Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/AWxuf4p-aLAOmoMdKyMQQOHPiw8.roa
File:                     AWxuf4p-aLAOmoMdKyMQQOHPiw8.roa (raw, json)
Hash identifier:          jzlnOfLrueYljjwySNjOlTFVx4U0uQ/n7KFW2iGbGzU=
Subject key identifier:   01:6C:6E:7F:8A:7E:68:B0:0E:9A:83:1D:2B:23:10:40:E1:CF:8B:0F
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       25E8FE4E
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/AWxuf4p-aLAOmoMdKyMQQOHPiw8.roa
Signing time:             Mon 07 Feb 2022 13:16:33 +0000
ROA not before:           Mon 07 Feb 2022 13:16:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29314
IP address blocks:        178.235.41.0/24 maxlen: 24
                          178.235.42.0/24 maxlen: 24
                          178.235.43.0/24 maxlen: 24
                          178.235.40.0/24 maxlen: 24
                          109.107.0.0/21 maxlen: 21
                          109.107.0.0/19 maxlen: 19
                          95.160.228.0/22 maxlen: 22
                          178.235.0.0/17 maxlen: 17
                          95.160.233.0/24 maxlen: 24
                          109.241.192.0/18 maxlen: 18
                          95.160.236.0/22 maxlen: 22
                          109.107.9.0/24 maxlen: 24
                          195.26.72.0/22 maxlen: 22
                          178.235.146.0/24 maxlen: 24
                          178.235.147.0/24 maxlen: 24
                          178.235.148.0/22 maxlen: 22
                          178.235.148.0/23 maxlen: 23
                          178.235.150.0/24 maxlen: 24
                          178.235.150.0/23 maxlen: 23
                          178.235.152.0/21 maxlen: 21
                          178.235.160.0/19 maxlen: 19
                          178.235.192.0/18 maxlen: 18
                          178.235.98.0/24 maxlen: 24
                          178.235.110.0/24 maxlen: 24
                          178.235.131.0/24 maxlen: 24
                          178.235.132.0/23 maxlen: 23
                          178.235.128.0/24 maxlen: 24
                          178.235.129.0/24 maxlen: 24
                          178.235.130.0/24 maxlen: 24
                          178.235.138.0/23 maxlen: 23
                          178.235.134.0/24 maxlen: 24
                          178.235.135.0/24 maxlen: 24
                          178.235.136.0/23 maxlen: 23
                          178.235.140.0/24 maxlen: 24
                          178.235.141.0/24 maxlen: 24
                          178.235.142.0/23 maxlen: 23
                          178.235.144.0/23 maxlen: 23
                          95.160.56.0/22 maxlen: 22
                          95.160.76.0/22 maxlen: 22
                          31.11.202.0/24 maxlen: 24
                          95.160.0.0/17 maxlen: 24
                          95.160.16.0/22 maxlen: 22
                          88.156.80.176/28 maxlen: 28
                          31.11.228.0/24 maxlen: 24
                          95.160.28.0/22 maxlen: 22
                          109.241.0.0/18 maxlen: 18
                          95.160.166.0/24 maxlen: 24
                          193.201.18.0/23 maxlen: 23
                          109.241.128.0/18 maxlen: 18
                          95.160.170.0/24 maxlen: 24
                          109.241.64.0/18 maxlen: 18
                          95.160.128.0/17 maxlen: 17
                          95.160.152.0/24 maxlen: 24
                          95.160.153.0/24 maxlen: 24
                          95.160.154.0/24 maxlen: 24
                          95.160.158.0/24 maxlen: 24
                          95.160.159.0/24 maxlen: 24
                          95.160.155.0/24 maxlen: 24
                          95.160.156.0/24 maxlen: 24
                          95.160.157.0/24 maxlen: 24
                          93.105.128.0/17 maxlen: 17
                          93.105.142.0/24 maxlen: 24
                          93.105.144.0/22 maxlen: 22
                          185.51.180.0/22 maxlen: 22
                          93.105.168.0/21 maxlen: 21
                          82.139.0.0/18 maxlen: 18
                          93.105.236.0/24 maxlen: 24
                          78.31.209.0/24 maxlen: 24
                          93.105.237.0/24 maxlen: 24
                          31.11.172.0/24 maxlen: 24
                          93.105.178.0/23 maxlen: 23
                          78.31.152.0/21 maxlen: 21
                          93.105.176.0/23 maxlen: 23
                          93.105.180.0/24 maxlen: 24
