Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ip-gTFH_tOu5JVby_YJDNPkaoMM.roa
File:                     ip-gTFH_tOu5JVby_YJDNPkaoMM.roa (raw, json)
Hash identifier:          jLM/QzKIAtwi6tKFFk4+SIgljqJvUl1lf1cUTW1+Naw=
Subject key identifier:   8A:9F:A0:4C:51:FF:B4:EB:B9:25:56:F2:FD:82:43:34:F9:1A:A0:C3
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       01828D0AF5CF91CB642FD800BD3583ACA128
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ip-gTFH_tOu5JVby_YJDNPkaoMM.roa
Signing time:             Thu 11 Aug 2022 13:14:41 +0000
ROA not before:           Thu 11 Aug 2022 13:14:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        81.161.12.0/22 maxlen: 22
                          91.228.119.0/24 maxlen: 24
                          176.107.64.0/20 maxlen: 24
                          93.120.112.0/21 maxlen: 21
                          93.120.124.0/22 maxlen: 22
                          89.46.112.0/23 maxlen: 24
                          91.235.166.0/24 maxlen: 24
                          91.235.167.0/24 maxlen: 24
                          91.229.6.0/24 maxlen: 24
                          195.80.142.0/23 maxlen: 24
                          188.213.233.0/24 maxlen: 24
                          31.133.24.0/22 maxlen: 22
                          93.120.64.0/21 maxlen: 21
                          31.133.192.0/24 maxlen: 24
                          193.221.82.0/23 maxlen: 24
                          31.133.193.0/24 maxlen: 24
                          31.133.194.0/24 maxlen: 24
                          31.133.195.0/24 maxlen: 24
                          93.120.75.0/24 maxlen: 24
                          31.133.198.0/24 maxlen: 24
                          31.133.199.0/24 maxlen: 24
                          93.120.76.0/22 maxlen: 22
                          31.133.196.0/23 maxlen: 23
                          93.120.72.0/23 maxlen: 23
                          93.120.84.0/24 maxlen: 24
                          93.120.85.0/24 maxlen: 24
                          93.120.80.0/22 maxlen: 22
                          91.234.222.0/23 maxlen: 23
                          91.234.220.0/23 maxlen: 23
                          93.120.90.0/24 maxlen: 24
                          93.120.88.0/23 maxlen: 23
                          93.120.86.0/23 maxlen: 23
                          93.120.94.0/23 maxlen: 23
                          93.120.92.0/23 maxlen: 23
                          93.120.8.0/23 maxlen: 23
                          91.234.150.0/23 maxlen: 23
                          93.120.28.0/23 maxlen: 23
                          93.120.27.0/24 maxlen: 24
                          93.120.30.0/24 maxlen: 24
                          93.120.33.0/24 maxlen: 24
                          93.120.48.0/20 maxlen: 20
                          93.120.46.0/24 maxlen: 24
                          171.25.223.0/24 maxlen: 24
                          176.112.84.0/22 maxlen: 22
                          91.246.188.0/22 maxlen: 22
                          91.246.196.0/22 maxlen: 22
                          91.246.201.0/24 maxlen: 24
                          89.45.92.0/23 maxlen: 24
                          178.159.152.0/21 maxlen: 21
                          178.159.148.0/22 maxlen: 22
                          91.233.202.0/23 maxlen: 23
                          91.240.156.0/22 maxlen: 22
                          77.232.192.0/23 maxlen: 24
                          77.232.196.0/22 maxlen: 22
                          77.232.194.0/23 maxlen: 23
                          185.104.196.0/22 maxlen: 24
                          77.232.204.0/22 maxlen: 22
                          77.232.200.0/22 maxlen: 22
                          77.232.208.0/21 maxlen: 21
                          91.218.252.0/23 maxlen: 23
                          176.124.176.0/22 maxlen: 22
                          91.218.254.0/23 maxlen: 23
                          86.104.132.0/23 maxlen: 24
                          176.124.180.0/22 maxlen: 22
                          91.246.184.0/22 maxlen: 22
                          176.118.88.0/22 maxlen: 22
                          77.232.220.0/22 maxlen: 22
                          176.118.92.0/22 maxlen: 22
                          91.239.178.0/24 maxlen: 24
                          176.98.56.0/22 maxlen: 22
                          176.98.60.0/22 maxlen: 22
                          91.232.254.0/24 maxlen: 24
                          91.233.2.0/23 maxlen: 23
                          89.44.100.0/23 maxlen: 24
                          91.231.224.0/23 maxlen: 23
                          91.225.34.0/24 maxlen: 24
                          91.225.35.0/24 maxlen: 24
                          64.43.64.0/23 maxlen: 23
