Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/77JYGWIhH9cMzL81hpT16Hu-oGQ.roa
File:                     77JYGWIhH9cMzL81hpT16Hu-oGQ.roa (raw, json)
Hash identifier:          phPWFSdLmK6xrZnL5YJolYWDq1XWpdGtrgjTsvr1Be8=
Subject key identifier:   EF:B2:58:19:62:21:1F:D7:0C:CC:BF:35:86:94:F5:E8:7B:BE:A0:64
Certificate issuer:       /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial:       447D45C7
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/77JYGWIhH9cMzL81hpT16Hu-oGQ.roa
Signing time:             Sat 01 Jan 2022 03:58:28 +0000
ROA not before:           Sat 01 Jan 2022 03:58:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25454
IP address blocks:        92.181.67.0/24 maxlen: 24
                          92.181.66.0/24 maxlen: 24
                          92.181.70.0/23 maxlen: 23
                          92.181.69.0/24 maxlen: 24
                          92.181.65.0/24 maxlen: 24
                          92.181.68.0/24 maxlen: 24
                          92.181.75.0/24 maxlen: 24
                          92.181.74.0/24 maxlen: 24
                          92.181.78.0/23 maxlen: 23
                          92.181.76.0/23 maxlen: 23
                          92.181.72.0/23 maxlen: 23
                          92.181.82.0/23 maxlen: 23
                          92.181.84.0/23 maxlen: 23
                          92.181.80.0/23 maxlen: 23
                          92.181.86.0/23 maxlen: 23
                          92.181.90.0/23 maxlen: 23
                          92.181.89.0/24 maxlen: 24
                          92.181.88.0/24 maxlen: 24
                          92.181.96.0/23 maxlen: 23
                          92.181.92.0/23 maxlen: 23
                          92.181.98.0/23 maxlen: 23
                          92.181.94.0/23 maxlen: 23
                          92.181.100.0/23 maxlen: 23
                          92.181.14.0/23 maxlen: 23
                          92.181.16.0/23 maxlen: 23
                          92.181.12.0/23 maxlen: 23
                          92.181.23.0/24 maxlen: 24
                          92.181.18.0/23 maxlen: 23
                          92.181.22.0/24 maxlen: 24
                          92.181.24.0/23 maxlen: 23
                          92.181.20.0/23 maxlen: 23
                          92.181.30.0/23 maxlen: 23
                          92.181.26.0/23 maxlen: 23
                          92.181.28.0/23 maxlen: 23
                          92.181.38.0/24 maxlen: 24
                          92.181.34.0/23 maxlen: 23
                          92.181.32.0/23 maxlen: 23
                          92.181.36.0/23 maxlen: 23
                          92.181.39.0/24 maxlen: 24
                          92.181.42.0/24 maxlen: 24
                          92.181.40.0/23 maxlen: 23
                          92.181.50.0/23 maxlen: 23
                          92.181.48.0/23 maxlen: 23
                          92.181.58.0/23 maxlen: 23
                          92.181.54.0/23 maxlen: 23
                          92.181.56.0/23 maxlen: 23
                          92.181.52.0/23 maxlen: 23
                          92.181.62.0/23 maxlen: 23
                          92.181.64.0/24 maxlen: 24
                          92.181.60.0/23 maxlen: 23
                          92.181.2.0/23 maxlen: 23
                          92.181.1.0/24 maxlen: 24
                          92.181.4.0/23 maxlen: 23
                          92.181.0.0/24 maxlen: 24
                          92.181.6.0/23 maxlen: 23
                          92.181.10.0/23 maxlen: 23
                          92.181.8.0/23 maxlen: 23
                          2a01:c8c0::/28 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149060551 (0x447d45c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
        Validity
            Not Before: Jan  1 03:58:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efb2581962211fd70cccbf358694f5e87bbea064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:59:0c:76:1d:19:02:2f:80:bb:63:02:47:9c:
                    e3:3e:ab:22:d2:b4:ae:1a:36:54:57:3c:26:4e:ce:
                    64:2c:d0:6f:81:0a:90:60:32:c1:1f:bf:11:5b:82:
                    97:ea:d5:54:49:c4:d9:49:99:8b:64:de:1c:e7:33:
                    47:98:ef:56:81:b9:16:92:a6:0b:f2:14:46:1a:51:
                    af:b0:45:94:1b:47:8b:90:df:ea:d0:ef:08:1b:7a:
                    86:ef:5d:13:7f:51:53:0c:3c:7d:6a:f2:f6:cd:d4:
                    3a:65:ff:b3:0a:b3:9a:73:40:03:f1:16:4e:a6:3b:
                    b9:53:fc:a8:66:b3:cd:cc:2b:d1:23:f4:c6:95:05:
                    f5:ce:d3:e9:b9:c5:7e:e6:68:50:9d:88:46:14:76:
                    ab:76:67:91:51:24:f2:b9:97:bb:2f:bf:e9:f4:24:
                    3f:96:01:2e:fe:f1:e2:18:fe:23:6c:1e:07:74:6a:
                    50:a3:e3:3c:2e:ab:3a:1b:35:39:2e:21:d2:ea:9a:
                    64:38:78:6b:cb:c4:46:9c:56:0f:36:15:dd:a9:45:
                    a3:24:8b:6e:30:95:98:9d:2c:5b:76:3b:f1:3c:43:
                    b7:12:f3:aa:ad:e3:9c:7c:83:90:b8:4b:ab:e6:8c:
                    c2:ce:c6:bb:9d:b6:00:73:35:8a:be:f7:53:e7:f9:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B2:58:19:62:21:1F:D7:0C:CC:BF:35:86:94:F5:E8:7B:BE:A0:64
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/77JYGWIhH9cMzL81hpT16Hu-oGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.181.0.0-92.181.42.255
                  92.181.48.0-92.181.101.255
                IPv6:
                  2a01:c8c0::/28

    Signature Algorithm: sha256WithRSAEncryption
         aa:13:5d:05:5a:33:35:72:61:16:2f:e0:f9:69:7c:f4:8a:8f:
         3a:74:d0:01:eb:77:aa:31:3a:b6:78:06:be:25:92:80:73:66:
         c3:b3:ab:e1:fe:b4:d7:87:67:7b:d6:9c:33:af:d5:f0:f2:4c:
         de:16:76:91:6c:66:d4:ca:22:9f:2a:f2:6d:c2:9e:21:de:9f:
         32:df:e6:9c:5b:d1:cf:f1:5b:d2:e0:ad:ce:60:43:a7:09:f3:
         f9:36:82:30:d6:77:cc:95:7e:7d:1b:85:fc:b2:7e:95:85:28:
         13:16:7b:d1:4e:d9:b7:62:16:e6:38:dc:af:4d:e6:53:9b:bd:
         31:ab:f1:c1:41:b9:97:6a:cb:00:56:f3:6d:cb:9d:02:d4:13:
         40:29:29:2c:cb:73:e8:1d:f5:c8:a3:99:50:c7:39:cd:4b:e7:
         d2:91:8f:af:8f:f4:4a:9b:01:a2:d1:7a:7d:28:89:ac:92:03:
         e3:0e:f5:97:ea:da:af:ad:85:db:4a:0f:b3:cf:a5:0a:16:dc:
         3a:3b:75:aa:fb:f9:a2:67:fe:7c:eb:92:b5:2a:22:a8:d7:41:
         df:9b:88:cf:0f:59:bc:89:f9:3b:26:e6:c6:92:6d:34:be:ad:
         bd:96:a6:60:f6:0d:3a:e0:40:2e:8e:89:53:4c:ba:e6:aa:aa:
         4c:cf:73:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org