Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ik9Ce1t_4awWQ4WILSWhJSdbj1Y.roa
File:                     Ik9Ce1t_4awWQ4WILSWhJSdbj1Y.roa (raw, json)
Hash identifier:          aQB5qX65B7/k5EOJyRtEdX01RxYHbwemAlhPGGJulms=
Subject key identifier:   22:4F:42:7B:5B:7F:E1:AC:16:43:85:88:2D:25:A1:25:27:5B:8F:56
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0184F1271ED3DDF3998D955F6D67CB026F2E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ik9Ce1t_4awWQ4WILSWhJSdbj1Y.roa
Signing time:             Thu 08 Dec 2022 09:53:03 +0000
ROA not before:           Thu 08 Dec 2022 09:53:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31163
IP address blocks:        85.26.189.0/24 maxlen: 24
                          85.26.187.0/24 maxlen: 24
                          85.26.190.0/24 maxlen: 24
                          85.26.188.0/24 maxlen: 24
                          85.26.191.0/24 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          85.26.179.0/24 maxlen: 24
                          85.26.178.0/24 maxlen: 24
                          85.26.181.0/24 maxlen: 24
                          85.26.184.0/24 maxlen: 24
                          85.26.182.0/24 maxlen: 24
                          85.26.185.0/24 maxlen: 24
                          85.26.180.0/24 maxlen: 24
                          85.26.183.0/24 maxlen: 24
                          85.26.186.0/24 maxlen: 24
                          31.173.192.0/24 maxlen: 24
                          31.173.193.0/24 maxlen: 24
                          31.173.196.0/24 maxlen: 24
                          31.173.199.0/24 maxlen: 24
                          31.173.194.0/24 maxlen: 24
                          31.173.197.0/24 maxlen: 24
                          31.173.195.0/24 maxlen: 24
                          31.173.198.0/24 maxlen: 24
                          31.173.201.0/24 maxlen: 24
                          31.173.204.0/24 maxlen: 24
                          31.173.202.0/24 maxlen: 24
                          31.173.205.0/24 maxlen: 24
                          31.173.200.0/24 maxlen: 24
                          31.173.203.0/24 maxlen: 24
                          31.173.206.0/24 maxlen: 24
                          31.173.209.0/24 maxlen: 24
                          31.173.212.0/24 maxlen: 24
                          31.173.207.0/24 maxlen: 24
                          31.173.210.0/24 maxlen: 24
                          31.173.213.0/24 maxlen: 24
                          31.173.208.0/24 maxlen: 24
                          31.173.211.0/24 maxlen: 24
                          31.173.217.0/24 maxlen: 24
                          31.173.215.0/24 maxlen: 24
                          31.173.218.0/24 maxlen: 24
                          31.173.216.0/24 maxlen: 24
                          31.173.219.0/24 maxlen: 24
                          31.173.214.0/24 maxlen: 24
                          31.173.220.0/24 maxlen: 24
                          31.173.223.0/24 maxlen: 24
                          31.173.221.0/24 maxlen: 24
                          31.173.222.0/24 maxlen: 24
                          109.106.192.0/24 maxlen: 24
                          109.106.197.0/24 maxlen: 24
                          109.106.195.0/24 maxlen: 24
                          109.106.198.0/24 maxlen: 24
                          109.106.193.0/24 maxlen: 24
                          109.106.196.0/24 maxlen: 24
                          109.106.199.0/24 maxlen: 24
                          109.106.194.0/24 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          109.124.64.0/18 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          188.170.187.0/24 maxlen: 24
                          188.170.190.0/24 maxlen: 24
                          188.170.189.0/24 maxlen: 24
                          188.170.192.0/24 maxlen: 24
                          188.170.191.0/24 maxlen: 24
                          188.170.188.0/24 maxlen: 24
                          188.170.195.0/24 maxlen: 24
                          188.170.198.0/24 maxlen: 24
                          188.170.197.0/24 maxlen: 24
                          188.170.199.0/24 maxlen: 24
                          188.170.194.0/24 maxlen: 24
                          188.170.193.0/24 maxlen: 24
                          188.170.196.0/24 maxlen: 24
                          188.170.211.0/24 maxlen: 24
                          188.170.213.0/24 maxlen: 24
                          188.170.208.0/24 maxlen: 24
                          188.170.210.0/24 maxlen: 24
                          188.170.209.0/24 maxlen: 24
                          188.170.212.0/24 maxlen: 24
                          188.170.214.0/24 maxlen: 24
