Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EiXQQV_dJUuuTPfq4mFrbj9nn3U.roa
File:                     EiXQQV_dJUuuTPfq4mFrbj9nn3U.roa (raw, json)
Hash identifier:          Vcr7L2Vily8aDZaduFaAdbFxR5Jhv8mP//hEzAPf6eI=
Subject key identifier:   12:25:D0:41:5F:DD:25:4B:AE:4C:F7:EA:E2:61:6B:6E:3F:67:9F:75
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       06FC68EC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EiXQQV_dJUuuTPfq4mFrbj9nn3U.roa
Signing time:             Sat 01 Jan 2022 03:54:08 +0000
ROA not before:           Sat 01 Jan 2022 03:54:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35042
IP address blocks:        77.83.36.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117205228 (0x6fc68ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: Jan  1 03:54:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1225d0415fdd254bae4cf7eae2616b6e3f679f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:51:96:bd:e3:11:2d:11:58:13:8e:ec:1f:
                    23:3b:1b:f1:a8:03:83:6a:3c:69:20:90:bd:9c:12:
                    f7:40:91:af:23:3d:ef:55:97:08:f5:26:95:4b:7c:
                    17:69:59:b4:f5:1a:a4:4a:3b:3f:a3:a8:d3:cb:bb:
                    e8:ff:cc:5f:d0:93:b4:0f:d5:57:41:f5:6c:e4:68:
                    98:95:25:df:d4:61:6e:0b:d2:88:c1:cd:62:1e:60:
                    fa:88:bb:7c:8e:c0:00:fd:4c:3b:46:e4:9e:64:f2:
                    df:06:10:32:2e:d8:54:b7:24:0f:f5:91:5d:9e:12:
                    c1:49:0a:14:24:90:43:ab:5c:2c:a6:f5:1f:f2:d2:
                    85:ae:26:0a:50:cc:e8:48:04:24:9f:73:0c:b2:fc:
                    b1:4a:87:a8:ab:72:24:a6:5a:c8:c4:ea:75:89:15:
                    22:ea:b7:ed:81:50:6f:31:05:52:84:a9:1b:27:23:
                    63:80:e4:fd:81:f7:86:49:95:1e:c1:19:59:eb:d0:
                    8a:76:f1:8c:fa:06:d1:1a:61:68:67:49:fb:96:43:
                    9d:48:56:36:87:2e:61:25:ff:90:28:28:96:85:f8:
                    ad:bc:e0:0c:6e:63:87:29:d2:91:85:33:d9:da:d8:
                    e5:08:98:41:57:3c:62:5e:fa:6a:07:1d:28:b5:ba:
                    5a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:25:D0:41:5F:DD:25:4B:AE:4C:F7:EA:E2:61:6B:6E:3F:67:9F:75
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EiXQQV_dJUuuTPfq4mFrbj9nn3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b7:52:be:b5:f7:33:40:b2:2e:88:1e:3a:61:0e:b8:e1:ca:
         a7:da:e3:82:32:29:35:34:10:dd:7a:88:ce:bd:a2:f0:94:c8:
         9c:24:ec:f5:a7:5c:84:90:1c:a8:2d:48:e6:33:eb:77:d9:cf:
         b9:33:d8:4a:7e:f3:92:15:83:60:4e:67:e5:32:87:19:66:ad:
         fc:8b:06:88:7b:7b:27:7b:80:19:4c:2c:9b:3e:90:96:70:7a:
         78:48:ad:00:8e:86:61:dd:21:0f:ce:07:9d:47:05:95:3c:16:
         af:f5:58:39:94:e6:88:f8:d7:24:62:f4:1f:16:e1:03:db:0f:
         07:23:57:f4:24:36:b7:19:68:4d:63:24:fd:16:0e:4f:6e:69:
         fa:22:dc:31:cc:30:ef:08:74:9f:0c:31:83:2c:a1:0d:4d:3d:
         c0:27:e9:2e:01:27:1f:fa:c3:03:da:bf:22:97:65:99:f4:ab:
         ca:7f:c2:af:b0:2b:d0:00:e0:8f:0e:78:22:df:dc:c4:5c:15:
         b9:9f:f3:ae:2b:34:0f:cc:4b:d4:7e:25:dc:af:c5:f0:3c:5a:
         b5:17:43:c8:94:76:f4:79:9d:10:cc:b3:32:ef:2e:96:2f:f9:
         4f:ef:e4:42:2f:d7:56:a9:18:41:06:57:e9:78:50:a5:f1:5b:
         cf:d1:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org