Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hRYiLx3IAXBMaUa2vHbMjgyJ7EE.roa
File:                     hRYiLx3IAXBMaUa2vHbMjgyJ7EE.roa (raw, json)
Hash identifier:          CRTI364MpxC1N7kt8WLRP0z0PFEhtlTUqzwFo5czmig=
Subject key identifier:   85:16:22:2F:1D:C8:01:70:4C:69:46:B6:BC:76:CC:8E:0C:89:EC:41
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0184E2AF4F35BA9A704BF583813D04FEA84A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hRYiLx3IAXBMaUa2vHbMjgyJ7EE.roa
Signing time:             Mon 05 Dec 2022 14:27:30 +0000
ROA not before:           Mon 05 Dec 2022 14:27:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31163
IP address blocks:        109.188.0.0/16 maxlen: 24
                          193.201.228.0/22 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          93.153.128.0/17 maxlen: 24
                          94.25.128.0/17 maxlen: 24
                          31.173.192.0/24 maxlen: 24
                          31.173.193.0/24 maxlen: 24
                          31.173.196.0/24 maxlen: 24
                          31.173.199.0/24 maxlen: 24
                          31.173.194.0/24 maxlen: 24
                          31.173.197.0/24 maxlen: 24
                          31.173.195.0/24 maxlen: 24
                          31.173.198.0/24 maxlen: 24
                          31.173.201.0/24 maxlen: 24
                          31.173.204.0/24 maxlen: 24
                          31.173.202.0/24 maxlen: 24
                          31.173.205.0/24 maxlen: 24
                          31.173.200.0/24 maxlen: 24
                          31.173.203.0/24 maxlen: 24
                          31.173.206.0/24 maxlen: 24
                          31.173.209.0/24 maxlen: 24
                          31.173.212.0/24 maxlen: 24
                          31.173.207.0/24 maxlen: 24
                          31.173.210.0/24 maxlen: 24
                          31.173.213.0/24 maxlen: 24
                          31.173.208.0/24 maxlen: 24
                          31.173.211.0/24 maxlen: 24
                          31.173.217.0/24 maxlen: 24
                          31.173.215.0/24 maxlen: 24
                          31.173.218.0/24 maxlen: 24
                          31.173.216.0/24 maxlen: 24
                          31.173.219.0/24 maxlen: 24
                          31.173.214.0/24 maxlen: 24
                          31.173.220.0/24 maxlen: 24
                          31.173.223.0/24 maxlen: 24
                          31.173.221.0/24 maxlen: 24
                          31.173.222.0/24 maxlen: 24
                          212.119.160.0/19 maxlen: 24
                          91.193.212.0/22 maxlen: 24
                          109.106.192.0/24 maxlen: 24
                          109.106.197.0/24 maxlen: 24
                          109.106.195.0/24 maxlen: 24
                          109.106.198.0/24 maxlen: 24
                          109.106.193.0/24 maxlen: 24
                          109.106.196.0/24 maxlen: 24
                          109.106.199.0/24 maxlen: 24
                          109.106.194.0/24 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          178.178.3.0/24 maxlen: 24
                          178.178.0.0/24 maxlen: 24
                          178.178.2.0/24 maxlen: 24
                          178.178.4.0/24 maxlen: 24
                          178.178.1.0/24 maxlen: 24
                          178.178.5.0/24 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          37.29.123.0/24 maxlen: 24
                          37.29.125.0/24 maxlen: 24
                          37.29.120.0/24 maxlen: 24
                          37.29.119.0/24 maxlen: 24
                          37.29.122.0/24 maxlen: 24
                          37.29.121.0/24 maxlen: 24
                          37.29.124.0/24 maxlen: 24
                          37.29.126.0/24 maxlen: 24
                          37.29.127.0/24 maxlen: 24
                          178.23.144.0/21 maxlen: 24
                          109.124.64.0/18 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          86.109.192.0/19 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          178.176.215.0/24 maxlen: 24
                          178.176.218.0/24 maxlen: 24
                          178.176.217.0/24 maxlen: 24
                          178.176.219.0/24 maxlen: 24
                          178.176.214.0/24 maxlen: 24
                          178.176.216.0/24 maxlen: 24
