Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cPq0On7TQwzIPrSAad4CdxbT9z8.roa
File:                     cPq0On7TQwzIPrSAad4CdxbT9z8.roa (raw, json)
Hash identifier:          78gp1cb0JSTraTukfOxwsoDwj12d1reQ1X9ZkKhAzbw=
Subject key identifier:   70:FA:B4:3A:7E:D3:43:0C:C8:3E:B4:80:69:DE:02:77:16:D3:F7:3F
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       0184AED4C77B44B18C62C1D2389013083350
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cPq0On7TQwzIPrSAad4CdxbT9z8.roa
Signing time:             Fri 25 Nov 2022 12:48:11 +0000
ROA not before:           Fri 25 Nov 2022 12:48:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        81.161.12.0/22 maxlen: 22
                          91.228.119.0/24 maxlen: 24
                          176.107.64.0/20 maxlen: 24
                          93.120.112.0/21 maxlen: 21
                          93.120.124.0/22 maxlen: 22
                          89.46.112.0/23 maxlen: 24
                          91.235.166.0/24 maxlen: 24
                          91.235.167.0/24 maxlen: 24
                          91.229.6.0/24 maxlen: 24
                          195.80.142.0/23 maxlen: 24
                          188.213.233.0/24 maxlen: 24
                          31.133.24.0/22 maxlen: 22
                          93.120.64.0/21 maxlen: 21
                          31.133.192.0/24 maxlen: 24
                          193.221.82.0/23 maxlen: 24
                          31.133.193.0/24 maxlen: 24
                          31.133.194.0/24 maxlen: 24
                          31.133.195.0/24 maxlen: 24
                          93.120.75.0/24 maxlen: 24
                          31.133.198.0/24 maxlen: 24
                          31.133.199.0/24 maxlen: 24
                          93.120.76.0/22 maxlen: 22
                          31.133.196.0/23 maxlen: 23
                          93.120.72.0/23 maxlen: 23
                          93.120.84.0/24 maxlen: 24
                          93.120.85.0/24 maxlen: 24
                          93.120.80.0/22 maxlen: 22
                          91.234.222.0/23 maxlen: 23
                          91.234.220.0/23 maxlen: 23
                          93.120.90.0/24 maxlen: 24
                          93.120.88.0/23 maxlen: 23
                          93.120.86.0/23 maxlen: 23
                          93.120.94.0/23 maxlen: 23
                          93.120.92.0/23 maxlen: 23
                          91.234.150.0/23 maxlen: 23
                          93.120.28.0/23 maxlen: 23
                          93.120.27.0/24 maxlen: 24
                          93.120.30.0/24 maxlen: 24
                          93.120.33.0/24 maxlen: 24
                          93.120.37.0/24 maxlen: 24
                          93.120.48.0/20 maxlen: 20
                          93.120.46.0/24 maxlen: 24
                          171.25.223.0/24 maxlen: 24
                          176.112.84.0/22 maxlen: 22
                          91.246.188.0/22 maxlen: 22
                          91.246.196.0/22 maxlen: 22
                          91.246.201.0/24 maxlen: 24
                          89.45.92.0/23 maxlen: 24
                          178.159.152.0/21 maxlen: 21
                          178.159.148.0/22 maxlen: 22
                          91.233.202.0/23 maxlen: 23
                          91.240.156.0/22 maxlen: 22
                          77.232.192.0/23 maxlen: 24
                          77.232.196.0/22 maxlen: 22
                          77.232.194.0/23 maxlen: 23
                          185.104.196.0/22 maxlen: 24
                          77.232.204.0/22 maxlen: 22
                          77.232.200.0/22 maxlen: 22
                          77.232.208.0/21 maxlen: 21
                          91.218.252.0/23 maxlen: 23
                          176.124.176.0/22 maxlen: 22
                          91.218.254.0/23 maxlen: 23
                          86.104.132.0/23 maxlen: 24
                          176.124.180.0/22 maxlen: 22
                          91.246.184.0/22 maxlen: 22
                          176.118.88.0/22 maxlen: 22
                          77.232.220.0/22 maxlen: 22
                          176.118.92.0/22 maxlen: 22
                          91.239.178.0/24 maxlen: 24
                          176.98.56.0/22 maxlen: 22
                          176.98.60.0/22 maxlen: 22
                          91.232.254.0/24 maxlen: 24
                          91.233.2.0/23 maxlen: 23
                          89.44.100.0/23 maxlen: 24
                          91.225.34.0/24 maxlen: 24
                          91.225.35.0/24 maxlen: 24
                          91.231.224.0/23 maxlen: 23