                          188.170.219.0/24 maxlen: 24
                          188.170.216.0/24 maxlen: 24
                          188.170.215.0/24 maxlen: 24
                          188.170.218.0/24 maxlen: 24
                          188.170.217.0/24 maxlen: 24
                          188.170.224.0/24 maxlen: 24
                          188.170.221.0/24 maxlen: 24
                          188.170.222.0/24 maxlen: 24
                          188.170.220.0/24 maxlen: 24
                          188.170.225.0/24 maxlen: 24
                          188.170.226.0/24 maxlen: 24
                          188.170.223.0/24 maxlen: 24
                          188.170.227.0/24 maxlen: 24
                          128.204.64.0/18 maxlen: 24
                          188.170.171.0/24 maxlen: 24
                          188.170.170.0/24 maxlen: 24
                          188.170.169.0/24 maxlen: 24
                          188.170.172.0/24 maxlen: 24
                          188.170.179.0/24 maxlen: 24
                          188.170.174.0/24 maxlen: 24
                          95.137.0.0/17 maxlen: 24
                          188.170.173.0/24 maxlen: 24
                          188.170.176.0/24 maxlen: 24
                          188.170.175.0/24 maxlen: 24
                          188.170.178.0/24 maxlen: 24
                          188.170.177.0/24 maxlen: 24
                          188.170.182.0/24 maxlen: 24
                          188.170.181.0/24 maxlen: 24
                          188.170.184.0/24 maxlen: 24
                          188.170.183.0/24 maxlen: 24
                          188.170.186.0/24 maxlen: 24
                          188.170.185.0/24 maxlen: 24
                          188.170.180.0/24 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          83.169.232.0/24 maxlen: 24
                          83.169.233.0/24 maxlen: 24
                          83.169.240.0/24 maxlen: 24
                          83.169.237.0/24 maxlen: 24
                          83.169.238.0/24 maxlen: 24
                          83.169.235.0/24 maxlen: 24
                          83.169.234.0/24 maxlen: 24
                          83.169.239.0/24 maxlen: 24
                          83.169.245.0/24 maxlen: 24
                          83.169.246.0/24 maxlen: 24
                          83.169.243.0/24 maxlen: 24
                          83.169.244.0/24 maxlen: 24
                          83.169.241.0/24 maxlen: 24
                          83.169.242.0/24 maxlen: 24
                          83.169.247.0/24 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          109.188.0.0/16 maxlen: 24
                          193.201.228.0/22 maxlen: 24
                          85.26.176.0/23 maxlen: 23
                          94.25.128.0/17 maxlen: 24
                          212.119.160.0/19 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          178.178.3.0/24 maxlen: 24
                          178.178.0.0/24 maxlen: 24
                          178.178.2.0/24 maxlen: 24
                          178.178.4.0/24 maxlen: 24
                          178.178.1.0/24 maxlen: 24
                          178.178.5.0/24 maxlen: 24
                          37.29.123.0/24 maxlen: 24
                          37.29.125.0/24 maxlen: 24
                          37.29.120.0/24 maxlen: 24
                          37.29.119.0/24 maxlen: 24
                          37.29.122.0/24 maxlen: 24
                          37.29.121.0/24 maxlen: 24
                          37.29.124.0/24 maxlen: 24
                          37.29.126.0/24 maxlen: 24
                          37.29.127.0/24 maxlen: 24
                          178.23.144.0/21 maxlen: 24
                          178.176.215.0/24 maxlen: 24
                          178.176.218.0/24 maxlen: 24
                          178.176.217.0/24 maxlen: 24
                          178.176.219.0/24 maxlen: 24
                          178.176.214.0/24 maxlen: 24
                          178.176.216.0/24 maxlen: 24
                          178.176.223.0/24 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          178.176.220.0/24 maxlen: 24
                          178.176.222.0/24 maxlen: 24
                          178.176.221.0/24 maxlen: 24
                          188.170.200.0/22 maxlen: 22
                          188.170.204.0/22 maxlen: 22
                          37.29.112.0/24 maxlen: 24
                          37.29.115.0/24 maxlen: 24
                          37.29.118.0/24 maxlen: 24
                          37.29.117.0/24 maxlen: 24
                          37.29.114.0/24 maxlen: 24
                          37.29.113.0/24 maxlen: 24
