Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pU3l0Q6WkrWYYXu449cR-SkQaLg.roa
File:                     pU3l0Q6WkrWYYXu449cR-SkQaLg.roa (raw, json)
Hash identifier:          pnQdyJ8g6SQ5YJOibDfCjXU8f4t6ZlxaLv6QoFWgqqI=
Subject key identifier:   A5:4D:E5:D1:0E:96:92:B5:98:61:7B:B8:E3:D7:11:F9:29:10:68:B8
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0185DD9039ED669FEE7147E14402ACE30C97
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pU3l0Q6WkrWYYXu449cR-SkQaLg.roa
Signing time:             Mon 23 Jan 2023 07:38:14 +0000
ROA not before:           Mon 23 Jan 2023 07:38:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          193.39.209.0/24 maxlen: 24
                          193.39.208.0/24 maxlen: 24
                          194.33.62.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          45.134.186.0/24 maxlen: 24
                          103.59.40.0/24 maxlen: 24
                          103.59.43.0/24 maxlen: 24
                          103.59.42.0/24 maxlen: 24
                          103.59.41.0/24 maxlen: 24
                          185.214.72.0/24 maxlen: 24
                          193.5.64.0/24 maxlen: 24
                          45.146.181.0/24 maxlen: 24
                          193.39.143.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          45.147.31.0/24 maxlen: 24
                          45.118.249.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          64.226.159.0/24 maxlen: 24
                          64.226.158.0/24 maxlen: 24
                          64.226.157.0/24 maxlen: 24
                          64.226.156.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          103.227.85.0/24 maxlen: 24
                          103.227.84.0/24 maxlen: 24
                          45.146.129.0/24 maxlen: 24
                          103.227.86.0/24 maxlen: 24
                          194.45.34.0/24 maxlen: 24
                          80.253.248.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          91.212.120.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          45.145.59.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          91.233.20.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          45.131.214.0/24 maxlen: 24
                          64.226.55.0/24 maxlen: 24
                          64.226.54.0/24 maxlen: 24
                          91.232.255.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.82.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.130.254.0/24 maxlen: 24
                          209.35.158.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.137.62.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.157.39.0/24 maxlen: 24
                          45.95.98.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          193.41.69.0/24 maxlen: 24
                          193.41.68.0/24 maxlen: 24
                          185.155.202.0/24 maxlen: 24
                          193.41.86.0/24 maxlen: 24
                          193.41.115.0/24 maxlen: 24
                          45.129.125.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          45.13.187.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          167.94.165.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          103.74.77.0/24 maxlen: 24
                          103.74.76.0/24 maxlen: 24
                          85.209.131.0/24 maxlen: 24
                          194.41.38.0/24 maxlen: 24