                          91.231.223.0/24 maxlen: 24
                          64.43.64.0/24 maxlen: 24
                          91.245.91.0/24 maxlen: 24
                          91.231.226.0/24 maxlen: 24
                          64.43.68.0/22 maxlen: 22
                          64.43.66.0/23 maxlen: 23
                          64.43.72.0/24 maxlen: 24
                          64.43.76.0/24 maxlen: 24
                          64.43.80.0/21 maxlen: 21
                          64.43.88.0/22 maxlen: 22
                          77.36.52.0/23 maxlen: 23
                          176.110.106.0/24 maxlen: 24
                          176.110.107.0/24 maxlen: 24
                          77.36.80.0/21 maxlen: 21
                          77.36.90.0/23 maxlen: 23
                          85.204.196.0/23 maxlen: 24
                          77.36.89.0/24 maxlen: 24
                          176.110.114.0/23 maxlen: 23
                          77.36.96.0/20 maxlen: 20
                          77.36.92.0/22 maxlen: 22
                          91.245.176.0/21 maxlen: 21
                          37.97.122.0/23 maxlen: 23
                          185.9.240.0/22 maxlen: 22
                          185.9.236.0/22 maxlen: 22
                          176.111.4.0/22 maxlen: 22
                          176.111.0.0/22 maxlen: 22
                          91.239.0.0/22 maxlen: 22
                          176.97.144.0/22 maxlen: 22
                          176.97.148.0/22 maxlen: 22
                          188.191.248.0/22 maxlen: 22
                          91.232.16.0/23 maxlen: 23
                          91.232.20.0/24 maxlen: 24
                          193.36.192.0/21 maxlen: 21
                          31.131.12.0/22 maxlen: 22
                          193.36.200.0/23 maxlen: 23
                          193.36.200.0/24 maxlen: 24
                          193.36.201.0/24 maxlen: 24
                          193.36.202.0/24 maxlen: 24
                          176.96.56.0/21 maxlen: 21
                          91.237.194.0/23 maxlen: 23
                          77.36.8.0/21 maxlen: 21
                          176.96.176.0/22 maxlen: 22
                          176.96.180.0/22 maxlen: 22
                          77.36.30.0/24 maxlen: 24
                          77.36.28.0/23 maxlen: 23
                          77.36.36.0/23 maxlen: 23
                          77.36.32.0/22 maxlen: 22
                          89.42.232.0/23 maxlen: 24
                          77.36.40.0/21 maxlen: 21
                          77.36.38.0/23 maxlen: 23
                          77.36.48.0/22 maxlen: 22
                          91.236.237.0/24 maxlen: 24
                          176.116.40.0/21 maxlen: 21
                          91.223.158.0/24 maxlen: 24
                          91.237.48.0/24 maxlen: 24
                          31.135.4.0/23 maxlen: 23
                          31.135.1.0/24 maxlen: 24
                          31.135.2.0/24 maxlen: 24
                          31.135.3.0/24 maxlen: 24
                          31.135.4.0/24 maxlen: 24
                          31.135.5.0/24 maxlen: 24
                          31.135.7.0/24 maxlen: 24
                          91.229.16.0/23 maxlen: 23
                          91.229.31.0/24 maxlen: 24
                          176.121.96.0/21 maxlen: 21
                          193.0.190.0/24 maxlen: 24
                          91.236.77.0/24 maxlen: 24
                          91.229.156.0/23 maxlen: 23
                          91.229.158.0/24 maxlen: 24
                          91.229.159.0/24 maxlen: 24
                          89.34.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ae:d4:c7:7b:44:b1:8c:62:c1:d2:38:90:13:08:33:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Nov 25 12:48:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=70fab43a7ed3430cc83eb48069de027716d3f73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:b8:9c:88:95:2d:28:fb:7d:25:42:a0:a3:
                    3a:e8:e7:65:2f:87:af:96:dd:1f:de:4d:99:1d:73:
                    cf:d0:9f:6f:58:d0:ee:90:31:34:c5:9d:88:88:81:
                    30:8f:71:49:d2:af:fd:0c:0d:ea:06:b2:65:6c:ed:
                    db:b2:d6:5b:b5:07:95:c3:44:e8:32:ef:5d:73:0b:
                    11:11:14:82:29:6a:94:ce:2b:7d:41:44:06:7c:9f:
                    fe:25:95:19:05:bd:98:de:98:cf:52:a8:05:52:2a:
                    69:1b:03:d1:d6:22:c4:c4:13:d9:81:44:10:90:ef:
                    06:81:91:64:ad:8a:db:e1:1a:a1:4b:72:c0:27:94:
                    db:e5:fc:4a:de:1f:38:b9:58:20:61:6d:b0:6e:9a:
                    ab:50:87:1b:48:40:74:21:01:f8:b6:95:9f:ab:c3:
