Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EzC9VWZQAE3Cgvlsuc4b1RQJw5w.roa
File:                     EzC9VWZQAE3Cgvlsuc4b1RQJw5w.roa (raw, json)
Hash identifier:          dhBAOSS0ElrHKtH1PUS6oSY6iPmtLXz3Shx4K2yfbio=
Subject key identifier:   13:30:BD:55:66:50:00:4D:C2:82:F9:6C:B9:CE:1B:D5:14:09:C3:9C
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01EE8F90
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EzC9VWZQAE3Cgvlsuc4b1RQJw5w.roa
Signing time:             Mon 14 Feb 2022 08:56:00 +0000
ROA not before:           Mon 14 Feb 2022 08:56:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.95.98.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          194.33.32.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          45.152.197.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          2a0e:e980::/29 maxlen: 29
                          2a0f:a03::/32 maxlen: 32
                          2a0f:ac00::/29 maxlen: 29
                          2a0f:1f80::/29 maxlen: 29
                          2a0f:da40::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a0e:2240:2::/48 maxlen: 48
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:a04::/32 maxlen: 32
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e143::/32 maxlen: 32
                          2a0f:e1c0::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32411536 (0x1ee8f90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Feb 14 08:56:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1330bd556650004dc282f96cb9ce1bd51409c39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:13:6d:c7:21:de:75:d5:bb:47:a6:8c:75:
                    b6:c1:4c:84:9d:fc:71:0d:9b:d8:47:4c:84:be:58:
                    95:a0:ea:3b:18:be:d7:47:27:dd:58:7b:e5:5d:fa:
                    24:b8:06:1d:1b:1e:a9:d0:10:e4:ae:bc:21:bb:15:
                    a8:7a:86:46:42:f9:58:26:dc:3d:d3:7b:aa:c3:60:
                    12:df:d2:b4:a9:63:90:7c:2d:14:4f:9f:02:03:08:
                    ac:e6:1f:73:af:75:69:3b:8e:e9:e8:56:6b:a6:d3:
                    a6:a2:e7:5f:01:59:4f:0d:d1:6d:c7:76:f3:ac:c0:
                    bc:5f:73:97:c8:dc:79:ee:fd:04:55:08:c5:33:96:
                    31:ff:91:cd:d1:8e:22:d6:93:da:02:b1:1e:c2:d5:
                    ec:37:4c:5e:cd:59:a2:c2:76:55:f9:a5:c2:32:b0:
                    02:c2:99:2f:ae:72:c1:1b:1e:ad:ca:89:1f:61:a4:
                    1f:23:91:55:4d:56:eb:77:56:1a:ed:65:ff:96:55:
                    0c:3c:f7:78:2e:f3:a0:f8:25:01:5a:ea:a9:56:fb:
                    01:20:6f:5d:41:de:96:d4:f9:ba:4a:62:a0:83:14:
                    9b:bf:7c:a8:7e:9d:3a:79:80:e2:51:4c:cd:51:75:
                    5b:a5:d3:80:8e:ec:57:51:23:86:9f:6f:ff:67:30:
                    b7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:30:BD:55:66:50:00:4D:C2:82:F9:6C:B9:CE:1B:D5:14:09:C3:9C
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EzC9VWZQAE3Cgvlsuc4b1RQJw5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.98.0/24
                  45.128.77.0/24
                  45.137.41.0/24
                  45.137.86.0/24
                  45.152.197.0/24
                  193.39.209.0/24
                  193.111.4.0/23
                  193.111.18.0/23
                  194.33.32.0/24
                IPv6:
                  2a0e:2240:2::/48
                  2a0e:e980::/29
                  2a0e:f200:2::/48
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1f80::/29
                  2a0f:ac00::/29
                  2a0f:da40::/29
                  2a0f:e143::/32
                  2a0f:e1c0::/32
                  2a0f:e1c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:a9:36:23:b5:ce:29:33:27:f5:1e:e1:0c:f3:33:69:f6:f9:
         1f:7f:fc:14:7c:84:aa:9d:48:d7:c2:7f:8a:17:f1:06:62:f5:
         2b:dc:c9:e0:f5:5c:70:a7:8b:ca:68:af:4f:e6:33:4f:c7:0b:
         b9:d6:d7:e1:d7:ed:b8:b7:15:04:c8:c6:f9:bc:d7:f8:94:fe:
         12:41:c9:83:9d:fd:22:9e:fc:be:23:be:89:3f:68:3d:72:29:
         0e:58:6b:f1:c1:bb:4d:7e:67:cc:a2:94:4f:38:af:91:24:b0:
         73:09:14:fc:1d:1f:53:7f:b8:04:3e:81:eb:dd:9d:4a:8a:60:
         9d:29:11:4b:75:87:ab:9d:e6:d9:98:08:bf:95:27:b8:dc:0d:
         23:71:93:a3:4e:ac:23:2d:1b:22:4f:e5:9f:de:1d:f4:03:e5:
         2e:9b:31:01:cc:2b:45:0e:ed:7a:33:83:b0:9b:a5:0b:bb:40:
         b9:8f:3e:30:f0:24:2c:fb:94:6c:f0:16:9f:34:a0:49:cb:e1:
         23:74:5b:bd:78:1e:57:a5:54:dd:3a:87:bb:d8:8a:c4:f4:31:
         5c:8a:e9:56:af:75:13:58:67:9f:aa:df:12:f4:af:6c:dd:23:
         20:3d:f8:9d:6f:aa:57:92:be:a3:33:c2:15:18:c6:2f:a1:cf:
         c1:03:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:30 2025 by rpki-client