Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CC9Vv467_UMX6we2ZiquHaD7nFI.roa
File:                     CC9Vv467_UMX6we2ZiquHaD7nFI.roa (raw, json)
Hash identifier:          8o5ZgGa+L8so2FhE8U9WGicFr2ZgzyK8CJh4QOCTsp4=
Subject key identifier:   08:2F:55:BF:8E:BB:FD:43:17:EB:07:B6:66:2A:AE:1D:A0:FB:9C:52
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0185634F56112722C459A0F66BE7D8434723
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CC9Vv467_UMX6we2ZiquHaD7nFI.roa
Signing time:             Fri 30 Dec 2022 13:53:41 +0000
ROA not before:           Fri 30 Dec 2022 13:53:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          193.39.208.0/24 maxlen: 24
                          194.33.62.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          45.134.186.0/24 maxlen: 24
                          103.59.40.0/24 maxlen: 24
                          103.59.43.0/24 maxlen: 24
                          103.59.42.0/24 maxlen: 24
                          103.59.41.0/24 maxlen: 24
                          185.214.72.0/24 maxlen: 24
                          193.5.64.0/24 maxlen: 24
                          45.146.181.0/24 maxlen: 24
                          193.39.143.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          45.147.31.0/24 maxlen: 24
                          45.118.249.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          64.226.159.0/24 maxlen: 24
                          64.226.158.0/24 maxlen: 24
                          64.226.157.0/24 maxlen: 24
                          64.226.156.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          103.227.85.0/24 maxlen: 24
                          103.227.84.0/24 maxlen: 24
                          103.227.87.0/24 maxlen: 24
                          103.227.86.0/24 maxlen: 24
                          194.45.34.0/24 maxlen: 24
                          80.253.248.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          91.212.120.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          45.145.59.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          91.233.20.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          45.131.214.0/24 maxlen: 24
                          64.226.55.0/24 maxlen: 24
                          64.226.54.0/24 maxlen: 24
                          91.232.255.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.82.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.130.254.0/24 maxlen: 24
                          209.35.158.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.137.62.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.95.98.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          193.41.69.0/24 maxlen: 24
                          193.41.68.0/24 maxlen: 24
                          185.155.202.0/24 maxlen: 24
                          193.41.86.0/24 maxlen: 24
                          193.41.115.0/24 maxlen: 24
                          45.129.125.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          45.13.187.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          167.94.165.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          103.74.77.0/24 maxlen: 24
                          103.74.76.0/24 maxlen: 24
                          85.209.131.0/24 maxlen: 24
                          194.41.38.0/24 maxlen: 24
                          193.41.38.0/24 maxlen: 24
                          2a0e:15c0:1::/48 maxlen: 48
                          2a0f:e540::/32 maxlen: 32
                          2a0f:1480::/29 maxlen: 29
                          2a0f:1f80::/29 maxlen: 29
                          2a09:17c0::/29 maxlen: 29
                          2a0f:ee00::/29 maxlen: 29
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a12:ecc2::/32 maxlen: 32
                          2a0f:e740::/29 maxlen: 29
                          2a0f:9600::/29 maxlen: 29
