Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s6oxDXz3nlP_h-TdnGOafCoft-s.roa
File:                     s6oxDXz3nlP_h-TdnGOafCoft-s.roa (raw, json)
Hash identifier:          eRO5jXMndG4w3Xu4rsbCz41E71wOQU6CrT/2/nSlryo=
Subject key identifier:   B3:AA:31:0D:7C:F7:9E:53:FF:87:E4:DD:9C:63:9A:7C:2A:1F:B7:EB
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0387394F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s6oxDXz3nlP_h-TdnGOafCoft-s.roa
Signing time:             Tue 14 Jun 2022 07:30:45 +0000
ROA not before:           Tue 14 Jun 2022 07:30:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.157.38.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          45.95.98.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          45.118.249.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          193.41.39.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          2a0f:ac00::/29 maxlen: 29
                          2a0f:e1c2::/32 maxlen: 32
                          2a0f:1f80::/29 maxlen: 29
                          2a0f:e940::/29 maxlen: 29
                          2a0c:7884::/32 maxlen: 32
                          2a09:17c0::/29 maxlen: 29
                          2a0f:dac0::/29 maxlen: 29
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:e6c0:fe1::/48 maxlen: 48
                          2a0f:2100:171::/48 maxlen: 48
                          2a0f:e1c0::/32 maxlen: 32
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a0f:6d80::/29 maxlen: 29
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0f:da40::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a12:4ac0::/29 maxlen: 29
                          2a0a:2d00:1::/48 maxlen: 48
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:e6c0:991::/48 maxlen: 48
                          2a0f:ea00::/29 maxlen: 29
                          2a0f:e842::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0c:7883::/32 maxlen: 32
                          2a0e:e980::/29 maxlen: 29
                          2a12:d6c0::/29 maxlen: 29
                          2a0f:a200::/29 maxlen: 29
                          2a0f:df40::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a0f:e6c0:123::/48 maxlen: 48
                          2a0f:a04::/32 maxlen: 32
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:e143::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59193679 (0x387394f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jun 14 07:30:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3aa310d7cf79e53ff87e4dd9c639a7c2a1fb7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:e3:aa:03:95:36:0d:3d:e9:d2:f5:5c:53:
                    a6:de:45:50:1f:46:b6:b0:47:1b:66:0a:92:b5:0c:
                    cd:2c:32:fc:c3:eb:f4:b1:4e:76:8b:4f:e8:74:5f:
                    84:d2:82:dc:a2:cf:9b:79:dc:35:ec:be:80:f8:cf:
                    a0:b9:e1:28:b0:a7:29:e1:85:c9:dc:3d:cb:cf:e3:
                    04:0f:65:2d:42:a4:68:b2:79:66:9b:fd:4d:99:86:
                    51:9c:c3:e0:0e:55:2d:56:0f:c6:95:d9:a5:90:78:
                    3f:e3:97:19:26:2e:5c:62:9d:38:ea:da:fb:3e:a7:
                    9f:db:22:b1:65:cf:93:91:ce:5e:02:b2:8e:0f:b6:
                    6e:84:11:6a:be:c8:1c:f3:b1:02:a8:db:07:c7:b9:
                    0b:82:2b:00:78:24:b5:66:ef:7a:a4:42:0f:21:dc:
                    e5:56:b7:6c:4d:70:9e:ea:e1:36:0f:7b:b7:e6:1e:
                    05:04:ba:4a:ec:e1:81:30:fc:f8:bd:5f:2a:15:55:
                    74:80:82:4c:c0:1a:1e:b7:18:b8:b5:59:7f:49:d7:
                    f2:b3:96:40:eb:5f:23:bc:35:f9:63:1e:6c:71:b1:
                    86:f8:57:46:c3:cc:00:99:b2:d8:cc:0e:d3:69:86:
                    82:cf:93:aa:43:65:ae:6f:6a:44:e0:07:b6:3e:63:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:31:0D:7C:F7:9E:53:FF:87:E4:DD:9C:63:9A:7C:2A:1F:B7:EB
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s6oxDXz3nlP_h-TdnGOafCoft-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/24
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.95.98.0/24
                  45.118.249.0/24
                  45.128.77.0/24
                  45.137.41.0/24
                  45.137.85.0-45.137.86.255
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0-45.157.38.255
                  45.158.197.0-45.158.198.255
                  91.212.100.0/24
                  91.212.107.0/24
                  103.229.31.0/24
                  113.30.152.0/22
                  185.136.204.0/24
                  185.164.59.0/24
                  193.39.209.0/24
                  193.41.39.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                IPv6:
                  2a09:17c0::/29
                  2a0a:2d00:1::/48
                  2a0c:7882:1::/48
                  2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:e980::/29
                  2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1f80::/29
                  2a0f:2100:171::/48
                  2a0f:6d80::/29
                  2a0f:a200::/29
                  2a0f:ac00::/29
                  2a0f:da40::/29
                  2a0f:dac0::/29
                  2a0f:df40::/29
                  2a0f:e143::/32
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e600:1::/48
                  2a0f:e6c0:123::/48
                  2a0f:e6c0:991::/48
                  2a0f:e6c0:fe1::/48
                  2a0f:e842::/32
                  2a0f:e940::/29
                  2a0f:ea00::/29
                  2a12:4ac0::/29
                  2a12:d6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:8e:95:ed:ad:ab:4f:17:58:fa:a7:d7:90:71:cc:7a:e6:0c:
         b5:4e:37:90:8c:51:16:9c:50:ae:fc:9a:ed:fc:72:2c:5c:0a:
         c7:db:6b:6f:89:9d:4a:98:38:4e:85:1f:3e:e5:2c:eb:2e:46:
         b8:e7:ad:80:f9:7d:63:4c:f8:6a:50:2f:21:5f:c3:70:36:f4:
         e5:97:8f:75:e7:09:1a:60:3a:3c:c1:92:05:cf:52:75:0c:42:
         cd:7e:9e:7a:ba:0e:2b:b2:e6:30:33:aa:20:69:2d:9e:c0:48:
         73:85:8b:c5:30:d1:bf:36:7f:14:d8:a8:34:c6:a9:fa:73:ab:
         4a:34:82:6b:9f:3f:fb:3b:c1:9f:ee:c0:05:bf:e5:35:e2:f0:
         3a:88:71:84:c6:5b:d5:75:2e:ea:c2:a4:bb:ee:91:e9:c2:69:
         53:ba:ce:4c:3b:f1:6b:db:68:ba:f7:29:c1:3f:6d:6b:66:8e:
         19:22:9b:f7:f5:37:83:17:dc:00:c8:de:e4:62:e8:c4:04:ed:
         7a:16:1c:2d:e4:14:17:f3:da:cf:cb:d7:ee:9c:8a:67:81:3a:
         33:72:c1:0d:4b:d5:04:6c:f1:34:ff:6d:d4:20:44:93:fc:9a:
         7b:35:52:94:dd:30:66:85:e5:18:d7:27:bc:66:ca:c7:4a:10:
         4d:9f:2f:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:10 2025 by rpki-client