                          178.176.223.0/24 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          178.176.220.0/24 maxlen: 24
                          178.176.222.0/24 maxlen: 24
                          178.176.221.0/24 maxlen: 24
                          188.170.187.0/24 maxlen: 24
                          188.170.190.0/24 maxlen: 24
                          188.170.189.0/24 maxlen: 24
                          188.170.192.0/24 maxlen: 24
                          188.170.191.0/24 maxlen: 24
                          188.170.188.0/24 maxlen: 24
                          188.170.195.0/24 maxlen: 24
                          188.170.198.0/24 maxlen: 24
                          188.170.197.0/24 maxlen: 24
                          188.170.199.0/24 maxlen: 24
                          188.170.194.0/24 maxlen: 24
                          188.170.193.0/24 maxlen: 24
                          188.170.196.0/24 maxlen: 24
                          188.170.200.0/22 maxlen: 22
                          188.170.204.0/22 maxlen: 22
                          188.170.211.0/24 maxlen: 24
                          188.170.213.0/24 maxlen: 24
                          188.170.208.0/24 maxlen: 24
                          188.170.210.0/24 maxlen: 24
                          188.170.209.0/24 maxlen: 24
                          188.170.212.0/24 maxlen: 24
                          188.170.214.0/24 maxlen: 24
                          188.170.219.0/24 maxlen: 24
                          188.170.216.0/24 maxlen: 24
                          188.170.215.0/24 maxlen: 24
                          188.170.218.0/24 maxlen: 24
                          188.170.217.0/24 maxlen: 24
                          188.170.224.0/24 maxlen: 24
                          188.170.221.0/24 maxlen: 24
                          188.170.222.0/24 maxlen: 24
                          188.170.220.0/24 maxlen: 24
                          188.170.225.0/24 maxlen: 24
                          188.170.226.0/24 maxlen: 24
                          188.170.223.0/24 maxlen: 24
                          188.170.227.0/24 maxlen: 24
                          37.29.112.0/24 maxlen: 24
                          37.29.115.0/24 maxlen: 24
                          37.29.118.0/24 maxlen: 24
                          37.29.117.0/24 maxlen: 24
                          37.29.114.0/24 maxlen: 24
                          37.29.113.0/24 maxlen: 24
                          37.29.116.0/24 maxlen: 24
                          128.204.64.0/18 maxlen: 24
                          188.170.171.0/24 maxlen: 24
                          188.170.170.0/24 maxlen: 24
                          188.170.169.0/24 maxlen: 24
                          188.170.168.0/21 maxlen: 21
                          188.170.172.0/24 maxlen: 24
                          188.170.179.0/24 maxlen: 24
                          188.170.174.0/24 maxlen: 24
                          95.137.0.0/17 maxlen: 24
                          188.170.173.0/24 maxlen: 24
                          188.170.176.0/24 maxlen: 24
                          188.170.175.0/24 maxlen: 24
                          188.170.178.0/24 maxlen: 24
                          188.170.177.0/24 maxlen: 24
                          188.170.182.0/24 maxlen: 24
                          188.170.181.0/24 maxlen: 24
                          188.170.184.0/24 maxlen: 24
                          188.170.183.0/24 maxlen: 24
                          188.170.186.0/24 maxlen: 24
                          188.170.185.0/24 maxlen: 24
                          188.170.180.0/24 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          83.149.24.0/24 maxlen: 24
                          83.149.29.0/24 maxlen: 24
                          83.149.30.0/24 maxlen: 24
                          83.149.28.0/24 maxlen: 24
                          83.149.25.0/24 maxlen: 24
                          83.149.31.0/24 maxlen: 24
                          83.169.232.0/24 maxlen: 24
                          83.169.233.0/24 maxlen: 24
                          83.169.240.0/24 maxlen: 24
                          83.169.237.0/24 maxlen: 24
                          83.169.238.0/24 maxlen: 24
                          83.169.235.0/24 maxlen: 24
                          83.169.234.0/24 maxlen: 24
                          83.169.239.0/24 maxlen: 24
                          83.169.245.0/24 maxlen: 24
                          83.169.246.0/24 maxlen: 24
                          83.169.243.0/24 maxlen: 24
                          83.169.244.0/24 maxlen: 24
