Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Qm2zvs7Q2ZibcnuODexhhgA8wBQ.roa
File:                     Qm2zvs7Q2ZibcnuODexhhgA8wBQ.roa (raw, json)
Hash identifier:          /lq0F1uxgChRnzbP1f08fG93HlIZBDsvcLoA8xVlq5U=
Subject key identifier:   42:6D:B3:BE:CE:D0:D9:98:9B:72:7B:8E:0D:EC:61:86:00:3C:C0:14
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0185E602128C28363E29774A1D45937586C6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Qm2zvs7Q2ZibcnuODexhhgA8wBQ.roa
Signing time:             Tue 24 Jan 2023 22:59:33 +0000
ROA not before:           Tue 24 Jan 2023 22:59:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          193.39.208.0/24 maxlen: 24
                          194.33.62.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          45.134.186.0/24 maxlen: 24
                          103.59.40.0/24 maxlen: 24
                          103.59.43.0/24 maxlen: 24
                          103.59.42.0/24 maxlen: 24
                          103.59.41.0/24 maxlen: 24
                          185.214.72.0/24 maxlen: 24
                          193.5.64.0/24 maxlen: 24
                          45.146.181.0/24 maxlen: 24
                          193.39.143.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          45.147.31.0/24 maxlen: 24
                          45.118.249.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          64.226.159.0/24 maxlen: 24
                          64.226.158.0/24 maxlen: 24
                          64.226.157.0/24 maxlen: 24
                          64.226.156.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          103.227.85.0/24 maxlen: 24
                          103.227.84.0/24 maxlen: 24
                          45.146.129.0/24 maxlen: 24
                          103.227.86.0/24 maxlen: 24
                          194.45.34.0/24 maxlen: 24
                          80.253.248.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          91.212.120.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          45.145.59.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          91.233.20.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          45.131.214.0/24 maxlen: 24
                          64.226.55.0/24 maxlen: 24
                          64.226.54.0/24 maxlen: 24
                          91.232.255.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.82.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.130.254.0/24 maxlen: 24
                          209.35.158.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.137.62.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.157.39.0/24 maxlen: 24
                          45.95.98.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          193.41.69.0/24 maxlen: 24
                          193.41.68.0/24 maxlen: 24
                          185.155.202.0/24 maxlen: 24
                          193.41.86.0/24 maxlen: 24
                          193.41.115.0/24 maxlen: 24
                          45.129.125.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          45.13.187.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          167.94.165.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          103.74.77.0/24 maxlen: 24
                          103.74.76.0/24 maxlen: 24
                          85.209.131.0/24 maxlen: 24
                          193.41.38.0/24 maxlen: 24
                          194.41.38.0/24 maxlen: 24
                          2a0f:e540::/32 maxlen: 32
                          2a0f:1480::/29 maxlen: 29
                          2a0f:1f80::/29 maxlen: 29
                          2a0f:ee00::/29 maxlen: 29
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a12:ecc2::/32 maxlen: 32
                          2a0f:e740::/29 maxlen: 29
                          2a0f:9600::/29 maxlen: 29
                          2a0f:3d83::/32 maxlen: 32
                          2a12:ecc3::/32 maxlen: 32
                          2a0f:1580::/29 maxlen: 29
                          2a0f:3940::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e9c0::/29 maxlen: 29
                          2a0e:f200::/48 maxlen: 48
                          2a0f:1200::/32 maxlen: 32
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:dd40::/29 maxlen: 29
                          2a0f:4f80::/48 maxlen: 48
                          2a0f:e1c2::/32 maxlen: 32
                          2a0c:7884::/32 maxlen: 32
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:2700::/29 maxlen: 29
                          2a0f:e1c0::/32 maxlen: 32
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0b:b740::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a0e:f200:2::/48 maxlen: 48
                          2a12:ecc5::/32 maxlen: 32
                          2a0f:ee00::/32 maxlen: 32
                          2a0c:7883::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0f:2300::/29 maxlen: 29
                          2a0c:7880::/32 maxlen: 32
                          2a12:f5c0::/29 maxlen: 29
                          2a0f:7d00:5::/48 maxlen: 48
                          2a0f:df40::/29 maxlen: 29
                          2a0f:3f80::/29 maxlen: 29
                          2a12:ecc7::/32 maxlen: 32
                          2a12:ecc0::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a10:67c0::/29 maxlen: 29
                          2a0f:db40::/29 maxlen: 29
                          2a12:ecc6::/32 maxlen: 32
                          2a0f:e640::/29 maxlen: 29
