Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/n27HyhRH0K07jDEoj8u_pyC0JmM.roa
File:                     n27HyhRH0K07jDEoj8u_pyC0JmM.roa (raw, json)
Hash identifier:          dt7SjVVt++7KUZlUpj3YgaUGZ7nSd5L/wBNxS9Pkkqc=
Subject key identifier:   9F:6E:C7:CA:14:47:D0:AD:3B:8C:31:28:8F:CB:BF:A7:20:B4:26:63
Certificate issuer:       /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial:       0187A10D61B05F8ED2921698E268FB62360F
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/n27HyhRH0K07jDEoj8u_pyC0JmM.roa
Signing time:             Thu 20 Apr 2023 23:43:41 +0000
ROA not before:           Thu 20 Apr 2023 23:43:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54825
IP address blocks:        93.187.218.0/23 maxlen: 23
                          93.187.216.0/23 maxlen: 23
                          145.40.64.0/23 maxlen: 23
                          145.40.68.0/24 maxlen: 24
                          145.40.69.0/24 maxlen: 24
                          145.40.67.0/24 maxlen: 24
                          145.40.66.0/24 maxlen: 24
                          145.40.70.0/23 maxlen: 23
                          145.40.78.0/24 maxlen: 24
                          145.40.75.0/24 maxlen: 24
                          145.40.74.0/23 maxlen: 23
                          145.40.76.0/23 maxlen: 23
                          145.40.72.0/24 maxlen: 24
                          145.40.73.0/24 maxlen: 24
                          145.40.84.0/23 maxlen: 23
                          145.40.82.0/23 maxlen: 23
                          145.40.79.0/24 maxlen: 24
                          145.40.80.0/23 maxlen: 23
                          145.40.91.0/24 maxlen: 24
                          145.40.89.0/24 maxlen: 24
                          145.40.90.0/24 maxlen: 24
                          145.40.88.0/24 maxlen: 24
                          145.40.86.0/23 maxlen: 23
                          145.40.98.0/23 maxlen: 23
                          145.40.96.0/23 maxlen: 23
                          145.40.92.0/22 maxlen: 22
                          145.40.103.0/24 maxlen: 24
                          145.40.102.0/23 maxlen: 23
                          145.40.101.0/24 maxlen: 24
                          145.40.104.0/22 maxlen: 22
                          145.40.102.0/24 maxlen: 24
                          145.40.100.0/24 maxlen: 24
                          45.11.244.0/23 maxlen: 23
                          136.144.56.0/23 maxlen: 23
                          136.144.58.0/23 maxlen: 23
                          136.144.54.0/23 maxlen: 23
                          136.144.52.0/23 maxlen: 23
                          136.144.60.0/23 maxlen: 23
                          136.144.62.0/23 maxlen: 23
                          136.144.50.0/23 maxlen: 23
                          136.144.48.0/23 maxlen: 23
                          139.178.80.0/21 maxlen: 21
                          139.178.88.0/22 maxlen: 22
                          139.178.94.0/23 maxlen: 23
                          139.178.92.0/23 maxlen: 23
                          139.178.64.0/22 maxlen: 22
                          139.178.68.0/22 maxlen: 22
                          139.178.76.0/23 maxlen: 23
                          139.178.76.0/22 maxlen: 22
                          139.178.78.0/23 maxlen: 23
                          139.178.74.0/23 maxlen: 23
                          139.178.72.0/23 maxlen: 23
                          139.178.72.0/22 maxlen: 22
                          147.75.206.0/24 maxlen: 24
                          147.28.162.0/23 maxlen: 23
                          147.28.164.0/23 maxlen: 23
                          147.75.204.0/23 maxlen: 23
                          147.28.160.0/23 maxlen: 23
                          147.75.200.0/22 maxlen: 22
                          147.28.170.0/23 maxlen: 23
                          147.28.172.0/23 maxlen: 23
                          147.28.166.0/23 maxlen: 23
                          147.28.168.0/23 maxlen: 23
                          147.75.207.0/24 maxlen: 24
                          147.28.176.0/23 maxlen: 23
                          147.28.178.0/23 maxlen: 23
                          147.28.174.0/23 maxlen: 23
                          147.28.184.0/23 maxlen: 23
                          147.28.186.0/23 maxlen: 23
                          147.28.180.0/23 maxlen: 23