                          91.245.90.0/23 maxlen: 23
                          91.245.88.0/23 maxlen: 23
                          91.231.223.0/24 maxlen: 24
                          64.43.64.0/24 maxlen: 24
                          91.231.226.0/24 maxlen: 24
                          64.43.68.0/22 maxlen: 22
                          64.43.66.0/23 maxlen: 23
                          64.43.65.0/24 maxlen: 24
                          64.43.72.0/24 maxlen: 24
                          64.43.76.0/24 maxlen: 24
                          64.43.80.0/21 maxlen: 21
                          64.43.88.0/22 maxlen: 22
                          77.36.52.0/23 maxlen: 23
                          176.110.106.0/24 maxlen: 24
                          176.110.107.0/24 maxlen: 24
                          77.36.80.0/21 maxlen: 21
                          77.36.90.0/23 maxlen: 23
                          85.204.196.0/23 maxlen: 24
                          77.36.89.0/24 maxlen: 24
                          176.110.114.0/23 maxlen: 23
                          77.36.96.0/20 maxlen: 20
                          77.36.92.0/22 maxlen: 22
                          91.245.176.0/21 maxlen: 21
                          37.97.122.0/23 maxlen: 23
                          185.9.240.0/22 maxlen: 22
                          185.9.236.0/22 maxlen: 22
                          176.111.4.0/22 maxlen: 22
                          176.111.0.0/22 maxlen: 22
                          91.239.0.0/22 maxlen: 22
                          176.97.144.0/22 maxlen: 22
                          176.97.148.0/22 maxlen: 22
                          188.191.248.0/22 maxlen: 22
                          91.232.16.0/23 maxlen: 23
                          91.232.20.0/24 maxlen: 24
                          193.36.192.0/21 maxlen: 21
                          31.131.12.0/22 maxlen: 22
                          193.36.200.0/23 maxlen: 23
                          193.36.200.0/24 maxlen: 24
                          193.36.201.0/24 maxlen: 24
                          193.36.202.0/24 maxlen: 24
                          176.96.56.0/21 maxlen: 21
                          91.237.194.0/23 maxlen: 23
                          77.36.8.0/21 maxlen: 21
                          176.96.176.0/22 maxlen: 22
                          176.96.180.0/22 maxlen: 22
                          77.36.30.0/24 maxlen: 24
                          176.103.120.0/21 maxlen: 24
                          77.36.28.0/23 maxlen: 23
                          77.36.36.0/23 maxlen: 23
                          77.36.32.0/22 maxlen: 22
                          89.42.232.0/23 maxlen: 24
                          77.36.40.0/21 maxlen: 21
                          77.36.38.0/23 maxlen: 23
                          77.36.48.0/22 maxlen: 22
                          91.236.237.0/24 maxlen: 24
                          176.116.40.0/21 maxlen: 21
                          91.223.158.0/24 maxlen: 24
                          91.237.48.0/24 maxlen: 24
                          31.135.4.0/23 maxlen: 23
                          31.135.1.0/24 maxlen: 24
                          31.135.2.0/24 maxlen: 24
                          31.135.3.0/24 maxlen: 24
                          31.135.4.0/24 maxlen: 24
                          31.135.5.0/24 maxlen: 24
                          31.135.7.0/24 maxlen: 24
                          91.229.16.0/23 maxlen: 23
                          91.229.31.0/24 maxlen: 24
                          176.121.96.0/21 maxlen: 21
                          193.0.190.0/24 maxlen: 24
                          91.236.77.0/24 maxlen: 24
                          91.229.156.0/23 maxlen: 23
                          91.229.158.0/24 maxlen: 24
                          91.229.159.0/24 maxlen: 24
                          89.34.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8d:0a:f5:cf:91:cb:64:2f:d8:00:bd:35:83:ac:a1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Aug 11 13:14:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a9fa04c51ffb4ebb92556f2fd824334f91aa0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:cf:7f:b8:9d:05:53:21:15:15:83:c6:e7:
                    c0:6a:1e:81:2f:aa:63:87:ac:c4:aa:67:0f:1a:ca:
                    f5:64:a0:13:b3:6f:e0:60:0b:f0:85:37:a7:6e:49:
                    c2:14:16:f8:70:61:d7:25:07:32:26:88:5c:63:a2:
                    f4:2d:2a:82:29:73:89:61:a9:cc:16:54:d0:d2:91:
                    00:ad:8d:35:cf:2e:fb:9f:6c:7c:bb:54:23:40:9a:
                    52:d0:b4:f9:37:90:01:fa:58:eb:d4:6b:64:1c:8e:
                    6c:6d:c2:20:1a:4d:2e:50:62:36:c7:6c:80:94:95:
                    1e:2a:14:c4:0a:75:1a:1e:42:24:15:fa:e8:c0:8e:
                    52:30:97:fd:35:e1:6e:a8:ba:65:b4:bb:ef:67:20:
                    e9:15:c7:42:07:9c:e0:b5:05:b4:4c:de:d7:8c:31:
                    2d:86:e8:49:2e:2f:8a:f5:3f:dd:f9:3c:de:47:79:
                    70:b9:3a:7d:10:76:67:da:89:e5:fc:e0:0d:e8:7f:
                    8b:42:9a:8e:85:ac:41:15:ca:56:8e:dd:4b:7f:88:
                    ee:9b:fa:8c:1c:c1:70:3c:e7:15:72:ee:3a:ed:48:
                    ef:6c:a9:2e:74:ef:73:ee:5b:a9:0b:fa:9f:0f:1b:
                    8f:ba:42:90:db:88:49:18:96:c7:63:fc:08:79:42:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9F:A0:4C:51:FF:B4:EB:B9:25:56:F2:FD:82:43:34:F9:1A:A0:C3
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ip-gTFH_tOu5JVby_YJDNPkaoMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.131.12.0/22
                  31.133.24.0/22
                  31.133.192.0/21
                  31.135.1.0-31.135.5.255
                  31.135.7.0/24
                  37.97.122.0/23
                  64.43.64.0-64.43.72.255
                  64.43.76.0/24
                  64.43.80.0-64.43.91.255
                  77.36.8.0/21
                  77.36.28.0-77.36.30.255
                  77.36.32.0-77.36.53.255
                  77.36.80.0/21
                  77.36.89.0-77.36.111.255
                  77.232.192.0-77.232.215.255
                  77.232.220.0/22
                  81.161.12.0/22
                  85.204.196.0/23
                  86.104.132.0/23
                  89.34.74.0/23
                  89.42.232.0/23
                  89.44.100.0/23
                  89.45.92.0/23
                  89.46.112.0/23
                  91.218.252.0/22
                  91.223.158.0/24
                  91.225.34.0/23
                  91.228.119.0/24
                  91.229.6.0/24
                  91.229.16.0/23
                  91.229.31.0/24
                  91.229.156.0/22
                  91.231.223.0-91.231.226.255
                  91.232.16.0/23
                  91.232.20.0/24
                  91.232.254.0/24
                  91.233.2.0/23
                  91.233.202.0/23
                  91.234.150.0/23
                  91.234.220.0/22
                  91.235.166.0/23
                  91.236.77.0/24
                  91.236.237.0/24
                  91.237.48.0/24
                  91.237.194.0/23
                  91.239.0.0/22
                  91.239.178.0/24
                  91.240.156.0/22
                  91.245.88.0/22
                  91.245.176.0/21
                  91.246.184.0/21
                  91.246.196.0/22
                  91.246.201.0/24
                  93.120.8.0/23
                  93.120.27.0-93.120.30.255
                  93.120.33.0/24
                  93.120.46.0/24
                  93.120.48.0-93.120.73.255
                  93.120.75.0-93.120.90.255
                  93.120.92.0/22
                  93.120.112.0/21
                  93.120.124.0/22
                  171.25.223.0/24
                  176.96.56.0/21
                  176.96.176.0/21
                  176.97.144.0/21
                  176.98.56.0/21
                  176.103.120.0/21
                  176.107.64.0/20
                  176.110.106.0/23
                  176.110.114.0/23
                  176.111.0.0/21
                  176.112.84.0/22
                  176.116.40.0/21
                  176.118.88.0/21
                  176.121.96.0/21
                  176.124.176.0/21
                  178.159.148.0-178.159.159.255
                  185.9.236.0-185.9.243.255
                  185.104.196.0/22
                  188.191.248.0/22
                  188.213.233.0/24
                  193.0.190.0/24
                  193.36.192.0-193.36.202.255
                  193.221.82.0/23
                  195.80.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:9b:2b:ee:03:dd:c1:c5:8d:ee:a8:e6:9d:4f:bf:6f:b7:
         70:c1:7d:9c:5c:49:e8:dd:54:e0:71:56:9b:d6:30:3c:07:79:
         59:a8:cf:4f:6b:11:1d:ea:9f:a1:3d:79:c5:63:13:b0:bd:54:
         48:3f:3d:16:56:ab:9f:99:34:a8:8e:de:c9:cd:87:95:5f:c4:
         09:7c:9a:d1:0e:d5:75:a3:12:bc:09:e0:1d:af:ec:21:5f:ce:
         96:d2:1f:5a:96:8b:37:ba:8c:e4:df:3e:0e:07:42:76:a8:b4:
         a2:ff:5a:cd:25:58:ae:a6:6f:58:47:b1:ca:7d:28:da:6e:16:
         86:48:5e:d8:2e:dc:e7:cb:73:e2:35:74:0a:b2:68:8a:bc:23:
         fa:41:7c:9e:11:d1:15:96:27:82:e2:84:21:43:b2:f9:f8:51:
         0c:71:be:58:d9:db:9d:13:a9:09:de:25:a4:24:06:81:b7:95:
         18:39:37:45:b7:c8:dd:48:53:47:17:1a:1a:be:49:9d:8a:b3:
         dd:36:a5:2c:f3:33:a2:6c:88:e3:58:0b:c3:e6:1d:dc:bb:ff:
         cc:cf:9e:a4:0c:66:b4:f6:fd:73:3d:73:3a:20:3a:57:c9:2e:
         ae:ef:8a:d5:16:2c:3d:6e:f8:fb:69:30:86:16:67:25:e5:fe:
         fe:88:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org