Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/jZE4w7ATkDl5sF-bcj_4YckJkuY.roa
File:                     jZE4w7ATkDl5sF-bcj_4YckJkuY.roa (raw, json)
Hash identifier:          xHAFNvesi8Z0rEUTIiDVTgAmyelCEr6gTYzu2uVnsMQ=
Subject key identifier:   8D:91:38:C3:B0:13:90:39:79:B0:5F:9B:72:3F:F8:61:C9:09:92:E6
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       1C818085
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/jZE4w7ATkDl5sF-bcj_4YckJkuY.roa
Signing time:             Tue 15 Mar 2022 15:39:56 +0000
ROA not before:           Tue 15 Mar 2022 15:39:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        81.161.12.0/22 maxlen: 22
                          176.107.64.0/20 maxlen: 24
                          93.120.112.0/21 maxlen: 21
                          93.120.124.0/22 maxlen: 22
                          89.46.112.0/23 maxlen: 24
                          91.235.166.0/24 maxlen: 24
                          91.235.167.0/24 maxlen: 24
                          195.80.142.0/23 maxlen: 24
                          188.213.233.0/24 maxlen: 24
                          31.133.24.0/22 maxlen: 22
                          93.120.64.0/21 maxlen: 21
                          31.133.192.0/24 maxlen: 24
                          193.221.82.0/23 maxlen: 24
                          31.133.193.0/24 maxlen: 24
                          31.133.194.0/24 maxlen: 24
                          31.133.195.0/24 maxlen: 24
                          93.120.75.0/24 maxlen: 24
                          31.133.198.0/24 maxlen: 24
                          31.133.199.0/24 maxlen: 24
                          93.120.76.0/22 maxlen: 22
                          31.133.196.0/23 maxlen: 23
                          93.120.72.0/23 maxlen: 23
                          93.120.84.0/24 maxlen: 24
                          93.120.85.0/24 maxlen: 24
                          93.120.80.0/22 maxlen: 22
                          91.234.222.0/23 maxlen: 23
                          91.234.220.0/23 maxlen: 23
                          93.120.90.0/24 maxlen: 24
                          93.120.88.0/23 maxlen: 23
                          93.120.86.0/23 maxlen: 23
                          93.120.94.0/23 maxlen: 23
                          93.120.92.0/23 maxlen: 23
                          91.234.150.0/23 maxlen: 23
                          93.120.28.0/23 maxlen: 23
                          93.120.27.0/24 maxlen: 24
                          93.120.30.0/24 maxlen: 24
                          93.120.33.0/24 maxlen: 24
                          93.120.48.0/20 maxlen: 20
                          171.25.223.0/24 maxlen: 24
                          176.112.84.0/22 maxlen: 22
                          91.246.188.0/22 maxlen: 22
                          91.246.196.0/22 maxlen: 22
                          91.246.201.0/24 maxlen: 24
                          89.45.92.0/23 maxlen: 24
                          178.159.152.0/21 maxlen: 21
                          178.159.148.0/22 maxlen: 22
                          91.233.202.0/23 maxlen: 23
                          91.240.156.0/22 maxlen: 22
                          77.232.192.0/23 maxlen: 24
                          77.232.196.0/22 maxlen: 22
                          77.232.194.0/23 maxlen: 23
                          185.104.196.0/22 maxlen: 24
                          77.232.204.0/22 maxlen: 22
                          77.232.200.0/22 maxlen: 22
                          77.232.208.0/21 maxlen: 21
                          91.218.252.0/23 maxlen: 23
                          176.124.176.0/22 maxlen: 22
                          91.218.254.0/23 maxlen: 23
                          86.104.132.0/23 maxlen: 24
                          176.124.180.0/22 maxlen: 22
                          91.246.184.0/22 maxlen: 22
                          176.118.88.0/22 maxlen: 22
                          77.232.220.0/22 maxlen: 22
                          176.118.92.0/22 maxlen: 22
                          91.239.178.0/24 maxlen: 24
                          176.98.56.0/22 maxlen: 22
                          176.98.60.0/22 maxlen: 22
                          91.233.2.0/23 maxlen: 23
                          89.44.100.0/23 maxlen: 24
                          64.43.64.0/23 maxlen: 23
                          91.245.90.0/23 maxlen: 23
                          91.231.224.0/23 maxlen: 23
