Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Evtgsz-5EMQ-qZWA_rxi1IrEBg8.roa
File:                     Evtgsz-5EMQ-qZWA_rxi1IrEBg8.roa (raw, json)
Hash identifier:          UX+mxj+XKojBzbGuTbiliEGJo3PAqM7kULnJMHefjHg=
Subject key identifier:   12:FB:60:B3:3F:B9:10:C4:3E:A9:95:80:FE:BC:62:D4:8A:C4:06:0F
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       038C14B0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Evtgsz-5EMQ-qZWA_rxi1IrEBg8.roa
Signing time:             Thu 16 Jun 2022 12:03:44 +0000
ROA not before:           Thu 16 Jun 2022 12:03:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.39.208.0/24 maxlen: 24
                          193.41.38.0/24 maxlen: 24
                          193.39.143.0/24 maxlen: 24
                          2a0f:a203::/32 maxlen: 32
                          2a0f:3d86::/32 maxlen: 32
                          2a0e:2240:5::/48 maxlen: 48
                          2a0f:a207::/32 maxlen: 32
                          2a0f:3d83::/32 maxlen: 32
                          2a0f:3d87::/32 maxlen: 32
                          2a0e:2240:3::/48 maxlen: 48
                          2a0f:a200::/32 maxlen: 32
                          2a0f:3d81::/32 maxlen: 32
                          2a0f:a206::/32 maxlen: 32
                          2a0e:2240:4::/48 maxlen: 48
                          2a0f:3d84::/32 maxlen: 32
                          2a0f:a205::/32 maxlen: 32
                          2a0f:a201::/32 maxlen: 32
                          2a0f:a204::/32 maxlen: 32
                          2a0f:3d85::/32 maxlen: 32
                          2a0f:a202::/32 maxlen: 32
                          2a07:7880::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59511984 (0x38c14b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jun 16 12:03:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12fb60b33fb910c43ea99580febc62d48ac4060f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:a7:de:22:d5:50:96:1c:13:39:b0:b8:0f:
                    d5:1e:ce:bd:67:83:d6:ce:82:fc:8b:20:af:ae:2d:
                    ce:e1:3b:3a:79:df:4d:47:21:50:a8:f3:c7:6b:0e:
                    f4:2e:f6:70:7b:b2:ef:d6:6e:d6:a0:be:5f:05:79:
                    58:c0:2a:18:9e:41:0d:b3:8c:c8:de:6a:82:ed:2a:
                    81:b1:f3:29:52:41:ee:72:ae:90:6f:60:a5:44:cf:
                    9b:7f:6d:ba:34:3b:f9:7a:ef:d4:03:3d:8c:b9:a2:
                    bf:a6:d3:0d:78:22:45:dd:61:0b:dd:e2:d1:0c:6d:
                    6e:ab:f2:62:b2:57:0e:10:76:8e:0b:b8:ac:09:90:
                    6f:23:ee:8f:bd:e4:5a:09:4b:cc:e6:21:4a:07:c0:
                    87:ee:35:a2:67:00:c2:a4:6f:14:3e:9e:6e:fa:f6:
                    f9:52:fa:a5:dd:bd:b9:f2:f3:b5:81:94:57:bc:ad:
                    52:6d:a4:c7:ce:71:77:56:98:3a:c2:69:fb:2c:a5:
                    b9:61:7a:3f:66:73:e6:c8:a5:41:51:44:d5:73:ba:
                    61:25:d0:8c:d1:b8:3a:86:34:62:23:4c:40:d8:0a:
                    66:6f:0b:12:fc:d0:b0:1f:18:fd:97:bf:7e:49:e8:
