Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iTXyt6LSkUT_LzP6QmanuTvShHU.roa
File:                     iTXyt6LSkUT_LzP6QmanuTvShHU.roa (raw, json)
Hash identifier:          QSzRu2O96krdInwAxNCUM3Fy75OL8G9rYlqXS+lwHYs=
Subject key identifier:   89:35:F2:B7:A2:D2:91:44:FF:2F:33:FA:42:66:A7:B9:3B:D2:84:75
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01829281EB20D74A04E3F3D2496DDABB2016
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iTXyt6LSkUT_LzP6QmanuTvShHU.roa
Signing time:             Fri 12 Aug 2022 14:42:44 +0000
ROA not before:           Fri 12 Aug 2022 14:42:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          109.121.30.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.146.0/23 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.181.0/24 maxlen: 24
                          188.255.184.0/23 maxlen: 23
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.251.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          178.253.252.0/22 maxlen: 22
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/23 maxlen: 23
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.38.0/24 maxlen: 24
                          77.105.44.0/24 maxlen: 24
                          77.105.43.0/24 maxlen: 24
                          77.105.40.0/24 maxlen: 24
                          77.105.42.0/24 maxlen: 24
                          77.105.41.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.46.0/23 maxlen: 23
                          77.105.45.0/24 maxlen: 24
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.129.0/24 maxlen: 24
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/20 maxlen: 20
                          79.175.64.0/21 maxlen: 21
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:92:81:eb:20:d7:4a:04:e3:f3:d2:49:6d:da:bb:20:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Aug 12 14:42:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8935f2b7a2d29144ff2f33fa4266a7b93bd28475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:84:f9:11:3e:3a:6a:ca:4f:53:f9:a0:6b:
                    68:53:40:87:01:6e:12:b0:e5:2b:56:77:64:10:79:
                    a2:d4:be:9c:84:42:61:95:77:ba:94:61:a3:e1:b3:
                    6b:cf:e3:fd:ac:be:70:b8:75:90:71:b6:ba:df:ce:
                    d9:bf:13:72:e0:96:59:48:56:7b:33:54:c2:ce:c4:
                    21:07:9a:de:c9:d2:b8:15:7c:df:93:04:3b:18:80:
                    66:33:ca:35:4d:a3:1f:5c:58:e3:0e:6e:f5:f5:5b:
                    15:d2:fc:dd:fd:71:76:f8:cd:18:6b:3a:85:72:5f:
                    c7:7e:9a:4e:08:3f:0c:fa:bf:65:e6:74:f4:b5:7d:
                    2a:69:5b:bb:5b:0d:a9:39:eb:76:19:a1:f1:ba:70:
                    60:d1:43:34:1c:5a:5f:73:44:e8:7a:a9:5e:af:74:
                    a9:ca:e4:96:6b:49:f5:af:d7:42:c0:2b:ca:71:eb:
                    a7:e4:a5:d6:0c:67:f4:44:7a:83:0d:9e:cc:f8:b0:
                    9a:f0:b7:41:b8:71:a3:35:8f:30:2b:d4:cd:ae:ff:
                    09:7d:65:ca:4d:fb:3d:b5:a6:e2:00:c8:97:12:fa:
                    79:d5:74:1b:0f:9a:ae:67:54:ee:3f:c8:27:59:99:
                    70:6b:c4:36:8b:51:ab:72:8b:31:2c:04:88:cb:91:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:F2:B7:A2:D2:91:44:FF:2F:33:FA:42:66:A7:B9:3B:D2:84:75
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iTXyt6LSkUT_LzP6QmanuTvShHU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.10.255
                  77.105.12.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.70.0/24
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.242.255
                  178.253.246.0-178.253.249.255
                  178.253.251.0-178.253.255.255
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.220.0-188.255.228.255
                  188.255.230.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.129.0/24
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.15.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:7e:92:90:1b:73:fd:05:26:fb:6a:a2:47:c0:dd:c1:30:54:
         b6:82:5a:14:d7:8f:15:5e:33:19:cc:5d:ca:30:34:ee:1c:c2:
         ba:c0:33:7b:47:8c:e1:4b:f6:88:7f:ac:22:a3:b0:15:c9:f3:
         36:c0:0c:df:0a:90:bb:e1:4f:3f:6a:a4:d1:5b:71:96:c7:96:
         39:bd:c6:ed:47:d2:ae:1e:94:a9:b7:89:95:ca:c5:0b:ed:7f:
         d0:eb:ab:db:e5:5e:b0:c7:23:86:1d:6c:8b:8d:10:49:89:9c:
         c9:42:e7:50:7d:12:e9:0a:47:cf:6b:25:0e:34:d1:f6:60:a7:
         4b:6f:82:cb:2b:59:cb:9d:8f:1c:ec:08:65:b6:c6:32:47:9c:
         d5:e8:c5:c2:6a:31:fb:a2:df:7a:af:a7:93:94:86:7a:4e:9c:
         8e:68:8a:64:fe:90:d8:51:38:f1:0a:a7:03:00:5e:75:56:7e:
         93:e4:cb:95:15:36:91:73:bb:4f:11:7a:2f:03:fb:56:12:42:
         19:10:c9:7c:15:6d:f6:3c:e7:41:bb:49:ea:fc:00:36:7e:dc:
         42:98:8f:ca:ee:3f:96:8f:e4:b8:e4:73:42:68:53:fa:a9:aa:
         f5:6b:b3:b1:b7:22:b9:54:10:31:74:ee:cf:de:c2:ac:0d:7a:
         1f:ec:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org