                          2a0f:3d83::/32 maxlen: 32
                          2a12:ecc3::/32 maxlen: 32
                          2a0f:1580::/29 maxlen: 29
                          2a0f:3940::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e040::/48 maxlen: 48
                          2a0f:e9c0::/29 maxlen: 29
                          2a0e:f200::/48 maxlen: 48
                          2a0f:1200::/32 maxlen: 32
                          2a0f:7d00:3::/48 maxlen: 48
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:dd40::/29 maxlen: 29
                          2a0f:4f80::/48 maxlen: 48
                          2a0f:e1c2::/32 maxlen: 32
                          2a0c:7884::/32 maxlen: 32
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:2700::/29 maxlen: 29
                          2a0f:e041::/32 maxlen: 32
                          2a0f:e1c0::/32 maxlen: 32
                          2a12:eb40::/29 maxlen: 29
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0b:b740::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a0f:e040:2::/48 maxlen: 48
                          2a0e:f200:2::/48 maxlen: 48
                          2a12:ecc5::/32 maxlen: 32
                          2a0f:ee00::/32 maxlen: 32
                          2a0c:7883::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0f:2300::/29 maxlen: 29
                          2a0c:7880::/32 maxlen: 32
                          2a12:f5c0::/29 maxlen: 29
                          2a0f:7d00:5::/48 maxlen: 48
                          2a0f:8300::/29 maxlen: 29
                          2a0f:df40::/29 maxlen: 29
                          2a0f:3f80::/29 maxlen: 29
                          2a12:ecc7::/32 maxlen: 32
                          2a12:ecc0::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a10:67c0::/29 maxlen: 29
                          2a0e:15c0:4::/48 maxlen: 48
                          2a0f:db40::/29 maxlen: 29
                          2a12:ecc6::/32 maxlen: 32
                          2a0f:e640::/29 maxlen: 29
                          2a0f:a04::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:63:4f:56:11:27:22:c4:59:a0:f6:6b:e7:d8:43:47:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Dec 30 13:53:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=082f55bf8ebbfd4317eb07b6662aae1da0fb9c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e2:e6:e2:e6:82:ff:86:5f:59:53:2a:aa:c7:
                    21:2d:06:b7:bc:ba:3f:91:20:f6:b6:57:f4:36:97:
                    ea:9e:56:24:18:8f:bb:9b:ef:60:61:6d:e8:e3:59:
                    f1:02:97:8c:02:a8:99:4f:1f:5a:6d:8e:23:a0:7f:
                    09:57:d8:4e:d5:df:6f:1d:9a:1f:7b:e8:89:9c:14:
                    2c:24:73:cd:81:ae:e5:e5:d1:ef:3a:62:f4:78:9f:
                    03:79:c1:f8:53:0d:af:ce:26:85:a6:74:2f:c7:c3:
                    64:c3:98:66:e5:1e:c7:72:c2:86:9e:14:21:5c:5a:
                    9c:21:69:fb:33:fc:a9:f6:54:41:87:70:b2:d7:df:
                    8d:eb:3a:f3:60:51:0d:ad:06:6e:28:51:ee:3f:6f:
                    59:e9:78:a9:cd:d7:ff:26:0b:dc:a6:0f:42:2d:83:
                    cd:f7:e3:d4:ca:1c:d6:11:92:76:be:96:0b:cf:35:
                    2b:2b:88:62:ba:18:4b:80:4d:2c:14:ce:28:cd:fb:
                    70:74:d0:0a:7a:7f:a3:b7:0e:b6:35:cd:c9:33:f0:
                    0c:38:81:61:5d:74:54:d8:03:76:ee:99:10:ae:b7:
                    44:bc:3b:a9:c1:e6:87:08:fe:67:01:a2:ef:8b:91:
                    51:11:f9:4b:53:35:70:46:b5:5b:99:5b:3a:bb:30:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2F:55:BF:8E:BB:FD:43:17:EB:07:B6:66:2A:AE:1D:A0:FB:9C:52
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CC9Vv467_UMX6we2ZiquHaD7nFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/23
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.95.98.0/24
                  45.118.249.0/24
                  45.128.77.0/24
                  45.129.125.0/24
                  45.130.254.0/24
                  45.131.214.0/24