                    14:98:41:0f:88:80:f7:e8:ad:5f:1f:e6:72:39:49:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FB:60:B3:3F:B9:10:C4:3E:A9:95:80:FE:BC:62:D4:8A:C4:06:0F
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Evtgsz-5EMQ-qZWA_rxi1IrEBg8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.39.143.0/24
                  193.39.208.0/24
                  193.41.38.0/24
                IPv6:
                  2a07:7880::/32
                  2a0e:2240:3::-2a0e:2240:5:ffff:ffff:ffff:ffff:ffff
                  2a0f:3d81::/32
                  2a0f:3d83::-2a0f:3d87:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:a200::/29

    Signature Algorithm: sha256WithRSAEncryption
         64:41:34:62:10:33:46:0b:45:e2:73:7b:32:02:6c:8f:4c:c7:
         b4:d8:c5:a9:e3:0b:f5:f3:cb:f8:da:f8:18:dd:67:b2:a4:ee:
         21:0a:9c:a2:0e:72:91:4f:17:0a:12:e0:91:2f:4a:6a:ff:9f:
         02:e2:2c:44:1d:81:ac:52:39:67:d9:b8:7f:54:b6:51:ed:9c:
         e2:f8:b6:f3:bd:02:1f:fe:d0:54:05:31:f0:f7:3a:ab:c3:a9:
         27:05:cc:00:97:5b:2b:b7:e6:f8:94:3f:65:8a:8b:3b:43:ae:
         83:76:32:01:f3:a4:cb:e8:ae:36:b7:34:b7:bb:ab:99:b0:d7:
         59:10:64:58:b0:e8:d1:23:e0:af:ee:0a:5b:42:5e:a3:84:39:
         cf:ef:20:82:ee:81:a1:ed:6d:30:23:66:49:c0:2a:cd:06:02:
         ab:85:b1:14:a3:f7:85:42:83:ea:c2:b8:cf:2a:4b:3b:8f:d6:
         d4:e9:68:28:d2:3f:c7:98:a7:47:6f:96:e7:1b:84:89:26:76:
         c0:36:85:69:bb:34:71:ac:d8:b7:30:15:b3:b9:0b:69:70:9a:
         e0:fc:0e:58:41:fb:c4:8f:99:0d:ff:d2:b0:db:ff:30:9d:55:
         fc:a1:c5:7c:4c:62:ee:fa:db:e2:02:1d:ac:27:1e:27:9e:bf:
         bb:55:73:09
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIEA4wUsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDYx
NjEyMDM0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJmYjYwYjMzZmI5
MTBjNDNlYTk5NTgwZmViYzYyZDQ4YWM0MDYwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALk2p94i1VCWHBM5sLgP1R7OvWeD1s6C/Isgr64tzuE7Onnf
TUchUKjzx2sO9C72cHuy79Zu1qC+XwV5WMAqGJ5BDbOMyN5qgu0qgbHzKVJB7nKu
kG9gpUTPm39tujQ7+Xrv1AM9jLmiv6bTDXgiRd1hC93i0QxtbqvyYrJXDhB2jgu4
rAmQbyPuj73kWglLzOYhSgfAh+41omcAwqRvFD6ebvr2+VL6pd29ufLztYGUV7yt
Um2kx85xd1aYOsJp+yyluWF6P2Zz5silQVFE1XO6YSXQjNG4OoY0YiNMQNgKZm8L
EvzQsB8Y/Ze/fknoFJhBD4iA9+itXx/mcjlJghkCAwEAAaOCAlYwggJSMB0GA1Ud
DgQWBBQS+2CzP7kQxD6plYD+vGLUisQGDzAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
L0V2dGdzei01RU1RLXFaV0FfcnhpMUlyRUJnOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBs
BggrBgEFBQcBBwEB/wRdMFswGAQCAAEwEgMEAMEnjwMEAMEn0AMEAMEpJjA/BAIA
AjA5AwUAKgd4gDASAwcAKg4iQAADAwcBKg4iQAAEAwUAKg89gTAOAwUAKg89gwMF
AyoPPYADBQMqD6IAMA0GCSqGSIb3DQEBCwUAA4IBAQBkQTRiEDNGC0Xic3syAmyP
TMe02MWp4wv188v42vgY3WeypO4hCpyiDnKRTxcKEuCRL0pq/58C4ixEHYGsUjln
2bh/VLZR7Zzi+LbzvQIf/tBUBTHw9zqrw6knBcwAl1srt+b4lD9lios7Q66DdjIB
86TL6K42tzS3u6uZsNdZEGRYsOjRI+Cv7gpbQl6jhDnP7yCC7oGh7W0wI2ZJwCrN
BgKrhbEUo/eFQoPqwrjPKks7j9bU6Wgo0j/HmKdHb5bnG4SJJnbANoVpuzRxrNi3
MBWzuQtpcJrg/A5YQfvEj5kN/9Kw2/8wnVX8ocV8TGLu+tviAh2sJx4nnr+7VXMJ
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:37:21 2025 by rpki-client