Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/rylfxaKFAoCPjl00cq0uR59K3Hc.roa
File:                     rylfxaKFAoCPjl00cq0uR59K3Hc.roa (raw, json)
Hash identifier:          mz3v+c6zD3cvpGkLOK9aUwpN/trUyzK44oBh78Ik/wI=
Subject key identifier:   AF:29:5F:C5:A2:85:02:80:8F:8E:5D:34:72:AD:2E:47:9F:4A:DC:77
Certificate issuer:       /CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Certificate serial:       10E66BB6
Authority key identifier: 1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/rylfxaKFAoCPjl00cq0uR59K3Hc.roa
Signing time:             Wed 23 Mar 2022 11:39:41 +0000
ROA not before:           Wed 23 Mar 2022 11:39:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204175
IP address blocks:        185.112.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283536310 (0x10e66bb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
        Validity
            Not Before: Mar 23 11:39:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=af295fc5a28502808f8e5d3472ad2e479f4adc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:d3:dd:61:49:ca:9e:30:4b:05:e2:be:55:
                    18:6f:59:24:d0:d9:d7:95:1d:cd:e6:fd:26:78:b7:
                    b2:e7:b5:37:28:b2:ce:eb:b0:ae:be:f1:e4:a3:1c:
                    ca:c8:4c:f4:e2:e3:74:92:55:ee:43:e6:fd:ba:08:
                    31:95:07:3b:ce:ae:c9:3f:ed:34:05:af:71:bb:98:
                    79:88:17:af:fe:67:58:7b:02:e2:34:a9:75:85:a4:
                    c4:ff:70:01:ef:9f:0e:b9:34:39:6b:53:0f:d9:df:
                    29:1c:aa:49:5a:ef:c1:50:32:a3:7e:39:4e:6a:5e:
                    c7:2d:8a:8e:de:39:ed:95:88:b2:01:95:cd:f6:1a:
                    aa:e8:75:c7:a2:a1:4c:8a:23:d1:9b:76:30:84:02:
                    9a:5f:ed:36:a7:0f:83:a3:a2:82:60:03:a0:25:06:
                    3a:d4:3c:32:e3:50:63:e1:01:c5:58:ec:38:b0:e5:
                    a3:86:9c:9e:a9:9f:50:1f:fa:80:3c:94:e9:2e:e2:
                    9d:2d:58:8c:8e:98:54:9e:b9:66:d2:47:3d:de:15:
                    ac:cb:6b:7e:98:c5:c2:6d:11:9a:eb:32:b6:58:ec:
                    9c:9f:33:d9:34:86:17:44:bc:ad:32:15:2a:b1:c0:
                    2b:de:cd:39:27:4e:9a:76:03:fc:61:85:dd:a6:d2:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:29:5F:C5:A2:85:02:80:8F:8E:5D:34:72:AD:2E:47:9F:4A:DC:77
            X509v3 Authority Key Identifier:
                keyid:1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/rylfxaKFAoCPjl00cq0uR59K3Hc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:8d:5b:86:7c:76:4c:19:ee:54:6e:70:1d:4f:23:f0:fd:b5:
         2d:32:9b:12:22:32:db:af:b3:2e:52:36:ed:f8:c1:42:2f:31:
         00:4d:31:20:42:34:f3:12:99:bf:5e:82:89:04:38:67:16:bb:
         17:de:b6:23:e6:07:16:f3:cd:34:4c:bb:3e:11:9e:b5:49:e0:
         d8:3c:1e:a0:d1:6a:b3:a8:02:a9:8f:64:e3:48:4c:a0:22:56:
         dc:f1:90:a8:bc:0f:6e:29:1a:f0:99:79:50:2f:6d:87:39:3d:
         1c:b0:6e:e8:f6:a4:24:78:27:9f:b4:14:f9:75:5a:6a:da:b2:
         3f:47:56:ed:d8:bd:e9:58:af:5b:05:e2:48:0c:8d:26:07:ef:
         73:25:54:34:c0:f3:ab:ed:c2:8d:3a:c5:7a:03:72:87:c7:d6:
         0a:ff:d9:a5:3a:5c:6c:8f:71:a7:ce:f8:c5:57:4e:8d:2f:dd:
         ce:0c:11:74:38:f1:70:8a:2d:49:74:b8:e6:a5:61:b6:76:07:
         fe:35:6d:a9:bd:48:b6:94:ec:e4:56:a9:f4:5b:14:62:77:24:
         9b:aa:a8:3f:73:f4:bf:e3:4e:65:01:c4:e5:ad:10:0c:e3:35:
         95:5c:5a:71:35:da:4f:49:0f:ed:4c:ea:26:e9:4f:c2:45:bd:
         95:d7:97:ec
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEOZrtjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZDQ0MDRjODM5MmU4MmQ0YjcwMjliNjljYjZlZTI5MGI5YjQyYzAwMB4XDTIyMDMy
MzExMzk0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWYyOTVmYzVhMjg1
MDI4MDhmOGU1ZDM0NzJhZDJlNDc5ZjRhZGM3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMH8091hScqeMEsF4r5VGG9ZJNDZ15Udzeb9Jni3sue1Nyiy
zuuwrr7x5KMcyshM9OLjdJJV7kPm/boIMZUHO86uyT/tNAWvcbuYeYgXr/5nWHsC
4jSpdYWkxP9wAe+fDrk0OWtTD9nfKRyqSVrvwVAyo345Tmpexy2Kjt457ZWIsgGV
zfYaquh1x6KhTIoj0Zt2MIQCml/tNqcPg6OigmADoCUGOtQ8MuNQY+EBxVjsOLDl
o4acnqmfUB/6gDyU6S7inS1YjI6YVJ65ZtJHPd4VrMtrfpjFwm0RmusytljsnJ8z
2TSGF0S8rTIVKrHAK97NOSdOmnYD/GGF3abS3sUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSvKV/FooUCgI+OXTRyrS5Hn0rcdzAfBgNVHSMEGDAWgBQdRATIOS6C1LcC
m2nLbuKQubQsADAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hVUUV5RGt1Z3RTM0FwdHB5Mjdpa0xtMExBQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvZDRiODM1LWY1YjUtNDcwNC1hZTk3LWMyNjMyODU2MTAzMC8x
L3J5bGZ4YUtGQW9DUGpsMDBjcTB1UjU5SzNIYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
ZDRiODM1LWY1YjUtNDcwNC1hZTk3LWMyNjMyODU2MTAzMC8xL0hVUUV5RGt1Z3RT
M0FwdHB5Mjdpa0xtMExBQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlwTTANBgkqhkiG9w0BAQsFAAOC
AQEAB41bhnx2TBnuVG5wHU8j8P21LTKbEiIy26+zLlI27fjBQi8xAE0xIEI08xKZ
v16CiQQ4Zxa7F962I+YHFvPNNEy7PhGetUng2DweoNFqs6gCqY9k40hMoCJW3PGQ
qLwPbika8Jl5UC9thzk9HLBu6PakJHgnn7QU+XVaatqyP0dW7di96VivWwXiSAyN
JgfvcyVUNMDzq+3CjTrFegNyh8fWCv/ZpTpcbI9xp874xVdOjS/dzgwRdDjxcIot
SXS45qVhtnYH/jVtqb1ItpTs5Fap9FsUYnckm6qoP3P0v+NOZQHE5a0QDOM1lVxa
cTXaT0kP7UzqJulPwkW9ldeX7A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-ams.rpki-client.org