Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/hsM2UV5l6giEhEWdgOt-YXPb_Xk.roa
File:                     hsM2UV5l6giEhEWdgOt-YXPb_Xk.roa (raw, json)
Hash identifier:          LBwZh6oB88bfN0/YD0EZ7cWvZrH2HnsLdzgYcaLA3+c=
Subject key identifier:   86:C3:36:51:5E:65:EA:08:84:84:45:9D:80:EB:7E:61:73:DB:FD:79
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       1C5293B7
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/hsM2UV5l6giEhEWdgOt-YXPb_Xk.roa
Signing time:             Fri 04 Mar 2022 07:43:57 +0000
ROA not before:           Fri 04 Mar 2022 07:43:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        81.161.12.0/22 maxlen: 22
                          176.107.64.0/20 maxlen: 24
                          93.120.112.0/21 maxlen: 21
                          93.120.124.0/22 maxlen: 22
                          89.46.112.0/23 maxlen: 24
                          91.235.166.0/24 maxlen: 24
                          91.235.167.0/24 maxlen: 24
                          195.80.142.0/23 maxlen: 24
                          188.213.233.0/24 maxlen: 24
                          31.133.24.0/22 maxlen: 22
                          93.120.64.0/21 maxlen: 21
                          31.133.192.0/24 maxlen: 24
                          193.221.82.0/23 maxlen: 24
                          31.133.193.0/24 maxlen: 24
                          31.133.194.0/24 maxlen: 24
                          31.133.195.0/24 maxlen: 24
                          93.120.75.0/24 maxlen: 24
                          31.133.198.0/24 maxlen: 24
                          31.133.199.0/24 maxlen: 24
                          93.120.76.0/22 maxlen: 22
                          31.133.196.0/23 maxlen: 23
                          93.120.72.0/23 maxlen: 23
                          93.120.84.0/24 maxlen: 24
                          93.120.85.0/24 maxlen: 24
                          93.120.80.0/22 maxlen: 22
                          91.234.222.0/23 maxlen: 23
                          91.234.220.0/23 maxlen: 23
                          93.120.90.0/24 maxlen: 24
                          93.120.88.0/23 maxlen: 23
                          93.120.86.0/23 maxlen: 23
                          93.120.96.0/22 maxlen: 22
                          93.120.94.0/23 maxlen: 23
                          93.120.92.0/23 maxlen: 23
                          91.234.150.0/23 maxlen: 23
                          93.120.28.0/23 maxlen: 23
                          93.120.27.0/24 maxlen: 24
                          93.120.30.0/24 maxlen: 24
                          93.120.33.0/24 maxlen: 24
                          93.120.48.0/20 maxlen: 20
                          171.25.223.0/24 maxlen: 24
                          176.112.84.0/22 maxlen: 22
                          91.246.188.0/22 maxlen: 22
                          91.246.196.0/22 maxlen: 22
                          91.246.201.0/24 maxlen: 24
                          89.45.92.0/23 maxlen: 24
                          178.159.152.0/21 maxlen: 21
                          178.159.148.0/22 maxlen: 22
                          91.233.202.0/23 maxlen: 23
                          91.240.156.0/22 maxlen: 22
                          77.232.192.0/23 maxlen: 24
                          77.232.196.0/22 maxlen: 22
                          77.232.194.0/23 maxlen: 23
                          185.104.196.0/22 maxlen: 24
                          77.232.204.0/22 maxlen: 22
                          77.232.200.0/22 maxlen: 22
                          77.232.208.0/21 maxlen: 21
                          91.218.252.0/23 maxlen: 23
                          176.124.176.0/22 maxlen: 22
                          91.218.254.0/23 maxlen: 23
                          86.104.132.0/23 maxlen: 24
                          176.124.180.0/22 maxlen: 22
                          91.246.184.0/22 maxlen: 22
                          176.118.88.0/22 maxlen: 22
                          77.232.220.0/22 maxlen: 22
                          176.118.92.0/22 maxlen: 22
                          91.239.178.0/24 maxlen: 24
                          176.98.56.0/22 maxlen: 22
                          176.98.60.0/22 maxlen: 22
                          91.233.2.0/23 maxlen: 23
                          89.44.100.0/23 maxlen: 24
                          64.43.64.0/23 maxlen: 23
                          91.245.90.0/23 maxlen: 23
