
                          93.120.8.0/23 maxlen: 23
                          91.234.150.0/23 maxlen: 23
                          93.120.28.0/23 maxlen: 23
                          93.120.27.0/24 maxlen: 24
                          93.120.30.0/24 maxlen: 24
                          93.120.33.0/24 maxlen: 24
                          93.120.48.0/20 maxlen: 20
                          93.120.46.0/24 maxlen: 24
                          171.25.223.0/24 maxlen: 24
                          176.112.84.0/22 maxlen: 22
                          91.246.188.0/22 maxlen: 22
                          91.246.196.0/22 maxlen: 22
                          91.246.201.0/24 maxlen: 24
                          89.45.92.0/23 maxlen: 24
                          178.159.152.0/21 maxlen: 21
                          178.159.148.0/22 maxlen: 22
                          91.233.202.0/23 maxlen: 23
                          91.240.156.0/22 maxlen: 22
                          77.232.192.0/23 maxlen: 24
                          77.232.196.0/22 maxlen: 22
                          77.232.194.0/23 maxlen: 23
                          185.104.196.0/22 maxlen: 24
                          77.232.204.0/22 maxlen: 22
                          77.232.200.0/22 maxlen: 22
                          77.232.208.0/21 maxlen: 21
                          91.218.252.0/23 maxlen: 23
                          176.124.176.0/22 maxlen: 22
                          91.218.254.0/23 maxlen: 23
                          86.104.132.0/23 maxlen: 24
                          176.124.180.0/22 maxlen: 22
                          91.246.184.0/22 maxlen: 22
                          176.118.88.0/22 maxlen: 22
                          77.232.220.0/22 maxlen: 22
                          176.118.92.0/22 maxlen: 22
                          91.239.178.0/24 maxlen: 24
                          176.98.56.0/22 maxlen: 22
                          176.98.60.0/22 maxlen: 22
                          91.232.254.0/24 maxlen: 24
                          91.233.2.0/23 maxlen: 23
                          89.44.100.0/23 maxlen: 24
                          91.231.224.0/23 maxlen: 23
                          91.225.34.0/24 maxlen: 24
                          91.225.35.0/24 maxlen: 24
                          64.43.64.0/23 maxlen: 23
                          91.245.90.0/23 maxlen: 23
                          91.245.88.0/23 maxlen: 23
                          91.231.223.0/24 maxlen: 24
                          64.43.64.0/24 maxlen: 24
                          91.231.226.0/24 maxlen: 24
                          64.43.68.0/22 maxlen: 22
                          64.43.66.0/23 maxlen: 23
                          64.43.65.0/24 maxlen: 24
                          64.43.72.0/24 maxlen: 24
                          64.43.76.0/24 maxlen: 24
                          64.43.80.0/21 maxlen: 21
                          64.43.88.0/22 maxlen: 22
                          77.36.52.0/23 maxlen: 23
                          77.36.72.0/21 maxlen: 21
                          176.110.106.0/24 maxlen: 24
                          176.110.107.0/24 maxlen: 24
                          77.36.80.0/21 maxlen: 21
                          77.36.90.0/23 maxlen: 23
                          85.204.196.0/23 maxlen: 24
                          77.36.89.0/24 maxlen: 24
                          176.110.114.0/23 maxlen: 23
                          77.36.96.0/20 maxlen: 20
                          77.36.92.0/22 maxlen: 22
                          91.245.176.0/21 maxlen: 21
                          37.97.122.0/23 maxlen: 23
                          185.9.240.0/22 maxlen: 22
                          185.9.236.0/22 maxlen: 22
                          176.111.4.0/22 maxlen: 22
                          176.111.0.0/22 maxlen: 22
                          91.239.0.0/22 maxlen: 22
                          176.97.144.0/22 maxlen: 22
                          176.97.148.0/22 maxlen: 22