                          93.105.181.0/24 maxlen: 24
                          93.105.182.0/24 maxlen: 24
                          93.105.183.0/24 maxlen: 24
                          31.11.131.0/24 maxlen: 24
                          31.11.128.0/24 maxlen: 24
                          31.11.129.0/24 maxlen: 24
                          31.11.132.0/22 maxlen: 22
                          31.11.128.0/17 maxlen: 17
                          31.11.130.0/24 maxlen: 24
                          192.166.120.0/23 maxlen: 23
                          91.192.76.0/24 maxlen: 24
                          91.192.76.0/22 maxlen: 22
                          37.77.152.0/21 maxlen: 21
                          93.105.40.0/24 maxlen: 24
                          93.105.42.0/24 maxlen: 24
                          93.105.0.0/17 maxlen: 17
                          89.151.0.0/18 maxlen: 18
                          195.191.162.0/23 maxlen: 23
                          195.225.92.0/22 maxlen: 22
                          91.238.232.0/22 maxlen: 22
                          88.156.222.0/24 maxlen: 24
                          88.156.226.0/23 maxlen: 23
                          37.8.192.0/18 maxlen: 18
                          88.156.255.0/24 maxlen: 24
                          83.143.136.0/21 maxlen: 21
                          37.8.208.0/24 maxlen: 24
                          88.156.164.0/22 maxlen: 22
                          83.143.40.0/21 maxlen: 21
                          195.28.170.0/23 maxlen: 23
                          88.156.192.0/18 maxlen: 18
                          109.197.56.0/21 maxlen: 21
                          109.197.64.0/21 maxlen: 21
                          91.231.116.0/23 maxlen: 23
                          37.8.214.0/24 maxlen: 24
                          94.231.48.0/20 maxlen: 20
                          37.8.231.0/24 maxlen: 24
                          37.8.230.0/24 maxlen: 24
                          31.22.96.0/21 maxlen: 21
                          31.22.100.0/23 maxlen: 23
                          88.156.0.0/18 maxlen: 18
                          78.88.188.0/22 maxlen: 22
                          62.122.112.0/21 maxlen: 21
                          194.54.188.0/22 maxlen: 22
                          83.243.104.0/21 maxlen: 21
                          78.88.123.0/24 maxlen: 24
                          31.135.168.0/21 maxlen: 21
                          78.88.128.0/17 maxlen: 17
                          31.135.175.0/24 maxlen: 24
                          88.156.128.0/23 maxlen: 23
                          88.156.128.0/21 maxlen: 21
                          88.156.132.0/23 maxlen: 23
                          91.230.159.0/24 maxlen: 24
                          88.156.128.0/18 maxlen: 18
                          88.156.130.0/23 maxlen: 23
                          88.156.134.0/23 maxlen: 23
                          91.230.162.0/23 maxlen: 23
                          91.230.164.0/22 maxlen: 22
                          88.156.136.0/21 maxlen: 21
                          78.88.216.0/22 maxlen: 22
                          88.156.64.0/24 maxlen: 24
                          88.156.64.0/18 maxlen: 18
                          88.156.78.0/24 maxlen: 24
                          77.222.240.0/20 maxlen: 20
                          77.222.248.0/22 maxlen: 22
                          78.88.0.0/17 maxlen: 17
                          195.242.252.0/22 maxlen: 22
                          78.88.30.0/24 maxlen: 24
                          78.88.28.0/22 maxlen: 22
                          78.88.31.0/24 maxlen: 24
                          78.88.28.0/24 maxlen: 24
                          78.88.29.0/24 maxlen: 24
                          77.222.224.0/21 maxlen: 21
                          78.88.43.0/24 maxlen: 24
                          77.222.232.0/21 maxlen: 21
                          2a00:9f00::/48 maxlen: 48
                          2a00:9f00:3000::/36 maxlen: 36
                          2a00:9f00::/32 maxlen: 32
                          2a00:9f00:5000::/36 maxlen: 36
                          2a00:9f00::/36 maxlen: 36
                          2a00:9f00:b000::/36 maxlen: 36
                          2a00:9f00:1000::/36 maxlen: 36
                          2a00:9f00:6000::/36 maxlen: 36
                          2a00:9f00:e000::/36 maxlen: 36
                          2a00:9f00:9000::/36 maxlen: 36
                          2a00:9f00:8000::/36 maxlen: 36
                          2a00:9f00:d000::/36 maxlen: 36
