Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/lOlvri-FO2dPk8sQ0DFf5qITN7g.roa
File:                     lOlvri-FO2dPk8sQ0DFf5qITN7g.roa (raw, json)
Hash identifier:          YPFasanyosJciJvCH4cysbST8l+zcgI6CNh+wmcNdLE=
Subject key identifier:   94:E9:6F:AE:2F:85:3B:67:4F:93:CB:10:D0:31:5F:E6:A2:13:37:B8
Certificate issuer:       /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial:       02D723C6
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/lOlvri-FO2dPk8sQ0DFf5qITN7g.roa
Signing time:             Sat 04 Jun 2022 07:04:20 +0000
ROA not before:           Sat 04 Jun 2022 07:04:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        77.74.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47653830 (0x2d723c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
        Validity
            Not Before: Jun  4 07:04:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94e96fae2f853b674f93cb10d0315fe6a21337b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:42:6d:e2:9a:3d:68:f8:e5:e8:33:37:54:
                    c1:c7:6a:cc:6c:23:51:e5:af:18:14:e6:5a:6e:0c:
                    57:e3:40:d8:b0:94:52:2f:ab:61:7f:f6:0a:f4:9b:
                    8a:2d:a5:51:9c:92:68:a3:da:98:36:28:06:95:12:
                    7b:6b:a6:aa:49:14:6a:c0:ab:a5:d5:c6:4c:66:8d:
                    e7:d8:9b:0b:36:14:81:69:76:7a:eb:3e:7d:c7:97:
                    c4:27:ef:6f:9e:8d:82:03:b4:c5:91:2f:4b:36:6a:
                    64:41:43:36:98:e7:19:0a:c3:f6:74:27:9d:33:9a:
                    fc:19:1c:d5:0d:11:b3:a9:0b:3b:80:21:49:83:3b:
                    3a:03:61:72:d9:54:b7:ce:78:8a:9e:67:d2:50:ea:
                    be:9a:b3:4b:6e:c8:69:38:90:51:04:9b:36:1e:95:
                    56:91:14:0e:99:f1:a6:c7:9d:a7:ff:83:b1:e8:63:
                    38:ac:f1:1c:f4:99:71:57:e2:cb:14:1e:e5:b1:1b:
                    79:9f:de:5d:04:68:60:32:fe:d7:46:9c:ca:b7:5d:
                    19:5f:bd:12:08:01:89:34:f0:8a:22:ed:51:28:b9:
                    a0:98:ef:ff:97:f4:33:a9:30:0c:f9:04:02:d2:29:
                    ca:2d:d8:9d:00:f0:66:ae:28:92:f3:d1:e8:e8:dd:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E9:6F:AE:2F:85:3B:67:4F:93:CB:10:D0:31:5F:E6:A2:13:37:B8
            X509v3 Authority Key Identifier:
                keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/lOlvri-FO2dPk8sQ0DFf5qITN7g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.74.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:26:3b:da:03:10:aa:7c:20:c5:b7:d7:a0:3f:4b:f9:0d:d3:
         a6:45:98:88:ab:f5:64:2e:ed:e0:74:64:0e:02:e4:b6:41:e3:
         9a:05:e1:32:ca:97:33:26:0a:e8:01:51:bb:b1:61:68:aa:88:
         d5:72:a4:68:8e:3b:d1:bf:68:c8:49:68:93:c1:d3:b2:db:4e:
         00:63:b2:3f:1f:55:42:e9:f0:3c:51:a2:28:b4:01:d6:c1:c1:
         6d:61:e1:36:19:81:f4:a3:24:c2:a2:35:37:f0:39:c1:ff:06:
         73:29:13:76:7e:a1:a6:37:fa:00:8d:13:7a:00:97:56:2d:86:
         53:c1:41:eb:f2:2b:36:94:58:62:90:fa:f4:75:de:ce:63:40:
         46:61:e0:91:ce:ac:42:f0:e0:80:c5:f8:b9:a2:dd:6f:07:1f:
         84:5d:c7:4e:28:35:6d:db:dd:1d:a8:7d:d0:0d:bc:e8:fd:5c:
         9f:aa:84:0d:8c:4d:72:bc:24:66:af:f4:32:9a:69:17:6c:57:
         4c:76:08:a3:a7:ab:71:f9:b9:40:ee:91:65:e2:dd:17:d6:fb:
         74:4b:75:32:63:22:0b:f1:12:33:66:44:7b:8e:fe:f0:ec:76:
         94:d8:10:56:c9:b1:ee:4a:bc:99:2a:ff:76:17:28:b9:4f:b6:
         4b:6d:97:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org