                    ed:86:6f:5c:70:06:00:39:91:ef:de:83:94:b7:d5:
                    e6:8c:54:9e:c6:c7:0c:53:d8:8b:f8:2a:c5:e9:4e:
                    4a:e9:a2:e1:3a:60:8b:03:f1:cb:61:eb:cf:e7:d8:
                    da:d7:41:66:f1:fe:d8:c5:dc:85:37:ab:89:f0:ae:
                    74:a0:7e:5d:22:46:b4:47:1b:64:21:9a:81:91:96:
                    74:28:68:69:56:08:f8:2e:71:b9:26:70:5b:eb:db:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FA:B4:3A:7E:D3:43:0C:C8:3E:B4:80:69:DE:02:77:16:D3:F7:3F
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cPq0On7TQwzIPrSAad4CdxbT9z8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.131.12.0/22
                  31.133.24.0/22
                  31.133.192.0/21
                  31.135.1.0-31.135.5.255
                  31.135.7.0/24
                  37.97.122.0/23
                  64.43.64.0/24
                  64.43.66.0-64.43.72.255
                  64.43.76.0/24
                  64.43.80.0-64.43.91.255
                  77.36.8.0/21
                  77.36.28.0-77.36.30.255
                  77.36.32.0-77.36.53.255
                  77.36.80.0/21
                  77.36.89.0-77.36.111.255
                  77.232.192.0-77.232.215.255
                  77.232.220.0/22
                  81.161.12.0/22
                  85.204.196.0/23
                  86.104.132.0/23
                  89.34.74.0/23
                  89.42.232.0/23
                  89.44.100.0/23
                  89.45.92.0/23
                  89.46.112.0/23
                  91.218.252.0/22
                  91.223.158.0/24
                  91.225.34.0/23
                  91.228.119.0/24
                  91.229.6.0/24
                  91.229.16.0/23
                  91.229.31.0/24
                  91.229.156.0/22
                  91.231.223.0-91.231.226.255
                  91.232.16.0/23
                  91.232.20.0/24
                  91.232.254.0/24
                  91.233.2.0/23
                  91.233.202.0/23
                  91.234.150.0/23
                  91.234.220.0/22
                  91.235.166.0/23
                  91.236.77.0/24
                  91.236.237.0/24
                  91.237.48.0/24
                  91.237.194.0/23
                  91.239.0.0/22
                  91.239.178.0/24
                  91.240.156.0/22
                  91.245.91.0/24
                  91.245.176.0/21
                  91.246.184.0/21
                  91.246.196.0/22
                  91.246.201.0/24
                  93.120.27.0-93.120.30.255
                  93.120.33.0/24
                  93.120.37.0/24
                  93.120.46.0/24
                  93.120.48.0-93.120.73.255
                  93.120.75.0-93.120.90.255
                  93.120.92.0/22
                  93.120.112.0/21
                  93.120.124.0/22
                  171.25.223.0/24
                  176.96.56.0/21
                  176.96.176.0/21
                  176.97.144.0/21
                  176.98.56.0/21
                  176.107.64.0/20
                  176.110.106.0/23
                  176.110.114.0/23
                  176.111.0.0/21
                  176.112.84.0/22
                  176.116.40.0/21
                  176.118.88.0/21
                  176.121.96.0/21
                  176.124.176.0/21
                  178.159.148.0-178.159.159.255
                  185.9.236.0-185.9.243.255
                  185.104.196.0/22
                  188.191.248.0/22
                  188.213.233.0/24
                  193.0.190.0/24
                  193.36.192.0-193.36.202.255
                  193.221.82.0/23
                  195.80.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:40:03:6a:7a:e4:aa:40:2d:eb:f0:b6:1d:68:85:5b:bc:3a:
         9e:c2:b0:40:7e:25:08:29:9c:cf:1e:c6:31:bd:ee:60:4d:f3:
         2e:fd:c6:cb:b0:1c:77:b8:94:8f:bb:71:de:12:93:de:b0:73:
         15:b7:78:4c:56:eb:2f:af:2d:be:ab:47:2e:7d:56:df:88:fa:
         ed:cf:3b:e8:90:f1:8f:6d:2b:0a:40:11:78:95:cb:0e:14:b0:
         0d:9a:40:e4:a9:c5:4c:05:6a:06:94:d6:fd:06:a4:67:a7:6c:
         13:31:62:bf:4d:63:58:e9:1a:7c:c4:d3:89:de:16:e3:e0:18:
         9e:88:4d:2b:18:8a:a9:45:ae:48:e6:ee:3f:7c:55:52:d3:70:
         8b:86:f0:cd:5c:8c:94:f4:08:bb:e9:e3:ad:35:30:48:fb:3f:
         55:b7:d3:0b:20:98:fd:c1:1b:6b:f8:2b:a2:7b:ce:4d:da:38:
         ec:1a:89:c8:3e:85:55:6e:9a:69:d5:6c:fb:a8:1d:38:59:8e:
         c8:8e:67:85:71:b1:e7:f0:0d:04:31:2c:65:bb:27:c7:24:29:
         9d:32:c4:96:34:28:11:7d:87:22:8a:80:d0:58:b9:de:2b:58:
         6b:45:c2:70:e2:c0:07:3c:1b:67:76:57:55:88:2c:6c:3c:4a:
         fc:3f:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org