                          188.191.248.0/22 maxlen: 22
                          91.232.16.0/23 maxlen: 23
                          91.232.20.0/24 maxlen: 24
                          193.36.192.0/21 maxlen: 21
                          31.131.12.0/22 maxlen: 22
                          193.36.200.0/23 maxlen: 23
                          193.36.200.0/24 maxlen: 24
                          193.36.201.0/24 maxlen: 24
                          193.36.202.0/24 maxlen: 24
                          176.96.56.0/21 maxlen: 21
                          91.237.194.0/23 maxlen: 23
                          77.36.8.0/21 maxlen: 21
                          176.96.176.0/22 maxlen: 22
                          176.96.180.0/22 maxlen: 22
                          77.36.30.0/24 maxlen: 24
                          176.103.120.0/21 maxlen: 24
                          77.36.28.0/23 maxlen: 23
                          77.36.36.0/23 maxlen: 23
                          77.36.32.0/22 maxlen: 22
                          89.42.232.0/23 maxlen: 24
                          77.36.40.0/21 maxlen: 21
                          77.36.38.0/23 maxlen: 23
                          77.36.48.0/22 maxlen: 22
                          91.236.237.0/24 maxlen: 24
                          176.116.40.0/21 maxlen: 21
                          91.223.158.0/24 maxlen: 24
                          91.237.48.0/24 maxlen: 24
                          31.135.4.0/23 maxlen: 23
                          31.135.1.0/24 maxlen: 24
                          31.135.2.0/24 maxlen: 24
                          31.135.3.0/24 maxlen: 24
                          31.135.4.0/24 maxlen: 24
                          31.135.6.0/23 maxlen: 23
                          31.135.5.0/24 maxlen: 24
                          31.135.7.0/24 maxlen: 24
                          91.229.16.0/23 maxlen: 23
                          91.229.31.0/24 maxlen: 24
                          176.121.96.0/21 maxlen: 21
                          193.0.190.0/24 maxlen: 24
                          91.236.77.0/24 maxlen: 24
                          91.229.156.0/23 maxlen: 23
                          91.229.158.0/24 maxlen: 24
                          91.229.159.0/24 maxlen: 24
                          89.34.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1b:71:dd:8c:64:1a:c1:3c:db:21:7d:ff:c4:6a:75:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jul 20 11:50:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=411580b9ebb3d2f4e9207063adc3f61836d1de11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:22:e2:54:db:29:50:ae:47:87:25:ae:00:
                    08:dd:5e:bc:5c:d8:8f:7b:3a:d3:3b:2f:62:c6:00:
                    2b:83:0e:19:1e:7c:fb:22:e3:eb:22:c3:e9:40:9f:
                    ec:45:c7:bb:7d:36:32:f9:72:35:d1:37:40:c8:ac:
                    b5:ec:c6:f1:48:0c:2b:e8:a8:13:69:bd:21:2b:32:
                    1a:1e:c8:a5:d7:a1:e7:86:6a:55:4f:f5:62:b8:82:
                    cf:ed:02:d0:31:ab:23:c3:1b:11:18:20:e2:fe:52:
                    74:29:3f:f4:05:27:65:6c:d9:bb:94:83:8b:05:aa:
                    16:0e:73:1b:f9:9e:d0:b9:45:45:35:59:d7:4d:5c:
                    ca:e1:c7:b9:9e:1e:e1:c4:3f:22:71:88:72:e9:05:
                    ee:af:71:08:10:8f:de:37:83:52:e7:e3:08:86:67:
                    71:6b:87:b9:97:81:82:ac:4e:e9:f7:ae:f0:86:fd:
                    2b:c4:a0:35:53:8b:a7:55:60:5f:13:7c:98:e4:89:
                    21:7c:f4:b7:dd:fd:89:d0:d4:28:c2:41:20:97:cc:
                    a3:9b:62:ff:f1:e9:52:68:df:b1:86:f8:47:20:44:
                    0f:1e:51:cd:dc:06:f4:ca:b6:f0:dd:6f:e3:7e:0c:
                    52:88:2d:e4:d0:13:10:1a:e7:03:88:f4:48:a5:5f:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:15:80:B9:EB:B3:D2:F4:E9:20:70:63:AD:C3:F6:18:36:D1:DE:11
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/QRWAueuz0vTpIHBjrcP2GDbR3hE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.131.12.0/22
                  31.133.24.0/22
