Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n7IPEvcv4Jl3Txhk4JhN-TdjBt8.roa
File:                     n7IPEvcv4Jl3Txhk4JhN-TdjBt8.roa (raw, json)
Hash identifier:          CsBTJCMmq3vsRojFyEosC5btbKgD5Pkg1XOBKcjZH0U=
Subject key identifier:   9F:B2:0F:12:F7:2F:E0:99:77:4F:18:64:E0:98:4D:F9:37:63:06:DF
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       2CADFD39
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n7IPEvcv4Jl3Txhk4JhN-TdjBt8.roa
Signing time:             Sat 01 Jan 2022 04:59:40 +0000
ROA not before:           Sat 01 Jan 2022 04:59:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197474
IP address blocks:        77.79.230.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749600057 (0x2cadfd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan  1 04:59:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9fb20f12f72fe099774f1864e0984df9376306df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:e0:cd:f5:dc:e9:ed:af:dc:34:08:dc:0b:
                    58:c4:ac:cb:3b:a8:88:95:d3:c3:b4:75:50:9d:98:
                    f0:8e:6c:f8:a6:c2:a8:71:1f:b9:24:15:63:8b:8d:
                    09:58:cb:77:c5:41:d7:41:15:3a:25:ea:4c:54:dc:
                    81:b2:95:ec:5b:83:7d:97:9a:f3:1a:99:00:82:b9:
                    6c:c5:f4:fc:cb:73:35:7d:ae:be:63:b6:e6:8d:30:
                    57:15:ee:9a:fb:c1:9a:95:20:0a:86:63:6f:13:91:
                    71:e8:1a:8a:4a:22:42:64:90:b7:28:d3:0f:44:6a:
                    10:bd:ce:3e:a4:04:13:a6:2b:7b:34:02:c1:39:cd:
                    b2:93:ff:9a:3b:0c:a1:a6:fc:8a:5d:3b:5b:8d:24:
                    6e:52:2b:39:ea:a9:00:10:84:fd:be:e6:68:b7:0e:
                    29:5f:60:4f:b5:85:49:39:cc:fa:31:ae:99:3e:da:
                    75:8f:f8:6b:bf:bf:91:d8:36:27:5e:1a:dc:39:b8:
                    8c:05:fc:08:1a:d9:a5:52:4a:d1:fe:92:07:4c:75:
                    f3:71:92:f4:6a:1b:7f:b1:21:95:24:6d:45:4e:ad:
                    44:27:b8:3d:2e:f6:84:d2:65:04:a4:a1:1e:d9:45:
                    28:94:bc:5e:13:83:d7:ae:ae:e7:4e:f2:77:27:38:
                    c3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B2:0F:12:F7:2F:E0:99:77:4F:18:64:E0:98:4D:F9:37:63:06:DF
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n7IPEvcv4Jl3Txhk4JhN-TdjBt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.79.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:39:3c:cf:fc:40:4d:b2:4b:b3:f1:e4:d7:16:54:48:07:1a:
         b5:4e:92:44:82:2e:39:45:fa:09:07:a1:da:d2:07:42:be:0b:
         29:aa:61:a3:9b:b8:95:95:3d:2d:93:ce:ed:3f:d3:22:2a:96:
         f2:79:1e:91:35:a9:47:77:95:0f:af:32:0e:b2:af:55:98:85:
         9e:fe:29:3b:95:bc:69:27:06:c9:73:e2:48:66:a2:6b:0e:d6:
         fa:f2:bb:f4:99:0c:58:10:6d:8e:40:9c:6a:b6:47:d1:b3:68:
         6b:48:70:96:0c:da:50:53:de:ee:ca:b2:50:1c:df:50:25:9c:
         49:de:df:ce:b7:89:d1:f0:44:00:0c:50:bc:e9:68:ae:ba:eb:
         2d:f5:c0:94:ba:74:83:44:43:a7:72:13:b3:21:3e:f4:36:fa:
         08:25:e2:35:89:41:b9:64:32:f1:c5:e9:0b:3e:23:68:a0:f4:
         25:37:b3:1a:31:20:b0:3a:3b:bf:ca:2a:19:20:d9:d2:51:04:
         d6:7b:9b:5f:1a:2b:64:06:0e:0e:6e:a1:8c:97:71:44:ef:5d:
         13:d3:ce:c0:68:19:50:d2:6b:51:fd:bf:0c:57:77:7c:e2:7a:
         b9:1b:4b:0a:79:14:f4:16:f6:c2:a9:0e:5c:e2:a3:b4:f3:6a:
         77:a0:ef:52
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIELK39OTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OGM1MTBmYzliODY1ZDk2ZTNhZmM3YzU2MDU2ZWZhZDlhMzMwYzViMB4XDTIyMDEw
MTA0NTk0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWZiMjBmMTJmNzJm
ZTA5OTc3NGYxODY0ZTA5ODRkZjkzNzYzMDZkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMhX4M313Ontr9w0CNwLWMSsyzuoiJXTw7R1UJ2Y8I5s+KbC
qHEfuSQVY4uNCVjLd8VB10EVOiXqTFTcgbKV7FuDfZea8xqZAIK5bMX0/MtzNX2u
vmO25o0wVxXumvvBmpUgCoZjbxORcegaikoiQmSQtyjTD0RqEL3OPqQEE6YrezQC
wTnNspP/mjsMoab8il07W40kblIrOeqpABCE/b7maLcOKV9gT7WFSTnM+jGumT7a
dY/4a7+/kdg2J14a3Dm4jAX8CBrZpVJK0f6SB0x183GS9Gobf7EhlSRtRU6tRCe4
PS72hNJlBKShHtlFKJS8XhOD166u507ydyc4w3kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSfsg8S9y/gmXdPGGTgmE35N2MG3zAfBgNVHSMEGDAWgBRoxRD8m4ZdluOv
x8VgVu+tmjMMWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FNVVFfSnVHWFpianI4ZkZZRmJ2clpvekRGcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2YS8x
L243SVBFdmN2NEpsM1R4aGs0SmhOLVRkakJ0OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
ZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2YS8xL2FNVVFfSnVHWFpi
anI4ZkZZRmJ2clpvekRGcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAU1P5jANBgkqhkiG9w0BAQsFAAOC
AQEAOzk8z/xATbJLs/Hk1xZUSAcatU6SRIIuOUX6CQeh2tIHQr4LKapho5u4lZU9
LZPO7T/TIiqW8nkekTWpR3eVD68yDrKvVZiFnv4pO5W8aScGyXPiSGaiaw7W+vK7
9JkMWBBtjkCcarZH0bNoa0hwlgzaUFPe7sqyUBzfUCWcSd7fzreJ0fBEAAxQvOlo
rrrrLfXAlLp0g0RDp3ITsyE+9Db6CCXiNYlBuWQy8cXpCz4jaKD0JTezGjEgsDo7
v8oqGSDZ0lEE1nubXxorZAYODm6hjJdxRO9dE9POwGgZUNJrUf2/DFd3fOJ6uRtL
CnkU9Bb2wqkOXOKjtPNqd6DvUg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:50 2025 by rpki-client