Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TK5FlQJ6E5d7Hc_e-OB6TeQoLdo.roa
File:                     TK5FlQJ6E5d7Hc_e-OB6TeQoLdo.roa (raw, json)
Hash identifier:          e3JiE05QaCCMPyFGM/G5c0YcQjjklftLxPc/MKT+m2U=
Subject key identifier:   4C:AE:45:95:02:7A:13:97:7B:1D:CF:DE:F8:E0:7A:4D:E4:28:2D:DA
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       03B5203E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TK5FlQJ6E5d7Hc_e-OB6TeQoLdo.roa
Signing time:             Wed 29 Jun 2022 07:19:51 +0000
ROA not before:           Wed 29 Jun 2022 07:19:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.157.38.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          45.95.98.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          45.118.249.0/24 maxlen: 24
                          45.152.197.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          193.41.39.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          2a0f:ac00::/29 maxlen: 29
                          2a0f:e1c2::/32 maxlen: 32
                          2a0f:1f80::/29 maxlen: 29
                          2a0f:e940::/29 maxlen: 29
                          2a0c:7884::/32 maxlen: 32
                          2a09:17c0::/29 maxlen: 29
                          2a0f:dac0::/29 maxlen: 29
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:e6c0:fe1::/48 maxlen: 48
                          2a0f:2100:171::/48 maxlen: 48
                          2a0f:e1c0::/32 maxlen: 32
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:7d00:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a0f:6d80::/29 maxlen: 29
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0f:da40::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a12:4ac0::/29 maxlen: 29
                          2a0a:2d00:1::/48 maxlen: 48
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:e6c0:991::/48 maxlen: 48
                          2a0f:ea00::/29 maxlen: 29
                          2a0e:2440::/29 maxlen: 29
                          2a0c:7883::/32 maxlen: 32
                          2a0e:e980::/29 maxlen: 29
                          2a12:d6c0::/29 maxlen: 29
                          2a0f:a200::/29 maxlen: 29
                          2a0f:7d00:5::/48 maxlen: 48
                          2a0f:df40::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a0f:e6c0:123::/48 maxlen: 48
                          2a0f:a04::/32 maxlen: 32
                          2a0f:1200::/32 maxlen: 32
                          2a0f:7d00:3::/48 maxlen: 48
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:e143::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62201918 (0x3b5203e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jun 29 07:19:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4cae4595027a13977b1dcfdef8e07a4de4282dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:89:80:21:08:76:9a:62:24:63:7f:d4:d5:05:
                    60:97:64:76:bf:0b:c0:fe:32:7a:69:08:f9:1c:9c:
                    90:61:b1:36:87:66:2f:17:ac:54:5b:d8:5d:cb:1e:
                    fb:e4:ed:2f:06:0a:b5:ca:fa:08:70:10:81:99:8a:
                    0e:0c:3f:a4:a7:01:49:3b:5f:36:79:5b:be:de:ae:
                    28:02:31:63:d0:fc:aa:b6:18:ca:36:4b:fd:d4:dc:
                    93:26:be:f3:80:3f:b4:39:ac:ce:43:96:51:db:8f:
                    64:be:ca:29:33:8a:d0:de:9d:07:9a:3e:ff:90:47:
                    53:f5:96:6c:86:50:c8:1a:86:6c:0b:62:aa:3f:26:
                    86:37:6e:a5:c3:5e:da:92:95:d7:8c:e5:ac:aa:bc:
                    eb:73:1d:51:38:f8:b1:9e:6c:79:49:95:95:45:53:
                    22:c1:dc:0b:ec:e9:71:c4:d4:e3:c2:7e:7c:c7:ca:
                    7c:16:ba:f7:5a:d0:2b:03:01:c9:f5:cd:9a:fe:fe:
                    e1:15:d4:a2:dd:f7:c2:49:84:58:8a:7c:fe:19:cc:
                    d1:43:33:7a:65:05:61:d1:99:2e:a2:19:43:f9:49:
                    29:8f:5f:9a:40:25:7d:76:59:83:15:24:d4:76:6a:
                    b7:dd:af:9e:ff:f8:80:35:cb:fd:36:3d:af:2c:29:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AE:45:95:02:7A:13:97:7B:1D:CF:DE:F8:E0:7A:4D:E4:28:2D:DA
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TK5FlQJ6E5d7Hc_e-OB6TeQoLdo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/24
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.95.98.0/24
                  45.118.249.0/24
                  45.128.77.0/24
                  45.137.41.0/24
                  45.137.85.0-45.137.86.255
                  45.152.197.0/24
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0-45.157.38.255
                  45.158.197.0-45.158.198.255
                  91.212.100.0/24
                  91.212.107.0/24
                  103.229.31.0/24
                  113.30.152.0/22
                  185.136.204.0/24
                  185.164.59.0/24
                  193.39.209.0/24
                  193.41.39.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                IPv6:
                  2a09:17c0::/29
                  2a0a:2d00:1::/48
                  2a0c:7882:1::/48
                  2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:e980::/29
                  2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1200::/32
                  2a0f:1f80::/29
                  2a0f:2100:171::/48
                  2a0f:6d80::/29
                  2a0f:7d00:1::/48
                  2a0f:7d00:3::/48
                  2a0f:7d00:5::/48
                  2a0f:a200::/29
                  2a0f:ac00::/29
                  2a0f:da40::/29
                  2a0f:dac0::/29
                  2a0f:df40::/29
                  2a0f:e143::/32
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e600:1::/48
                  2a0f:e6c0:123::/48
                  2a0f:e6c0:991::/48
                  2a0f:e6c0:fe1::/48
                  2a0f:e940::/29
                  2a0f:ea00::/29
                  2a12:4ac0::/29
                  2a12:d6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         01:31:65:bf:22:78:98:e8:c5:90:e4:80:14:6f:99:5e:80:a7:
         ac:c6:26:e0:4e:6a:70:f1:9d:9c:18:78:35:b2:0d:b6:6d:50:
         ce:44:77:30:a1:8c:d2:c0:f1:cf:5e:12:7c:21:90:f2:e6:8d:
         d6:c5:96:0a:36:e9:02:5b:fb:0a:06:60:7a:21:cf:4f:ca:6d:
         53:ad:51:21:99:d0:1f:04:b5:30:74:7b:6b:d5:64:95:e1:8f:
         dc:e9:c8:ab:78:ba:6d:ed:ab:93:9d:cb:45:44:e9:58:ef:fe:
         3e:e0:79:cc:dd:8c:8e:e1:9d:cc:46:12:aa:06:c2:55:cb:f5:
         a2:aa:4f:0f:56:bc:a5:52:79:79:e4:79:01:92:04:3d:56:ce:
         17:0d:09:98:5b:9c:d8:69:ed:f9:9c:a2:d5:4e:61:47:fa:d8:
         87:0f:6b:02:9d:bc:bf:aa:7c:78:a3:f3:75:47:0c:14:de:32:
         ab:b2:5a:ab:55:f4:ed:13:03:fd:ae:53:c1:8f:39:1b:1d:67:
         32:dd:b5:59:c3:9f:7a:14:0a:7a:eb:a8:23:9a:b2:3e:28:36:
         69:63:62:2c:43:36:6b:3e:22:87:79:10:5f:30:5c:9d:8b:0a:
         2c:fb:aa:d7:94:6b:e2:ad:7f:84:6f:1f:f2:ee:1c:25:e9:8c:
         53:b6:d0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:31 2025 by rpki-client