                          2a00:9f00:2000::/36 maxlen: 36
                          2a00:9f00:a000::/36 maxlen: 36
                          2a00:9f00:7000::/36 maxlen: 36
                          2a00:9f00:f000::/36 maxlen: 36
                          2a00:9f00:c000::/36 maxlen: 36
                          2a00:9f00:4000::/36 maxlen: 36
                          2a00:9f00:10::/48 maxlen: 48
                          2a00:9f00:a::/48 maxlen: 48
                          2a00:9f00:2007::/48 maxlen: 48
                          2a00:9f00:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636026446 (0x25e8fe4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Feb  7 13:16:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=016c6e7f8a7e68b00e9a831d2b231040e1cf8b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:52:03:14:90:95:89:35:a1:dd:8a:6f:b4:
                    da:86:d4:43:f8:b4:07:b0:c1:c7:24:4e:f1:88:21:
                    98:fa:76:46:d3:1f:98:38:40:75:d9:3b:eb:3f:f1:
                    97:7a:8f:7a:37:db:b8:e3:f8:56:c0:fd:81:22:b4:
                    58:04:0f:e9:16:30:f1:5b:dd:d7:8d:63:ff:d4:f5:
                    e6:68:3a:c8:b6:c5:11:0f:ce:79:57:c7:b2:63:f9:
                    24:de:2d:52:26:e8:71:4f:17:fa:e9:78:d3:c8:65:
                    9b:8b:c8:fd:cf:74:9f:d1:c1:30:89:de:41:78:50:
                    55:43:aa:41:e6:5f:70:56:1c:41:6b:30:b5:b5:21:
                    9d:36:c5:0c:0c:52:60:e8:34:44:15:c7:25:07:b0:
                    55:b4:4b:af:28:d4:c1:ad:00:7c:f4:74:38:90:05:
                    49:86:87:a0:56:27:1e:06:cd:42:35:80:23:5a:aa:
                    f2:bb:0a:f7:a9:74:cf:5c:97:32:61:e7:3c:2f:e6:
                    b1:47:82:0b:80:d5:48:e6:fd:50:fd:f0:e3:81:f5:
                    b9:80:6d:df:5f:8a:cc:8e:78:24:b3:a3:4c:15:5e:
                    3b:9c:d2:03:0f:88:3a:a9:92:fb:84:17:4d:fc:12:
                    67:af:e8:e6:b2:3c:7c:b4:7a:9b:70:e2:2d:f3:96:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6C:6E:7F:8A:7E:68:B0:0E:9A:83:1D:2B:23:10:40:E1:CF:8B:0F
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/AWxuf4p-aLAOmoMdKyMQQOHPiw8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.128.0/17
                  31.22.96.0/21
                  31.135.168.0/21
                  37.8.192.0/18
                  37.77.152.0/21
                  62.122.112.0/21
                  77.222.224.0/19
                  78.31.152.0/21
                  78.31.209.0/24
                  78.88.0.0/16
                  82.139.0.0/18
                  83.143.40.0/21
                  83.143.136.0/21
                  83.243.104.0/21
                  88.156.0.0/16
                  89.151.0.0/18
                  91.192.76.0/22
                  91.230.159.0/24
                  91.230.162.0-91.230.167.255
                  91.231.116.0/23
                  91.238.232.0/22
                  93.105.0.0/16
                  94.231.48.0/20
                  95.160.0.0/16
                  109.107.0.0/19
                  109.197.56.0-109.197.71.255
                  109.241.0.0/16
                  178.235.0.0/16
                  185.51.180.0/22
                  192.166.120.0/23
                  193.201.18.0/23
                  194.54.188.0/22
                  195.26.72.0/22
                  195.28.170.0/23
                  195.191.162.0/23
                  195.225.92.0/22
                  195.242.252.0/22
                IPv6:
                  2a00:9f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:ef:08:2e:44:1f:59:9d:70:85:ca:3e:69:39:05:fc:0f:6a:
         15:d2:99:85:e2:f9:7b:59:59:59:97:05:06:47:1b:b2:1f:96:
         31:89:80:71:af:e6:ad:63:c5:a5:a1:7b:fc:cc:ef:8b:a2:4a:
         35:6e:47:23:6c:b8:d8:44:ab:cb:f8:c3:7f:54:bd:e4:b4:ac:
         22:af:25:35:cf:f4:93:ad:26:ff:92:5a:20:6b:42:c7:eb:d9:
         8f:59:c1:c8:ce:75:2d:ce:86:e8:9d:cc:16:e6:5f:3e:45:41:
         42:38:67:94:68:e3:f5:e9:e3:17:a9:e7:d7:7b:1a:63:f6:c3:
         9a:fa:e3:02:d9:c8:f2:f0:9c:10:63:a7:f5:3c:d3:f5:46:bc:
         8e:75:73:cd:99:d8:7a:34:d4:32:fe:32:f8:1b:08:45:1a:6b:
         2b:ae:27:78:60:58:7d:49:15:f8:4a:16:1d:ac:e1:87:96:6f:
         b0:c3:25:da:05:48:fa:92:06:fe:47:5c:06:71:e0:dc:4e:26:
         98:d4:5f:80:01:fb:93:94:97:cc:f6:30:ba:03:ef:0d:05:c8:
         a8:91:4f:31:0a:98:78:5e:52:9b:a6:e1:29:0c:58:e3:fd:81:
         f5:06:c5:74:e2:94:e3:58:3a:2b:5d:78:47:14:64:9e:21:53:
         2f:14:1c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:30 2023 by rpki-client on console-ams.rpki-client.org