Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/ABwQ5YeKUrlRpYkxEIJWIuCPWbY.roa
File:                     ABwQ5YeKUrlRpYkxEIJWIuCPWbY.roa (raw, json)
Hash identifier:          GZwd2qcVogocXgwjWRUTv1QPJR87hGX/AS/1DUFMOto=
Subject key identifier:   00:1C:10:E5:87:8A:52:B9:51:A5:89:31:10:82:56:22:E0:8F:59:B6
Certificate issuer:       /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial:       018793A5FBD9434919B3A6432A09568A50F8
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/ABwQ5YeKUrlRpYkxEIJWIuCPWbY.roa
Signing time:             Tue 18 Apr 2023 09:15:41 +0000
ROA not before:           Tue 18 Apr 2023 09:15:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48715
IP address blocks:        185.141.105.0/24 maxlen: 24
                          185.141.104.0/24 maxlen: 24
                          185.141.104.0/22 maxlen: 22
                          185.141.107.0/24 maxlen: 24
                          185.141.106.0/24 maxlen: 24
                          185.18.212.0/22 maxlen: 22
                          185.18.212.0/24 maxlen: 24
                          185.18.213.0/24 maxlen: 24
                          185.18.214.0/24 maxlen: 24
                          185.18.215.0/24 maxlen: 24
                          195.211.44.0/24 maxlen: 24
                          195.211.44.0/22 maxlen: 22
                          195.211.47.0/24 maxlen: 24
                          195.211.45.0/24 maxlen: 24
                          195.211.46.0/24 maxlen: 24
                          195.110.38.0/23 maxlen: 23
                          91.236.168.0/24 maxlen: 24
                          91.236.168.0/23 maxlen: 23
                          91.236.169.0/24 maxlen: 24
                          152.89.44.0/24 maxlen: 24
                          152.89.44.0/22 maxlen: 22
                          152.89.47.0/24 maxlen: 24
                          152.89.46.0/24 maxlen: 24
                          152.89.45.0/24 maxlen: 24
                          185.51.200.0/22 maxlen: 22
                          185.51.200.0/24 maxlen: 24
                          185.51.203.0/24 maxlen: 24
                          185.51.201.0/24 maxlen: 24
                          185.51.202.0/24 maxlen: 24
                          185.112.150.0/23 maxlen: 23
                          185.112.150.0/24 maxlen: 24
                          185.112.151.0/24 maxlen: 24
                          185.112.149.0/24 maxlen: 24
                          185.121.131.0/24 maxlen: 24
                          185.121.130.0/24 maxlen: 24
                          185.121.130.0/23 maxlen: 23
                          88.135.38.0/24 maxlen: 24
                          88.135.36.0/22 maxlen: 22
                          88.135.36.0/24 maxlen: 24
                          88.135.37.0/24 maxlen: 24
                          185.141.132.0/24 maxlen: 24
                          185.141.132.0/22 maxlen: 22
                          185.141.134.0/24 maxlen: 24
                          185.141.135.0/24 maxlen: 24
                          185.141.133.0/24 maxlen: 24
                          188.209.152.0/24 maxlen: 24
                          188.209.152.0/23 maxlen: 23
                          188.209.153.0/24 maxlen: 24
                          88.135.39.0/24 maxlen: 24
                          185.128.138.0/24 maxlen: 24
                          185.128.139.0/24 maxlen: 24
                          185.128.136.0/22 maxlen: 22
                          185.128.137.0/24 maxlen: 24
