Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/qNBgMZg-s8MA4EgT7Trmp_-YiYE.roa
File:                     qNBgMZg-s8MA4EgT7Trmp_-YiYE.roa (raw, json)
Hash identifier:          nnJ2eZJozdoSZijD9f3NoclQtk8XrGSOIFAgKS5cMcc=
Subject key identifier:   A8:D0:60:31:98:3E:B3:C3:00:E0:48:13:ED:3A:E6:A7:FF:98:89:81
Certificate issuer:       /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial:       1BB4A6E5
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/qNBgMZg-s8MA4EgT7Trmp_-YiYE.roa
Signing time:             Tue 24 May 2022 12:46:13 +0000
ROA not before:           Tue 24 May 2022 12:46:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48544
IP address blocks:        83.174.144.0/22 maxlen: 24
                          91.231.172.0/23 maxlen: 24
                          185.29.145.0/24 maxlen: 24
                          185.29.144.0/24 maxlen: 24
                          185.29.146.0/24 maxlen: 24
                          31.185.17.0/24 maxlen: 24
                          31.185.16.0/24 maxlen: 24
                          87.252.106.0/23 maxlen: 24
                          31.185.21.0/24 maxlen: 24
                          31.185.23.0/24 maxlen: 24
                          31.185.22.0/24 maxlen: 24
                          31.185.20.0/24 maxlen: 24
                          31.185.19.0/24 maxlen: 24
                          31.185.18.0/24 maxlen: 24
                          185.164.185.0/24 maxlen: 24
                          185.164.186.0/23 maxlen: 24
                          89.36.206.0/24 maxlen: 24
                          89.36.205.0/24 maxlen: 24
                          89.36.204.0/24 maxlen: 24
                          89.36.207.0/24 maxlen: 24
                          185.39.24.0/23 maxlen: 24
                          185.39.27.0/24 maxlen: 24
                          185.39.26.0/24 maxlen: 24
                          188.116.56.0/23 maxlen: 24
                          188.116.60.0/23 maxlen: 23
                          188.116.63.0/24 maxlen: 24
                          188.116.62.0/24 maxlen: 24
                          212.69.137.0/24 maxlen: 24
                          212.69.136.0/24 maxlen: 24
                          212.69.139.0/24 maxlen: 24
                          212.69.138.0/24 maxlen: 24
                          212.69.143.0/24 maxlen: 24
                          212.69.142.0/24 maxlen: 24
                          212.69.141.0/24 maxlen: 24
                          212.69.140.0/24 maxlen: 24
                          89.32.159.0/24 maxlen: 24
                          89.32.158.0/24 maxlen: 24
                          89.32.157.0/24 maxlen: 24
                          89.32.156.0/24 maxlen: 24
                          194.145.248.0/22 maxlen: 23
                          78.159.144.0/22 maxlen: 24
                          93.189.136.0/21 maxlen: 24
                          188.116.11.0/24 maxlen: 24
                          188.116.10.0/24 maxlen: 24
                          188.116.8.0/23 maxlen: 23
                          188.116.32.0/23 maxlen: 24
                          46.102.112.0/24 maxlen: 24
                          46.102.114.0/24 maxlen: 24
                          46.102.113.0/24 maxlen: 24
                          46.102.115.0/24 maxlen: 24
                          185.84.84.0/22 maxlen: 24
                          45.10.72.0/22 maxlen: 22
                          217.20.250.0/23 maxlen: 24
