Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eaTYutA-eeEN3BAaA9y7z8KWC00.roa
File:                     eaTYutA-eeEN3BAaA9y7z8KWC00.roa (raw, json)
Hash identifier:          hp70iQPcR7QmYiMf0pTwODQZyz6QkxMD7br+gRhG87E=
Subject key identifier:   79:A4:D8:BA:D0:3E:79:E1:0D:DC:10:1A:03:DC:BB:CF:C2:96:0B:4D
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       018291FD23128CA39358455399FBADF4274A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eaTYutA-eeEN3BAaA9y7z8KWC00.roa
Signing time:             Fri 12 Aug 2022 12:17:42 +0000
ROA not before:           Fri 12 Aug 2022 12:17:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          45.130.253.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.157.38.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          193.41.115.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          80.253.248.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          193.41.39.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          2a0f:ac00::/29 maxlen: 29
                          2a0f:e540::/32 maxlen: 32
                          2a0f:e1c2::/32 maxlen: 32
                          2a0f:1f80::/29 maxlen: 29
                          2a0c:7884::/32 maxlen: 32
                          2a09:17c0::/29 maxlen: 29
                          2a0f:dac0::/29 maxlen: 29
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:ee00::/29 maxlen: 29
                          2a0f:e6c0:fe1::/48 maxlen: 48
                          2a0f:2700::/29 maxlen: 29
                          2a0f:e041::/32 maxlen: 32
                          2a0f:2100:171::/48 maxlen: 48
                          2a0f:e1c0::/32 maxlen: 32
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:7d00:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a0f:6d80::/29 maxlen: 29
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0f:da40::/29 maxlen: 29
                          2a0b:b740::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a12:4ac0::/29 maxlen: 29
                          2a0a:2d00:1::/48 maxlen: 48
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:e6c0:991::/48 maxlen: 48
                          2a0f:ea00::/29 maxlen: 29
                          2a0c:7883::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0e:e980::/29 maxlen: 29
                          2a12:d6c0::/29 maxlen: 29
                          2a0f:a200::/29 maxlen: 29
                          2a0f:7d00:5::/48 maxlen: 48
                          2a0f:df40::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a0f:e6c0:123::/48 maxlen: 48
                          2a0f:e040::/48 maxlen: 48
                          2a0f:e9c0::/29 maxlen: 29
                          2a0e:15c0:4::/48 maxlen: 48
                          2a0f:db40::/29 maxlen: 29
                          2a0f:a04::/32 maxlen: 32
                          2a0f:1200::/32 maxlen: 32
                          2a0f:7d00:3::/48 maxlen: 48
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:e143::/32 maxlen: 32
                          2a0f:dd40::/29 maxlen: 29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:91:fd:23:12:8c:a3:93:58:45:53:99:fb:ad:f4:27:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Aug 12 12:17:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79a4d8bad03e79e10ddc101a03dcbbcfc2960b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6d:d2:65:b7:a5:7d:83:23:20:3b:74:38:c3:
                    5a:4a:05:7c:2f:f4:2e:d1:73:4f:62:2b:92:54:84:
                    04:a0:9f:06:81:e4:87:2c:a1:03:b6:38:4a:c6:83:
                    31:dd:96:44:41:44:23:98:f1:bb:84:af:3b:ba:e3:
                    28:b4:c9:7a:13:20:0f:6f:6a:66:46:a7:f7:70:e3:
                    a5:6a:8c:09:4a:13:5c:fc:86:4c:0c:8b:3b:53:7a:
                    ee:5e:bf:89:65:07:06:fc:ee:94:92:15:55:3e:47:
                    af:f2:ae:42:ff:11:19:ae:ef:3b:8e:17:0b:19:48:
                    62:1f:f8:ef:a5:06:2e:75:b1:89:e6:b1:2f:53:36:
                    1c:ed:ff:ab:88:e1:33:69:84:9d:97:51:8f:c7:76:
                    0d:01:83:a2:b1:ae:a3:9d:5e:47:43:b0:53:bf:78:
                    04:11:7b:1d:ec:26:6d:e5:5f:a7:4e:88:4d:30:57:
                    74:dc:77:c7:35:22:bd:16:3e:a0:84:84:1b:85:05:
                    9a:af:f3:5c:3d:48:84:ea:09:4b:ba:a7:b2:70:07:
                    df:30:59:85:41:8f:32:51:28:61:85:cb:71:0c:9a:
                    05:e4:cd:04:4b:d6:c7:d8:67:86:3e:d6:84:c3:a7:
                    ae:ef:d1:40:07:f5:eb:23:4f:3d:a3:70:fe:b9:30:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A4:D8:BA:D0:3E:79:E1:0D:DC:10:1A:03:DC:BB:CF:C2:96:0B:4D
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eaTYutA-eeEN3BAaA9y7z8KWC00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/24
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.128.77.0/24
                  45.130.253.0/24
                  45.137.41.0/24
                  45.137.85.0-45.137.86.255
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0/24
                  45.157.38.0/24
                  45.158.197.0-45.158.198.255
                  80.253.248.0/24
                  91.212.100.0/24
                  91.212.107.0/24
                  113.30.152.0/22
                  185.136.204.0/24
                  185.164.59.0/24
                  193.39.209.0/24
                  193.41.39.0/24
                  193.41.115.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                IPv6:
                  2a09:17c0::/29
                  2a0a:2d00:1::/48
                  2a0b:b740::/29
                  2a0c:7882:1::/48
                  2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:15c0:4::/48
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:e980::/29
                  2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1200::/32
                  2a0f:1f80::/29
                  2a0f:2100:171::/48
                  2a0f:2700::/29
                  2a0f:6d80::/29
                  2a0f:7d00:1::/48
                  2a0f:7d00:3::/48
                  2a0f:7d00:5::/48
                  2a0f:a200::/29
                  2a0f:ac00::/29
                  2a0f:da40::/29
                  2a0f:dac0::/29
                  2a0f:db40::/29
                  2a0f:dd40::/29
                  2a0f:df40::/29
                  2a0f:e040::/48
                  2a0f:e041::/32
                  2a0f:e143::/32
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e540::/32
                  2a0f:e600:1::/48
                  2a0f:e6c0:123::/48
                  2a0f:e6c0:991::/48
                  2a0f:e6c0:fe1::/48
                  2a0f:e9c0::/29
                  2a0f:ea00::/29
                  2a0f:ee00::/29
                  2a12:4ac0::/29
                  2a12:d6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         93:d7:00:73:6d:b7:97:6d:4a:bb:90:23:9c:c2:30:b8:15:b8:
         20:42:2a:e5:1b:73:12:a5:dd:e0:75:9b:25:c6:cb:3b:47:0b:
         6d:e9:e9:69:ec:63:a6:63:5c:0c:cd:73:4f:a4:91:72:76:34:
         32:15:c2:b9:a6:cd:75:98:c7:19:4f:f1:70:48:57:35:e9:64:
         fd:8c:65:90:72:11:0a:01:a6:8f:8a:96:28:c1:40:84:1e:e3:
         7c:ec:2e:89:d0:8e:f4:8a:52:98:23:4a:07:19:64:cb:6e:b2:
         f3:35:30:96:e0:eb:08:0a:98:c3:68:32:9b:83:ac:f2:b3:48:
         6a:a6:6c:dd:4c:ee:74:1d:fd:ee:62:ea:f3:d8:aa:a1:12:77:
         41:82:47:77:d3:63:e0:2a:fd:91:76:8e:42:a7:6e:5e:88:b4:
         f3:b2:65:33:db:0a:36:bd:da:07:a4:90:64:6f:3e:25:b1:d9:
         31:b4:0e:de:1b:09:86:55:15:70:d4:1f:6c:fb:0d:fd:ec:de:
         cd:84:17:26:a8:c9:e7:47:dc:ae:74:23:07:99:e3:c3:d2:f3:
         e9:4a:8c:ca:bf:d0:ad:86:92:c5:75:13:9a:30:ba:94:b7:13:
         0c:20:a7:c8:f4:b2:93:d4:46:03:fd:29:e5:74:d3:db:82:bc:
         0c:8f:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:04:28 2025 by rpki-client