                          2a0f:a04::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e6:02:12:8c:28:36:3e:29:77:4a:1d:45:93:75:86:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan 24 22:59:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=426db3beced0d9989b727b8e0dec6186003cc014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:c0:25:d7:26:32:37:dc:9a:98:6f:4b:b2:
                    11:ef:01:1f:e6:92:c8:90:4f:d9:7c:9c:82:f8:84:
                    1b:2c:32:09:93:df:33:a9:12:1f:e2:2c:36:9e:b7:
                    65:a7:04:2d:2e:70:3a:e9:61:b2:b9:86:61:e0:c4:
                    57:2f:0b:4e:f9:85:eb:1d:03:ea:68:89:85:aa:56:
                    49:90:bb:28:22:be:6f:00:d6:4b:f1:c9:6e:8e:1c:
                    ff:f2:a5:77:01:3c:90:09:ae:1c:ed:57:4b:e7:e6:
                    99:1b:db:63:ac:f5:46:86:cf:b0:a2:c6:2a:63:e6:
                    e7:7a:ae:14:26:20:8e:10:1b:3b:f0:15:78:07:e2:
                    d0:06:00:3e:91:ba:64:a5:a9:4a:64:b6:34:5d:57:
                    c1:67:24:93:37:8b:a4:55:0b:86:13:b8:e7:6f:69:
                    44:44:4e:4b:b6:21:ba:aa:35:68:c3:73:fc:01:21:
                    3a:71:64:d1:1e:8a:f1:8f:8b:30:ef:c6:af:8c:ca:
                    aa:50:fa:b5:9d:77:78:26:3b:d5:7e:19:3e:22:06:
                    cf:14:75:8b:06:2f:9b:32:09:69:7b:31:fa:8c:69:
                    97:78:80:bc:14:e9:32:84:2b:06:99:8e:6c:95:bd:
                    db:d6:44:c6:81:0e:69:a9:30:3f:37:d5:f8:9a:d3:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6D:B3:BE:CE:D0:D9:98:9B:72:7B:8E:0D:EC:61:86:00:3C:C0:14
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Qm2zvs7Q2ZibcnuODexhhgA8wBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/23
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.95.98.0/24
                  45.118.249.0/24
                  45.128.77.0/24
                  45.129.125.0/24
                  45.130.254.0/24
                  45.131.214.0/24
                  45.134.186.0/24
                  45.137.41.0/24
                  45.137.62.0/24
                  45.137.82.0/24
                  45.137.85.0-45.137.86.255
                  45.145.59.0/24
                  45.146.129.0/24
                  45.146.181.0/24
                  45.147.31.0/24
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0/23
                  45.157.39.0/24
                  45.158.197.0-45.158.198.255
                  64.226.54.0/23
                  64.226.156.0/22
                  80.253.248.0/24
                  85.209.131.0/24
                  91.212.100.0/24
                  91.212.107.0/24
                  91.212.120.0/24
                  91.232.255.0/24
                  91.233.20.0/24
                  103.59.40.0/22
                  103.74.76.0/23
                  103.227.84.0-103.227.86.255
                  103.229.31.0/24
                  113.30.152.0/22
                  167.94.165.0/24
                  185.136.204.0/24
                  185.155.202.0/24
                  185.164.59.0/24
                  185.214.72.0/24
                  193.5.64.0/24
                  193.39.143.0/24
                  193.39.208.0/23
                  193.41.38.0/24
                  193.41.68.0/23
                  193.41.86.0/24
                  193.41.115.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                  194.33.62.0/24
                  194.41.38.0/24
                  194.45.34.0/24
                  209.35.158.0/24
                IPv6:
                  2a0b:b740::/29
                  2a0c:7880::/32
                  2a0c:7882:1::/48
                  2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:f200::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1200::/32
                  2a0f:1480::/29
                  2a0f:1580::/29
                  2a0f:1f80::/29
                  2a0f:2300::/29
                  2a0f:2700::/29
                  2a0f:3940::/29
                  2a0f:3d83::/32
                  2a0f:3f80::/29
                  2a0f:4f80::/48
                  2a0f:7d00:5::/48
                  2a0f:9600::/29
                  2a0f:db40::/29
                  2a0f:dd40::/29
                  2a0f:df40::/29
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e540::/32
                  2a0f:e600:1::/48
                  2a0f:e640::/29
                  2a0f:e740::/29
                  2a0f:e9c0::/29
                  2a0f:ee00::/29
                  2a10:67c0::/29
                  2a12:ecc0::/32
                  2a12:ecc2::/31
                  2a12:ecc5::-2a12:ecc7:ffff:ffff:ffff:ffff:ffff:ffff
                  2a12:f5c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:b4:b7:84:77:3c:66:02:61:d4:37:b3:c1:11:19:34:88:11:
         82:df:75:b6:47:34:21:0e:36:57:e3:d0:c3:99:35:21:75:ec:
         59:7e:05:31:d4:77:14:64:b6:d4:2d:d8:85:59:9e:94:0a:c5:
         51:ed:2e:c4:ec:f4:b2:82:96:32:6d:25:44:ac:96:86:99:0f:
         0a:d3:70:bc:48:94:5f:0e:b6:89:65:57:b6:a2:c2:39:71:85:
         de:6a:83:14:e2:0f:8b:02:00:09:fb:e4:02:72:48:47:5f:df:
         31:28:d0:ae:cb:3a:fd:87:dd:55:43:b8:31:5f:8e:a6:1b:90:
         5a:d4:07:4c:d4:aa:bc:b2:60:fd:e5:4c:cb:5b:d4:dd:a9:7f:
         ec:94:fe:06:8f:30:f7:d5:41:68:eb:e0:c2:f1:a8:a3:97:95:
         0e:23:ae:04:41:ce:40:72:dd:89:a9:24:bb:32:eb:f9:84:ae:
         4f:e5:95:dd:9a:65:95:12:89:d5:8c:c2:55:d3:52:c5:cd:93:
         46:fe:4d:1f:cd:39:f0:0b:29:93:0c:a1:c5:a4:ab:0e:92:4a:
         2f:19:54:0f:d6:2f:2c:9a:6b:87:6b:f8:47:c2:f1:0c:de:ee:
         12:da:4d:ce:04:fc:47:a9:aa:dd:38:3a:a9:99:ee:f7:9b:b3:
         59:07:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:07 2025 by rpki-client