                          147.28.182.0/23 maxlen: 23
                          147.28.190.0/23 maxlen: 23
                          147.28.192.0/22 maxlen: 22
                          147.28.188.0/24 maxlen: 24
                          147.28.198.0/24 maxlen: 24
                          147.28.196.0/23 maxlen: 23
                          147.75.43.0/24 maxlen: 24
                          147.75.44.0/24 maxlen: 24
                          147.75.40.0/23 maxlen: 23
                          147.75.42.0/24 maxlen: 24
                          147.75.51.0/24 maxlen: 24
                          147.75.50.0/23 maxlen: 23
                          147.75.50.0/24 maxlen: 24
                          147.75.48.0/24 maxlen: 24
                          147.75.49.0/24 maxlen: 24
                          147.75.46.0/24 maxlen: 24
                          147.75.47.0/24 maxlen: 24
                          147.75.45.0/24 maxlen: 24
                          147.75.58.0/24 maxlen: 24
                          147.75.57.0/24 maxlen: 24
                          147.75.55.0/24 maxlen: 24
                          147.75.56.0/24 maxlen: 24
                          147.75.53.0/24 maxlen: 24
                          147.75.54.0/24 maxlen: 24
                          147.75.52.0/24 maxlen: 24
                          147.75.64.0/22 maxlen: 22
                          147.75.62.0/24 maxlen: 24
                          147.75.63.0/24 maxlen: 24
                          147.75.60.0/24 maxlen: 24
                          147.75.61.0/24 maxlen: 24
                          147.75.59.0/24 maxlen: 24
                          147.75.68.0/22 maxlen: 22
                          147.75.78.0/24 maxlen: 24
                          147.75.76.0/24 maxlen: 24
                          147.75.77.0/24 maxlen: 24
                          147.75.74.0/24 maxlen: 24
                          147.75.75.0/24 maxlen: 24
                          147.75.72.0/24 maxlen: 24
                          147.75.73.0/24 maxlen: 24
                          147.75.72.0/21 maxlen: 21
                          86.109.4.0/24 maxlen: 24
                          86.109.4.0/23 maxlen: 23
                          147.75.84.0/23 maxlen: 23
                          86.109.2.0/24 maxlen: 24
                          86.109.3.0/24 maxlen: 24
                          86.109.0.0/24 maxlen: 24
                          86.109.2.0/23 maxlen: 23
                          86.109.1.0/24 maxlen: 24
                          147.75.79.0/24 maxlen: 24
                          147.75.80.0/22 maxlen: 22
                          86.109.9.0/24 maxlen: 24
                          147.75.88.0/22 maxlen: 22
                          86.109.10.0/23 maxlen: 23
                          86.109.7.0/24 maxlen: 24
                          86.109.8.0/24 maxlen: 24
                          86.109.5.0/24 maxlen: 24
                          86.109.6.0/24 maxlen: 24
                          147.75.86.0/23 maxlen: 23
                          147.75.36.0/22 maxlen: 22
                          147.75.34.0/24 maxlen: 24
                          147.75.35.0/24 maxlen: 24
                          147.75.32.0/23 maxlen: 23
                          147.28.132.0/22 maxlen: 22
                          147.28.131.0/24 maxlen: 24
                          147.28.128.0/23 maxlen: 23
                          147.28.136.0/23 maxlen: 23
                          145.40.79.0/26 maxlen: 26
                          147.28.138.0/23 maxlen: 23
                          147.28.142.0/23 maxlen: 23
                          147.28.141.0/24 maxlen: 24
                          147.28.144.0/23 maxlen: 23
                          147.75.192.0/21 maxlen: 21
                          147.75.192.0/24 maxlen: 24
                          147.28.152.0/24 maxlen: 24
                          147.28.148.0/23 maxlen: 23
                          147.28.150.0/23 maxlen: 23
                          147.28.146.0/23 maxlen: 23
                          147.75.199.0/24 maxlen: 24
                          147.75.197.0/24 maxlen: 24
                          147.28.156.0/23 maxlen: 23
                          147.75.198.0/24 maxlen: 24
                          147.28.158.0/23 maxlen: 23
                          147.75.196.0/24 maxlen: 24
