Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/y8ne-q55h_KY0G1cvDtBoRpE9Zc.roa
File:                     y8ne-q55h_KY0G1cvDtBoRpE9Zc.roa (raw, json)
Hash identifier:          7fStHmya5jIUjZ9UDmqsESf0WQBJNkTnkLIvkPi/S4k=
Subject key identifier:   CB:C9:DE:FA:AE:79:87:F2:98:D0:6D:5C:BC:3B:41:A1:1A:44:F5:97
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       0182D081112F6A526DE0B3B9DFB05FCCF69E
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/y8ne-q55h_KY0G1cvDtBoRpE9Zc.roa
Signing time:             Wed 24 Aug 2022 15:38:15 +0000
ROA not before:           Wed 24 Aug 2022 15:38:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        81.161.12.0/22 maxlen: 22
                          91.228.119.0/24 maxlen: 24
                          176.107.64.0/20 maxlen: 24
                          93.120.112.0/21 maxlen: 21
                          93.120.124.0/22 maxlen: 22
                          89.46.112.0/23 maxlen: 24
                          91.235.166.0/24 maxlen: 24
                          91.235.167.0/24 maxlen: 24
                          91.229.6.0/24 maxlen: 24
                          195.80.142.0/23 maxlen: 24
                          188.213.233.0/24 maxlen: 24
                          31.133.24.0/22 maxlen: 22
                          93.120.64.0/21 maxlen: 21
                          31.133.192.0/24 maxlen: 24
                          193.221.82.0/23 maxlen: 24
                          31.133.193.0/24 maxlen: 24
                          31.133.194.0/24 maxlen: 24
                          31.133.195.0/24 maxlen: 24
                          93.120.75.0/24 maxlen: 24
                          31.133.198.0/24 maxlen: 24
                          31.133.199.0/24 maxlen: 24
                          93.120.76.0/22 maxlen: 22
                          31.133.196.0/23 maxlen: 23
                          93.120.72.0/23 maxlen: 23
                          93.120.84.0/24 maxlen: 24
                          93.120.85.0/24 maxlen: 24
                          93.120.80.0/22 maxlen: 22
                          91.234.222.0/23 maxlen: 23
                          91.234.220.0/23 maxlen: 23
                          93.120.90.0/24 maxlen: 24
                          93.120.88.0/23 maxlen: 23
                          93.120.86.0/23 maxlen: 23
                          93.120.94.0/23 maxlen: 23
                          93.120.92.0/23 maxlen: 23
                          93.120.8.0/23 maxlen: 23
                          91.234.150.0/23 maxlen: 23
                          93.120.28.0/23 maxlen: 23
                          93.120.27.0/24 maxlen: 24
                          93.120.30.0/24 maxlen: 24
                          93.120.33.0/24 maxlen: 24
                          93.120.48.0/20 maxlen: 20
                          93.120.46.0/24 maxlen: 24
                          171.25.223.0/24 maxlen: 24
                          176.112.84.0/22 maxlen: 22
                          91.246.188.0/22 maxlen: 22
                          91.246.196.0/22 maxlen: 22
                          91.246.201.0/24 maxlen: 24
                          89.45.92.0/23 maxlen: 24
                          178.159.152.0/21 maxlen: 21
                          178.159.148.0/22 maxlen: 22
                          91.233.202.0/23 maxlen: 23
                          91.240.156.0/22 maxlen: 22
                          77.232.192.0/23 maxlen: 24
                          77.232.196.0/22 maxlen: 22
                          77.232.194.0/23 maxlen: 23
                          185.104.196.0/22 maxlen: 24
                          77.232.204.0/22 maxlen: 22
                          77.232.200.0/22 maxlen: 22
                          77.232.208.0/21 maxlen: 21
                          91.218.252.0/23 maxlen: 23
                          176.124.176.0/22 maxlen: 22
                          91.218.254.0/23 maxlen: 23
                          86.104.132.0/23 maxlen: 24
                          176.124.180.0/22 maxlen: 22
                          91.246.184.0/22 maxlen: 22
                          176.118.88.0/22 maxlen: 22
                          77.232.220.0/22 maxlen: 22
                          176.118.92.0/22 maxlen: 22
                          91.239.178.0/24 maxlen: 24
                          176.98.56.0/22 maxlen: 22
                          176.98.60.0/22 maxlen: 22
                          91.232.254.0/24 maxlen: 24
                          91.233.2.0/23 maxlen: 23
                          89.44.100.0/23 maxlen: 24
                          91.225.34.0/24 maxlen: 24
                          91.225.35.0/24 maxlen: 24
                          91.245.90.0/23 maxlen: 23
