Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/5ofANNnaUzVanvYX6eKhBOzi2kw.roa
File:                     5ofANNnaUzVanvYX6eKhBOzi2kw.roa (raw, json)
Hash identifier:          t0pdnqtfDnQnaO2fGxNnc9cukS5cU8H2QuRi6hnwpSk=
Subject key identifier:   E6:87:C0:34:D9:DA:53:35:5A:9E:F6:17:E9:E2:A1:04:EC:E2:DA:4C
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       2CB6D7D1
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/5ofANNnaUzVanvYX6eKhBOzi2kw.roa
Signing time:             Sat 01 Jan 2022 04:59:45 +0000
ROA not before:           Sat 01 Jan 2022 04:59:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202904
IP address blocks:        77.79.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750180305 (0x2cb6d7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan  1 04:59:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e687c034d9da53355a9ef617e9e2a104ece2da4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:11:4e:0f:24:2e:b3:ad:6a:50:63:12:53:
                    cc:98:56:1f:05:2a:8a:38:6c:bd:de:e3:ae:0d:f2:
                    d9:58:82:bc:03:e8:57:ac:9d:64:89:c1:07:47:85:
                    b0:c1:b3:c7:9a:94:ec:30:22:72:c8:2a:76:f0:1b:
                    3d:24:7b:2b:0e:fa:00:e4:db:17:19:a5:19:28:6c:
                    e1:fb:a0:e7:3d:d2:83:1e:18:8e:e2:76:24:4e:10:
                    64:98:ba:b3:9f:3e:36:af:e6:a4:ea:cd:d4:78:a7:
                    8e:15:9d:b3:7c:7d:cf:82:38:20:80:3b:96:c8:d4:
                    af:c0:db:1e:b9:62:76:6f:2d:fc:57:4b:d1:48:e3:
                    28:12:1e:06:7e:7d:fa:01:53:9e:75:2b:9a:04:a4:
                    f0:83:68:24:c2:c7:7b:55:fe:23:ea:ec:25:c1:2f:
                    88:a3:eb:08:ba:8c:0c:9b:3f:b0:9f:35:44:c3:8f:
                    c0:c6:61:56:44:da:d4:a0:57:f7:37:88:94:01:94:
                    26:bf:8c:85:94:83:a1:02:f5:98:c0:6b:68:08:8a:
                    03:b8:6b:f0:4c:72:90:6b:ed:43:13:ce:e4:57:8d:
                    80:d8:62:39:9a:67:1f:a2:bd:0f:65:fc:f1:30:dc:
                    df:7d:2f:86:70:26:89:18:0b:e7:fb:b4:93:e3:03:
                    c0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:87:C0:34:D9:DA:53:35:5A:9E:F6:17:E9:E2:A1:04:EC:E2:DA:4C
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/5ofANNnaUzVanvYX6eKhBOzi2kw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.79.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:7c:ef:bf:23:9a:61:3c:1c:06:65:cc:2a:1a:20:4b:60:cd:
         b0:e9:16:1c:cb:32:92:4c:a9:0b:74:ed:a0:48:b0:fa:58:2a:
         9c:ee:97:44:30:85:60:d5:03:dd:1f:bf:67:e5:95:7b:4c:bd:
         75:4e:26:da:9f:89:07:86:0a:21:03:8f:de:3a:96:b6:4a:a6:
         4b:39:1a:c2:25:e2:e1:ae:cb:0d:ed:ad:77:62:96:27:e4:c3:
         06:f7:28:fe:54:b0:a5:02:01:82:bb:08:82:8f:60:8f:58:a7:
         f5:c6:10:43:53:e7:d3:42:26:37:7e:69:17:eb:09:e0:ec:df:
         d5:b9:1e:57:99:d8:bd:9f:df:13:c2:05:ac:e3:03:3c:67:78:
         01:38:04:6c:6a:e2:db:2b:e6:27:21:32:e0:c1:ff:2a:44:29:
         c1:af:45:54:17:29:3a:be:8c:14:e1:0f:c3:1e:f6:71:d6:f6:
         41:6e:20:78:26:6b:b2:94:69:f7:6c:76:e5:90:f9:8e:42:4d:
         d7:f8:ab:c7:3f:33:53:85:86:33:42:8c:b1:93:d2:90:0d:4e:
         56:b7:2f:9c:c5:30:6a:2b:71:9e:ed:b6:9c:96:e9:21:8d:5e:
         15:0c:6a:19:91:5d:de:0a:7d:2e:3d:e8:2e:ce:d8:17:09:b0:
         32:b3:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org