                          83.169.241.0/24 maxlen: 24
                          83.169.242.0/24 maxlen: 24
                          83.169.247.0/24 maxlen: 24
                          178.176.192.0/24 maxlen: 24
                          178.176.194.0/24 maxlen: 24
                          178.176.193.0/24 maxlen: 24
                          178.176.196.0/24 maxlen: 24
                          178.176.195.0/24 maxlen: 24
                          178.176.198.0/24 maxlen: 24
                          178.176.197.0/24 maxlen: 24
                          178.176.202.0/24 maxlen: 24
                          178.176.203.0/24 maxlen: 24
                          178.176.210.0/24 maxlen: 24
                          178.176.209.0/24 maxlen: 24
                          178.176.212.0/24 maxlen: 24
                          178.176.211.0/24 maxlen: 24
                          178.176.213.0/24 maxlen: 24
                          178.176.208.0/24 maxlen: 24
                          109.74.112.0/20 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          217.115.80.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:af:4f:35:ba:9a:70:4b:f5:83:81:3d:04:fe:a8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec  5 14:27:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8516222f1dc801704c6946b6bc76cc8e0c89ec41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:1c:a6:1c:ba:c5:af:b2:cc:f5:a5:b1:ee:
                    55:31:ad:15:c1:8f:fb:58:5b:08:f2:68:44:33:ef:
                    25:58:b9:94:d8:36:ca:d4:01:9a:b7:78:ea:27:52:
                    ed:86:10:60:3a:20:76:dd:b2:df:c9:1a:e7:8d:1e:
                    81:b5:ec:5e:c3:35:d3:ff:c0:1c:a3:cd:ed:de:51:
                    57:40:2d:b9:f7:52:80:f7:44:27:8c:1c:45:36:87:
                    32:38:56:c4:8c:02:d6:b8:1a:8f:72:12:2c:c5:c6:
                    86:20:e8:df:bf:a1:47:58:c5:90:42:a7:c1:9d:97:
                    20:1c:42:a6:a7:e7:96:e6:7e:70:39:ae:b2:7e:a4:
                    05:9f:64:9e:54:ba:1e:c3:f6:95:98:d8:c5:75:84:
                    89:28:69:b8:74:f3:68:35:6a:cf:ff:17:cb:80:df:
                    51:e8:73:0f:ce:19:52:8d:45:71:93:15:e5:6d:69:
                    33:96:10:ad:f8:a9:83:f1:3c:86:5b:46:34:93:c8:
                    3d:fe:55:4d:e6:73:7b:3b:c7:f8:37:2d:da:f2:ee:
                    8b:8d:0c:d9:02:7c:ee:3d:d8:d1:0e:7a:1c:a9:26:
                    7f:71:8c:26:bb:bf:dd:18:95:d9:77:d9:f9:12:dc:
                    0f:83:cb:7d:0b:6a:2a:2a:23:31:58:26:40:63:80:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:16:22:2F:1D:C8:01:70:4C:69:46:B6:BC:76:CC:8E:0C:89:EC:41
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hRYiLx3IAXBMaUa2vHbMjgyJ7EE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.192.0/19
                  37.29.112.0/20
                  83.149.24.0/23
                  83.149.28.0/22
                  83.169.232.0/22
                  83.169.237.0-83.169.247.255
                  86.109.192.0/19
                  91.193.212.0/22
                  93.153.128.0/17
                  94.25.128.0/17
                  95.137.0.0/17
                  109.74.112.0/20
                  109.106.192.0/21
                  109.124.64.0/18
                  109.188.0.0/16
                  128.204.64.0/18
                  178.23.144.0/21
                  178.176.192.0-178.176.198.255
                  178.176.202.0/23
                  178.176.208.0/20
                  178.178.0.0-178.178.5.255
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.168.0-188.170.227.255
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:fc:63:a3:20:d1:f7:fe:31:b3:f1:e9:12:a1:79:3a:eb:81:
         05:92:69:89:83:15:72:64:86:eb:ef:b1:80:65:ac:d2:47:a2:
         87:a5:d2:e3:77:0c:d5:3d:f9:8f:23:0e:02:b9:3f:7c:73:eb:
         90:2c:ad:82:71:fb:3b:6f:8c:1c:b1:c2:8c:b6:a4:c9:62:a2:
         0e:1d:78:67:ce:d5:41:e6:95:ac:a0:14:14:17:a6:e8:bb:e4:
         a5:ed:5c:b3:86:21:d9:4a:64:ad:a7:2b:dd:b1:d0:a9:de:35:
         ec:8a:98:2d:23:51:5d:eb:01:c3:af:bb:3a:cc:a0:68:4f:55:
         41:54:ed:47:57:12:e1:1f:7c:ef:85:73:4b:8e:f7:ec:0e:0f:
         70:c1:d5:9e:ab:de:9d:a2:d3:1c:85:11:35:a5:15:a3:cf:b1:
         da:d0:be:12:59:15:57:52:2e:a1:cb:de:09:3d:00:9e:86:e7:
         a8:69:33:08:2b:b2:23:7b:5d:20:9d:b8:42:56:e1:ac:9d:04:
         4f:58:99:2f:fd:2a:5b:91:b6:83:7f:06:2c:10:e2:50:bf:a7:
         89:be:dc:3c:4d:e2:ec:f8:d0:37:50:bb:5e:33:bc:97:42:b5:
         cb:6f:da:17:14:d9:fc:57:fa:f3:f2:75:72:54:d2:0a:96:1e:
         c1:02:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:07 2025 by rpki-client