                          147.28.154.0/23 maxlen: 23
                          147.28.153.0/24 maxlen: 24
                          147.75.193.0/24 maxlen: 24
                          147.75.194.0/23 maxlen: 23
                          147.75.98.0/24 maxlen: 24
                          147.75.96.0/22 maxlen: 22
                          147.75.97.0/24 maxlen: 24
                          86.109.14.0/23 maxlen: 23
                          147.75.96.0/24 maxlen: 24
                          86.109.12.0/24 maxlen: 24
                          147.75.92.0/22 maxlen: 22
                          86.109.13.0/24 maxlen: 24
                          147.75.104.0/22 maxlen: 22
                          147.75.100.0/22 maxlen: 22
                          147.75.99.0/24 maxlen: 24
                          147.75.110.0/23 maxlen: 23
                          147.75.108.0/23 maxlen: 23
                          145.40.112.0/22 maxlen: 22
                          145.40.108.0/22 maxlen: 22
                          145.40.116.0/22 maxlen: 22
                          145.40.124.0/22 maxlen: 22
                          145.40.120.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a1:0d:61:b0:5f:8e:d2:92:16:98:e2:68:fb:62:36:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
        Validity
            Not Before: Apr 20 23:43:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f6ec7ca1447d0ad3b8c31288fcbbfa720b42663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ca:c4:08:76:31:14:ea:e8:ce:0f:13:7d:1e:
                    2a:c6:11:62:85:ec:7a:cc:53:fc:df:7d:b2:e4:98:
                    27:2c:ad:ec:81:c6:df:4f:0d:59:ed:e0:97:5a:2f:
                    22:bc:e6:5b:a4:9f:aa:18:17:da:cd:e4:86:cd:4f:
                    fa:fe:a1:33:24:cc:bd:32:28:e6:bb:f9:10:a7:aa:
                    0a:7f:b3:fe:1e:ac:48:0b:ab:40:e4:cb:00:3f:a1:
                    25:e5:b0:a9:fd:6a:2e:01:54:98:17:63:97:67:75:
                    e2:4f:ff:d3:6b:43:ac:51:45:d9:a7:64:7c:a3:70:
                    da:4e:aa:1b:e5:9f:5d:23:73:ac:10:85:dc:f6:7a:
                    74:3d:bc:5e:d8:9b:0e:8b:b4:dc:9d:e9:22:ef:3c:
                    5d:ec:50:fa:6f:09:8e:5d:49:02:e8:7d:18:ec:60:
                    f4:ac:83:b0:eb:76:23:86:a7:a0:f2:13:3e:0f:a2:
                    84:c1:47:e5:2e:67:bc:98:25:06:47:a1:88:4a:0b:
                    9f:e4:92:3a:bd:ad:0f:71:84:99:07:14:87:67:3b:
                    be:53:70:e7:74:02:16:fe:93:96:73:8c:b2:b1:1d:
                    5c:14:68:de:79:38:34:20:d2:b8:4a:7e:04:56:c5:
                    34:01:a7:f9:4f:e4:66:91:39:f4:1d:c0:1c:6d:15:
                    e0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6E:C7:CA:14:47:D0:AD:3B:8C:31:28:8F:CB:BF:A7:20:B4:26:63
            X509v3 Authority Key Identifier:
                keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/n27HyhRH0K07jDEoj8u_pyC0JmM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.244.0/23
                  86.109.0.0/20
                  93.187.216.0/22
                  136.144.48.0/20
                  139.178.64.0/19
                  145.40.64.0/18
                  147.28.128.0/23
                  147.28.131.0-147.28.139.255
                  147.28.141.0-147.28.188.255
                  147.28.190.0-147.28.198.255
                  147.75.32.0-147.75.111.255
                  147.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:22:16:a4:ad:13:24:b5:69:23:4e:9c:0f:a0:c2:5b:5d:7c:
         92:a1:51:57:d9:8f:f0:db:7c:4e:dc:2c:f6:18:50:1e:08:f1:
         fa:ab:78:a7:e0:69:2f:b4:d0:94:38:ca:65:ac:93:6d:4e:0b:
         88:fa:2b:09:b0:9a:19:e3:0f:0c:b2:e9:03:ec:f6:ab:de:6e:
         89:fb:9c:29:d4:c0:79:66:c9:16:a8:e5:11:53:04:f2:cb:0a:
         02:22:c5:2c:ff:8b:67:2f:9c:64:d2:cc:08:30:ed:69:34:f2:
         c5:5a:15:63:2d:b3:80:18:44:cc:a4:83:55:40:d4:e1:ec:25:
         63:36:e9:73:65:8e:b3:fb:d8:ad:f1:91:dc:8d:1d:f3:13:56:
         9e:aa:5d:3a:06:0f:6c:c6:84:50:37:7e:cd:e1:a6:81:d9:04:
         b5:79:43:1f:0d:26:99:8c:0d:60:f8:38:c7:ab:e5:60:0d:87:
         40:82:28:5c:69:c4:64:97:22:12:e3:f5:80:0f:38:a2:e3:76:
         2f:c9:76:e8:8c:4d:15:4c:f6:c5:15:8a:43:14:74:93:ef:9d:
         7f:e1:06:3f:5b:42:39:d9:c7:2d:16:a5:69:1c:d5:d7:c7:13:
         a4:74:3e:67:55:7f:20:fb:b2:c0:36:e2:0f:e9:12:45:ce:f4:
         28:b4:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:49 2025 by rpki-client