Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/sJpOiv-3C4XWRo93P8U9cL8ZGhM.roa
File:                     sJpOiv-3C4XWRo93P8U9cL8ZGhM.roa (raw, json)
Hash identifier:          dOesuFwNK36NV9+mwYKGKGrZ+RB7NtC1od0x4xzUkEY=
Subject key identifier:   B0:9A:4E:8A:FF:B7:0B:85:D6:46:8F:77:3F:C5:3D:70:BF:19:1A:13
Certificate issuer:       /CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
Certificate serial:       0B360277
Authority key identifier: 0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/sJpOiv-3C4XWRo93P8U9cL8ZGhM.roa
Signing time:             Thu 16 Jun 2022 23:17:35 +0000
ROA not before:           Thu 16 Jun 2022 23:17:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204776
IP address blocks:        77.83.58.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188088951 (0xb360277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
        Validity
            Not Before: Jun 16 23:17:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b09a4e8affb70b85d6468f773fc53d70bf191a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:50:f7:91:77:04:8e:1c:a8:81:22:9a:ca:
                    de:24:64:18:f4:bf:71:9f:b6:bc:41:4c:d7:ea:74:
                    76:6d:1f:a1:6b:2e:6e:e0:13:6d:aa:18:41:e9:82:
                    60:5f:c0:12:c0:0f:df:7f:16:5d:63:c4:42:99:21:
                    4c:fd:a9:34:b7:6a:26:a8:a2:76:eb:9a:34:36:52:
                    97:d0:39:54:fb:c5:1e:57:c3:6b:2e:86:81:0e:f4:
                    35:d5:44:6a:0e:36:95:40:ca:53:50:8e:bf:6c:a2:
                    b8:52:42:71:4c:56:fc:84:2a:ae:a8:7b:e7:a5:cf:
                    81:dc:e5:fc:38:82:ee:41:25:3d:11:5f:01:31:59:
                    ac:12:13:6b:15:3b:70:35:8f:d0:3f:88:8e:2f:84:
                    da:a1:59:b2:af:db:84:32:9b:d6:46:38:58:ec:86:
                    0c:17:36:e7:70:f9:8d:35:2d:ed:a8:52:57:66:04:
                    1a:7b:78:02:95:9c:0e:20:ef:03:cb:25:88:32:f2:
                    cc:77:ba:25:64:f6:66:60:92:e4:df:8e:2b:69:c7:
                    58:a5:8f:70:0b:82:a8:d2:84:a1:22:73:16:85:ee:
                    c1:e7:4b:b1:a1:51:b8:58:4d:68:08:42:df:38:4b:
                    e9:c0:fc:7d:b0:9f:7b:b6:b0:3c:8e:30:84:65:98:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9A:4E:8A:FF:B7:0B:85:D6:46:8F:77:3F:C5:3D:70:BF:19:1A:13
            X509v3 Authority Key Identifier:
                keyid:0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/sJpOiv-3C4XWRo93P8U9cL8ZGhM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:99:e8:b7:d6:30:14:25:65:74:47:a9:19:e4:22:a7:40:26:
         49:1c:7d:0c:c7:39:e4:78:37:53:e1:66:2f:ae:65:6e:f7:8e:
         f7:c7:ed:15:f1:f6:7d:8c:bd:4d:23:b0:46:87:1d:e0:24:70:
         1c:b6:ba:ce:54:ce:3e:e1:4e:c4:2c:5d:4c:b4:20:1b:3a:c0:
         ae:63:fc:39:5e:34:6b:19:d0:87:82:00:80:9e:32:70:1c:19:
         f2:53:79:07:77:01:19:16:ef:96:5a:28:21:37:8f:3d:c3:3a:
         7b:fe:34:54:49:30:c2:dc:1a:cf:24:cf:b7:13:56:49:b0:8b:
         0c:56:3b:4c:16:97:d4:60:08:0f:c0:82:0b:50:02:a0:79:e9:
         2b:1a:36:ef:91:af:82:47:65:97:9c:73:9b:30:3c:3d:72:7b:
         3a:a0:e7:99:59:a9:e6:04:e0:cc:57:44:cd:14:09:19:dc:52:
         8e:fe:6f:60:31:30:1b:52:81:83:94:ef:f6:86:be:34:f7:44:
         d6:9e:36:56:fc:fa:0b:20:92:e4:fa:39:4d:f8:f8:4b:bb:09:
         9c:a7:26:8c:58:fa:7f:83:b2:2f:26:6a:98:5c:ec:29:0a:cf:
         01:8e:e1:71:c2:df:27:95:16:71:73:c0:44:91:44:af:39:8d:
         c4:3b:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:02 2024 by rpki-client on console-ams.rpki-client.org