                          217.20.248.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464824037 (0x1bb4a6e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
        Validity
            Not Before: May 24 12:46:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a8d06031983eb3c300e04813ed3ae6a7ff988981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:60:db:ea:a3:91:69:59:33:fc:50:33:ea:
                    c2:80:74:7f:f9:dd:e0:3f:2b:b4:42:eb:67:6e:60:
                    f3:9f:c2:5a:7d:1d:bc:e7:c0:2e:09:a8:3b:7b:28:
                    66:93:f7:67:ce:46:2d:41:aa:38:45:69:43:cc:be:
                    23:29:a2:3b:6d:33:05:0c:eb:20:ed:6a:7c:b5:7b:
                    05:04:9e:9d:fb:8b:61:22:06:85:50:6b:3c:02:d7:
                    70:5f:cb:48:c2:78:31:e9:f7:e4:63:b6:1b:0a:c9:
                    97:bc:f4:a6:6a:82:e0:bc:60:4c:73:54:c9:19:8b:
                    07:e6:77:be:62:7b:1b:5e:53:4a:a3:79:49:74:82:
                    33:04:fa:96:1c:ee:6a:52:d5:e5:2e:19:e0:77:1f:
                    e9:b8:5b:54:a3:c5:8a:86:23:21:16:72:d5:fa:07:
                    63:ec:ab:97:d2:ab:df:ad:b5:a5:3f:c9:d4:3e:f7:
                    bc:11:a7:1d:7f:be:0d:38:f3:d2:20:86:99:a6:db:
                    05:8a:1b:89:a4:23:3e:25:c3:87:87:17:19:6d:a9:
                    7a:3a:c6:5a:a3:ab:2a:5e:42:69:76:a9:ae:7b:57:
                    54:d5:96:be:5f:71:a1:bb:25:78:9c:fe:11:d4:5e:
                    26:26:f6:6f:67:45:c8:9a:a9:51:9a:5b:b8:df:ac:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D0:60:31:98:3E:B3:C3:00:E0:48:13:ED:3A:E6:A7:FF:98:89:81
            X509v3 Authority Key Identifier:
                keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/qNBgMZg-s8MA4EgT7Trmp_-YiYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.185.16.0/21
                  45.10.72.0/22
                  46.102.112.0/22
                  78.159.144.0/22
                  83.174.144.0/22
                  87.252.106.0/23
                  89.32.156.0/22
                  89.36.204.0/22
                  91.231.172.0/23
                  93.189.136.0/21
                  185.29.144.0-185.29.146.255
                  185.39.24.0/22
                  185.84.84.0/22
                  185.164.185.0-185.164.187.255
                  188.116.8.0/22
                  188.116.32.0/23
                  188.116.56.0/23
                  188.116.60.0/22
                  194.145.248.0/22
                  212.69.136.0/21
                  217.20.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:ef:08:52:89:51:a1:c8:bb:49:2c:d2:66:9e:48:05:7d:4e:
         e1:bb:40:ec:0b:37:09:95:3e:80:2a:c3:0b:09:24:7a:da:ff:
         2d:49:03:36:54:f1:ae:68:be:f7:4b:a4:55:b1:bd:6e:8d:e2:
         51:29:08:5d:01:1d:a2:68:f2:c3:7b:b0:9a:5f:c0:c1:d2:ea:
         31:2d:4c:dc:d8:78:d5:fc:9c:c1:d3:4c:e2:a0:5b:a6:39:56:
         a7:3b:c4:bf:b9:75:01:0c:30:b8:2f:8c:09:57:09:93:8f:df:
         31:62:2b:33:c6:81:b0:2d:9c:0d:4e:63:58:59:2e:66:d7:10:
         67:5b:4c:fe:0b:c8:10:ae:f1:ac:da:af:d2:f9:da:dc:83:db:
         e9:bf:dd:80:2c:66:16:4a:f9:b2:04:db:ac:4c:b4:ce:ad:11:
         80:36:3c:e9:44:cc:9b:13:1e:61:cb:14:9e:4c:2c:b3:fc:56:
         9a:0b:7f:97:08:26:24:2b:47:fa:ab:0c:d0:ef:e9:47:a3:0f:
         74:c0:92:08:5c:4e:d0:e9:09:81:f8:1c:78:56:02:b8:d7:e2:
         1b:ac:61:65:31:02:a8:32:69:76:16:91:5e:f8:36:c2:2b:6e:
         86:1b:c0:6e:40:d4:31:7c:16:17:d9:8e:87:08:56:86:94:b4:
         0b:75:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:00 2023 by rpki-client on console-ams.rpki-client.org