Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZG50_TGB9X-Ao87S5IERFUP8l24.roa
File:                     ZG50_TGB9X-Ao87S5IERFUP8l24.roa (raw, json)
Hash identifier:          FyWtC8nnqdnTcZckKinMBTrOaR7nqQY+gNTIsaIye0c=
Subject key identifier:   64:6E:74:FD:31:81:F5:7F:80:A3:CE:D2:E4:81:11:15:43:FC:97:6E
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01847512E39729519A04D3E3680E22DA31C8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZG50_TGB9X-Ao87S5IERFUP8l24.roa
Signing time:             Mon 14 Nov 2022 07:38:02 +0000
ROA not before:           Mon 14 Nov 2022 07:38:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          193.39.208.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          45.134.186.0/24 maxlen: 24
                          103.59.40.0/24 maxlen: 24
                          103.59.43.0/24 maxlen: 24
                          103.59.42.0/24 maxlen: 24
                          103.59.41.0/24 maxlen: 24
                          185.214.72.0/24 maxlen: 24
                          193.5.64.0/24 maxlen: 24
                          45.146.181.0/24 maxlen: 24
                          193.39.143.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          45.147.31.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          64.226.159.0/24 maxlen: 24
                          64.226.158.0/24 maxlen: 24
                          64.226.157.0/24 maxlen: 24
                          64.226.156.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          103.227.85.0/24 maxlen: 24
                          103.227.84.0/24 maxlen: 24
                          45.146.129.0/24 maxlen: 24
                          194.45.34.0/24 maxlen: 24
                          80.253.248.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          91.212.120.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          45.145.59.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          91.233.20.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          45.131.214.0/24 maxlen: 24
                          64.226.55.0/24 maxlen: 24
                          64.226.54.0/24 maxlen: 24
                          91.232.255.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.82.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.130.254.0/24 maxlen: 24
                          209.35.158.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          193.41.69.0/24 maxlen: 24
                          193.41.68.0/24 maxlen: 24
                          185.155.202.0/24 maxlen: 24
                          193.41.86.0/24 maxlen: 24
                          193.41.115.0/24 maxlen: 24
                          45.129.125.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          45.13.187.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          103.74.77.0/24 maxlen: 24
                          103.74.76.0/24 maxlen: 24
                          85.209.131.0/24 maxlen: 24
                          194.41.38.0/24 maxlen: 24
                          193.41.38.0/24 maxlen: 24
                          193.41.39.0/24 maxlen: 24
                          2a0f:e540::/32 maxlen: 32
                          2a0f:1480::/29 maxlen: 29
                          2a0f:1f80::/29 maxlen: 29
                          2a0f:2500::/29 maxlen: 29
                          2a09:17c0::/29 maxlen: 29
                          2a0f:ee00::/29 maxlen: 29
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a12:4ac0::/29 maxlen: 29
                          2a12:ecc2::/32 maxlen: 32
                          2a0f:ea00::/29 maxlen: 29
                          2a0f:e740::/29 maxlen: 29
                          2a0f:9600::/29 maxlen: 29
                          2a0e:9b00::/29 maxlen: 29
                          2a0f:3d83::/32 maxlen: 32
                          2a12:ecc3::/32 maxlen: 32
                          2a0f:1580::/29 maxlen: 29