                          91.245.88.0/23 maxlen: 23
                          91.231.223.0/24 maxlen: 24
                          64.43.64.0/24 maxlen: 24
                          91.231.226.0/24 maxlen: 24
                          64.43.68.0/22 maxlen: 22
                          64.43.66.0/23 maxlen: 23
                          64.43.65.0/24 maxlen: 24
                          64.43.72.0/24 maxlen: 24
                          64.43.76.0/24 maxlen: 24
                          64.43.80.0/21 maxlen: 21
                          64.43.88.0/22 maxlen: 22
                          77.36.52.0/23 maxlen: 23
                          176.110.106.0/24 maxlen: 24
                          176.110.107.0/24 maxlen: 24
                          77.36.80.0/21 maxlen: 21
                          77.36.90.0/23 maxlen: 23
                          85.204.196.0/23 maxlen: 24
                          77.36.89.0/24 maxlen: 24
                          176.110.114.0/23 maxlen: 23
                          77.36.96.0/20 maxlen: 20
                          77.36.92.0/22 maxlen: 22
                          91.245.176.0/21 maxlen: 21
                          37.97.122.0/23 maxlen: 23
                          185.9.240.0/22 maxlen: 22
                          185.9.236.0/22 maxlen: 22
                          176.111.4.0/22 maxlen: 22
                          176.111.0.0/22 maxlen: 22
                          91.239.0.0/22 maxlen: 22
                          176.97.144.0/22 maxlen: 22
                          176.97.148.0/22 maxlen: 22
                          188.191.248.0/22 maxlen: 22
                          91.232.16.0/23 maxlen: 23
                          91.232.20.0/24 maxlen: 24
                          193.36.192.0/21 maxlen: 21
                          31.131.12.0/22 maxlen: 22
                          193.36.200.0/23 maxlen: 23
                          193.36.200.0/24 maxlen: 24
                          193.36.201.0/24 maxlen: 24
                          193.36.202.0/24 maxlen: 24
                          176.96.56.0/21 maxlen: 21
                          91.237.194.0/23 maxlen: 23
                          77.36.8.0/21 maxlen: 21
                          176.96.176.0/22 maxlen: 22
                          176.96.180.0/22 maxlen: 22
                          176.103.120.0/21 maxlen: 24
                          77.36.36.0/23 maxlen: 23
                          77.36.32.0/22 maxlen: 22
                          89.42.232.0/23 maxlen: 24
                          77.36.40.0/21 maxlen: 21
                          77.36.38.0/23 maxlen: 23
                          77.36.48.0/22 maxlen: 22
                          176.116.40.0/21 maxlen: 21
                          31.135.4.0/23 maxlen: 23
                          31.135.0.0/23 maxlen: 23
                          31.135.2.0/24 maxlen: 24
                          31.135.3.0/24 maxlen: 24
                          31.135.4.0/24 maxlen: 24
                          31.135.6.0/23 maxlen: 23
                          31.135.5.0/24 maxlen: 24
                          31.135.6.0/24 maxlen: 24
                          31.135.7.0/24 maxlen: 24
                          91.229.16.0/23 maxlen: 23
                          91.229.31.0/24 maxlen: 24
                          176.121.96.0/21 maxlen: 21
                          193.0.190.0/24 maxlen: 24
                          91.229.156.0/23 maxlen: 23
                          91.229.158.0/24 maxlen: 24
                          91.229.159.0/24 maxlen: 24
                          89.34.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478249093 (0x1c818085)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Mar 15 15:39:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d9138c3b013903979b05f9b723ff861c90992e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:15:86:3b:bc:7f:38:db:e1:41:9d:c9:57:
                    5c:b4:84:ec:54:7a:cd:e5:f8:86:8f:96:e6:62:32:
                    a1:f0:92:10:5a:5b:09:e7:4e:8a:2d:3f:ab:cb:d5:
                    03:56:c3:c7:75:3b:bb:93:01:e7:a4:7e:e6:a8:38:
                    65:82:fc:a3:79:75:84:7f:f3:f8:28:a5:0c:34:1e:
                    20:b6:31:1a:0d:28:2f:ae:8a:f0:46:b4:71:30:7e:
                    cb:40:fc:7f:bc:a0:cf:eb:88:49:38:ce:12:f0:96:
                    9b:d7:af:5b:42:c2:f6:fb:7f:6e:e4:94:99:b3:f2:
                    2a:06:8b:d5:7a:67:cf:38:a4:d2:8d:8b:89:ee:4a:
                    94:ff:94:a3:17:11:25:e4:83:7c:6f:43:db:d9:6d:
                    6c:90:04:76:dd:57:10:5c:f7:4c:a3:26:2e:7d:1f:
                    b9:4b:37:61:30:d6:c2:8c:1f:69:de:37:d8:7a:fb:
                    50:ff:be:57:e1:1f:ff:03:fd:39:e3:86:0d:48:bc:
                    00:bc:c8:4f:88:74:10:ea:ee:51:5c:9e:8b:03:7b:
                    20:36:00:6b:9e:3e:2d:db:70:0f:58:c3:4c:78:f5:
                    16:36:66:f6:59:d4:69:a8:83:c2:ed:da:38:b1:cf:
                    ff:5d:cf:db:27:20:c2:a4:c2:f7:a8:e1:d4:8b:6f:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:91:38:C3:B0:13:90:39:79:B0:5F:9B:72:3F:F8:61:C9:09:92:E6
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/jZE4w7ATkDl5sF-bcj_4YckJkuY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.131.12.0/22
                  31.133.24.0/22
                  31.133.192.0/21
                  31.135.0.0/21
                  37.97.122.0/23
                  64.43.64.0-64.43.72.255
                  64.43.76.0/24
                  64.43.80.0-64.43.91.255
                  77.36.8.0/21
                  77.36.32.0-77.36.53.255
                  77.36.80.0/21
                  77.36.89.0-77.36.111.255
                  77.232.192.0-77.232.215.255
                  77.232.220.0/22
                  81.161.12.0/22
                  85.204.196.0/23
                  86.104.132.0/23
                  89.34.74.0/23
                  89.42.232.0/23
                  89.44.100.0/23
                  89.45.92.0/23
                  89.46.112.0/23
                  91.218.252.0/22
                  91.229.16.0/23
                  91.229.31.0/24
                  91.229.156.0/22
                  91.231.223.0-91.231.226.255
                  91.232.16.0/23
                  91.232.20.0/24
                  91.233.2.0/23
                  91.233.202.0/23
                  91.234.150.0/23
                  91.234.220.0/22
                  91.235.166.0/23
                  91.237.194.0/23
                  91.239.0.0/22
                  91.239.178.0/24
                  91.240.156.0/22
                  91.245.88.0/22
                  91.245.176.0/21
                  91.246.184.0/21
                  91.246.196.0/22
                  91.246.201.0/24
                  93.120.27.0-93.120.30.255
                  93.120.33.0/24
                  93.120.48.0-93.120.73.255
                  93.120.75.0-93.120.90.255
                  93.120.92.0/22
                  93.120.112.0/21
                  93.120.124.0/22
                  171.25.223.0/24
                  176.96.56.0/21
                  176.96.176.0/21
                  176.97.144.0/21
                  176.98.56.0/21
                  176.103.120.0/21
                  176.107.64.0/20
                  176.110.106.0/23
                  176.110.114.0/23
                  176.111.0.0/21
                  176.112.84.0/22
                  176.116.40.0/21
                  176.118.88.0/21
                  176.121.96.0/21
                  176.124.176.0/21
                  178.159.148.0-178.159.159.255
                  185.9.236.0-185.9.243.255
                  185.104.196.0/22
                  188.191.248.0/22
                  188.213.233.0/24
                  193.0.190.0/24
                  193.36.192.0-193.36.202.255
                  193.221.82.0/23
                  195.80.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:9a:86:d6:21:b1:84:3f:c2:99:8d:ae:67:8b:4e:f8:93:36:
         b7:0d:57:48:d5:ae:83:8d:59:cf:24:db:6d:a2:d2:9d:6d:e0:
         61:92:c6:3e:cc:11:23:8c:f4:64:ed:8f:b6:25:f2:6c:e1:f8:
         8e:9b:0e:c6:7c:5d:77:42:fe:bc:ce:83:a9:36:87:df:b0:1d:
         19:a3:76:5b:be:1d:49:b1:3a:7f:63:c2:cc:7b:cd:68:d5:17:
         8d:5d:a5:61:e0:9d:9b:2e:3a:b6:d8:d1:18:38:f3:69:1b:7e:
         17:1f:96:29:c9:5a:ef:5f:9e:d8:d9:ad:68:1a:d1:51:47:f6:
         fd:f4:1d:f5:48:a1:40:cc:b6:b3:8b:63:53:b2:b7:e6:77:b3:
         50:75:e8:a3:02:fb:b5:64:ba:55:e0:b5:b0:e8:a9:06:1b:94:
         7a:7e:8d:4e:87:43:11:6a:a7:b9:ef:48:20:03:e4:8b:45:a8:
         2d:c0:ab:c8:c5:8c:46:04:6a:04:42:79:7b:a3:68:f4:f2:73:
         ed:b2:6d:ac:09:e7:23:e7:f2:b8:c1:9c:d3:b4:93:e2:53:18:
         7f:b4:a6:ff:2d:b4:35:2c:ef:dc:b0:1a:84:8a:ec:1d:d3:39:
         70:8c:21:46:9a:7b:fa:9b:1c:6a:31:5f:da:25:c7:24:c1:23:
         ed:40:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-fra.rpki-client.org