Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vLdnTVlMuGGPFXmuh5o5KLBrL7M.roa
File:                     vLdnTVlMuGGPFXmuh5o5KLBrL7M.roa (raw, json)
Hash identifier:          hJ/ptkeabtC1vKplWYx1kvZXzs8JOp6kIc3NwK6PEAc=
Subject key identifier:   BC:B7:67:4D:59:4C:B8:61:8F:15:79:AE:87:9A:39:28:B0:6B:2F:B3
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       02046ADD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vLdnTVlMuGGPFXmuh5o5KLBrL7M.roa
Signing time:             Mon 21 Feb 2022 15:28:28 +0000
ROA not before:           Mon 21 Feb 2022 15:28:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.95.98.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          194.33.32.0/24 maxlen: 24
                          45.152.197.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.157.38.0/24 maxlen: 24
                          2a0e:e980::/29 maxlen: 29
                          2a0f:ac00::/29 maxlen: 29
                          2a0f:1f80::/29 maxlen: 29
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e1c0::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a0f:da40::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:a04::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0f:e143::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33843933 (0x2046add)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Feb 21 15:28:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bcb7674d594cb8618f1579ae879a3928b06b2fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:6e:ab:c8:9a:a8:62:76:54:1c:0c:61:bb:
                    27:7c:40:36:07:8c:65:e7:6b:30:d7:23:e7:85:53:
                    de:5b:0b:be:be:39:b7:47:89:66:1e:72:da:73:1a:
                    55:10:82:a2:3f:c6:fa:76:f8:c2:c5:a9:6b:b1:a7:
                    a2:fe:42:13:30:3d:db:80:0b:54:27:ec:fd:56:10:
                    27:fc:09:eb:53:18:49:34:91:cd:68:27:31:f9:b6:
                    cf:0c:b8:87:be:15:1d:31:a3:23:6e:37:8f:a4:20:
                    d5:53:76:11:ff:f3:38:7c:ca:6f:f2:3b:bb:6d:ad:
                    d3:f3:66:8e:8c:1c:d4:f2:ba:a1:30:f2:1b:cc:66:
                    b4:e3:5e:dd:28:ef:15:d6:cd:d7:1c:2b:7a:71:d2:
                    e4:f5:e9:16:9a:23:69:ab:0e:4a:61:31:aa:b5:24:
                    e4:82:c8:db:5e:53:78:7b:3f:90:51:33:ae:8b:4a:
                    a5:18:3e:b0:2a:97:d1:c8:70:92:86:09:d3:d2:4f:
                    fa:68:38:36:0a:c3:f2:16:46:2e:fc:11:44:75:a0:
                    ad:4e:90:f7:27:f9:2d:44:c8:dd:55:6b:ec:81:31:
                    b1:4c:a1:c0:d3:f6:2f:f8:dc:c6:f0:53:e7:a7:78:
                    53:99:9a:b5:9c:9d:1e:18:52:d9:89:ea:f8:6a:81:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B7:67:4D:59:4C:B8:61:8F:15:79:AE:87:9A:39:28:B0:6B:2F:B3
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vLdnTVlMuGGPFXmuh5o5KLBrL7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/24
                  45.95.98.0/24
                  45.128.77.0/24
                  45.137.41.0/24
                  45.137.86.0/24
                  45.152.197.0/24
                  45.157.38.0/24
                  193.39.209.0/24
                  193.111.4.0/23
                  193.111.18.0/23
                  194.33.32.0/24
                IPv6:
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:e980::/29
                  2a0e:f200:2::/48
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1f80::/29
                  2a0f:ac00::/29
                  2a0f:da40::/29
                  2a0f:e143::/32
                  2a0f:e1c0::/32
                  2a0f:e1c7::/32
                  2a0f:e600:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:16:60:fe:26:e6:43:95:ec:98:f7:b6:80:33:33:85:35:ed:
         9b:bd:c3:85:0b:38:a8:f9:12:cb:b3:0a:3b:3f:b7:2b:24:98:
         2e:8c:e9:c9:dd:12:4e:a0:84:97:6e:43:89:75:f1:e1:cf:f1:
         0c:e0:41:ea:3d:2f:b1:f9:c9:49:fb:1e:6b:06:9e:12:29:87:
         c2:5b:92:6b:75:eb:91:29:db:bb:41:fb:60:df:57:70:65:cf:
         8d:eb:79:19:53:2c:3e:c9:ba:fe:90:72:91:04:6e:78:9f:56:
         ca:a9:18:47:ed:f4:ed:e2:f9:b3:45:07:e9:95:4a:a8:bd:93:
         ee:f6:0f:da:e7:80:2b:2e:4e:08:38:e7:25:cb:b6:15:f1:d0:
         01:bf:09:8d:76:56:3c:58:ff:8c:19:31:4d:e2:34:f9:13:5d:
         c8:7c:3e:c4:da:05:00:7b:86:12:e3:8e:41:cd:bb:ce:ae:de:
         2c:f7:0d:89:2d:bf:14:5f:0e:8f:0d:ed:0d:35:36:fa:cc:d3:
         6b:e4:59:72:6e:d7:6d:d7:e7:e4:4a:2e:ef:28:59:a6:0b:14:
         7b:bf:f2:c3:3b:dc:45:05:eb:60:6e:6d:8a:20:f8:73:12:05:
         1b:d6:39:ee:9c:4d:7b:87:df:6e:f6:32:9b:c2:36:72:48:03:
         2d:1b:32:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:02 2025 by rpki-client