                          91.231.224.0/23 maxlen: 23
                          91.245.88.0/23 maxlen: 23
                          91.231.223.0/24 maxlen: 24
                          64.43.64.0/24 maxlen: 24
                          91.231.226.0/24 maxlen: 24
                          64.43.68.0/22 maxlen: 22
                          64.43.66.0/23 maxlen: 23
                          64.43.65.0/24 maxlen: 24
                          64.43.72.0/24 maxlen: 24
                          64.43.76.0/24 maxlen: 24
                          64.43.80.0/21 maxlen: 21
                          64.43.88.0/22 maxlen: 22
                          77.36.52.0/23 maxlen: 23
                          176.110.106.0/24 maxlen: 24
                          176.110.107.0/24 maxlen: 24
                          77.36.80.0/21 maxlen: 21
                          77.36.90.0/23 maxlen: 23
                          85.204.196.0/23 maxlen: 24
                          77.36.89.0/24 maxlen: 24
                          176.110.114.0/23 maxlen: 23
                          77.36.96.0/20 maxlen: 20
                          77.36.92.0/22 maxlen: 22
                          91.245.176.0/21 maxlen: 21
                          37.97.122.0/23 maxlen: 23
                          185.9.240.0/22 maxlen: 22
                          185.9.236.0/22 maxlen: 22
                          176.111.4.0/22 maxlen: 22
                          176.111.0.0/22 maxlen: 22
                          91.239.0.0/22 maxlen: 22
                          176.97.144.0/22 maxlen: 22
                          176.97.148.0/22 maxlen: 22
                          188.191.248.0/22 maxlen: 22
                          91.232.16.0/23 maxlen: 23
                          91.232.20.0/24 maxlen: 24
                          193.36.192.0/21 maxlen: 21
                          31.131.12.0/22 maxlen: 22
                          193.36.200.0/23 maxlen: 23
                          193.36.200.0/24 maxlen: 24
                          193.36.201.0/24 maxlen: 24
                          193.36.202.0/24 maxlen: 24
                          176.96.56.0/21 maxlen: 21
                          91.237.194.0/23 maxlen: 23
                          77.36.8.0/21 maxlen: 21
                          176.96.176.0/22 maxlen: 22
                          176.96.180.0/22 maxlen: 22
                          176.103.120.0/21 maxlen: 24
                          77.36.36.0/23 maxlen: 23
                          77.36.32.0/22 maxlen: 22
                          89.42.232.0/23 maxlen: 24
                          77.36.40.0/21 maxlen: 21
                          77.36.38.0/23 maxlen: 23
                          77.36.48.0/22 maxlen: 22
                          176.116.40.0/21 maxlen: 21
                          31.135.4.0/23 maxlen: 23
                          31.135.0.0/23 maxlen: 23
                          31.135.2.0/24 maxlen: 24
                          31.135.3.0/24 maxlen: 24
                          31.135.4.0/24 maxlen: 24
                          31.135.6.0/23 maxlen: 23
                          31.135.5.0/24 maxlen: 24
                          31.135.6.0/24 maxlen: 24
                          31.135.7.0/24 maxlen: 24
                          91.229.16.0/23 maxlen: 23
                          91.229.31.0/24 maxlen: 24
                          176.121.96.0/21 maxlen: 21
                          193.0.190.0/24 maxlen: 24
                          91.229.156.0/23 maxlen: 23
                          91.229.158.0/24 maxlen: 24
                          91.229.159.0/24 maxlen: 24
                          89.34.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475173815 (0x1c5293b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Mar  4 07:43:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=86c336515e65ea088484459d80eb7e6173dbfd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7a:fb:8a:bb:ec:52:8d:f8:c3:bc:6a:78:d1:
                    03:70:5f:ff:af:14:e9:ce:2b:3c:ef:ae:d8:10:60:
                    ee:37:6b:5f:61:d1:ba:10:ed:07:fe:26:b9:aa:1a:
                    d7:ad:92:3a:08:71:04:39:77:a3:25:85:8f:33:8c:
                    75:b1:bb:b9:8d:8c:5e:05:18:62:90:b5:64:21:5f:
                    1b:16:09:27:6b:a7:90:9b:28:18:32:40:7d:89:df:
                    a6:4b:4f:83:92:ba:08:c0:71:b5:f5:00:1b:b0:69:
                    aa:8f:17:40:76:b9:90:07:12:24:b5:73:d0:8c:3b:
                    81:12:44:f9:83:3e:78:b9:f0:11:70:22:89:0d:20:
                    5b:ae:84:ef:e9:21:9b:e8:8b:58:ef:85:af:a9:70:
                    4d:b7:e6:31:df:5e:92:df:69:2d:c9:bc:2b:ee:6e:
                    03:39:4f:86:e6:11:97:5e:f7:8f:8e:60:80:ce:86:
                    d6:cb:58:6b:17:75:d1:ec:ba:23:1a:43:3c:5f:b8:
                    33:a7:1c:51:69:03:d1:72:26:81:31:ba:71:62:af:
                    84:d6:59:d3:ac:0b:d4:f9:8b:d3:b6:40:4a:26:d5:
                    69:a6:21:ea:98:45:89:55:b4:98:e3:08:0e:34:91:
                    14:bd:cb:44:06:94:2e:a6:b6:ae:9b:dc:5e:ce:ad:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C3:36:51:5E:65:EA:08:84:84:45:9D:80:EB:7E:61:73:DB:FD:79
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/hsM2UV5l6giEhEWdgOt-YXPb_Xk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.131.12.0/22
                  31.133.24.0/22
                  31.133.192.0/21
                  31.135.0.0/21
                  37.97.122.0/23
                  64.43.64.0-64.43.72.255
                  64.43.76.0/24
                  64.43.80.0-64.43.91.255
                  77.36.8.0/21
                  77.36.32.0-77.36.53.255
                  77.36.80.0/21
                  77.36.89.0-77.36.111.255
                  77.232.192.0-77.232.215.255
                  77.232.220.0/22
                  81.161.12.0/22
                  85.204.196.0/23
                  86.104.132.0/23
                  89.34.74.0/23
                  89.42.232.0/23
                  89.44.100.0/23
                  89.45.92.0/23
                  89.46.112.0/23
                  91.218.252.0/22
                  91.229.16.0/23
                  91.229.31.0/24
                  91.229.156.0/22
                  91.231.223.0-91.231.226.255
                  91.232.16.0/23
                  91.232.20.0/24
                  91.233.2.0/23
                  91.233.202.0/23
                  91.234.150.0/23
                  91.234.220.0/22
                  91.235.166.0/23
                  91.237.194.0/23
                  91.239.0.0/22
                  91.239.178.0/24
                  91.240.156.0/22
                  91.245.88.0/22
                  91.245.176.0/21
                  91.246.184.0/21
                  91.246.196.0/22
                  91.246.201.0/24
                  93.120.27.0-93.120.30.255
                  93.120.33.0/24
                  93.120.48.0-93.120.73.255
                  93.120.75.0-93.120.90.255
                  93.120.92.0-93.120.99.255
                  93.120.112.0/21
                  93.120.124.0/22
                  171.25.223.0/24
                  176.96.56.0/21
                  176.96.176.0/21
                  176.97.144.0/21
                  176.98.56.0/21
                  176.103.120.0/21
                  176.107.64.0/20
                  176.110.106.0/23
                  176.110.114.0/23
                  176.111.0.0/21
                  176.112.84.0/22
                  176.116.40.0/21
                  176.118.88.0/21
                  176.121.96.0/21
                  176.124.176.0/21
                  178.159.148.0-178.159.159.255
                  185.9.236.0-185.9.243.255
                  185.104.196.0/22
                  188.191.248.0/22
                  188.213.233.0/24
                  193.0.190.0/24
                  193.36.192.0-193.36.202.255
                  193.221.82.0/23
                  195.80.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:6b:8c:70:13:02:4a:db:18:0a:db:90:85:b9:a0:c7:6d:
         2d:2e:b4:b8:61:d4:a3:bb:9c:83:b2:c5:ce:81:26:7c:e7:b4:
         e6:04:12:ac:ee:c9:4b:fd:0f:ad:24:79:71:f8:01:2d:be:c2:
         99:6a:01:c6:20:68:95:92:00:b1:d3:8d:fe:8c:cb:53:b8:5c:
         9f:14:b0:63:4e:a3:10:cd:97:40:d4:25:34:27:ae:45:55:1e:
         61:84:c7:5a:62:da:c5:f3:0f:87:c8:7a:bd:63:0f:c1:6a:dd:
         7e:cc:b4:29:df:9e:ca:6a:b7:4f:53:be:8c:4e:f4:6e:10:3a:
         41:80:39:c5:6b:f1:39:28:20:0e:cb:9c:ce:22:f0:32:0d:5e:
         ac:04:a8:76:cb:45:40:34:b1:4d:12:30:0a:04:e4:cb:89:cd:
         33:14:36:c6:5b:c2:74:10:d0:55:25:4d:18:5f:90:6f:b9:6e:
         ee:a7:35:b0:3e:02:e4:4f:f0:b6:ba:8c:61:44:f4:80:7a:79:
         09:8d:22:54:c5:c6:da:34:ab:08:cc:77:a7:f5:2d:50:c9:d9:
         bd:58:d0:a4:3e:4b:f5:16:bd:98:9c:69:cc:ed:e5:ee:dd:3c:
         72:5e:96:d5:15:e3:e3:0b:c3:93:48:2e:22:42:42:6a:d7:3f:
         fe:27:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-fra.rpki-client.org