                  45.134.186.0/24
                  45.137.41.0/24
                  45.137.62.0/24
                  45.137.82.0/24
                  45.137.85.0-45.137.86.255
                  45.145.59.0/24
                  45.146.181.0/24
                  45.147.31.0/24
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0/23
                  45.158.197.0-45.158.198.255
                  64.226.54.0/23
                  64.226.156.0/22
                  80.253.248.0/24
                  85.209.131.0/24
                  91.212.100.0/24
                  91.212.107.0/24
                  91.212.120.0/24
                  91.232.255.0/24
                  91.233.20.0/24
                  103.59.40.0/22
                  103.74.76.0/23
                  103.227.84.0/22
                  103.229.31.0/24
                  113.30.152.0/22
                  167.94.165.0/24
                  185.136.204.0/24
                  185.155.202.0/24
                  185.164.59.0/24
                  185.214.72.0/24
                  193.5.64.0/24
                  193.39.143.0/24
                  193.39.208.0/23
                  193.41.38.0/24
                  193.41.68.0/23
                  193.41.86.0/24
                  193.41.115.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                  194.33.62.0/24
                  194.41.38.0/24
                  194.45.34.0/24
                  209.35.158.0/24
                IPv6:
                  2a09:17c0::/29
                  2a0b:b740::/29
                  2a0c:7880::/32
                  2a0c:7882:1::/48
                  2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:15c0:1::/48
                  2a0e:15c0:4::/48
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:f200::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1200::/32
                  2a0f:1480::/29
                  2a0f:1580::/29
                  2a0f:1f80::/29
                  2a0f:2300::/29
                  2a0f:2700::/29
                  2a0f:3940::/29
                  2a0f:3d83::/32
                  2a0f:3f80::/29
                  2a0f:4f80::/48
                  2a0f:7d00:3::/48
                  2a0f:7d00:5::/48
                  2a0f:8300::/29
                  2a0f:9600::/29
                  2a0f:db40::/29
                  2a0f:dd40::/29
                  2a0f:df40::/29
                  2a0f:e040::/48
                  2a0f:e040:2::/48
                  2a0f:e041::/32
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e540::/32
                  2a0f:e600:1::/48
                  2a0f:e640::/29
                  2a0f:e740::/29
                  2a0f:e9c0::/29
                  2a0f:ee00::/29
                  2a10:67c0::/29
                  2a12:eb40::/29
                  2a12:ecc0::/32
                  2a12:ecc2::/31
                  2a12:ecc5::-2a12:ecc7:ffff:ffff:ffff:ffff:ffff:ffff
                  2a12:f5c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a4:b4:ed:2d:37:fb:a2:84:f4:71:d4:eb:b7:cb:7d:e7:6d:83:
         4c:45:26:e7:b8:21:75:1e:71:59:31:5d:6a:fd:3b:91:de:ac:
         8f:31:5d:e8:13:c0:bf:ae:87:0c:88:cb:c9:65:24:9f:a9:e2:
         ec:56:37:57:22:17:3d:7f:63:4c:58:bc:80:9b:5c:25:3d:7a:
         99:99:12:03:91:c3:2c:ce:ba:2c:fb:ae:24:bd:e9:8f:7a:f2:
         ed:4f:7c:8d:b8:1a:b9:38:9b:ab:a3:39:3e:8c:67:40:a3:9c:
         1b:4c:a1:a1:1b:ea:b0:0b:f1:0b:5e:14:4d:b0:23:82:0c:e1:
         a7:f6:98:c2:a8:e9:4c:66:ee:e7:68:25:60:40:09:32:b9:7f:
         84:b5:00:05:9f:e4:f0:9f:1b:51:88:7c:c0:99:c4:7e:b3:02:
         74:6f:19:28:49:8b:3e:aa:87:37:8d:98:a4:5b:45:b0:e1:fa:
         cd:0d:a3:1a:41:0d:84:54:70:84:19:e8:32:6f:8d:9f:23:4b:
         59:3a:73:3d:0d:f5:4f:c9:8d:1b:3a:7b:7d:0e:43:a3:30:4c:
         30:ae:62:3d:78:1a:fb:98:de:3c:49:85:aa:72:ef:a9:1d:8c:
         44:15:9e:53:22:fe:a5:02:f4:14:57:55:82:ac:19:c1:ad:fc:
         8e:c7:e9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:10:54 2025 by rpki-client