                          37.29.116.0/24 maxlen: 24
                          188.170.168.0/21 maxlen: 21
                          195.149.111.0/24 maxlen: 24
                          83.149.24.0/24 maxlen: 24
                          83.149.29.0/24 maxlen: 24
                          83.149.30.0/24 maxlen: 24
                          83.149.28.0/24 maxlen: 24
                          83.149.25.0/24 maxlen: 24
                          83.149.31.0/24 maxlen: 24
                          178.176.192.0/24 maxlen: 24
                          178.176.194.0/24 maxlen: 24
                          178.176.193.0/24 maxlen: 24
                          178.176.196.0/24 maxlen: 24
                          178.176.195.0/24 maxlen: 24
                          178.176.198.0/24 maxlen: 24
                          178.176.197.0/24 maxlen: 24
                          178.176.202.0/24 maxlen: 24
                          178.176.203.0/24 maxlen: 24
                          178.176.210.0/24 maxlen: 24
                          178.176.209.0/24 maxlen: 24
                          178.176.212.0/24 maxlen: 24
                          178.176.211.0/24 maxlen: 24
                          178.176.213.0/24 maxlen: 24
                          178.176.208.0/24 maxlen: 24
                          109.74.112.0/20 maxlen: 24
                          217.115.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f1:27:1e:d3:dd:f3:99:8d:95:5f:6d:67:cb:02:6f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec  8 09:53:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=224f427b5b7fe1ac164385882d25a125275b8f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:34:c4:d9:33:25:db:12:33:a9:78:d6:0f:
                    af:6b:74:8f:be:5d:90:0e:3d:93:a7:a1:1c:d4:88:
                    e7:07:db:0d:ce:96:02:c4:5f:57:61:85:db:d0:b5:
                    4f:91:78:11:83:bb:d6:02:05:b7:d6:52:1a:7a:3b:
                    96:fa:a9:57:4b:ee:79:6e:53:d7:65:e1:74:98:54:
                    cc:c9:33:0e:03:b3:b4:87:12:ab:8a:30:08:15:f3:
                    4e:22:d0:75:cd:b5:4d:c5:43:93:e3:cf:41:7a:43:
                    5d:f5:94:fb:bd:c2:83:03:49:01:7c:e3:af:f5:cb:
                    ba:be:83:17:c8:cc:e7:b3:3c:ae:4e:d8:ca:b0:d2:
                    f1:07:75:ad:f0:94:14:b7:66:10:4e:a4:c4:ef:6b:
                    f1:31:47:00:70:65:eb:05:11:e3:dc:46:39:2b:d3:
                    a0:c9:e1:b3:4b:c8:9b:93:31:5d:a7:55:d0:66:8b:
                    8a:f5:b8:94:9d:80:27:93:5b:ab:41:4b:89:6a:4e:
                    72:ee:d0:99:b8:6b:10:a7:91:7f:cb:c0:a4:af:93:
                    0f:4e:03:bf:41:c5:ac:d5:60:4d:6c:ee:6b:d2:bc:
                    21:ce:cc:30:55:c2:13:9e:bf:f9:9f:84:c7:9f:ff:
                    a2:3f:e5:82:6c:ca:6a:e3:a5:14:90:91:e7:0e:3b:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4F:42:7B:5B:7F:E1:AC:16:43:85:88:2D:25:A1:25:27:5B:8F:56
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ik9Ce1t_4awWQ4WILSWhJSdbj1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.192.0/19
                  37.29.112.0/20
                  83.149.24.0/23
                  83.149.28.0/22
                  83.169.232.0/22
                  83.169.237.0-83.169.247.255
                  85.26.176.0/20
                  94.25.128.0/17
                  95.137.0.0/17
                  109.74.112.0/20
                  109.106.192.0/21
                  109.124.64.0/18
                  109.188.0.0/16
                  128.204.64.0/18
                  178.23.144.0/21
                  178.176.192.0-178.176.198.255
                  178.176.202.0/23
                  178.176.208.0/20
                  178.178.0.0-178.178.5.255
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.168.0-188.170.227.255
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:03:61:f1:ac:57:83:ea:ec:a7:9f:e5:59:a9:20:98:e8:43:
         80:d9:68:2d:77:0f:1a:64:f4:5a:6e:5e:93:48:b3:00:b1:3e:
         62:8b:8e:e3:cc:ee:31:90:96:29:a4:b1:e6:47:e2:6a:72:21:
         62:0a:15:27:22:b2:c5:6b:52:4d:5d:61:46:cd:a9:2f:00:35:
         28:64:3a:f9:f2:3e:d8:2c:15:30:d2:cd:4f:19:ee:c1:91:8c:
         b8:fc:95:c2:e5:ce:8e:8e:48:e9:5a:4c:62:12:3f:65:9a:6b:
         70:03:35:e0:b3:e9:fe:fc:77:59:25:68:15:73:e5:47:8e:0f:
         94:71:c4:7a:e6:0f:9f:3e:0d:d4:c6:88:b6:03:58:02:77:1e:
         f0:d6:61:7d:b7:7b:fa:24:44:fa:ac:ab:c5:27:16:27:e1:f2:
         a8:32:63:86:98:f3:f2:b5:a8:4e:85:ef:1a:5a:fc:b8:d1:e3:
         a2:bb:39:8e:1d:41:60:ee:2c:ac:40:85:0a:cf:ba:8a:cf:97:
         3f:41:82:76:7e:d3:11:09:8f:a9:86:e9:06:e2:ee:6f:3d:a1:
         db:a9:53:67:58:2c:e3:d3:53:02:e8:f5:6c:e0:44:18:de:1d:
         91:14:20:b8:07:14:89:14:92:88:c5:a8:75:0d:52:9b:9e:fa:
         d4:7f:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org