Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iOevC6__VMUXqxq6Qf_sCxoa8pY.roa
File:                     iOevC6__VMUXqxq6Qf_sCxoa8pY.roa (raw, json)
Hash identifier:          8xt2jtQW+4BXDfJIiCOsRhgJUPeWljopAO4usWsiibU=
Subject key identifier:   88:E7:AF:0B:AF:FF:54:C5:17:AB:1A:BA:41:FF:EC:0B:1A:1A:F2:96
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01836449246A7CFCFC8E20CAED80C483D9D0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iOevC6__VMUXqxq6Qf_sCxoa8pY.roa
Signing time:             Thu 22 Sep 2022 08:20:58 +0000
ROA not before:           Thu 22 Sep 2022 08:20:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.86.246.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          45.137.85.0/24 maxlen: 24
                          45.137.82.0/24 maxlen: 24
                          45.137.86.0/24 maxlen: 24
                          193.111.4.0/24 maxlen: 24
                          193.111.5.0/24 maxlen: 24
                          193.111.19.0/24 maxlen: 24
                          193.111.18.0/24 maxlen: 24
                          45.154.231.0/24 maxlen: 24
                          45.154.230.0/24 maxlen: 24
                          185.136.204.0/24 maxlen: 24
                          193.5.64.0/24 maxlen: 24
                          45.137.41.0/24 maxlen: 24
                          45.157.38.0/24 maxlen: 24
                          45.157.36.0/24 maxlen: 24
                          45.153.219.0/24 maxlen: 24
                          45.153.218.0/24 maxlen: 24
                          193.41.123.0/24 maxlen: 24
                          193.41.122.0/24 maxlen: 24
                          45.91.211.0/24 maxlen: 24
                          45.91.208.0/24 maxlen: 24
                          193.41.115.0/24 maxlen: 24
                          45.153.23.0/24 maxlen: 24
                          45.153.21.0/24 maxlen: 24
                          194.45.34.0/24 maxlen: 24
                          91.212.107.0/24 maxlen: 24
                          45.13.186.0/24 maxlen: 24
                          113.30.152.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          113.30.155.0/24 maxlen: 24
                          113.30.154.0/24 maxlen: 24
                          113.30.153.0/24 maxlen: 24
                          103.229.31.0/24 maxlen: 24
                          91.212.100.0/24 maxlen: 24
                          91.233.20.0/24 maxlen: 24
                          45.158.198.0/24 maxlen: 24
                          45.158.197.0/24 maxlen: 24
                          91.232.255.0/24 maxlen: 24
                          2a0f:e1c2::/32 maxlen: 32
                          2a0f:1480::/29 maxlen: 29
                          2a0f:1f80::/29 maxlen: 29
                          2a0c:7884::/32 maxlen: 32
                          2a09:17c0::/29 maxlen: 29
                          2a0f:dac0::/29 maxlen: 29
                          2a0e:2240:2::/48 maxlen: 48
                          2a0f:ee00::/29 maxlen: 29
                          2a0f:e6c0:fe1::/48 maxlen: 48
                          2a0f:2700::/29 maxlen: 29
                          2a0f:e041::/32 maxlen: 32
                          2a0f:e1c0::/32 maxlen: 32
                          2a0e:f200:1::/48 maxlen: 48
                          2a0f:7d00:1::/48 maxlen: 48
                          2a0f:a03::/32 maxlen: 32
                          2a0f:6d80::/29 maxlen: 29
                          2a0e:1a80:123::/48 maxlen: 48
                          2a0f:da40::/29 maxlen: 29
                          2a0b:b740::/29 maxlen: 29
                          2a0f:e1c7::/32 maxlen: 32
                          2a12:4ac0::/29 maxlen: 29
