Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-1EWKLSQc9RoZEehBBRjiqJX3Gs.roa
File:                     1-1EWKLSQc9RoZEehBBRjiqJX3Gs.roa (raw, json)
Hash identifier:          weXHW9DiyMN3cVlCs4pI0wA/ROFyjFkhQiV2sVHUHCM=
Subject key identifier:   FB:51:16:28:B4:90:73:D4:68:64:47:A1:04:14:63:8A:A2:57:DC:6B
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01828D2B01525BA17E13918561E900AF3CE0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-1EWKLSQc9RoZEehBBRjiqJX3Gs.roa
Signing time:             Thu 11 Aug 2022 13:49:41 +0000
ROA not before:           Thu 11 Aug 2022 13:49:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          45.130.253.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.157.38.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          45.118.249.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          193.41.115.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          80.253.248.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          193.41.39.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          2a0f:ac00::/29 maxlen: 29
                          2a0f:e540::/32 maxlen: 32
                          2a0f:e1c2::/32 maxlen: 32
                          2a0f:1f80::/29 maxlen: 29
                          2a0c:7884::/32 maxlen: 32
                          2a09:17c0::/29 maxlen: 29
                          2a0f:dac0::/29 maxlen: 29
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:ee00::/29 maxlen: 29
                          2a0f:e6c0:fe1::/48 maxlen: 48
                          2a0f:2700::/29 maxlen: 29
                          2a0f:e041::/32 maxlen: 32
                          2a0f:2100:171::/48 maxlen: 48
                          2a0f:e1c0::/32 maxlen: 32
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:7d00:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a0f:6d80::/29 maxlen: 29
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0f:da40::/29 maxlen: 29
                          2a0b:b740::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a12:4ac0::/29 maxlen: 29
                          2a0a:2d00:1::/48 maxlen: 48
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:e6c0:991::/48 maxlen: 48
                          2a0f:ea00::/29 maxlen: 29
                          2a0c:7883::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0e:e980::/29 maxlen: 29
                          2a12:d6c0::/29 maxlen: 29
                          2a0f:a200::/29 maxlen: 29
                          2a0f:7d00:5::/48 maxlen: 48
                          2a0f:df40::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a0f:e6c0:123::/48 maxlen: 48
                          2a0f:e040::/48 maxlen: 48
                          2a0f:e9c0::/29 maxlen: 29
                          2a0e:15c0:4::/48 maxlen: 48
                          2a0f:db40::/29 maxlen: 29
                          2a0f:a04::/32 maxlen: 32
                          2a0f:1200::/32 maxlen: 32
                          2a0f:7d00:3::/48 maxlen: 48
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:e143::/32 maxlen: 32
                          2a0f:dd40::/29 maxlen: 29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8d:2b:01:52:5b:a1:7e:13:91:85:61:e9:00:af:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Aug 11 13:49:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb511628b49073d4686447a10414638aa257dc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:03:c5:be:4b:ba:23:62:6b:de:a5:3a:27:
                    84:05:ba:fa:6d:01:2d:b7:e7:33:d9:8e:f7:a8:50:
                    14:33:07:ae:9d:22:ae:7d:2d:59:05:f2:01:14:3b:
                    3e:bb:23:fd:16:70:8d:cf:7f:4f:08:59:9c:bc:de:
                    22:8b:de:68:1c:c2:49:0a:6c:45:26:45:62:66:43:
                    23:61:6e:ac:cd:37:34:2f:c5:f9:dd:61:ce:aa:49:
                    ac:9a:b8:92:c2:36:09:2d:35:29:29:37:52:84:7f:
                    52:f5:06:46:66:01:8c:be:27:4b:f1:af:c5:7e:dd:
                    d8:85:fa:d3:7a:05:2d:2f:95:66:7f:98:9b:7b:44:
                    a4:4f:ab:a3:14:c5:81:2d:94:c3:c9:fb:bc:f8:dd:
                    c4:58:5b:39:00:4c:57:a8:51:ac:b6:d4:a7:3b:79:
                    38:dd:75:19:d8:70:90:e7:91:34:e9:6b:4f:a2:ad:
                    38:88:79:a4:cf:3f:86:bb:68:46:ca:e6:b0:c9:10:
                    83:44:3c:fd:22:32:14:b1:75:bf:99:2d:04:a5:0b:
                    e9:c9:a8:1e:63:2c:17:22:cc:8c:63:71:2a:5c:03:
                    e7:ee:7b:43:5a:bd:fa:bf:8e:93:80:13:25:41:d8:
                    d2:17:e5:c7:b4:a0:18:7e:ad:3f:b0:cb:84:ce:ad:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:51:16:28:B4:90:73:D4:68:64:47:A1:04:14:63:8A:A2:57:DC:6B
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-1EWKLSQc9RoZEehBBRjiqJX3Gs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/24
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.118.249.0/24
                  45.128.77.0/24
                  45.130.253.0/24
                  45.137.41.0/24
                  45.137.85.0-45.137.86.255
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0/24
                  45.157.38.0/24
                  45.158.197.0-45.158.198.255
                  80.253.248.0/24
                  91.212.100.0/24
                  91.212.107.0/24
                  103.229.31.0/24
                  113.30.152.0/22
                  185.136.204.0/24
                  185.164.59.0/24
                  193.39.209.0/24
                  193.41.39.0/24
                  193.41.115.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                IPv6:
                  2a09:17c0::/29
                  2a0a:2d00:1::/48
                  2a0b:b740::/29
                  2a0c:7882:1::/48
                  2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:15c0:4::/48
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:e980::/29
                  2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1200::/32
                  2a0f:1f80::/29
                  2a0f:2100:171::/48
                  2a0f:2700::/29
                  2a0f:6d80::/29
                  2a0f:7d00:1::/48
                  2a0f:7d00:3::/48
                  2a0f:7d00:5::/48
                  2a0f:a200::/29
                  2a0f:ac00::/29
                  2a0f:da40::/29
                  2a0f:dac0::/29
                  2a0f:db40::/29
                  2a0f:dd40::/29
                  2a0f:df40::/29
                  2a0f:e040::/48
                  2a0f:e041::/32
                  2a0f:e143::/32
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e540::/32
                  2a0f:e600:1::/48
                  2a0f:e6c0:123::/48
                  2a0f:e6c0:991::/48
                  2a0f:e6c0:fe1::/48
                  2a0f:e9c0::/29
                  2a0f:ea00::/29
                  2a0f:ee00::/29
                  2a12:4ac0::/29
                  2a12:d6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         05:5a:70:a4:18:1d:04:19:b2:51:df:88:16:49:fe:6b:98:36:
         bb:76:54:04:56:53:38:f1:14:19:c2:45:f8:ac:d7:f9:22:df:
         54:4c:1b:9a:3e:ef:5d:d8:7b:b8:83:19:0e:a6:ca:31:f6:7f:
         c8:f4:36:0f:9e:da:59:6c:c0:01:df:2e:9a:e1:9a:50:40:a8:
         07:05:13:8a:00:29:f0:61:14:22:7e:e1:d4:be:51:e6:f9:9f:
         03:f8:b5:6f:03:56:a0:c2:8a:94:df:db:c0:89:fc:48:32:89:
         e8:bc:61:d0:50:94:30:bb:0b:1f:a8:04:b0:5a:af:fc:5e:f5:
         c9:fc:8e:05:39:8e:66:e0:a9:e1:57:31:a5:c6:b4:a8:e1:4b:
         d2:30:b4:73:4d:d6:56:fa:b8:9f:7a:0c:bc:4e:5b:a3:33:7a:
         a3:e1:b0:88:31:17:6e:5c:05:a7:eb:c8:fd:57:b2:da:a0:16:
         a3:4f:09:e4:05:02:4d:b8:e3:31:38:9d:e7:33:7e:21:5f:77:
         8d:bb:d4:ad:26:42:9b:30:21:c1:1f:3f:cd:32:ae:5e:b7:65:
         2f:83:97:c8:d0:33:ca:f0:58:ca:49:47:f1:30:19:0b:b0:82:
         d2:0d:9b:d9:18:ff:5e:f6:d9:09:35:e8:2a:9a:ed:a9:c2:d5:
         85:a5:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:49 2025 by rpki-client