Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JZ63kbAuynniepUFPAD5vk9KB6c.roa
File:                     JZ63kbAuynniepUFPAD5vk9KB6c.roa (raw, json)
Hash identifier:          Tjug+l7K0DZUI1mGZ6HV4eckviTN7c41m5m5oKyXlsY=
Subject key identifier:   25:9E:B7:91:B0:2E:CA:79:E2:7A:95:05:3C:00:F9:BE:4F:4A:07:A7
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       2CBB6F4F
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JZ63kbAuynniepUFPAD5vk9KB6c.roa
Signing time:             Sat 01 Jan 2022 04:59:48 +0000
ROA not before:           Sat 01 Jan 2022 04:59:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207206
IP address blocks:        77.79.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750481231 (0x2cbb6f4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan  1 04:59:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=259eb791b02eca79e27a95053c00f9be4f4a07a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:99:6f:5c:73:0b:84:6c:d5:a3:54:89:21:eb:
                    13:8e:60:8e:8c:04:19:b8:95:1b:25:90:03:b6:25:
                    a3:02:ff:fb:e7:77:b6:9c:8e:09:f2:7c:e6:97:90:
                    33:bc:b7:e3:bf:be:f9:67:a6:0a:9e:0a:06:b7:5e:
                    a0:e3:fc:fe:99:a6:67:8d:f4:88:a0:4e:1b:e6:0d:
                    b5:ba:a7:cb:ef:6b:b8:cc:d9:6c:c0:0f:a2:e8:28:
                    c4:7a:25:d5:de:10:68:d3:05:4e:5b:0f:66:97:a9:
                    b7:2e:8b:6a:1c:e0:ed:8a:e0:da:76:ce:6d:71:89:
                    cc:e2:96:4e:07:56:b9:e7:7b:7e:8f:79:fb:a4:13:
                    2d:1d:04:ea:2b:d2:2e:4f:13:4d:1d:11:b8:3f:23:
                    42:4b:01:1d:89:14:89:bb:a9:f4:28:f3:a0:2b:84:
                    83:b3:17:6e:74:22:ee:cd:4c:c4:8e:a6:00:3f:37:
                    a3:1a:de:0c:21:ed:69:06:18:26:64:20:7e:43:c8:
                    8a:b3:82:8f:ff:c7:6c:3a:b7:68:d4:d2:16:f8:9e:
                    58:d1:7c:6d:7c:7e:52:4a:f2:e2:2d:4b:ba:68:73:
                    0c:cb:86:66:6b:bf:b4:f2:50:16:b8:4b:a4:d6:12:
                    50:55:a7:e8:f6:74:63:83:fd:b8:08:32:db:6d:fc:
                    51:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9E:B7:91:B0:2E:CA:79:E2:7A:95:05:3C:00:F9:BE:4F:4A:07:A7
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JZ63kbAuynniepUFPAD5vk9KB6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.79.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:e1:eb:9d:f4:ef:39:49:43:08:cb:94:ab:db:a1:bc:54:
         66:f5:68:3b:c7:c6:08:40:92:3c:17:0b:25:b2:4b:4a:f3:14:
         08:9d:51:15:03:39:72:8c:a5:d7:fe:1e:be:79:f9:e6:7d:37:
         15:18:85:ed:6c:64:f6:7f:28:89:0b:ce:ff:6a:4c:d6:21:17:
         99:e2:0c:fb:c4:3e:dc:cf:63:ca:e4:86:74:a3:ef:30:2a:2b:
         07:5c:6a:c0:f2:2f:8b:92:dd:bc:71:9b:eb:0d:44:5b:65:37:
         95:55:2d:54:0c:07:67:06:f0:ac:33:e8:1c:0e:73:65:2d:ef:
         3b:6c:c1:45:b6:72:13:12:ed:39:65:79:d5:dc:01:14:84:c7:
         67:f5:5b:d3:f2:bc:6c:08:61:69:80:50:8f:08:58:d7:bb:25:
         b0:c0:67:7e:63:4e:3f:df:28:27:f6:62:f1:14:b8:ba:4f:c9:
         ae:67:0a:fc:31:1c:f9:ff:4b:72:52:50:5b:76:c8:6f:41:14:
         d9:98:d2:ad:8f:e9:25:b0:fb:1e:78:90:7d:6e:24:9b:1e:e7:
         90:91:e7:9b:ac:8a:06:a3:3d:d7:38:e7:bd:3b:e4:59:85:f3:
         60:9b:8e:28:86:64:c3:ec:f4:3a:9d:e2:19:56:cc:11:e4:55:
         84:0e:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org