Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tD4IAbGSUAMjF9GJjrpui7fPRxg.roa
File:                     tD4IAbGSUAMjF9GJjrpui7fPRxg.roa (raw, json)
Hash identifier:          Wn2CzwoNhtkeXn7M1SoACxE4RGI/JEY2xp7IO37yTts=
Subject key identifier:   B4:3E:08:01:B1:92:50:03:23:17:D1:89:8E:BA:6E:8B:B7:CF:47:18
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0188EEBCE6EC7A548E989DF7ABBE194F5E4B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tD4IAbGSUAMjF9GJjrpui7fPRxg.roa
Signing time:             Sat 24 Jun 2023 18:48:57 +0000
ROA not before:           Sat 24 Jun 2023 18:48:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        89.34.202.0/24 maxlen: 24
                          85.204.18.0/24 maxlen: 24
                          89.37.195.0/24 maxlen: 24
                          89.36.140.0/24 maxlen: 24
                          89.45.35.0/24 maxlen: 24
                          89.40.36.0/24 maxlen: 24
                          86.105.4.0/24 maxlen: 24
                          46.102.237.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ee:bc:e6:ec:7a:54:8e:98:9d:f7:ab:be:19:4f:5e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jun 24 18:48:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b43e0801b19250032317d1898eba6e8bb7cf4718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0b:f2:fb:01:ea:44:4b:f1:4b:9e:49:5e:0a:
                    6d:d3:76:e8:26:39:87:e2:fd:f7:3c:5f:0e:61:bd:
                    c6:4e:c2:f7:44:1b:7b:72:e2:fa:1c:82:f5:91:6e:
                    f9:a4:fa:7f:33:c3:0e:50:e2:ce:f2:61:b2:ed:41:
                    b8:e2:7e:9b:0d:a0:33:d9:3e:c4:3b:4f:37:f6:af:
                    e0:86:0f:26:1f:eb:fd:7a:47:f4:c8:2b:1d:7e:59:
                    04:7d:0e:6a:96:1d:39:e7:cb:17:1a:3c:2f:80:95:
                    3b:86:a1:59:2a:75:75:e7:90:31:89:7d:15:69:cb:
                    0a:c2:c3:eb:35:c2:30:19:d0:87:1d:b5:0c:ff:dc:
                    37:77:c9:5b:ba:8c:74:43:d8:b9:72:d6:95:2a:b9:
                    83:2e:ed:23:8e:17:29:ca:2b:07:db:56:57:5f:03:
                    ef:07:f1:28:1e:9d:fc:70:7c:23:a1:c1:92:bf:d3:
                    3c:44:dc:75:70:45:53:23:d1:18:8b:74:ac:f0:94:
                    a3:9a:f3:a6:bf:57:bd:a3:25:0c:1c:bf:ec:1f:e4:
                    12:79:2c:32:b2:20:a1:5a:f2:d0:73:74:d7:81:16:
                    20:82:2e:97:8e:5e:3c:7d:f8:29:b8:dd:36:e6:8a:
                    74:97:f9:5e:a4:eb:1c:f7:a4:31:42:58:96:ba:55:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3E:08:01:B1:92:50:03:23:17:D1:89:8E:BA:6E:8B:B7:CF:47:18
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tD4IAbGSUAMjF9GJjrpui7fPRxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.102.237.0/24
                  85.204.18.0/24
                  86.105.4.0/24
                  89.34.202.0/24
                  89.36.140.0/24
                  89.37.195.0/24
                  89.40.36.0/24
                  89.45.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:c6:15:50:bd:04:d0:67:60:6a:57:0e:7b:91:b1:19:ec:22:
         be:ae:46:b5:88:bd:c0:b0:55:5a:ea:40:2a:7e:db:d1:01:e6:
         b3:73:0d:6e:09:50:a2:95:00:96:3e:47:0a:e4:29:43:8f:ea:
         ae:1d:fc:7e:b3:ee:f5:06:ba:d9:c5:a9:bf:e3:4b:02:a3:52:
         65:7d:65:be:f2:9a:e4:e5:d9:2e:fa:ed:41:bc:41:04:3c:11:
         05:36:05:9e:13:5a:68:0d:a3:ab:15:3a:4e:cd:77:ac:80:98:
         be:53:3b:42:04:c4:33:dc:14:7d:32:6a:28:5e:03:4f:57:c6:
         92:07:55:84:62:29:db:de:66:a7:ed:4a:8d:b4:8b:8a:5e:bf:
         40:07:b4:c3:68:6c:83:9f:bc:05:b3:4d:29:2c:24:f2:e5:41:
         a3:19:62:f0:48:04:16:69:88:7f:55:c2:d4:68:6e:29:4c:85:
         b8:3b:08:ce:51:10:8a:5a:4b:97:c1:a7:c5:9b:89:7b:dd:ba:
         e9:98:14:e0:50:88:90:fa:7c:a7:ef:6b:28:d6:d7:b3:bc:99:
         ad:b4:6a:27:2d:09:b4:3b:9c:b4:3a:ed:a9:39:db:62:8f:f1:
         37:38:3e:84:b1:b6:95:ac:e3:14:92:d6:73:95:52:7f:a8:58:
         c8:fb:16:5e
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYjuvObselSOmJ33q74ZT15LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNjI0MTg0ODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDNlMDgwMWIxOTI1MDAzMjMxN2QxODk4ZWJhNmU4YmI3Y2Y0NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigvy+wHqREvxS55JXgpt03boJjmH
4v33PF8OYb3GTsL3RBt7cuL6HIL1kW75pPp/M8MOUOLO8mGy7UG44n6bDaAz2T7E
O0839q/ghg8mH+v9ekf0yCsdflkEfQ5qlh0558sXGjwvgJU7hqFZKnV155AxiX0V
acsKwsPrNcIwGdCHHbUM/9w3d8lbuox0Q9i5ctaVKrmDLu0jjhcpyisH21ZXXwPv
B/EoHp38cHwjocGSv9M8RNx1cEVTI9EYi3Ss8JSjmvOmv1e9oyUMHL/sH+QSeSwy
siChWvLQc3TXgRYggi6Xjl48ffgpuN025op0l/lepOsc96QxQliWulXHXwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFLQ+CAGxklADIxfRiY66bou3z0cYMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvdEQ0SUFiR1NVQU1qRjlHSmpycHVpN2ZQUnhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALmbtAwQA
VcwSAwQAVmkEAwQAWSLKAwQAWSSMAwQAWSXDAwQAWSgkAwQAWS0jMA0GCSqGSIb3
DQEBCwUAA4IBAQBIxhVQvQTQZ2BqVw57kbEZ7CK+rka1iL3AsFVa6kAqftvRAeaz
cw1uCVCilQCWPkcK5ClDj+quHfx+s+71BrrZxam/40sCo1JlfWW+8prk5dku+u1B
vEEEPBEFNgWeE1poDaOrFTpOzXesgJi+UztCBMQz3BR9MmooXgNPV8aSB1WEYinb
3man7UqNtIuKXr9AB7TDaGyDn7wFs00pLCTy5UGjGWLwSAQWaYh/VcLUaG4pTIW4
OwjOURCKWkuXwafFm4l73brpmBTgUIiQ+nyn72so1tezvJmttGonLQm0O5y0Ou2p
Odtij/E3OD6EsbaVrOMUktZzlVJ/qFjI+xZe
-----END CERTIFICATE-----
Generated at Sun Mar 16 13:52:08 2025 by rpki-client