Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ISpBRBtUh3-elYlmFgVeJ7F3SPg.roa
File:                     ISpBRBtUh3-elYlmFgVeJ7F3SPg.roa (raw, json)
Hash identifier:          3gjYD0AKq3SkVYoKg3pExH2As9VpsJtORU0XHKRiH/g=
Subject key identifier:   21:2A:41:44:1B:54:87:7F:9E:95:89:66:16:05:5E:27:B1:77:48:F8
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       03AEE231
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ISpBRBtUh3-elYlmFgVeJ7F3SPg.roa
Signing time:             Tue 28 Jun 2022 06:52:41 +0000
ROA not before:           Tue 28 Jun 2022 06:52:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.157.38.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          45.95.98.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          45.118.249.0/24 maxlen: 24
                          45.152.197.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          193.41.39.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          2a0f:ac00::/29 maxlen: 29
                          2a0f:e1c2::/32 maxlen: 32
                          2a0f:1f80::/29 maxlen: 29
                          2a0f:e940::/29 maxlen: 29
                          2a0c:7884::/32 maxlen: 32
                          2a09:17c0::/29 maxlen: 29
                          2a0f:dac0::/29 maxlen: 29
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:e6c0:fe1::/48 maxlen: 48
                          2a0f:2100:171::/48 maxlen: 48
                          2a0f:e1c0::/32 maxlen: 32
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:7d00:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a0f:6d80::/29 maxlen: 29
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0f:da40::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a12:4ac0::/29 maxlen: 29
                          2a0a:2d00:1::/48 maxlen: 48
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:e6c0:991::/48 maxlen: 48
                          2a0f:ea00::/29 maxlen: 29
                          2a0f:e842::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0c:7883::/32 maxlen: 32
                          2a0e:e980::/29 maxlen: 29
                          2a12:d6c0::/29 maxlen: 29
                          2a0f:a200::/29 maxlen: 29
                          2a0f:7d00:5::/48 maxlen: 48
                          2a0f:df40::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a0f:e6c0:123::/48 maxlen: 48
                          2a0f:a04::/32 maxlen: 32
                          2a0f:1200::/32 maxlen: 32
                          2a0f:7d00:3::/48 maxlen: 48
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:e143::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61792817 (0x3aee231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jun 28 06:52:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=212a41441b54877f9e95896616055e27b17748f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:dd:53:28:99:b0:ff:71:67:b3:a0:d9:37:
                    99:17:b8:f3:7c:b4:63:3d:fb:07:16:41:48:72:8d:
                    7b:ec:f5:38:24:f7:60:52:43:95:03:f6:6c:92:ed:
                    cb:13:ef:47:3e:53:2c:b0:39:62:86:0c:90:6a:f8:
                    63:d2:25:4e:73:e6:f5:cf:76:ae:7a:9e:80:e6:c7:
                    85:66:10:a6:9b:40:9c:50:c1:8d:42:da:ef:96:c7:
                    60:b0:8a:af:62:ca:de:2d:e1:dd:0a:6c:e4:02:3d:
                    0b:42:b2:df:97:32:f8:a7:1f:1f:b1:ff:e2:ab:5d:
                    dd:40:1b:db:07:a3:0f:b8:c0:a0:df:9b:ee:43:e5:
                    b2:cd:f4:71:e2:a8:e4:85:c4:c5:af:c2:8f:d0:48:
                    0a:19:ac:a9:ea:50:93:50:fc:bd:9a:da:da:51:25:
                    09:e4:8a:a9:ec:c0:c4:4d:6a:30:92:01:1c:45:1e:
                    f6:fe:be:b3:41:7f:f2:a7:1f:cc:82:1d:7c:19:6c:
                    a9:9d:14:c3:b7:9a:19:23:32:d5:73:7e:86:e7:f7:
                    0c:e9:1d:24:f2:ff:c6:6d:53:56:93:50:07:31:fc:
                    21:f3:18:fd:72:f6:64:2a:54:ba:b1:ee:db:20:7c:
                    f1:0a:52:8d:ab:89:c4:f2:f6:8f:b7:c4:26:6e:15:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2A:41:44:1B:54:87:7F:9E:95:89:66:16:05:5E:27:B1:77:48:F8
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ISpBRBtUh3-elYlmFgVeJ7F3SPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/24
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.95.98.0/24
                  45.118.249.0/24
                  45.128.77.0/24
                  45.137.41.0/24
                  45.137.85.0-45.137.86.255
                  45.152.197.0/24
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0-45.157.38.255
                  45.158.197.0-45.158.198.255
                  91.212.100.0/24
                  91.212.107.0/24
                  103.229.31.0/24
                  113.30.152.0/22
                  185.136.204.0/24
                  185.164.59.0/24
                  193.39.209.0/24
                  193.41.39.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                IPv6:
                  2a09:17c0::/29
                  2a0a:2d00:1::/48
                  2a0c:7882:1::/48
                  2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:e980::/29
                  2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1200::/32
                  2a0f:1f80::/29
                  2a0f:2100:171::/48
                  2a0f:6d80::/29
                  2a0f:7d00:1::/48
                  2a0f:7d00:3::/48
                  2a0f:7d00:5::/48
                  2a0f:a200::/29
                  2a0f:ac00::/29
                  2a0f:da40::/29
                  2a0f:dac0::/29
                  2a0f:df40::/29
                  2a0f:e143::/32
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e600:1::/48
                  2a0f:e6c0:123::/48
                  2a0f:e6c0:991::/48
                  2a0f:e6c0:fe1::/48
                  2a0f:e842::/32
                  2a0f:e940::/29
                  2a0f:ea00::/29
                  2a12:4ac0::/29
                  2a12:d6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0b:8d:14:95:fb:74:27:80:59:6e:e7:68:5a:96:21:ff:4d:5e:
         6b:db:88:23:11:09:d4:bc:08:9c:b8:35:52:99:da:f2:a2:c4:
         b5:79:24:82:cf:f5:ba:bd:b5:24:eb:bc:24:90:02:d8:66:0d:
         e6:ef:12:fb:92:fd:ba:8e:d0:79:9d:96:8c:a5:b8:68:bd:56:
         44:62:b9:4c:26:58:5c:25:8b:c8:10:9a:be:a4:a2:3e:a4:ce:
         12:cc:8b:f1:0e:0a:fe:26:76:0f:e9:17:e7:ab:92:ab:fa:33:
         0d:e2:82:0a:1c:49:c1:65:d0:32:2c:cc:40:f4:fd:a6:3c:9a:
         3b:5c:35:6e:a3:b8:ef:e8:a3:f1:6a:3b:62:27:72:e1:b9:a7:
         0e:dd:63:b8:5a:1a:aa:70:9e:ae:19:3b:ca:38:07:89:1f:06:
         d0:66:5e:2a:ce:08:5a:39:90:c2:8d:98:c6:be:3e:81:7a:5a:
         b4:da:00:2a:5e:78:0b:18:13:9a:c6:8d:0d:30:b8:84:4c:77:
         18:3f:89:78:62:bb:22:65:30:36:b0:45:2f:df:0a:6e:bc:0a:
         91:c9:1c:35:47:ec:f6:7c:7d:d9:7c:be:d7:92:92:36:91:ac:
         d6:50:d7:5d:1c:a6:ef:4a:49:63:9e:92:97:dc:f7:0f:d3:c8:
         86:c2:30:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:08:05 2025 by rpki-client