Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MFjsbEDGA-dKYr_KQrznWsa0Fac.roa
File:                     MFjsbEDGA-dKYr_KQrznWsa0Fac.roa (raw, json)
Hash identifier:          sRV+HUAtff28U28iRJW+3tFpVVW1hmOUS1NUNEn5gsk=
Subject key identifier:   30:58:EC:6C:40:C6:03:E7:4A:62:BF:CA:42:BC:E7:5A:C6:B4:15:A7
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0187279CBF0B5C077CFF2F2A23DA2AA29186
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MFjsbEDGA-dKYr_KQrznWsa0Fac.roa
Signing time:             Tue 28 Mar 2023 09:46:36 +0000
ROA not before:           Tue 28 Mar 2023 09:46:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          193.39.208.0/24 maxlen: 24
                          194.33.62.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          45.154.229.0/24 maxlen: 24
                          45.134.186.0/24 maxlen: 24
                          103.59.40.0/24 maxlen: 24
                          103.59.43.0/24 maxlen: 24
                          103.59.42.0/24 maxlen: 24
                          103.59.41.0/24 maxlen: 24
                          45.92.246.0/24 maxlen: 24
                          185.214.72.0/24 maxlen: 24
                          193.5.64.0/24 maxlen: 24
                          45.146.181.0/24 maxlen: 24
                          193.39.143.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          45.147.31.0/24 maxlen: 24
                          45.118.249.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          64.226.159.0/24 maxlen: 24
                          64.226.158.0/24 maxlen: 24
                          64.226.157.0/24 maxlen: 24
                          64.226.156.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          45.146.88.0/24 maxlen: 24
                          103.227.85.0/24 maxlen: 24
                          103.227.84.0/24 maxlen: 24
                          45.146.129.0/24 maxlen: 24
                          103.227.86.0/24 maxlen: 24
                          194.45.34.0/24 maxlen: 24
                          80.253.248.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          91.212.120.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          45.145.59.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          91.233.20.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          45.131.214.0/24 maxlen: 24
                          64.226.55.0/24 maxlen: 24
                          64.226.54.0/24 maxlen: 24
                          91.232.255.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.130.254.0/24 maxlen: 24
                          209.35.158.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.137.62.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.157.39.0/24 maxlen: 24
                          45.95.98.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          193.41.69.0/24 maxlen: 24
                          193.41.68.0/24 maxlen: 24
                          185.155.202.0/24 maxlen: 24
                          193.41.86.0/24 maxlen: 24
                          193.41.115.0/24 maxlen: 24
                          45.129.125.0/24 maxlen: 24
                          45.141.178.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          45.13.187.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          167.94.165.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          103.74.77.0/24 maxlen: 24
                          103.74.76.0/24 maxlen: 24
                          85.209.131.0/24 maxlen: 24
                          193.41.38.0/24 maxlen: 24
                          194.41.38.0/24 maxlen: 24
                          2a0a:2d00:3::/48 maxlen: 48
                          2a0f:e540::/32 maxlen: 32
                          2a0f:1480::/29 maxlen: 29
                          2a0f:1f80::/29 maxlen: 29
                          2a13:cc0::/29 maxlen: 29
                          2a0f:e040::/29 maxlen: 29
                          2a0f:ee00::/29 maxlen: 29
                          2a11:4e80::/29 maxlen: 29
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a0e:5800::/29 maxlen: 29