                          2a0f:e040:2::/48 maxlen: 48
                          2a0a:2d00:1::/48 maxlen: 48
                          2a0e:f200:2::/48 maxlen: 48
                          2a0f:e6c0:991::/48 maxlen: 48
                          2a0f:ea00::/29 maxlen: 29
                          2a0f:e740::/29 maxlen: 29
                          2a0c:7883::/32 maxlen: 32
                          2a0e:2440::/29 maxlen: 29
                          2a0c:7880::/32 maxlen: 32
                          2a0e:9b00::/29 maxlen: 29
                          2a0e:e980::/29 maxlen: 29
                          2a0f:1380::/29 maxlen: 29
                          2a12:d6c0::/29 maxlen: 29
                          2a0f:3d83::/32 maxlen: 32
                          2a0f:7d00:5::/48 maxlen: 48
                          2a0f:8300::/29 maxlen: 29
                          2a0f:df40::/29 maxlen: 29
                          2a0f:1580::/29 maxlen: 29
                          2a0f:3f80::/29 maxlen: 29
                          2a0f:3940::/29 maxlen: 29
                          2a0f:a02::/32 maxlen: 32
                          2a0f:e600:1::/48 maxlen: 48
                          2a0f:e6c0:123::/48 maxlen: 48
                          2a0f:e040::/48 maxlen: 48
                          2a0f:e9c0::/29 maxlen: 29
                          2a0f:7f00::/29 maxlen: 29
                          2a0e:15c0:4::/48 maxlen: 48
                          2a0f:db40::/29 maxlen: 29
                          2a0f:e640::/29 maxlen: 29
                          2a0f:a04::/32 maxlen: 32
                          2a0f:1200::/32 maxlen: 32
                          2a0f:7d00:3::/48 maxlen: 48
                          2a0f:8100::/29 maxlen: 29
                          2a0c:7882:1::/48 maxlen: 48
                          2a0f:e143::/32 maxlen: 32
                          2a0f:dd40::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:64:49:24:6a:7c:fc:fc:8e:20:ca:ed:80:c4:83:d9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Sep 22 08:20:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=88e7af0bafff54c517ab1aba41ffec0b1a1af296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:ff:5f:85:53:95:db:31:e1:f4:79:fb:dc:
                    c7:1b:42:ad:10:ba:be:b9:c3:97:27:d2:4e:e3:e6:
                    5e:ea:4e:87:af:21:69:b7:ba:39:95:cd:b4:8b:00:
                    77:a7:1e:e0:44:e8:35:a1:54:77:95:80:0d:ad:51:
                    82:e7:c9:91:a3:d6:99:cb:87:d0:40:06:9c:46:d3:
                    7b:7c:ac:d6:a8:56:09:e1:53:32:25:7e:0b:36:de:
                    51:73:a1:b7:e6:cd:a8:5b:09:21:97:55:5a:b0:66:
                    be:ec:48:fc:3c:99:a3:98:02:a4:41:c0:14:c0:9c:
                    99:f2:36:99:9c:0d:88:bd:5f:82:21:93:6d:d2:05:
                    39:5a:f3:f1:2a:d6:41:c3:eb:88:e3:4c:15:4b:83:
                    2e:fa:3f:11:90:41:bb:e6:10:a8:be:c2:55:35:60:
                    bc:79:60:4a:56:7a:d9:59:39:ea:53:e9:87:6f:c5:
                    36:46:fb:ef:6c:15:92:1e:e8:5b:6b:18:27:fc:eb:
                    fc:55:cf:e9:bb:8e:bc:36:8c:ee:99:68:69:05:0d:
                    b2:06:43:6c:61:1c:93:7a:3b:73:09:02:cc:c8:41:
                    8a:7f:03:a8:48:d1:87:5e:5a:44:19:e6:eb:c6:7f:
                    b7:bb:25:18:9c:60:1b:c8:5c:8f:e2:58:f8:aa:85:
                    70:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:AF:0B:AF:FF:54:C5:17:AB:1A:BA:41:FF:EC:0B:1A:1A:F2:96
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iOevC6__VMUXqxq6Qf_sCxoa8pY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.186.0/24
                  45.86.246.0/24
                  45.91.208.0/24
                  45.91.211.0/24
                  45.128.77.0/24