                  31.133.192.0/21
                  31.135.1.0-31.135.7.255
                  37.97.122.0/23
                  64.43.64.0-64.43.72.255
                  64.43.76.0/24
                  64.43.80.0-64.43.91.255
                  77.36.8.0/21
                  77.36.28.0-77.36.30.255
                  77.36.32.0-77.36.53.255
                  77.36.72.0-77.36.87.255
                  77.36.89.0-77.36.111.255
                  77.232.192.0-77.232.215.255
                  77.232.220.0/22
                  81.161.12.0/22
                  85.204.196.0/23
                  86.104.132.0/23
                  89.34.74.0/23
                  89.42.232.0/23
                  89.44.100.0/23
                  89.45.92.0/23
                  89.46.112.0/23
                  91.218.252.0/22
                  91.223.158.0/24
                  91.225.34.0/23
                  91.228.119.0/24
                  91.229.6.0/24
                  91.229.16.0/23
                  91.229.31.0/24
                  91.229.156.0/22
                  91.231.223.0-91.231.226.255
                  91.232.16.0/23
                  91.232.20.0/24
                  91.232.254.0/24
                  91.233.2.0/23
                  91.233.202.0/23
                  91.234.150.0/23
                  91.234.220.0/22
                  91.235.166.0/23
                  91.236.77.0/24
                  91.236.237.0/24
                  91.237.48.0/24
                  91.237.194.0/23
                  91.239.0.0/22
                  91.239.178.0/24
                  91.240.156.0/22
                  91.245.88.0/22
                  91.245.176.0/21
                  91.246.184.0/21
                  91.246.196.0/22
                  91.246.201.0/24
                  93.120.8.0/23
                  93.120.27.0-93.120.30.255
                  93.120.33.0/24
                  93.120.46.0/24
                  93.120.48.0-93.120.73.255
                  93.120.75.0-93.120.90.255
                  93.120.92.0/22
                  93.120.112.0/21
                  93.120.124.0/22
                  171.25.223.0/24
                  176.96.56.0/21
                  176.96.176.0/21
                  176.97.144.0/21
                  176.98.56.0/21
                  176.103.120.0/21
                  176.107.64.0/20
                  176.110.106.0/23
                  176.110.114.0/23
                  176.111.0.0/21
                  176.112.84.0/22
                  176.116.40.0/21
                  176.118.88.0/21
                  176.121.96.0/21
                  176.124.176.0/21
                  178.159.148.0-178.159.159.255
                  185.9.236.0-185.9.243.255
                  185.104.196.0/22
                  188.191.248.0/22
                  188.213.233.0/24
                  193.0.190.0/24
                  193.36.192.0-193.36.202.255
                  193.221.82.0/23
                  195.80.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:04:1a:3f:d0:80:88:66:23:6a:8f:30:f0:7d:26:7f:00:6b:
         44:2d:de:a4:f3:59:36:7c:d4:98:01:32:51:fe:a7:78:23:4e:
         9d:b8:ee:ac:54:6d:f4:49:8e:b7:35:8f:ba:8e:46:09:ae:c6:
         ad:87:b6:86:f4:70:cb:a6:37:41:85:bb:8e:c9:a3:81:e7:30:
         aa:0d:18:d5:98:86:04:ff:a4:0f:43:24:40:4f:df:ef:cf:d5:
         6f:e1:9e:4a:dd:08:4f:38:73:b6:54:59:7c:25:d8:77:7a:38:
         b6:5a:97:ee:61:02:15:50:d7:cf:73:ac:dd:3c:f2:61:c8:58:
         af:8e:9c:1c:3c:9e:76:92:27:1e:fc:0c:f3:c3:dc:d9:48:de:
         3e:58:ec:e9:b1:66:01:cc:f0:70:85:cc:8c:4d:da:98:cf:74:
         ba:be:9c:90:19:d9:ff:48:ce:c9:72:e7:d3:42:51:61:62:ff:
         9a:d3:6e:3b:b1:49:74:b8:a5:f1:7b:94:f9:3c:c2:f8:8e:5d:
         02:8f:ae:a7:e1:aa:c5:3d:cc:34:c7:0f:bf:b5:e7:4b:14:52:
         cf:44:c2:9c:9e:b3:75:c0:b4:ec:6d:b9:4c:27:6f:6f:74:51:
         f3:6a:01:96:57:8a:3e:2c:79:c7:4b:84:20:e4:d5:2f:be:70:
         f4:9d:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:42 2023 by rpki-client on console-ams.rpki-client.org