                          91.231.224.0/23 maxlen: 23
                          91.245.88.0/23 maxlen: 23
                          91.231.223.0/24 maxlen: 24
                          64.43.64.0/24 maxlen: 24
                          91.231.226.0/24 maxlen: 24
                          64.43.68.0/22 maxlen: 22
                          64.43.66.0/23 maxlen: 23
                          64.43.72.0/24 maxlen: 24
                          64.43.76.0/24 maxlen: 24
                          64.43.80.0/21 maxlen: 21
                          64.43.88.0/22 maxlen: 22
                          77.36.52.0/23 maxlen: 23
                          176.110.106.0/24 maxlen: 24
                          176.110.107.0/24 maxlen: 24
                          77.36.80.0/21 maxlen: 21
                          77.36.90.0/23 maxlen: 23
                          85.204.196.0/23 maxlen: 24
                          77.36.89.0/24 maxlen: 24
                          176.110.114.0/23 maxlen: 23
                          77.36.96.0/20 maxlen: 20
                          77.36.92.0/22 maxlen: 22
                          91.245.176.0/21 maxlen: 21
                          37.97.122.0/23 maxlen: 23
                          185.9.240.0/22 maxlen: 22
                          185.9.236.0/22 maxlen: 22
                          176.111.4.0/22 maxlen: 22
                          176.111.0.0/22 maxlen: 22
                          91.239.0.0/22 maxlen: 22
                          176.97.144.0/22 maxlen: 22
                          176.97.148.0/22 maxlen: 22
                          188.191.248.0/22 maxlen: 22
                          91.232.16.0/23 maxlen: 23
                          91.232.20.0/24 maxlen: 24
                          193.36.192.0/21 maxlen: 21
                          31.131.12.0/22 maxlen: 22
                          193.36.200.0/23 maxlen: 23
                          193.36.200.0/24 maxlen: 24
                          193.36.201.0/24 maxlen: 24
                          193.36.202.0/24 maxlen: 24
                          176.96.56.0/21 maxlen: 21
                          91.237.194.0/23 maxlen: 23
                          77.36.8.0/21 maxlen: 21
                          176.96.176.0/22 maxlen: 22
                          176.96.180.0/22 maxlen: 22
                          77.36.30.0/24 maxlen: 24
                          77.36.28.0/23 maxlen: 23
                          77.36.36.0/23 maxlen: 23
                          77.36.32.0/22 maxlen: 22
                          89.42.232.0/23 maxlen: 24
                          77.36.40.0/21 maxlen: 21
                          77.36.38.0/23 maxlen: 23
                          77.36.48.0/22 maxlen: 22
                          91.236.237.0/24 maxlen: 24
                          176.116.40.0/21 maxlen: 21
                          91.223.158.0/24 maxlen: 24
                          91.237.48.0/24 maxlen: 24
                          31.135.4.0/23 maxlen: 23
                          31.135.1.0/24 maxlen: 24
                          31.135.2.0/24 maxlen: 24
                          31.135.3.0/24 maxlen: 24
                          31.135.4.0/24 maxlen: 24
                          31.135.5.0/24 maxlen: 24
                          31.135.7.0/24 maxlen: 24
                          91.229.16.0/23 maxlen: 23
                          91.229.31.0/24 maxlen: 24
                          176.121.96.0/21 maxlen: 21
                          193.0.190.0/24 maxlen: 24
                          91.236.77.0/24 maxlen: 24
                          91.229.156.0/23 maxlen: 23
                          91.229.158.0/24 maxlen: 24
                          91.229.159.0/24 maxlen: 24
                          89.34.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d0:81:11:2f:6a:52:6d:e0:b3:b9:df:b0:5f:cc:f6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Aug 24 15:38:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cbc9defaae7987f298d06d5cbc3b41a11a44f597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d6:fb:a1:40:d5:bf:1c:25:4e:0d:04:f3:ef:
                    0f:4c:b5:d9:65:6a:d3:ad:92:c0:07:64:0c:94:eb:
                    8b:dc:8c:a1:09:e8:8e:f6:18:93:c8:e0:b9:b2:b4:
                    52:8c:2f:0d:3f:c4:d2:25:a4:95:fe:83:38:58:a2:
                    65:f0:41:2c:ed:a6:38:d1:f4:70:9c:7c:ac:f6:f5:
                    62:10:bb:88:0e:9e:0c:57:0e:3e:67:8a:3d:ad:4c:
                    88:5b:91:f3:99:13:08:79:42:af:59:91:88:ba:ac:
                    91:96:c2:d5:51:19:b0:82:09:e7:7e:e6:de:91:b1:
                    69:3d:98:8e:4a:ba:aa:24:1d:d6:41:8d:fb:00:e1:
                    41:5a:07:fc:25:42:b4:86:b0:7f:77:d3:3b:1e:87:
                    63:77:ed:e0:e1:12:0c:4b:74:d8:f8:33:65:f8:fe:
                    90:b3:f3:8f:61:1e:8d:18:5c:9f:06:1f:0a:cc:eb:
                    6d:ec:6c:da:f6:29:64:27:61:e7:03:42:9f:6b:6a:
                    82:ee:10:54:91:f3:a7:5b:5d:50:61:7d:20:a0:f6:
                    e6:fb:85:e4:ad:e3:ba:92:72:b4:d4:17:44:26:20:
                    3c:39:08:4c:bb:3e:d6:45:1a:25:5c:74:5f:8a:d7:
                    0c:0e:77:be:bc:a4:b1:26:84:14:67:6e:cd:0a:e1:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C9:DE:FA:AE:79:87:F2:98:D0:6D:5C:BC:3B:41:A1:1A:44:F5:97
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/y8ne-q55h_KY0G1cvDtBoRpE9Zc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.131.12.0/22
                  31.133.24.0/22
                  31.133.192.0/21
                  31.135.1.0-31.135.5.255
                  31.135.7.0/24
                  37.97.122.0/23
                  64.43.64.0/24
                  64.43.66.0-64.43.72.255
                  64.43.76.0/24
                  64.43.80.0-64.43.91.255
                  77.36.8.0/21
                  77.36.28.0-77.36.30.255
                  77.36.32.0-77.36.53.255
                  77.36.80.0/21
                  77.36.89.0-77.36.111.255
                  77.232.192.0-77.232.215.255
                  77.232.220.0/22
                  81.161.12.0/22
                  85.204.196.0/23
                  86.104.132.0/23
                  89.34.74.0/23
                  89.42.232.0/23
                  89.44.100.0/23
                  89.45.92.0/23
                  89.46.112.0/23
                  91.218.252.0/22
                  91.223.158.0/24
                  91.225.34.0/23
                  91.228.119.0/24
                  91.229.6.0/24
                  91.229.16.0/23
                  91.229.31.0/24
                  91.229.156.0/22
                  91.231.223.0-91.231.226.255
                  91.232.16.0/23
                  91.232.20.0/24
                  91.232.254.0/24
                  91.233.2.0/23
                  91.233.202.0/23
                  91.234.150.0/23
                  91.234.220.0/22
                  91.235.166.0/23
                  91.236.77.0/24
                  91.236.237.0/24
                  91.237.48.0/24
                  91.237.194.0/23
                  91.239.0.0/22
                  91.239.178.0/24
                  91.240.156.0/22
                  91.245.88.0/22
                  91.245.176.0/21
                  91.246.184.0/21
                  91.246.196.0/22
                  91.246.201.0/24
                  93.120.8.0/23
                  93.120.27.0-93.120.30.255
                  93.120.33.0/24
                  93.120.46.0/24
                  93.120.48.0-93.120.73.255
                  93.120.75.0-93.120.90.255
                  93.120.92.0/22
                  93.120.112.0/21
                  93.120.124.0/22
                  171.25.223.0/24
                  176.96.56.0/21
                  176.96.176.0/21
                  176.97.144.0/21
                  176.98.56.0/21
                  176.107.64.0/20
                  176.110.106.0/23
                  176.110.114.0/23
                  176.111.0.0/21
                  176.112.84.0/22
                  176.116.40.0/21
                  176.118.88.0/21
                  176.121.96.0/21
                  176.124.176.0/21
                  178.159.148.0-178.159.159.255
                  185.9.236.0-185.9.243.255
                  185.104.196.0/22
                  188.191.248.0/22
                  188.213.233.0/24
                  193.0.190.0/24
                  193.36.192.0-193.36.202.255
                  193.221.82.0/23
                  195.80.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:48:c7:4a:42:2c:26:25:11:55:d9:df:26:d2:f4:a9:9d:f9:
         a0:1e:ad:62:77:cb:cb:35:6f:8e:a6:99:e2:cf:10:f1:de:cb:
         47:22:f5:56:fb:d1:55:b6:05:b1:d8:36:6f:b5:6d:78:36:55:
         42:3d:86:1e:a2:07:52:6a:fe:18:47:ab:ba:50:c1:57:c6:fa:
         a0:9b:96:01:6a:11:cf:af:be:47:f3:91:01:6b:8c:be:f7:04:
         2b:1d:22:23:66:7a:07:60:51:9e:8e:cf:c8:b8:c2:18:a3:b5:
         2a:ca:6d:8c:9c:fd:f1:5f:09:36:c4:6a:06:48:88:51:f9:59:
         ea:44:7e:cc:a1:99:ca:12:ae:10:ef:25:86:e1:22:b1:5e:3b:
         9a:1b:2a:03:48:71:3c:8b:1a:03:98:cd:a3:1e:02:92:68:ce:
         bf:f9:5a:65:d8:83:fe:d6:c7:c0:9b:7f:42:8b:08:3e:86:2b:
         0f:62:f4:87:8e:bd:d1:14:13:84:38:1f:4e:90:eb:dc:4e:5e:
         2d:ce:2d:85:50:ad:8e:c3:f3:de:61:1e:1a:3e:c4:3b:89:2f:
         b2:14:d1:0c:e1:e0:ad:d7:67:6b:50:9d:03:a7:53:29:38:4f:
         8b:41:10:0f:25:c4:11:2a:9f:55:97:70:6d:cb:82:c1:be:eb:
         75:18:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:42 2023 by rpki-client on console-ams.rpki-client.org