                  45.137.41.0/24
                  45.137.82.0/24
                  45.137.85.0-45.137.86.255
                  45.153.21.0/24
                  45.153.23.0/24
                  45.153.218.0/23
                  45.154.230.0/23
                  45.157.36.0/24
                  45.157.38.0/24
                  45.158.197.0-45.158.198.255
                  91.212.100.0/24
                  91.212.107.0/24
                  91.232.255.0/24
                  91.233.20.0/24
                  103.229.31.0/24
                  113.30.152.0/22
                  185.136.204.0/24
                  185.164.59.0/24
                  193.5.64.0/24
                  193.41.115.0/24
                  193.41.122.0/23
                  193.111.4.0/23
                  193.111.18.0/23
                  194.45.34.0/24
                IPv6:
                  2a09:17c0::/29
                  2a0a:2d00:1::/48
                  2a0b:b740::/29
                  2a0c:7880::/32
                  2a0c:7882:1::/48
                  2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:15c0:4::/48
                  2a0e:1a80:123::/48
                  2a0e:2240:2::/48
                  2a0e:2440::/29
                  2a0e:9b00::/29
                  2a0e:e980::/29
                  2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1200::/32
                  2a0f:1380::/29
                  2a0f:1480::/29
                  2a0f:1580::/29
                  2a0f:1f80::/29
                  2a0f:2700::/29
                  2a0f:3940::/29
                  2a0f:3d83::/32
                  2a0f:3f80::/29
                  2a0f:6d80::/29
                  2a0f:7d00:1::/48
                  2a0f:7d00:3::/48
                  2a0f:7d00:5::/48
                  2a0f:7f00::/29
                  2a0f:8100::/29
                  2a0f:8300::/29
                  2a0f:da40::/29
                  2a0f:dac0::/29
                  2a0f:db40::/29
                  2a0f:dd40::/29
                  2a0f:df40::/29
                  2a0f:e040::/48
                  2a0f:e040:2::/48
                  2a0f:e041::/32
                  2a0f:e143::/32
                  2a0f:e1c0::/32
                  2a0f:e1c2::/32
                  2a0f:e1c7::/32
                  2a0f:e600:1::/48
                  2a0f:e640::/29
                  2a0f:e6c0:123::/48
                  2a0f:e6c0:991::/48
                  2a0f:e6c0:fe1::/48
                  2a0f:e740::/29
                  2a0f:e9c0::/29
                  2a0f:ea00::/29
                  2a0f:ee00::/29
                  2a12:4ac0::/29
                  2a12:d6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0e:5e:a9:e0:b5:7d:a0:6f:29:b3:e0:67:38:36:54:54:39:7d:
         ba:c7:a2:c6:42:b9:3c:3a:98:d8:c0:64:2e:21:2d:b6:16:51:
         d5:43:b1:ec:89:fd:de:57:b0:f3:71:f1:75:ad:b0:95:b0:1a:
         13:71:f3:22:50:14:cd:0d:60:3f:e4:07:dc:df:63:54:7c:ae:
         39:21:ae:fe:c8:21:68:cf:dd:5d:d0:12:76:08:16:84:f3:b6:
         df:28:6f:1e:f1:ad:97:63:61:df:11:a7:88:6a:26:a3:29:75:
         b8:5c:22:b9:50:78:4f:3b:b3:cd:98:17:23:4b:99:77:d2:e4:
         6b:ee:eb:b2:04:61:94:ec:26:00:a8:23:7e:ce:3d:c0:e9:9e:
         d5:63:85:f5:8d:8b:64:f7:a8:30:a2:87:62:15:b1:a8:8f:04:
         f3:bd:f0:e3:9b:cb:93:42:75:00:dc:da:0c:95:17:37:1a:11:
         39:c4:5d:28:69:e2:f1:43:91:b4:ae:f2:28:49:22:70:ef:fb:
         d9:14:b6:1f:fb:91:8b:5f:3b:c1:9a:cb:d2:bc:bb:9d:b0:b0:
         77:e0:d6:a8:52:56:3c:86:03:56:74:db:03:c3:f4:d0:bb:d0:
         cb:d7:83:a5:1b:0c:b5:38:bc:5f:ff:ff:cb:5d:cc:95:4e:54:
         77:26:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:15 2023 by rpki-client on console.sobornost.net