Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SWzNCMM8PJ4ThWNlQs-Vhuf-_HA.roa
File:                     SWzNCMM8PJ4ThWNlQs-Vhuf-_HA.roa (raw, json)
Hash identifier:          FINMRuQqsVaxEYj8Z3yWbbVZtbMVvp/e+o4y/iWYzZo=
Subject key identifier:   49:6C:CD:08:C3:3C:3C:9E:13:85:63:65:42:CF:95:86:E7:FE:FC:70
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       032A6EBA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SWzNCMM8PJ4ThWNlQs-Vhuf-_HA.roa
Signing time:             Mon 16 May 2022 08:05:29 +0000
ROA not before:           Mon 16 May 2022 08:05:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.157.38.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          45.95.98.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          193.41.39.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          2a0f:ac00::/29 maxlen: 29
                          2a0f:e1c2::/32 maxlen: 32
                          2a0f:1f80::/29 maxlen: 29
                          2a0f:e940::/29 maxlen: 29
                          2a09:17c0::/29 maxlen: 29
                          2a0f:dac0::/29 maxlen: 29
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:e6c0:fe1::/48 maxlen: 48
                          2a0f:2100:171::/48 maxlen: 48
                          2a0f:e1c0::/32 maxlen: 32
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a0f:da40::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:e6c0:991::/48 maxlen: 48
                          2a0f:e842::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0c:7883::/32 maxlen: 32
                          2a0e:e980::/29 maxlen: 29
                          2a0f:a200::/29 maxlen: 29
                          2a0f:df40::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a0f:e6c0:123::/48 maxlen: 48
                          2a0f:a04::/32 maxlen: 32
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:e143::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53112506 (0x32a6eba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: May 16 08:05:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=496ccd08c33c3c9e1385636542cf9586e7fefc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:16:9d:9c:6a:c6:8b:ba:e3:cf:d8:ad:c9:
                    66:30:5c:1e:35:2d:30:a0:36:94:c1:c7:fe:f0:56:
                    92:e9:29:37:80:5b:fc:30:cc:54:1d:ca:d5:a8:f8:
                    f2:86:95:0c:e4:8e:b9:fb:78:1a:93:4d:07:90:f8:
                    10:96:2a:77:3a:b6:43:d9:4a:70:49:b2:37:7d:3c:
                    65:ca:b2:08:8e:fb:d9:f6:cf:34:95:1e:c2:14:9d:
                    ba:25:79:30:2d:a4:5e:28:98:b1:f3:fe:ef:cc:39:
                    2f:d2:f5:39:e8:c5:60:e0:9f:93:0f:48:d2:87:7e:
                    41:95:e7:7a:08:4b:ac:c4:49:c1:4e:f0:21:cb:82:
                    01:c1:22:e5:31:62:89:fe:52:f3:68:31:b7:11:14:
                    68:bb:45:fd:0b:39:77:aa:23:6b:6c:28:01:5c:58:
                    0d:e2:10:b4:f5:f4:6e:3e:ae:4f:46:c2:53:ab:1d:
                    1c:64:2c:88:a5:d3:e9:ef:b5:3f:af:c3:63:2a:07:
                    7f:0c:d8:26:bb:1f:41:12:a0:0c:8e:7f:33:50:da:
                    c6:74:d9:a1:01:3d:1f:e6:d1:91:93:35:e3:fb:aa:
                    f6:06:26:7c:ed:67:7c:35:53:2b:07:7f:12:11:cf:
                    ee:e3:fe:a8:48:f0:41:1b:a2:09:d1:82:31:c1:85:
                    e6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6C:CD:08:C3:3C:3C:9E:13:85:63:65:42:CF:95:86:E7:FE:FC:70
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SWzNCMM8PJ4ThWNlQs-Vhuf-_HA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/24
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.95.98.0/24
                  45.128.77.0/24
                  45.137.41.0/24
                  45.137.85.0-45.137.86.255
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0-45.157.38.255
                  45.158.197.0-45.158.198.255
                  91.212.100.0/24
                  91.212.107.0/24
                  103.229.31.0/24
                  113.30.152.0/22
                  185.136.204.0/24
                  185.164.59.0/24
                  193.39.209.0/24
                  193.41.39.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                IPv6:
                  2a09:17c0::/29
                  2a0c:7882:1::/48
                  2a0c:7883::/32
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:e980::/29
                  2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1f80::/29
                  2a0f:2100:171::/48
                  2a0f:a200::/29
                  2a0f:ac00::/29
                  2a0f:da40::/29
                  2a0f:dac0::/29
                  2a0f:df40::/29
                  2a0f:e143::/32
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e600:1::/48
                  2a0f:e6c0:123::/48
                  2a0f:e6c0:991::/48
                  2a0f:e6c0:fe1::/48
                  2a0f:e842::/32
                  2a0f:e940::/29

    Signature Algorithm: sha256WithRSAEncryption
         17:87:b1:4a:ed:0c:7b:12:17:5c:a8:0e:0f:9f:d1:89:f6:53:
         80:aa:76:3b:cb:4d:d6:af:d7:14:bd:bf:a4:25:58:53:29:f8:
         46:cf:06:b3:4a:11:b4:0c:7a:d8:2b:1b:d1:c4:94:9d:dc:de:
         47:17:65:ae:98:37:9b:5a:ce:27:fb:d1:d2:cd:7b:bf:85:f4:
         ac:80:a1:fa:d7:c5:25:81:e1:bf:23:28:16:ca:c5:8f:77:6a:
         8d:5d:ad:34:3a:c3:c6:e1:ef:9c:5e:06:d4:6a:a6:1f:0d:55:
         e6:c7:11:13:31:31:d2:8e:a6:fc:a3:24:ce:1b:12:6e:51:bd:
         43:41:b4:62:ed:d1:54:93:fd:f8:76:7b:c5:6e:d9:ef:36:f8:
         61:37:95:e9:02:a2:d0:ae:44:fe:43:eb:7b:f3:cb:ac:76:0f:
         86:d1:ae:72:93:d2:64:38:f2:dd:e7:6b:1e:ef:73:c6:b2:19:
         6e:ce:5b:88:db:3f:97:5d:44:82:bb:28:88:ee:da:0f:cf:1b:
         b0:e7:50:a7:bc:2c:27:86:ef:63:dc:47:c7:24:49:16:46:fd:
         cf:ff:18:29:b5:6b:ac:5d:f0:96:da:ce:b3:96:d6:be:c6:65:
         84:da:14:12:bc:77:13:c5:e6:82:ee:e3:12:bc:4f:08:cf:23:
         46:43:e0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:45 2025 by rpki-client