                          193.41.38.0/24 maxlen: 24
                          2a0e:15c0:1::/48 maxlen: 48
                          2a0f:e540::/32 maxlen: 32
                          2a0f:1480::/29 maxlen: 29
                          2a0f:1f80::/29 maxlen: 29
                          2a0f:ee00::/29 maxlen: 29
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a12:ecc2::/32 maxlen: 32
                          2a0f:e740::/29 maxlen: 29
                          2a0f:9600::/29 maxlen: 29
                          2a0f:3d83::/32 maxlen: 32
                          2a12:ecc3::/32 maxlen: 32
                          2a0f:1580::/29 maxlen: 29
                          2a0f:3940::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e9c0::/29 maxlen: 29
                          2a0e:f200::/48 maxlen: 48
                          2a0f:1200::/32 maxlen: 32
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:dd40::/29 maxlen: 29
                          2a0f:4f80::/48 maxlen: 48
                          2a0f:e1c2::/32 maxlen: 32
                          2a0c:7884::/32 maxlen: 32
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:2700::/29 maxlen: 29
                          2a0f:e1c0::/32 maxlen: 32
                          2a0c:9240::/29 maxlen: 29
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0b:b740::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a0e:f200:2::/48 maxlen: 48
                          2a12:ecc5::/32 maxlen: 32
                          2a0f:ee00::/32 maxlen: 32
                          2a0c:7883::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0f:2300::/29 maxlen: 29
                          2a0c:7880::/32 maxlen: 32
                          2a12:f5c0::/29 maxlen: 29
                          2a0f:7d00:5::/48 maxlen: 48
                          2a0f:8300::/29 maxlen: 29
                          2a0f:df40::/29 maxlen: 29
                          2a0f:3f80::/29 maxlen: 29
                          2a12:ecc7::/32 maxlen: 32
                          2a12:ecc0::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a10:67c0::/29 maxlen: 29
                          2a0e:15c0:4::/48 maxlen: 48
                          2a0f:db40::/29 maxlen: 29
                          2a12:ecc6::/32 maxlen: 32
                          2a0f:e640::/29 maxlen: 29
                          2a0f:a04::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:dd:90:39:ed:66:9f:ee:71:47:e1:44:02:ac:e3:0c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan 23 07:38:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a54de5d10e9692b598617bb8e3d711f9291068b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:e1:1d:02:29:7c:a8:c0:fc:f1:01:01:55:
                    63:fc:37:13:fa:3e:4a:ad:95:39:a6:ec:bb:de:63:
                    17:ba:0b:69:d7:2e:35:59:37:ed:12:fa:09:2d:e5:
                    9b:e5:f4:d3:8c:fa:32:1e:af:e7:9f:ff:31:4c:34:
                    3a:94:4a:2d:c2:0b:a2:9b:f0:a2:46:0f:66:f0:a4:
                    39:aa:b7:a8:8a:2f:0e:e8:97:b2:d1:ce:f7:6a:16:
                    c7:a6:7b:dc:38:c0:e3:e4:d5:05:75:89:c8:b2:83:
                    90:e9:f3:c1:63:b6:ad:55:56:99:0c:83:a8:eb:ca:
                    09:7d:7b:b9:4a:1a:49:70:43:43:2a:05:f7:55:19:
                    55:74:6d:88:3f:55:a3:62:e6:99:9b:ee:35:d1:5e:
                    5b:fb:8e:46:fd:d7:7c:39:bb:dd:d0:a8:6e:ef:6b:
                    26:bb:9a:87:73:34:d9:67:bc:4d:77:26:2d:a8:cf:
                    07:52:1e:f7:71:d9:f7:22:3e:0c:8f:9d:ca:66:c7:
                    0d:38:69:9c:59:82:6e:0c:ed:19:3b:04:3d:a6:c5:
                    ec:4b:71:a0:4c:d0:cf:b3:dc:a1:f1:ff:1e:61:0a:
                    12:fa:49:14:41:13:a1:34:1f:69:99:cc:72:74:ab:
                    39:68:99:a6:95:f1:12:70:d7:e5:97:fa:4b:b8:2c:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4D:E5:D1:0E:96:92:B5:98:61:7B:B8:E3:D7:11:F9:29:10:68:B8
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pU3l0Q6WkrWYYXu449cR-SkQaLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/23
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.95.98.0/24
                  45.118.249.0/24
                  45.128.77.0/24
                  45.129.125.0/24
                  45.130.254.0/24
                  45.131.214.0/24
                  45.134.186.0/24
                  45.137.41.0/24
                  45.137.62.0/24
                  45.137.82.0/24
                  45.137.85.0-45.137.86.255
                  45.145.59.0/24
                  45.146.129.0/24
                  45.146.181.0/24
                  45.147.31.0/24
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0/23
                  45.157.39.0/24
                  45.158.197.0-45.158.198.255
                  64.226.54.0/23
                  64.226.156.0/22
                  80.253.248.0/24
                  85.209.131.0/24
                  91.212.100.0/24
                  91.212.107.0/24
                  91.212.120.0/24
                  91.232.255.0/24
                  91.233.20.0/24
                  103.59.40.0/22
                  103.74.76.0/23
                  103.227.84.0-103.227.86.255
                  103.229.31.0/24
                  113.30.152.0/22
                  167.94.165.0/24
                  185.136.204.0/24
                  185.155.202.0/24
                  185.164.59.0/24
                  185.214.72.0/24
                  193.5.64.0/24
                  193.39.143.0/24
                  193.39.208.0/23
                  193.41.38.0/24
                  193.41.68.0/23
                  193.41.86.0/24
                  193.41.115.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                  194.33.62.0/24
                  194.41.38.0/24
                  194.45.34.0/24
                  209.35.158.0/24
                IPv6:
                  2a0b:b740::/29
                  2a0c:7880::/32
                  2a0c:7882:1::/48
                  2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:9240::/29
                  2a0e:15c0:1::/48
                  2a0e:15c0:4::/48
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:f200::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1200::/32
                  2a0f:1480::/29
                  2a0f:1580::/29
                  2a0f:1f80::/29
                  2a0f:2300::/29
                  2a0f:2700::/29
                  2a0f:3940::/29
                  2a0f:3d83::/32
                  2a0f:3f80::/29
                  2a0f:4f80::/48
                  2a0f:7d00:5::/48
                  2a0f:8300::/29
                  2a0f:9600::/29
                  2a0f:db40::/29
                  2a0f:dd40::/29
                  2a0f:df40::/29
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e540::/32
                  2a0f:e600:1::/48
                  2a0f:e640::/29
                  2a0f:e740::/29
                  2a0f:e9c0::/29
                  2a0f:ee00::/29
                  2a10:67c0::/29
