Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/f5HGlmWFAzIXC77XOAnPqmHVTrI.roa
File:                     f5HGlmWFAzIXC77XOAnPqmHVTrI.roa (raw, json)
Hash identifier:          /hb1CxRjs0nF3x4CFQmxfctqX9WENjOhlJ2oqkHomT0=
Subject key identifier:   7F:91:C6:96:65:85:03:32:17:0B:BE:D7:38:09:CF:AA:61:D5:4E:B2
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       018C1B1EA25094EFCC2B9172FBCCC0D96705
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/f5HGlmWFAzIXC77XOAnPqmHVTrI.roa
Signing time:             Wed 29 Nov 2023 12:47:21 +0000
ROA not before:           Wed 29 Nov 2023 12:47:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     30633
IP address blocks:        193.164.199.0/24 maxlen: 24
                          45.129.127.0/24 maxlen: 24
                          45.135.37.0/24 maxlen: 24
                          2a0f:1e81:92e8::/48 maxlen: 48
                          2a0f:1e00:987::/48 maxlen: 48
                          2a0e:c780::/32 maxlen: 32
                          2a13:9680::/29 maxlen: 29
                          2a12:ac40::/48 maxlen: 48
                          2a0f:e940::/29 maxlen: 29
                          2a0e:f201:1::/48 maxlen: 48
                          2a0f:1e01:1::/48 maxlen: 48
                          2a06:5280::/29 maxlen: 29
                          2a13:fd00::/29 maxlen: 29
                          2a13:9080::/29 maxlen: 29
                          2a0f:1e81:cdae::/48 maxlen: 48
                          2a0e:1a80::/32 maxlen: 32
                          2a0f:1e81:1293::/48 maxlen: 48
                          2a13:2b40::/29 maxlen: 29
                          2a0f:2f80::/29 maxlen: 29
                          2a13:8200::/29 maxlen: 29
                          2a13:9280::/29 maxlen: 29
                          2a0f:1e81:a3d0::/48 maxlen: 48
                          2a0f:e540::/29 maxlen: 29
                          2a12:ac40:f::/48 maxlen: 48
                          2a0f:ea42::/32 maxlen: 32
                          2a0f:2100::/29 maxlen: 29
                          2a0c:4880::/29 maxlen: 29
                          2a12:ecc2::/32 maxlen: 32
                          2a0f:1e00:123::/48 maxlen: 48
                          2a13:1940::/29 maxlen: 29
                          2a0f:3d82::/32 maxlen: 32
                          2a13:9580::/29 maxlen: 29
                          2a0f:3d83::/32 maxlen: 32
                          2a0f:1e81:4319::/48 maxlen: 48
                          2a0f:1e00:456::/48 maxlen: 48
                          2a0f:a00::/32 maxlen: 32
                          2a13:4900::/29 maxlen: 29
                          2a13:fc00::/29 maxlen: 29
                          2a13:18c0:1::/48 maxlen: 48
                          2a0f:3d80:123::/48 maxlen: 48
                          2a0c:9247:1::/48 maxlen: 48
                          2a0f:1e81:2::/48 maxlen: 48
                          2a0f:2e80::/29 maxlen: 29
                          2a0f:3d87::/32 maxlen: 32
                          2a10:67c0::/29 maxlen: 29
                          2a0f:1e00:abc::/48 maxlen: 48
                          2a10:6d40::/29 maxlen: 29
                          2a0f:7d01::/32 maxlen: 32
                          2a12:ac41::/32 maxlen: 32
                          2a0f:a01::/32 maxlen: 32
                          2a0f:1e00:def9::/48 maxlen: 48
                          2a13:18c3::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1b:1e:a2:50:94:ef:cc:2b:91:72:fb:cc:c0:d9:67:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Nov 29 12:47:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f91c69665850332170bbed73809cfaa61d54eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:11:43:81:00:7c:a9:59:6b:53:fd:e3:67:
                    ba:8d:68:68:92:e8:4e:06:ed:71:5d:eb:38:10:6a:
                    91:68:b2:24:c9:a3:c5:31:cd:d3:3e:b7:fb:47:07:
                    55:8a:6b:a8:e7:78:ef:8c:0d:59:77:00:98:69:b7:
                    21:2f:17:97:35:2b:a0:10:0f:38:b1:8b:f5:9c:bb:
                    02:f0:c2:da:64:7e:9d:d7:73:9a:7e:6e:03:f8:e8:
                    26:62:72:db:df:f3:b0:5c:7e:d8:3b:1c:ef:cf:20:
                    31:38:65:72:e1:aa:17:98:f1:82:de:92:47:6d:6d:
                    3d:f7:ba:19:ba:ae:fb:50:9a:6b:e6:4c:51:f6:79:
                    99:35:33:3c:e6:1f:0e:b8:b1:44:76:ac:c3:ed:31:
                    69:c9:ec:7c:88:4e:79:b8:cd:4b:ee:4e:81:f8:df:
                    f3:af:ed:4e:f2:58:eb:41:a2:22:d7:70:d9:d5:52:
                    a4:34:74:4d:b9:de:13:d8:7d:79:aa:ae:53:45:60:
                    62:85:a3:0e:b3:a7:ee:a1:d1:89:b0:f7:4e:28:7c:
                    6f:a1:b7:3e:13:26:d6:2a:3c:44:4b:ae:f4:1a:44:
                    0a:04:da:f1:67:1b:d0:90:6b:da:a7:16:1f:96:d3:
                    57:bc:27:97:34:fd:75:3c:78:46:d0:79:d0:c2:f5:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:91:C6:96:65:85:03:32:17:0B:BE:D7:38:09:CF:AA:61:D5:4E:B2
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/f5HGlmWFAzIXC77XOAnPqmHVTrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.127.0/24
                  45.135.37.0/24
                  193.164.199.0/24
                IPv6:
                  2a06:5280::/29
                  2a0c:4880::/29
                  2a0c:9247:1::/48
                  2a0e:1a80::/32
                  2a0e:c780::/32
                  2a0e:f201:1::/48
                  2a0f:a00::/31
                  2a0f:1e00:123::/48
                  2a0f:1e00:456::/48
                  2a0f:1e00:987::/48
                  2a0f:1e00:abc::/48
                  2a0f:1e00:def9::/48
                  2a0f:1e01:1::/48
                  2a0f:1e81:2::/48
                  2a0f:1e81:1293::/48
                  2a0f:1e81:4319::/48
                  2a0f:1e81:92e8::/48
                  2a0f:1e81:a3d0::/48
                  2a0f:1e81:cdae::/48
                  2a0f:2100::/29
                  2a0f:2e80::/29
                  2a0f:2f80::/29
                  2a0f:3d80:123::/48
                  2a0f:3d82::/31
                  2a0f:3d87::/32
                  2a0f:7d01::/32
                  2a0f:e540::/29
                  2a0f:e940::/29
                  2a0f:ea42::/32
                  2a10:67c0::/29
                  2a10:6d40::/29
                  2a12:ac40::/48
                  2a12:ac40:f::/48
                  2a12:ac41::/32
                  2a12:ecc2::/32
                  2a13:18c0:1::/48
                  2a13:18c3::/32
                  2a13:1940::/29
                  2a13:2b40::/29
                  2a13:4900::/29
                  2a13:8200::/29
                  2a13:9080::/29
                  2a13:9280::/29
                  2a13:9580::/29
                  2a13:9680::/29
                  2a13:fc00::/29
                  2a13:fd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         82:82:e4:d5:96:e8:5a:32:9f:fb:77:e9:20:1d:da:c4:41:0a:
         81:38:db:03:d5:21:ff:9c:54:85:c1:e1:8b:67:de:8e:36:88:
         17:07:05:6d:64:f6:0f:eb:db:f4:bb:0a:e8:58:72:98:68:fd:
         fd:3c:44:86:7b:1c:35:9c:7a:70:9a:bd:ff:14:fe:a8:3b:aa:
         7e:e5:0a:35:4c:a4:59:58:7e:e1:69:7a:d3:c7:32:94:7e:00:
         02:43:75:8c:56:ed:34:64:c5:b0:e3:29:5b:8f:af:e0:b1:76:
         7d:78:13:22:a2:9c:70:bb:f2:d0:ff:1e:a8:14:18:0d:b4:13:
         c2:b9:0f:3d:9d:3c:b6:8a:6e:3b:15:98:1f:e0:28:05:cd:f9:
         66:55:a6:3b:48:04:b4:c8:b9:48:d0:5f:90:9a:85:00:91:94:
         43:c3:f9:fb:9a:06:cb:eb:47:31:ea:be:bb:ee:14:36:a4:36:
         9f:f3:57:19:73:b1:ea:0d:e0:09:48:9b:4e:c5:2c:9b:73:33:
         20:fd:ff:65:b6:f8:67:a6:f8:a6:13:f8:12:c1:aa:a8:67:75:
         50:ea:74:3c:bd:14:80:f0:0a:58:6b:b6:d9:a1:21:7f:5e:d8:
         dc:8c:03:8d:2d:ed:f7:1f:d9:51:a6:07:a6:a9:a5:a2:05:8e:
         fd:f8:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:01 2025 by rpki-client