                          2a0f:3940::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e6c0:123::/48 maxlen: 48
                          2a0f:e040::/48 maxlen: 48
                          2a0f:e9c0::/29 maxlen: 29
                          2a0f:1200::/32 maxlen: 32
                          2a0f:7d00:3::/48 maxlen: 48
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:dd40::/29 maxlen: 29
                          2a0f:e1c2::/32 maxlen: 32
                          2a0c:7884::/32 maxlen: 32
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:e6c0:fe1::/48 maxlen: 48
                          2a0f:2700::/29 maxlen: 29
                          2a0f:e041::/32 maxlen: 32
                          2a0f:e1c0::/32 maxlen: 32
                          2a12:eb40::/29 maxlen: 29
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0b:b740::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a0f:e040:2::/48 maxlen: 48
                          2a0a:2d00:1::/48 maxlen: 48
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:e6c0:991::/48 maxlen: 48
                          2a12:ecc5::/32 maxlen: 32
                          2a0c:7883::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0f:2300::/29 maxlen: 29
                          2a0c:7880::/32 maxlen: 32
                          2a0f:1380::/29 maxlen: 29
                          2a0f:7d00:5::/48 maxlen: 48
                          2a0f:8300::/29 maxlen: 29
                          2a0f:df40::/29 maxlen: 29
                          2a0f:3f80::/29 maxlen: 29
                          2a12:ecc7::/32 maxlen: 32
                          2a12:ecc0::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a10:67c0::/29 maxlen: 29
                          2a0e:15c0:4::/48 maxlen: 48
                          2a0f:db40::/29 maxlen: 29
                          2a12:ecc6::/32 maxlen: 32
                          2a0f:e640::/29 maxlen: 29
                          2a0f:a04::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:75:12:e3:97:29:51:9a:04:d3:e3:68:0e:22:da:31:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Nov 14 07:38:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=646e74fd3181f57f80a3ced2e481111543fc976e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:34:a5:83:57:7b:23:b2:06:cb:1b:cb:09:95:
                    f2:33:d3:a6:97:e7:29:44:9f:cb:c4:cb:d2:12:ff:
                    61:6f:93:00:80:f1:00:0f:85:8c:25:1a:dc:c4:f6:
                    20:35:8e:c0:2f:14:48:66:1c:b6:0a:cc:2a:16:6f:
                    29:a1:1f:82:2b:09:ec:ac:27:ff:e3:d5:d8:47:c7:
                    79:8d:92:cd:23:1d:37:4a:e6:d5:f4:ae:56:ca:6d:
                    4a:cc:0c:6c:0c:d0:d3:fe:3d:1d:c7:1f:a6:d7:c0:
                    42:f6:f0:3b:a0:dc:f8:f6:7c:88:46:c4:f9:72:10:
                    69:e8:99:d9:c6:48:b1:7b:80:99:7f:2c:61:33:f3:
                    dd:05:16:79:02:98:d5:b0:5e:3d:fa:4a:67:68:83:
                    b6:d9:de:d5:30:71:fa:42:9f:44:74:45:92:ed:ac:
                    94:9e:03:0d:ae:8b:b3:90:2c:d5:53:34:87:e5:4f:
                    f3:8c:00:69:ff:c7:0b:b7:7e:f4:e8:3d:26:3b:50:
                    dc:0c:a5:38:b0:c3:d6:48:af:01:be:7f:6b:da:df:
                    4b:58:ad:dd:22:bf:a4:b8:c5:7a:61:9e:c9:ea:0b:
                    c6:0a:13:dc:1e:1e:1f:38:9e:25:76:95:a6:b7:be:
                    f6:3d:31:ee:31:2c:fa:17:13:44:7d:c8:83:8c:e0:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6E:74:FD:31:81:F5:7F:80:A3:CE:D2:E4:81:11:15:43:FC:97:6E
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZG50_TGB9X-Ao87S5IERFUP8l24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/23
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.128.77.0/24
                  45.129.125.0/24
                  45.130.254.0/24
                  45.131.214.0/24
                  45.134.186.0/24
                  45.137.41.0/24
                  45.137.82.0/24
                  45.137.85.0-45.137.86.255