                          2a12:ecc2::/32 maxlen: 32
                          2a0f:e740::/29 maxlen: 29
                          2a0f:9600::/29 maxlen: 29
                          2a11:8880::/29 maxlen: 29
                          2a0f:3d83::/32 maxlen: 32
                          2a12:ecc3::/32 maxlen: 32
                          2a0f:1580::/29 maxlen: 29
                          2a0f:3940::/29 maxlen: 29
                          2a0f:e6c0::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e7c2::/32 maxlen: 32
                          2a0f:e9c0::/29 maxlen: 29
                          2a0e:f200::/48 maxlen: 48
                          2a0f:1200::/32 maxlen: 32
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:dd40::/29 maxlen: 29
                          2a0f:4f80::/48 maxlen: 48
                          2a0f:e1c2::/32 maxlen: 32
                          2a11:5200::/29 maxlen: 29
                          2a0e:2240:2::/48 maxlen: 48
                          2a06:1180:3::/48 maxlen: 48
                          2a0f:2700::/29 maxlen: 29
                          2a0f:e1c0::/32 maxlen: 32
                          2a0e:15c0:2::/48 maxlen: 48
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0f:e1c7::/32 maxlen: 32
                          2a0e:f200:2::/48 maxlen: 48
                          2a12:ecc5::/32 maxlen: 32
                          2a0f:ee00::/32 maxlen: 32
                          2a0c:7883::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0f:2300::/29 maxlen: 29
                          2a0c:7880::/32 maxlen: 32
                          2a12:f5c0::/29 maxlen: 29
                          2a0f:df40::/29 maxlen: 29
                          2a0f:3f80::/29 maxlen: 29
                          2a12:ecc7::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a0f:3d80:2::/48 maxlen: 48
                          2a10:67c0::/29 maxlen: 29
                          2a0e:15c0:4::/48 maxlen: 48
                          2a0f:db40::/29 maxlen: 29
                          2a12:ecc6::/32 maxlen: 32
                          2a0f:e640::/29 maxlen: 29
                          2a0f:a04::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:27:9c:bf:0b:5c:07:7c:ff:2f:2a:23:da:2a:a2:91:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Mar 28 09:46:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3058ec6c40c603e74a62bfca42bce75ac6b415a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:5f:fc:d2:02:bf:ba:72:85:3c:be:54:fa:
                    02:93:d4:44:b2:66:cb:af:68:da:92:47:d7:ba:35:
                    7a:4d:6d:28:e2:9a:eb:05:0e:5f:23:87:2e:95:d3:
                    e2:53:23:ae:61:d8:02:61:3c:77:02:3a:c1:d5:86:
                    cb:50:8e:97:96:b1:d6:7e:90:75:ed:54:e3:b4:e9:
                    0b:34:70:61:29:bd:ff:3c:2a:ec:d4:d1:1f:1b:ff:
                    d7:42:bf:74:7c:21:35:70:6b:2c:0a:66:a3:f0:4f:
                    b4:73:2d:71:04:08:fa:1b:73:97:ee:ab:c3:bc:fc:
                    b9:8d:dd:26:73:57:2b:fc:4f:f3:65:45:bc:d1:dc:
                    55:39:a0:62:c4:a8:35:e4:9e:76:17:d9:4e:8b:5c:
                    be:26:25:88:84:9d:80:ef:6e:8e:27:c8:09:67:b9:
                    02:b3:62:8c:84:11:eb:34:d1:5f:8e:5e:8e:99:c8:
                    de:d1:1b:1d:ba:72:21:42:5b:c5:e4:d6:61:27:a3:
                    af:2d:c3:c1:54:3c:95:20:da:cd:5a:d4:e8:92:ac:
                    00:e1:3c:0e:1b:db:36:73:df:1c:44:94:a8:73:fd:
                    45:78:b7:e7:e8:f9:2b:3a:06:b3:5b:44:b6:db:ce:
                    72:e9:0d:78:39:ea:aa:c9:29:a1:93:ab:16:ec:ec:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:58:EC:6C:40:C6:03:E7:4A:62:BF:CA:42:BC:E7:5A:C6:B4:15:A7
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MFjsbEDGA-dKYr_KQrznWsa0Fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/23
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.92.246.0/24
                  45.95.98.0/24
                  45.118.249.0/24
                  45.128.77.0/24
                  45.129.125.0/24
                  45.130.254.0/24
                  45.131.214.0/24
                  45.134.186.0/24
