Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/syacoFiGDJvZy682QoBz2kndni8.roa
File:                     syacoFiGDJvZy682QoBz2kndni8.roa (raw, json)
Hash identifier:          yMyYHOLkmiZtdIpWqL0/Eq42Zz2yT9jwn0ef44PFoSU=
Subject key identifier:   B3:26:9C:A0:58:86:0C:9B:D9:CB:AF:36:42:80:73:DA:49:DD:9E:2F
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01884376E3B2906AE61681DF3432E78B0693
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/syacoFiGDJvZy682QoBz2kndni8.roa
Signing time:             Mon 22 May 2023 12:37:24 +0000
ROA not before:           Mon 22 May 2023 12:37:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     30633
IP address blocks:        45.129.127.0/24 maxlen: 24
                          193.164.199.0/24 maxlen: 24
                          45.135.37.0/24 maxlen: 24
                          2a0f:1e00:987::/48 maxlen: 48
                          2a0f:1e81:92e8::/48 maxlen: 48
                          2a0f:39c1::/32 maxlen: 32
                          2a0e:c780::/32 maxlen: 32
                          2a0f:7f00::/32 maxlen: 32
                          2a12:ac40::/48 maxlen: 48
                          2a0f:1e81:4319::/48 maxlen: 48
                          2a0f:1e00:456::/48 maxlen: 48
                          2a0f:a00::/32 maxlen: 32
                          2a0e:f201:1::/48 maxlen: 48
                          2a0f:e847:ffff::/48 maxlen: 48
                          2a13:4900::/29 maxlen: 29
                          2a0f:3d84::/32 maxlen: 32
                          2a0e:5a80::/29 maxlen: 29
                          2a0f:1e01:1::/48 maxlen: 48
                          2a0f:3d80:123::/48 maxlen: 48
                          2a0f:1e81:2::/48 maxlen: 48
                          2a12:d540::/29 maxlen: 29
                          2a0f:7d04:1::/48 maxlen: 48
                          2a0f:39c0::/32 maxlen: 32
                          2a0f:1e81:cdae::/48 maxlen: 48
                          2a0e:1a80::/32 maxlen: 32
                          2a0f:1e81:1293::/48 maxlen: 48
                          2a0f:3d87::/32 maxlen: 32
                          2a13:8200::/29 maxlen: 29
                          2a0f:1e00:abc::/48 maxlen: 48
                          2a10:6d40::/29 maxlen: 29
                          2a0f:1e81:a3d0::/48 maxlen: 48
                          2a12:ac40:f::/48 maxlen: 48
                          2a0f:2100::/29 maxlen: 29
                          2a0c:4880::/29 maxlen: 29
                          2a0f:a01::/32 maxlen: 32
                          2a13:1940:1::/48 maxlen: 48
                          2a0f:1e00:123::/48 maxlen: 48
                          2a0f:1e00:def9::/48 maxlen: 48
                          2a0f:3d82::/32 maxlen: 32
                          2a0f:7f01::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:43:76:e3:b2:90:6a:e6:16:81:df:34:32:e7:8b:06:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: May 22 12:37:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b3269ca058860c9bd9cbaf36428073da49dd9e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:6e:3f:5d:3c:f2:cb:fb:d8:4d:62:2b:7d:
                    03:97:1c:cc:3d:57:4f:b7:95:41:31:ed:a4:94:da:
                    10:68:e7:68:cd:c9:b2:10:37:88:8a:94:58:5a:a2:
                    e0:a1:1a:08:d9:c2:0b:74:5d:a9:ef:d7:35:ee:0b:
                    82:c5:0a:9e:b5:d6:44:d6:19:1c:0f:2f:61:68:15:
                    62:19:d2:7f:2c:38:4d:8b:93:a3:ac:07:3d:26:2d:
                    1d:9a:20:3a:62:6e:b3:e5:86:5b:da:64:37:82:d4:
                    d8:51:14:ef:33:63:55:4b:08:19:58:bc:ab:54:2b:
                    99:3d:1f:89:19:98:5e:8e:2e:a4:32:87:75:41:fd:
                    7e:b2:45:b3:20:43:61:04:bc:e8:0a:3d:23:fd:28:
                    2d:32:93:00:3a:6c:05:cf:22:53:35:b3:a5:08:a4:
                    f8:ef:4c:63:bb:95:14:98:df:59:dc:7b:ac:b0:61:
                    b6:54:91:b1:48:62:9b:3f:1e:3a:c8:a1:e2:93:98:
                    72:61:b9:7a:11:17:e4:6e:50:a2:b8:09:8b:5a:51:
                    78:23:af:f0:2d:77:db:30:4a:b1:0a:76:04:e5:58:
                    28:62:d6:66:d1:51:19:3a:96:90:96:57:aa:dc:e5:
                    02:7c:84:e7:41:75:ed:e8:fb:d3:b0:f6:f7:5b:46:
                    60:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:26:9C:A0:58:86:0C:9B:D9:CB:AF:36:42:80:73:DA:49:DD:9E:2F
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/syacoFiGDJvZy682QoBz2kndni8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.127.0/24
                  45.135.37.0/24
                  193.164.199.0/24
                IPv6:
                  2a0c:4880::/29
                  2a0e:1a80::/32
                  2a0e:5a80::/29
                  2a0e:c780::/32
                  2a0e:f201:1::/48
                  2a0f:a00::/31
                  2a0f:1e00:123::/48
                  2a0f:1e00:456::/48
                  2a0f:1e00:987::/48
                  2a0f:1e00:abc::/48
                  2a0f:1e00:def9::/48
                  2a0f:1e01:1::/48
                  2a0f:1e81:2::/48
                  2a0f:1e81:1293::/48
                  2a0f:1e81:4319::/48
                  2a0f:1e81:92e8::/48
                  2a0f:1e81:a3d0::/48
                  2a0f:1e81:cdae::/48
                  2a0f:2100::/29
                  2a0f:39c0::/31
                  2a0f:3d80:123::/48
                  2a0f:3d82::/32
                  2a0f:3d84::/32
                  2a0f:3d87::/32
                  2a0f:7d04:1::/48
                  2a0f:7f00::/31
                  2a0f:e847:ffff::/48
                  2a10:6d40::/29
                  2a12:ac40::/48
                  2a12:ac40:f::/48
                  2a12:d540::/29
                  2a13:1940:1::/48
                  2a13:4900::/29
                  2a13:8200::/29

    Signature Algorithm: sha256WithRSAEncryption
         03:89:3c:35:d8:20:3e:5b:f8:6a:31:c3:e9:1d:35:e6:35:56:
         6a:dc:b3:82:20:12:bf:8b:d6:b5:e4:17:2c:60:7d:0f:c3:88:
         96:cd:17:bb:28:4b:de:b7:d9:c0:cd:98:f2:ce:9c:a1:d7:eb:
         a4:11:d0:b5:50:f3:dc:d1:63:78:2e:34:91:ba:c7:74:61:d4:
         38:43:2d:3f:fb:76:97:63:fd:ea:a3:18:87:8c:73:62:f7:35:
         40:23:e4:89:6d:57:f7:8b:41:d5:2a:7a:51:ca:04:0f:c4:40:
         2d:84:fe:66:95:73:c7:60:e1:23:57:4e:8f:7b:37:d4:67:3c:
         c6:2b:59:cb:22:fb:e7:6e:13:c1:c4:5a:7b:10:d6:55:a5:b1:
         88:63:1a:da:c5:77:93:aa:95:6b:7a:73:91:7c:b8:a7:df:f8:
         f4:1d:bf:ff:a8:31:40:cc:99:64:54:e0:b9:70:42:f4:71:0b:
         b4:39:4e:27:57:01:3e:02:25:52:c4:83:61:5b:c5:31:c1:ba:
         a0:56:c8:b0:4b:43:0e:fe:20:80:31:b9:71:4f:79:ac:55:2e:
         ad:aa:0c:da:f8:30:4c:f4:e4:ea:70:d9:ac:c7:5f:12:3b:73:
         d4:4e:ba:ff:14:db:b3:9b:e9:60:90:3f:fc:bc:9c:99:c7:57:
         dd:57:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:16:01 2025 by rpki-client