                          185.128.136.0/24 maxlen: 24
                          2a0a:5e80::/48 maxlen: 48
                          2a0a:5e80::/64 maxlen: 64
                          2a0a:5e80::/29 maxlen: 29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:93:a5:fb:d9:43:49:19:b3:a6:43:2a:09:56:8a:50:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
        Validity
            Not Before: Apr 18 09:15:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=001c10e5878a52b951a5893110825622e08f59b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:9c:68:c6:64:6b:69:41:83:8e:9e:7d:fd:
                    fd:68:52:97:ed:4b:10:5c:f5:b5:de:50:11:a0:52:
                    fe:51:69:9b:75:8d:b0:f8:53:c9:5a:d9:ba:c1:9a:
                    1e:e7:5e:01:9d:f5:13:c3:ed:ae:fb:fe:3b:a0:f7:
                    d4:50:3f:c0:cc:31:cd:8e:65:72:45:72:ac:06:d2:
                    15:2d:1e:d5:ce:ae:02:ac:e9:89:0a:09:bc:7b:d9:
                    f7:79:24:b1:14:c5:a6:44:79:20:2b:af:b7:d4:87:
                    12:4f:ad:5c:63:1f:84:c9:25:44:73:0d:c1:3d:a2:
                    c8:10:46:e3:06:f9:86:4d:d6:5f:19:41:70:90:5a:
                    ed:f6:b5:f6:29:99:c0:07:b2:11:7e:8e:ea:11:9c:
                    c3:68:07:fa:da:95:a5:37:6c:dd:ff:d8:9f:bc:b1:
                    2d:67:b2:12:d1:b4:13:5b:9c:d5:14:18:4f:21:e8:
                    f4:0f:4d:2c:85:31:f6:35:80:fb:7b:4f:f2:6c:df:
                    9c:41:fe:b2:82:50:da:1a:0e:5f:88:c1:9c:41:86:
                    52:6f:a2:6b:9c:8d:3e:85:34:64:14:4c:8a:ec:55:
                    31:21:43:da:f0:d2:4f:72:2e:bf:7b:2d:1c:cb:75:
                    eb:68:a2:7f:9a:e1:66:82:4b:60:0e:25:95:38:a3:
                    7d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1C:10:E5:87:8A:52:B9:51:A5:89:31:10:82:56:22:E0:8F:59:B6
            X509v3 Authority Key Identifier:
                keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/ABwQ5YeKUrlRpYkxEIJWIuCPWbY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.135.36.0/22
                  91.236.168.0/23
                  152.89.44.0/22
                  185.18.212.0/22
                  185.51.200.0/22
                  185.112.149.0-185.112.151.255
                  185.121.130.0/23
                  185.128.136.0/22
                  185.141.104.0/22
                  185.141.132.0/22
                  188.209.152.0/23
                  195.110.38.0/23
                  195.211.44.0/22
                IPv6:
                  2a0a:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         12:b5:7e:40:40:d3:60:77:0a:5b:46:7c:22:88:b1:da:a4:3b:
         d5:14:3a:b1:59:d7:a7:aa:93:ec:c9:29:06:02:7c:f9:cd:92:
         d5:7f:04:84:13:8b:fd:e5:59:cf:d2:96:41:23:07:73:cb:76:
         fd:5d:05:16:60:59:0e:18:f5:17:9b:ec:5b:d0:ba:38:a6:72:
         bf:20:c6:99:b7:21:a7:f6:2c:cb:70:f0:54:0a:95:a7:e9:ca:
         6d:d0:e7:29:4b:7f:0b:e2:bc:a8:3f:2f:bb:73:fd:55:6d:b9:
         38:97:fe:c3:3f:16:dd:e2:98:f8:15:4b:0b:ed:8a:1f:a2:f9:
         60:53:ae:e8:79:48:99:f5:8a:7a:e9:bb:19:82:af:dc:d7:19:
         ec:d0:f3:8b:13:0b:d3:8c:8a:57:bf:24:97:bd:ec:40:d1:db:
         a5:2c:3a:eb:de:48:c5:5a:e8:93:27:bb:e3:03:21:60:ee:c0:
         43:72:c8:68:8c:ed:1b:86:2f:d6:df:af:a7:4c:3a:b7:ce:54:
         8f:2e:90:7e:18:10:e8:ba:f8:47:e8:d4:0d:3d:27:e7:92:d4:
         fd:fa:01:dd:38:a0:dd:1e:00:95:77:09:c1:5a:7f:a8:16:4e:
         58:b0:74:86:4b:86:6e:1b:86:f5:93:8d:20:06:72:96:86:6c:
         ab:0c:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:41:42 2025 by rpki-client