                  2a12:ecc0::/32
                  2a12:ecc2::/31
                  2a12:ecc5::-2a12:ecc7:ffff:ffff:ffff:ffff:ffff:ffff
                  2a12:f5c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:58:75:b6:a7:b6:8a:4f:6d:22:96:c2:69:53:58:8a:b9:
         65:78:a9:04:36:e2:2d:e5:6d:68:99:b7:54:ad:95:11:94:14:
         aa:26:d7:44:3c:cd:d7:6a:b7:4e:c4:09:e4:fd:27:14:81:24:
         11:fe:ab:3d:65:16:c3:90:5c:93:11:99:50:ce:7f:36:74:34:
         30:0d:1d:75:eb:4f:c3:30:7f:49:13:58:d6:68:c1:11:d1:ec:
         ee:9d:87:b1:7a:ab:ef:b6:d8:94:d1:2f:7a:19:af:48:0c:ab:
         ca:8f:4b:3c:1e:fc:36:72:2e:af:27:25:e4:15:5f:78:db:96:
         6b:50:44:5f:9d:d1:62:b9:6a:60:01:ee:b7:f7:17:05:50:af:
         14:fb:4e:2f:61:ab:6f:f3:b6:ca:8b:ca:1f:b8:45:44:c8:14:
         c5:23:ee:f0:0a:4f:09:a7:36:d4:0f:e9:2c:f4:69:b3:2c:45:
         32:c8:7d:f0:81:60:08:87:55:fc:86:6b:a6:9c:69:64:b0:6d:
         dd:cd:32:eb:3f:75:2e:48:06:8c:1f:37:fc:a3:1e:a9:42:60:
         67:5b:6d:a6:95:1c:2a:f6:eb:06:36:34:f3:db:f1:71:fc:de:
         a4:c5:6a:07:ee:d1:d4:3a:28:28:b6:20:65:7f:ee:75:8f:07:
         bf:bc:fa:7b
-----BEGIN CERTIFICATE-----
MIIH4jCCBsqgAwIBAgISAYXdkDntZp/ucUfhRAKs4wyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwMTIzMDczODE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTRkZTVkMTBlOTY5MmI1OTg2MTdiYjhlM2Q3MTFmOTI5MTA2OGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsPhHQIpfKjA/PEBAVVj/DcT+j5K
rZU5puy73mMXugtp1y41WTftEvoJLeWb5fTTjPoyHq/nn/8xTDQ6lEotwguim/Ci
Rg9m8KQ5qreoii8O6Jey0c73ahbHpnvcOMDj5NUFdYnIsoOQ6fPBY7atVVaZDIOo
68oJfXu5ShpJcENDKgX3VRlVdG2IP1WjYuaZm+410V5b+45G/dd8Obvd0Khu72sm
u5qHczTZZ7xNdyYtqM8HUh73cdn3Ij4Mj53KZscNOGmcWYJuDO0ZOwQ9psXsS3Gg
TNDPs9yh8f8eYQoS+kkUQROhNB9pmcxydKs5aJmmlfEScNfll/pLuCw9iQIDAQAB
o4IE7jCCBOowHQYDVR0OBBYEFKVN5dEOlpK1mGF7uOPXEfkpEGi4MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvcFUzbDBRNldrcldZWVh1NDQ5Y1ItU2tRYUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDAgYIKwYBBQUHAQcBAf8EggLxMIIC7TCCAYIEAgABMIIB
egMEAS0NugMEAC1W9gMEAC1b0AMEAC1b0wMEAC1fYgMEAC12+QMEAC2ATQMEAC2B
fQMEAC2C/gMEAC2D1gMEAC2GugMEAC2JKQMEAC2JPgMEAC2JUjAMAwQALYlVAwQA
LYlWAwQALZE7AwQALZKBAwQALZK1AwQALZMfAwQALZkVAwQALZkXAwQBLZnaAwQB
LZrmAwQBLZ0kAwQALZ0nMAwDBAAtnsUDBAAtnsYDBAFA4jYDBAJA4pwDBABQ/fgD
BABV0YMDBABb1GQDBABb1GsDBABb1HgDBABb6P8DBABb6RQDBAJnOygDBAFnSkww
DAMEAmfjVAMEAGfjVgMEAGflHwMEAnEemAMEAKdepQMEALmIzAMEALmbygMEALmk
OwMEALnWSAMEAMEFQAMEAMEnjwMEAcEn0AMEAMEpJgMEAcEpRAMEAMEpVgMEAMEp
cwMEAcEpegMEAcFvBAMEAcFvEgMEAMIhPgMEAMIpJgMEAMItIgMEANEjnjCCAWME
AgACMIIBWwMFAyoLt0ADBQAqDHiAAwcAKgx4ggABMA4DBQAqDHiDAwUAKgx4hAMF
AyoMkkADBwAqDhXAAAEDBwAqDhXAAAQDBwAqDhqAASMDBwAqDiJAAAIDBQMqDiRA
MA8DBAEqDvIDBwAqDvIAAAIwDgMFASoPCgIDBQAqDwoEAwUAKg8SAAMFAyoPFIAD
BQMqDxWAAwUDKg8fgAMFAyoPIwADBQMqDycAAwUDKg85QAMFACoPPYMDBQMqDz+A
AwcAKg9PgAAAAwcAKg99AAAFAwUDKg+DAAMFAyoPlgADBQMqD9tAAwUDKg/dQAMF
AyoP30ADBQAqD+HAAwUAKg/hwgMFACoP4ccDBQAqD+VAAwcAKg/mAAABAwUDKg/m
QAMFAyoP50ADBQMqD+nAAwUDKg/uAAMFAyoQZ8ADBQAqEuzAAwUBKhLswjAOAwUA
KhLsxQMFAyoS7MADBQMqEvXAMA0GCSqGSIb3DQEBCwUAA4IBAQBlKlh1tqe2ik9t
IpbCaVNYirlleKkENuIt5W1ombdUrZURlBSqJtdEPM3XardOxAnk/ScUgSQR/qs9
ZRbDkFyTEZlQzn82dDQwDR1160/DMH9JE1jWaMER0ezunYexeqvvttiU0S96Ga9I
DKvKj0s8Hvw2ci6vJyXkFV9425ZrUERfndFiuWpgAe639xcFUK8U+04vYatv87bK
i8ofuEVEyBTFI+7wCk8JpzbUD+ks9GmzLEUyyH3wgWAIh1X8hmumnGlksG3dzTLr
P3UuSAaMHzf8ox6pQmBnW22mlRwq9usGNjTz2/Fx/N6kxWoH7tHUOigotiBlf+51
jwe/vPp7
-----END CERTIFICATE-----
Generated at Sun May 11 22:49:00 2025 by rpki-client