Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NiLI8nWq0UblSKfxeyJz0oanTeA.roa
File:                     NiLI8nWq0UblSKfxeyJz0oanTeA.roa (raw, json)
Hash identifier:          5PxAGmUHMIvTqHBBX8vvyNjrQfDF+mU+ASr/nylQgOw=
Subject key identifier:   36:22:C8:F2:75:AA:D1:46:E5:48:A7:F1:7B:22:73:D2:86:A7:4D:E0
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01830DEB68E5ED28CFC89B34CD07CE4D4425
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NiLI8nWq0UblSKfxeyJz0oanTeA.roa
Signing time:             Mon 05 Sep 2022 13:51:15 +0000
ROA not before:           Mon 05 Sep 2022 13:51:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          188.255.209.0/24 maxlen: 24
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.146.0/23 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.251.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          178.253.252.0/22 maxlen: 22
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/23 maxlen: 23
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.38.0/24 maxlen: 24
                          77.105.44.0/24 maxlen: 24
                          77.105.43.0/24 maxlen: 24
                          77.105.40.0/24 maxlen: 24
                          77.105.42.0/24 maxlen: 24
                          77.105.41.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.46.0/23 maxlen: 23
                          77.105.45.0/24 maxlen: 24
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.129.0/24 maxlen: 24
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/21 maxlen: 21
                          79.175.64.0/20 maxlen: 20
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:0d:eb:68:e5:ed:28:cf:c8:9b:34:cd:07:ce:4d:44:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Sep  5 13:51:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3622c8f275aad146e548a7f17b2273d286a74de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:98:99:04:19:76:f6:73:ed:33:19:96:48:
                    db:06:25:ff:11:10:bc:62:4c:17:0e:53:10:bc:c2:
                    11:7d:a4:04:0e:bf:09:86:82:a1:a4:62:e7:ad:93:
                    61:d1:bb:54:39:ae:cc:d2:2a:7e:ce:47:73:19:b8:
                    90:d8:bf:9f:0a:e9:a5:a3:f0:76:c0:92:31:38:5e:
                    28:cf:aa:05:30:6c:b4:24:87:ac:f6:83:77:0b:7b:
                    4a:3a:a3:a1:f3:5c:f7:a9:e0:7f:ca:7f:d7:68:b2:
                    70:fc:82:b3:9d:7e:ed:99:b0:b2:ce:db:c5:57:e7:
                    81:c8:fd:d0:bb:3d:9f:d4:8d:79:ab:ed:e2:63:52:
                    f2:12:dd:6d:95:d9:08:ec:34:c1:ba:5b:c9:d2:29:
                    b9:bc:c4:c6:c2:80:01:8e:ff:11:f1:31:4a:b3:25:
                    8c:bb:97:0d:bd:1b:46:24:c0:05:90:1c:ef:e5:c2:
                    e8:8e:6f:8a:2b:b9:9f:78:77:d8:13:ee:c8:be:fe:
                    0a:0e:1d:dd:3f:f1:d6:71:1a:86:18:18:c4:36:12:
                    be:51:64:9f:6f:50:ed:fe:6a:94:69:b3:ec:2e:d5:
                    f2:a8:a0:80:9c:9b:b7:18:a1:8c:09:51:d0:c2:c5:
                    f8:5b:3b:82:0e:c0:50:e9:9e:8e:5d:f1:5c:c0:d6:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:22:C8:F2:75:AA:D1:46:E5:48:A7:F1:7B:22:73:D2:86:A7:4D:E0
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NiLI8nWq0UblSKfxeyJz0oanTeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.10.255
                  77.105.12.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.70.0/24
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.242.255
                  178.253.246.0-178.253.249.255
                  178.253.251.0-178.253.255.255
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.209.0/24
                  188.255.220.0-188.255.228.255
                  188.255.230.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.129.0/24
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.15.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:92:5a:1d:62:94:be:24:94:0d:ba:8d:3c:78:e5:28:c5:c1:
         23:61:88:53:01:6c:a1:29:47:e7:cd:5c:11:d9:05:12:d7:1e:
         e4:c6:9e:7a:25:fd:f9:16:73:52:bb:4e:b9:ca:35:8d:a4:bb:
         a8:50:aa:74:71:c1:dd:24:ac:70:42:c3:ea:60:02:a5:0a:54:
         28:11:2a:d8:d7:04:72:7e:90:d4:ed:14:35:f4:03:66:94:49:
         75:7e:87:28:89:3c:de:00:ba:68:a9:db:b5:15:6c:74:56:b6:
         55:24:1d:47:da:f8:e2:9d:ae:29:ce:ba:3f:66:51:01:e5:5a:
         0e:36:66:b4:1e:85:8c:a0:a7:e3:b5:44:98:db:a3:b8:a4:38:
         ec:40:9e:54:bb:7b:e0:0c:1e:83:6e:3e:e4:e3:60:02:9d:39:
         85:3f:46:ec:b0:1c:42:31:57:af:ce:77:69:bb:c6:d6:cc:2a:
         5c:fa:d4:c8:f8:d5:52:54:69:7d:ba:ee:ec:89:a8:42:df:80:
         3c:9d:02:fe:d4:7d:f7:e1:81:6b:84:aa:6e:8f:41:15:d7:1e:
         4b:c6:07:c6:33:51:53:86:18:9a:29:a8:35:b6:01:95:2c:60:
         4d:67:4e:08:ce:e9:6a:4a:20:32:b7:88:54:d0:f8:ff:63:59:
         ec:24:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org