Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/RLvqX__jMQZMedXl-ACd6-qNL-s.roa
File:                     RLvqX__jMQZMedXl-ACd6-qNL-s.roa (raw, json)
Hash identifier:          ZpWNy8EisIjDt6CwJj6hyk8nm8eoq9LhCyxmWyvRTo0=
Subject key identifier:   44:BB:EA:5F:FF:E3:31:06:4C:79:D5:E5:F8:00:9D:EB:EA:8D:2F:EB
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       3A63B9AE
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/RLvqX__jMQZMedXl-ACd6-qNL-s.roa
Signing time:             Sat 01 Jan 2022 14:56:37 +0000
ROA not before:           Sat 01 Jan 2022 14:56:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204812
IP address blocks:        77.104.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979614126 (0x3a63b9ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Jan  1 14:56:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44bbea5fffe331064c79d5e5f8009debea8d2feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:07:d9:a9:f7:7e:92:e1:fa:2a:7d:d9:e6:
                    7c:89:80:60:d8:7a:e8:5d:07:1c:fd:8a:f4:21:7f:
                    a2:e9:ae:ae:95:c3:a9:47:db:a3:3c:5a:cf:e7:3c:
                    e0:f0:99:23:46:58:2c:87:27:60:47:94:6f:e4:e1:
                    d5:16:bf:f2:64:67:c0:f7:b4:85:5b:3e:15:9c:60:
                    45:1a:51:c2:a2:69:e4:a6:57:b4:cd:05:95:05:7b:
                    4f:99:73:42:bc:c6:6b:9c:0c:4a:97:93:c7:c3:5b:
                    fa:a0:5c:51:0e:77:0b:61:7f:07:10:3c:87:ab:7d:
                    df:9c:aa:f2:d5:86:94:39:b2:0c:ee:84:e6:1d:de:
                    26:3c:94:42:61:6e:12:5b:b7:c4:d0:65:3d:bc:f8:
                    91:a9:dd:1f:cf:0c:0e:b8:2b:d7:e7:56:9f:15:0c:
                    65:fa:e6:16:c4:98:36:ca:b6:8c:ab:a3:8c:fe:d9:
                    61:77:d4:84:a4:c4:9e:6a:90:d5:9f:33:17:16:79:
                    d8:0d:e0:ce:7f:7e:5a:83:46:b6:d1:a1:19:ea:1d:
                    38:81:27:24:23:8e:ab:02:7f:a3:c5:e4:bf:72:3d:
                    ef:bd:e5:39:dc:9b:d5:2f:d1:b9:12:89:2f:bb:2a:
                    4a:22:12:16:2f:6e:3c:d4:b3:1b:12:98:b3:52:d9:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BB:EA:5F:FF:E3:31:06:4C:79:D5:E5:F8:00:9D:EB:EA:8D:2F:EB
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/RLvqX__jMQZMedXl-ACd6-qNL-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.104.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:5c:c9:68:22:e5:38:3d:4b:ba:08:0a:34:87:0a:cb:5c:92:
         10:19:8b:02:5e:6a:ff:5a:91:e9:eb:0c:c9:cc:7a:62:40:36:
         ab:0b:e9:b6:4c:8c:95:15:04:58:79:a7:11:0c:7a:d2:e0:d7:
         ee:67:40:5f:ac:5e:f3:8e:58:82:a9:58:7c:b3:f6:6c:09:dd:
         5a:79:f3:0f:f2:3e:e0:eb:01:6b:de:a0:d2:4a:b5:c8:82:2a:
         5f:35:d8:ac:8a:7e:ea:86:d8:3e:bf:61:33:d5:e0:8a:96:b8:
         bd:92:bb:7f:9e:7e:62:32:51:94:a1:74:6b:43:b6:b0:5c:b1:
         44:60:9f:e5:50:8d:a3:c6:9b:12:ae:0f:77:8f:b5:4c:ae:ac:
         5c:84:0f:f7:c4:4f:19:9f:b1:7d:d0:5b:46:fb:fb:1c:66:9c:
         42:c3:ce:be:75:ee:c3:f5:af:54:23:ed:f9:f4:32:6a:e0:74:
         cd:90:9f:af:ff:21:47:57:de:0f:aa:08:1f:1a:24:e5:49:22:
         fd:46:8d:3c:10:9e:82:06:d7:d0:c2:92:8b:5d:6d:1e:53:26:
         2d:77:1f:5b:44:3e:bc:6b:b3:7f:2c:4e:16:11:f3:b0:f5:c3:
         cb:a8:aa:86:85:e8:5b:78:ec:32:10:85:71:e4:2f:31:e4:a9:
         b8:0a:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org