Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/pV3a7imfv30mWfQa0je_Iz_UYGU.roa
File:                     pV3a7imfv30mWfQa0je_Iz_UYGU.roa (raw, json)
Hash identifier:          1xC8avfB/+bBiYeDmF7tbGZfPCA3O2sN7pkMJzHYXAI=
Subject key identifier:   A5:5D:DA:EE:29:9F:BF:7D:26:59:F4:1A:D2:37:BF:23:3F:D4:60:65
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       2CA4E379
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/pV3a7imfv30mWfQa0je_Iz_UYGU.roa
Signing time:             Sat 01 Jan 2022 04:59:36 +0000
ROA not before:           Sat 01 Jan 2022 04:59:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41097
IP address blocks:        77.79.205.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749003641 (0x2ca4e379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan  1 04:59:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a55ddaee299fbf7d2659f41ad237bf233fd46065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:76:0a:08:8d:67:5d:47:ee:40:28:77:e8:
                    52:b9:a8:45:e6:65:78:9c:45:de:61:c3:75:c2:b7:
                    a3:38:c5:61:44:05:fd:be:b1:68:73:d3:4b:d6:66:
                    5a:9f:04:98:22:95:72:60:2f:9d:70:6b:2a:d9:a5:
                    9b:19:29:90:89:27:3f:13:4f:06:74:19:0b:52:82:
                    bf:a6:01:4e:af:56:30:0c:ce:3a:56:6e:0f:60:1d:
                    75:78:4e:90:e9:2e:d6:a7:eb:40:d0:3d:14:6a:8f:
                    f2:9c:48:57:63:c7:ca:20:b2:b9:64:80:6d:92:14:
                    2d:d3:6e:ad:b9:3d:cb:65:82:6b:8e:82:66:5a:c2:
                    93:e7:f7:af:f7:df:fe:1c:05:30:15:a3:7f:ac:97:
                    c4:27:5a:a5:2a:26:12:36:ca:4d:35:c2:b4:e0:21:
                    d4:86:68:04:61:f2:47:b5:39:4d:51:75:91:a8:57:
                    af:d8:4c:b6:07:d3:02:d9:e2:eb:12:3c:0f:ef:ee:
                    e3:c5:fa:99:dd:4a:cc:67:8c:22:ee:97:03:7d:12:
                    ee:30:27:30:e1:6f:3b:21:5e:34:ce:79:d5:7c:b1:
                    03:d2:04:7c:76:8c:75:17:8c:be:37:11:23:6a:fb:
                    53:b0:2b:a8:a8:50:db:03:a0:00:81:73:39:bd:12:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5D:DA:EE:29:9F:BF:7D:26:59:F4:1A:D2:37:BF:23:3F:D4:60:65
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/pV3a7imfv30mWfQa0je_Iz_UYGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.79.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:30:54:2e:c9:d1:14:9e:d3:69:e3:45:c4:9e:db:cd:f7:
         82:33:9f:fc:f4:d6:2a:99:da:6b:39:e9:aa:4c:8a:e5:58:5f:
         97:52:96:24:6d:fe:50:b8:d8:bb:9c:59:b0:67:2e:a8:56:77:
         94:b2:f0:3c:d3:13:6e:b6:ea:f9:ed:79:bf:a7:90:aa:20:81:
         be:3b:e2:f9:4c:c6:b9:fd:bb:88:28:89:2c:f9:df:8d:9e:c6:
         20:c7:cb:50:51:76:dc:9e:ca:2e:30:16:cb:dd:ed:44:75:9b:
         df:04:fa:89:4d:b4:ab:c5:80:43:dd:6b:10:2f:c1:f6:81:41:
         4d:be:18:0c:dd:05:3d:46:ca:c7:3e:8f:e8:99:37:31:1a:74:
         18:28:11:f5:8b:fb:a5:ba:7d:d9:37:4f:14:7e:c2:61:23:6e:
         21:85:91:90:dc:e7:d3:30:66:90:d5:85:be:4d:46:52:3d:b0:
         ef:07:80:3e:e4:46:58:86:f5:34:1c:3b:c0:77:4f:7a:ad:71:
         90:df:ef:51:8f:db:ad:95:83:50:c8:fc:07:1b:43:b3:16:45:
         25:d5:41:bc:d2:d7:1a:36:f0:0f:2b:2a:f6:7f:81:c4:0b:a8:
         3f:dd:d7:87:88:bd:7c:dd:33:4e:35:88:af:52:0b:ae:cc:90:
         87:65:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org