Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/zPuzvbyu6NUYWCWvPbUA6gGrruw.roa
File:                     zPuzvbyu6NUYWCWvPbUA6gGrruw.roa (raw, json)
Hash identifier:          BWh3o2cQypytZJnhoLflXuNkbPVGkgV2dw/6UjIsboY=
Subject key identifier:   CC:FB:B3:BD:BC:AE:E8:D5:18:58:25:AF:3D:B5:00:EA:01:AB:AE:EC
Certificate issuer:       /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial:       05F913D6
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/zPuzvbyu6NUYWCWvPbUA6gGrruw.roa
Signing time:             Sat 01 Jan 2022 13:55:31 +0000
ROA not before:           Sat 01 Jan 2022 13:55:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200165
IP address blocks:        77.227.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100209622 (0x5f913d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
        Validity
            Not Before: Jan  1 13:55:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ccfbb3bdbcaee8d5185825af3db500ea01abaeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:78:75:4d:3e:75:2c:e3:04:0a:b7:d3:37:
                    58:04:6f:af:08:97:b4:61:f8:2a:c3:05:4b:a3:d4:
                    c3:c0:f6:a7:eb:27:b4:e2:eb:2f:d2:aa:b4:31:e7:
                    80:45:73:52:2a:63:8d:4e:ea:6d:10:ac:59:c3:34:
                    42:ae:18:5c:fb:b4:5a:3a:9f:c7:bc:d6:40:06:04:
                    92:38:5e:68:9b:11:05:92:31:95:2a:31:4b:88:ad:
                    4a:6a:dc:f2:11:d5:c8:b8:c6:36:8b:bc:91:db:e1:
                    59:1b:ef:de:c2:77:9c:38:ca:9d:9c:a7:c3:d3:97:
                    bb:96:1c:99:51:79:f6:d9:e2:c6:a9:91:59:90:f2:
                    d7:a5:41:d0:d1:b6:2a:86:de:98:9e:b7:27:ea:13:
                    c7:d4:31:25:d7:0b:f1:6b:c0:63:f9:04:c0:30:4d:
                    81:43:74:cc:b2:77:48:ac:da:a0:c4:8e:e6:4f:23:
                    7d:c6:ba:a1:50:2d:32:1c:98:25:cc:b8:fe:25:23:
                    93:7b:d0:1b:fc:a8:2b:15:29:a4:d0:6b:35:5a:54:
                    ad:98:bc:a4:a4:0a:73:70:02:ca:54:d6:fc:cf:f4:
                    58:46:dd:67:38:54:d3:72:63:44:02:47:08:52:91:
                    b4:0a:c8:b0:f9:ef:2f:92:0e:f3:61:14:46:65:e2:
                    7b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FB:B3:BD:BC:AE:E8:D5:18:58:25:AF:3D:B5:00:EA:01:AB:AE:EC
            X509v3 Authority Key Identifier:
                keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/zPuzvbyu6NUYWCWvPbUA6gGrruw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.227.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:9d:1a:af:f5:93:e8:9b:5f:14:da:ea:46:e5:b5:89:6a:de:
         c1:2e:84:d5:63:7c:7f:6d:96:0e:ed:fa:00:13:b6:b1:36:09:
         91:b8:9e:b5:85:98:ff:f4:54:5f:46:28:83:69:28:04:8d:30:
         08:70:29:10:16:72:c1:76:56:17:55:0f:1b:50:e6:f3:65:e8:
         66:44:64:b7:b8:be:1c:dc:51:4e:15:64:c2:5d:11:70:86:48:
         70:10:dd:08:5c:66:37:6e:8b:f6:2d:0f:cf:01:e9:0c:aa:5e:
         88:77:67:d2:20:4a:98:09:d1:8a:73:5d:c6:35:df:03:63:b0:
         1e:ec:13:fd:92:70:19:58:c2:85:bf:8e:31:28:4b:44:88:6a:
         f9:01:f4:4a:5c:33:45:5b:f6:b3:13:bc:82:fb:e5:39:a6:cf:
         ed:64:81:85:77:2f:0c:07:71:51:4e:9d:76:bf:31:5c:e9:87:
         54:70:8b:c5:99:c5:1f:0d:ab:7a:80:c7:d4:01:f0:27:39:29:
         06:50:1b:e4:58:3d:85:c4:ff:6a:75:5c:cc:f0:56:24:c5:a3:
         c4:e2:c6:80:72:00:4b:82:69:b2:4e:c4:4a:06:23:42:10:c3:
         56:64:34:8c:93:3e:0d:8f:e9:ee:3a:34:e9:ef:71:a7:8d:5e:
         06:8d:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:13 2024 by rpki-client on console-ams.rpki-client.org