Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YnPRByX2A7XAU7u7z9Yaku9nIN8.roa
File:                     YnPRByX2A7XAU7u7z9Yaku9nIN8.roa (raw, json)
Hash identifier:          HUAbtSt/gUd6VXrXxPGUAYtW90dmMyNhp2T3t5TqMBs=
Subject key identifier:   62:73:D1:07:25:F6:03:B5:C0:53:BB:BB:CF:D6:1A:92:EF:67:20:DF
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       02F599F4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YnPRByX2A7XAU7u7z9Yaku9nIN8.roa
Signing time:             Fri 29 Apr 2022 11:36:48 +0000
ROA not before:           Fri 29 Apr 2022 11:36:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          45.130.253.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.157.38.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          45.95.98.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          193.41.39.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          2a0f:ac00::/29 maxlen: 29
                          2a0f:e1c2::/32 maxlen: 32
                          2a0f:1f80::/29 maxlen: 29
                          2a0f:e940::/29 maxlen: 29
                          2a09:17c0::/29 maxlen: 29
                          2a0f:dac0::/29 maxlen: 29
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:e6c0:fe1::/48 maxlen: 48
                          2a0f:2100:171::/48 maxlen: 48
                          2a0f:e1c0::/32 maxlen: 32
                          2a0f:a03::/32 maxlen: 32
                          2a0f:da40::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:e6c0:991::/48 maxlen: 48
                          2a0f:e842::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0e:e980::/29 maxlen: 29
                          2a0f:a200::/29 maxlen: 29
                          2a0f:df40::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a0f:e6c0:123::/48 maxlen: 48
                          2a0f:a04::/32 maxlen: 32
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:e143::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49650164 (0x2f599f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Apr 29 11:36:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6273d10725f603b5c053bbbbcfd61a92ef6720df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:af:97:ec:74:aa:d7:7c:75:8f:fa:f2:53:2f:
                    a4:23:3e:50:44:c8:89:0a:ef:05:25:f5:9b:e3:8b:
                    b7:24:21:e3:95:84:f9:85:1b:59:89:6d:0c:d9:c5:
                    30:2f:0f:aa:12:2f:0d:bc:59:7b:6f:98:99:79:e3:
                    c8:bb:8d:6a:c3:47:24:9f:a2:42:f8:34:e9:66:6d:
                    a5:e2:bd:85:02:77:8a:a2:5f:55:bc:77:a1:57:a0:
                    34:c4:d0:3a:2c:d8:d0:16:bf:65:8c:7a:8f:d6:f0:
                    8d:af:c6:0f:2a:64:a6:95:8e:76:91:3d:13:df:56:
                    0d:53:2d:75:69:0b:b3:ee:c5:53:f0:7f:26:07:6a:
                    73:4e:a2:1b:1f:cd:91:f0:a2:24:77:9c:3a:9a:64:
                    cd:7e:2b:de:b6:99:85:bc:20:a2:ea:3d:38:6f:b2:
                    11:f5:f2:0e:b0:97:30:52:46:03:5c:12:67:24:a7:
                    b7:1d:41:a3:28:ab:05:37:20:ae:01:b1:94:36:17:
                    95:16:20:a5:af:5d:c7:ad:3f:6f:b9:69:db:25:d7:
                    5e:e6:1f:e4:b4:fc:9a:b5:ef:3f:c7:2a:79:88:87:
                    fb:d7:cb:75:8f:b8:7e:08:75:54:26:55:30:13:d5:
                    08:bc:25:6f:67:93:80:f1:20:d1:d2:57:d8:0d:07:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:73:D1:07:25:F6:03:B5:C0:53:BB:BB:CF:D6:1A:92:EF:67:20:DF
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YnPRByX2A7XAU7u7z9Yaku9nIN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/24
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.95.98.0/24
                  45.128.77.0/24
                  45.130.253.0/24
                  45.137.41.0/24
                  45.137.85.0-45.137.86.255
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.37.0-45.157.38.255
                  45.158.197.0-45.158.198.255
                  91.212.100.0/24
                  91.212.107.0/24
                  103.229.31.0/24
                  113.30.152.0/22
                  185.136.204.0/24
                  185.164.59.0/24
                  193.39.209.0/24
                  193.41.39.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                IPv6:
                  2a09:17c0::/29
                  2a0c:7882:1::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:e980::/29
                  2a0e:f200:2::/48
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1f80::/29
                  2a0f:2100:171::/48
                  2a0f:a200::/29
                  2a0f:ac00::/29
                  2a0f:da40::/29
                  2a0f:dac0::/29
                  2a0f:df40::/29
                  2a0f:e143::/32
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e600:1::/48
                  2a0f:e6c0:123::/48
                  2a0f:e6c0:991::/48
                  2a0f:e6c0:fe1::/48
                  2a0f:e842::/32
                  2a0f:e940::/29

    Signature Algorithm: sha256WithRSAEncryption
         96:90:98:5f:a8:c9:a4:7c:72:6d:95:b6:e2:10:26:cc:48:b6:
         bc:12:38:fd:45:fa:b0:9f:11:35:4b:44:6c:da:36:18:a6:50:
         97:b7:97:ef:98:80:e6:ec:2a:77:b9:97:f2:cb:14:67:a0:5a:
         d0:ae:f2:3e:70:d3:5d:18:2a:01:69:32:c8:83:96:c1:55:1c:
         18:48:f5:bd:9a:ea:c7:d0:f8:a3:ed:c0:89:0a:ed:d7:28:9e:
         4f:2f:50:96:f8:a8:18:57:e8:41:48:17:d6:36:79:5a:4a:76:
         a6:a5:64:7b:01:db:79:37:bd:e7:3b:3f:3a:a8:f3:b4:61:c1:
         df:5f:c6:77:aa:5e:7a:6d:a1:96:31:f3:2a:88:30:03:d3:cc:
         92:86:cc:4b:9e:22:4f:90:a4:b5:c9:1c:31:06:00:80:6f:f7:
         09:d5:6e:8c:a7:3c:ed:de:39:ea:16:20:eb:58:fe:c7:fe:b9:
         9e:0a:8a:4d:7b:ff:88:1c:c1:68:34:eb:f3:6b:f2:6b:c7:10:
         c6:60:b8:24:e9:e8:aa:35:ca:3d:b2:ea:84:7d:38:09:d3:b9:
         2c:cf:54:2a:8f:f7:1e:e3:47:43:8f:4d:5f:ac:9a:c7:d5:1b:
         c9:42:8f:e7:bd:6b:f1:a1:6b:45:31:0d:7c:e3:a0:8f:f0:b6:
         71:24:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:32 2025 by rpki-client