                  45.137.41.0/24
                  45.137.62.0/24
                  45.137.85.0-45.137.86.255
                  45.141.178.0/24
                  45.145.59.0/24
                  45.146.88.0/24
                  45.146.129.0/24
                  45.146.181.0/24
                  45.147.31.0/24
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.229.0-45.154.231.255
                  45.157.36.0/23
                  45.157.39.0/24
                  45.158.197.0-45.158.198.255
                  64.226.54.0/23
                  64.226.156.0/22
                  80.253.248.0/24
                  85.209.131.0/24
                  91.212.100.0/24
                  91.212.107.0/24
                  91.212.120.0/24
                  91.232.255.0/24
                  91.233.20.0/24
                  103.59.40.0/22
                  103.74.76.0/23
                  103.227.84.0-103.227.86.255
                  103.229.31.0/24
                  113.30.152.0/22
                  167.94.165.0/24
                  185.136.204.0/24
                  185.155.202.0/24
                  185.164.59.0/24
                  185.214.72.0/24
                  193.5.64.0/24
                  193.39.143.0/24
                  193.39.208.0/23
                  193.41.38.0/24
                  193.41.68.0/23
                  193.41.86.0/24
                  193.41.115.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                  194.33.62.0/24
                  194.41.38.0/24
                  194.45.34.0/24
                  209.35.158.0/24
                IPv6:
                  2a06:1180:3::/48
                  2a0a:2d00:3::/48
                  2a0c:7880::/32
                  2a0c:7882:1::/48
                  2a0c:7883::/32
                  2a0e:15c0:2::/48
                  2a0e:15c0:4::/48
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:5800::/29
                  2a0e:f200::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1200::/32
                  2a0f:1480::/29
                  2a0f:1580::/29
                  2a0f:1f80::/29
                  2a0f:2300::/29
                  2a0f:2700::/29
                  2a0f:3940::/29
                  2a0f:3d80:2::/48
                  2a0f:3d83::/32
                  2a0f:3f80::/29
                  2a0f:4f80::/48
                  2a0f:9600::/29
                  2a0f:db40::/29
                  2a0f:dd40::/29
                  2a0f:df40::/29
                  2a0f:e040::/29
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e540::/32
                  2a0f:e600:1::/48
                  2a0f:e640::/29
                  2a0f:e6c0::/29
                  2a0f:e740::/29
                  2a0f:e7c2::/32
                  2a0f:e9c0::/29
                  2a0f:ee00::/29
                  2a10:67c0::/29
                  2a11:4e80::/29
                  2a11:5200::/29
                  2a11:8880::/29
                  2a12:ecc2::/31
                  2a12:ecc5::-2a12:ecc7:ffff:ffff:ffff:ffff:ffff:ffff
                  2a12:f5c0::/29
                  2a13:cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:e6:60:a4:5e:4b:f2:cf:e7:2c:cf:5d:c6:57:67:bf:95:03:
         6d:dc:15:76:e5:43:e6:a9:de:6d:ed:c5:12:39:1b:90:57:86:
         6a:c9:63:e8:3d:08:9a:26:d1:49:7d:1b:6c:c8:5c:e6:b4:df:
         97:a4:e2:5f:ed:85:57:20:a0:f7:5a:b3:ab:f0:7e:7e:bc:d6:
         35:6f:ba:79:5c:54:7a:50:82:18:83:c4:2c:98:92:b1:9a:bf:
         54:a3:17:63:4e:af:c2:02:48:f2:f9:a8:2c:b6:ce:b0:1f:c0:
         d9:2f:b0:f7:53:63:46:1f:5a:f0:fe:28:10:89:45:67:c0:83:
         91:37:6e:8c:2d:e9:a6:f8:69:69:44:18:b6:93:f9:be:c8:49:
         f8:ea:95:75:ba:a3:72:f6:29:f1:20:52:8c:cf:c4:b2:82:68:
         c6:6e:df:d7:37:57:96:06:b1:82:1c:f5:ce:53:3b:9e:d3:05:
         a9:24:b0:73:a3:75:a4:b6:f1:39:f4:f4:93:38:5c:5c:a2:34:
         55:a9:d7:0b:88:0d:0e:91:15:44:8f:44:1f:51:a3:24:81:da:
         bb:9d:30:d6:2e:3d:a3:ab:db:38:a4:99:e9:8a:cf:2c:d3:f4:
         21:65:c4:a6:29:cb:c2:52:bf:96:89:4c:49:b8:8a:4d:41:e4:
         ed:29:52:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:12:51 2025 by rpki-client