                  45.145.59.0/24
                  45.146.129.0/24
                  45.146.181.0/24
                  45.147.31.0/24
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0/23
                  45.158.197.0-45.158.198.255
                  64.226.54.0/23
                  64.226.156.0/22
                  80.253.248.0/24
                  85.209.131.0/24
                  91.212.100.0/24
                  91.212.107.0/24
                  91.212.120.0/24
                  91.232.255.0/24
                  91.233.20.0/24
                  103.59.40.0/22
                  103.74.76.0/23
                  103.227.84.0/23
                  103.229.31.0/24
                  113.30.152.0/22
                  185.136.204.0/24
                  185.155.202.0/24
                  185.164.59.0/24
                  185.214.72.0/24
                  193.5.64.0/24
                  193.39.143.0/24
                  193.39.208.0/23
                  193.41.38.0/23
                  193.41.68.0/23
                  193.41.86.0/24
                  193.41.115.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                  194.41.38.0/24
                  194.45.34.0/24
                  209.35.158.0/24
                IPv6:
                  2a09:17c0::/29
                  2a0a:2d00:1::/48
                  2a0b:b740::/29
                  2a0c:7880::/32
                  2a0c:7882:1::/48
                  2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:15c0:4::/48
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:9b00::/29
                  2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1200::/32
                  2a0f:1380::/29
                  2a0f:1480::/29
                  2a0f:1580::/29
                  2a0f:1f80::/29
                  2a0f:2300::/29
                  2a0f:2500::/29
                  2a0f:2700::/29
                  2a0f:3940::/29
                  2a0f:3d83::/32
                  2a0f:3f80::/29
                  2a0f:7d00:3::/48
                  2a0f:7d00:5::/48
                  2a0f:8300::/29
                  2a0f:9600::/29
                  2a0f:db40::/29
                  2a0f:dd40::/29
                  2a0f:df40::/29
                  2a0f:e040::/48
                  2a0f:e040:2::/48
                  2a0f:e041::/32
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e540::/32
                  2a0f:e600:1::/48
                  2a0f:e640::/29
                  2a0f:e6c0:123::/48
                  2a0f:e6c0:991::/48
                  2a0f:e6c0:fe1::/48
                  2a0f:e740::/29
                  2a0f:e9c0::/29
                  2a0f:ea00::/29
                  2a0f:ee00::/29
                  2a10:67c0::/29
                  2a12:4ac0::/29
                  2a12:eb40::/29
                  2a12:ecc0::/32
                  2a12:ecc2::/31
                  2a12:ecc5::-2a12:ecc7:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         31:fc:c4:82:4c:b6:1f:75:0a:7c:b2:92:4e:19:fe:f2:05:21:
         85:47:27:03:66:dd:01:6f:8e:9b:ca:17:51:61:25:59:6d:aa:
         1c:93:f7:75:f4:45:cc:44:cf:25:4f:82:87:74:33:97:3f:b4:
         3a:43:6a:ec:18:f6:77:3a:6b:e7:ff:93:49:b9:99:d1:e3:34:
         c6:b9:95:5b:60:0b:1d:89:6c:af:3f:be:ec:ea:cd:2a:38:e7:
         77:09:32:cb:5f:46:15:49:74:e4:3b:b8:a6:5a:88:44:63:25:
         c5:98:39:e1:e6:3b:cb:4c:88:ad:59:6f:62:b6:25:7c:8a:9a:
         28:d8:0a:f3:67:a1:4c:35:64:97:7b:e1:65:ca:e8:61:8c:9f:
         03:4b:26:35:cf:9a:e9:ec:4f:aa:c9:2e:f4:57:3c:f2:cf:59:
         60:d2:d9:aa:47:28:6d:12:b7:19:09:f8:44:c6:a8:e3:25:b6:
         35:fa:ef:53:11:16:20:87:a0:33:81:9e:e6:06:11:a1:9f:19:
         b8:de:a4:a5:28:a2:b8:af:f8:17:e0:66:6e:9b:5d:e1:78:1f:
         af:04:8b:e1:ac:a0:de:84:2e:1f:95:60:1f:17:26:70:61:3a:
         f6:50:5b:1d:a9:22:37:87:4f:f8:2c:eb:da:7a:36:4e:d1:99:
         af:0a:9a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:24:17 2025 by rpki-client