Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2o6oLXs8W0J5bumwDJt72-KUcec.roa
File:                     2o6oLXs8W0J5bumwDJt72-KUcec.roa (raw, json)
Hash identifier:          R0Pycxl6bSDtaE1VDFtfTh1IB5Cvr3iDxEPVmVxBMAw=
Subject key identifier:   DA:8E:A8:2D:7B:3C:5B:42:79:6E:E9:B0:0C:9B:7B:DB:E2:94:71:E7
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       01822AA79A23C2079AB2164EDDA611CBD9E6
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2o6oLXs8W0J5bumwDJt72-KUcec.roa
Signing time:             Sat 23 Jul 2022 10:43:23 +0000
ROA not before:           Sat 23 Jul 2022 10:43:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42821
IP address blocks:        77.90.129.0/24 maxlen: 24
                          77.90.128.0/24 maxlen: 24
                          77.90.130.0/24 maxlen: 24
                          77.90.132.0/24 maxlen: 24
                          185.230.12.0/24 maxlen: 24
                          77.90.191.0/24 maxlen: 24
                          77.90.188.0/24 maxlen: 24
                          77.90.136.0/24 maxlen: 24
                          77.90.135.0/24 maxlen: 24
                          77.90.138.0/24 maxlen: 24
                          77.90.137.0/24 maxlen: 24
                          77.90.133.0/24 maxlen: 24
                          77.90.134.0/24 maxlen: 24
                          77.90.139.0/24 maxlen: 24
                          77.90.143.0/24 maxlen: 24
                          77.90.142.0/24 maxlen: 24
                          77.90.145.0/24 maxlen: 24
                          77.90.144.0/24 maxlen: 24
                          77.90.140.0/24 maxlen: 24
                          77.90.149.0/24 maxlen: 24
                          77.90.147.0/24 maxlen: 24
                          77.90.146.0/24 maxlen: 24
                          77.90.148.0/24 maxlen: 24
                          77.90.157.0/24 maxlen: 24
                          77.90.153.0/24 maxlen: 24
                          77.90.154.0/24 maxlen: 24
                          77.90.173.0/24 maxlen: 24
                          77.90.179.0/24 maxlen: 24
                          213.209.130.0/24 maxlen: 24
                          213.209.129.0/24 maxlen: 24
                          213.209.133.0/24 maxlen: 24
                          213.209.138.0/24 maxlen: 24
                          213.209.134.0/24 maxlen: 24
                          213.209.145.0/24 maxlen: 24
                          213.209.144.0/24 maxlen: 24
                          213.209.147.0/24 maxlen: 24
                          213.209.151.0/24 maxlen: 24
                          213.209.149.0/24 maxlen: 24
                          213.209.158.0/24 maxlen: 24
                          213.209.157.0/24 maxlen: 24
                          2a04:29c2::/32 maxlen: 32
                          2a04:29c7:1290:24::/64 maxlen: 64
                          2a04:29c7:1371:6027::/64 maxlen: 64
                          2a04:29c7:1280:27::/64 maxlen: 64
                          2a04:29c7:1420::/48 maxlen: 48
                          2a04:29c7::/32 maxlen: 32
                          2a04:29c7:1280:24::/64 maxlen: 64
                          2a04:29c7:1300:24::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:2a:a7:9a:23:c2:07:9a:b2:16:4e:dd:a6:11:cb:d9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Jul 23 10:43:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=da8ea82d7b3c5b42796ee9b00c9b7bdbe29471e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:bb:2e:82:cd:db:95:4c:cb:e2:8f:ae:b7:52:
                    b3:09:58:bf:88:e6:61:40:53:ee:8b:57:96:9b:ae:
                    03:1d:a7:68:17:72:c2:23:66:69:ed:67:e5:9a:71:
                    9b:75:49:51:85:c2:a4:26:c5:26:42:cd:58:c6:99:
                    30:57:55:ab:65:df:cc:0f:fe:c0:4a:76:c7:1b:db:
                    fc:47:68:04:e7:26:7d:87:ec:1a:b6:c7:67:ef:da:
                    09:ba:24:7e:3f:28:10:82:9a:08:bf:30:b9:da:fe:
                    9b:79:65:cb:b0:6c:b6:f5:64:2b:5e:aa:49:82:1d:
                    40:e5:bd:02:49:bf:68:1e:ba:54:41:ac:09:28:e0:
                    8b:40:c8:ba:b6:74:4d:99:2c:27:24:eb:f6:f8:f8:
                    7c:fb:7e:fa:94:c3:3c:3a:5a:fe:33:8b:15:cc:f6:
                    d1:c1:8b:32:46:d7:55:fa:3f:d0:e9:1f:b9:59:bb:
                    1b:f0:c7:87:91:d1:8f:00:38:b1:77:53:17:de:63:
                    1e:ae:bd:e5:38:8b:1b:f6:07:36:c0:d0:9f:05:4c:
                    e5:f8:2d:0a:81:a3:78:b2:fe:30:0e:b9:78:e0:78:
                    7c:c9:75:18:51:bf:fe:28:3d:e6:68:58:c2:05:5c:
                    46:76:b5:41:00:46:14:14:9f:3b:fb:15:07:8c:7e:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8E:A8:2D:7B:3C:5B:42:79:6E:E9:B0:0C:9B:7B:DB:E2:94:71:E7
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2o6oLXs8W0J5bumwDJt72-KUcec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.128.0-77.90.130.255
                  77.90.132.0-77.90.140.255
                  77.90.142.0-77.90.149.255
                  77.90.153.0-77.90.154.255
                  77.90.157.0/24
                  77.90.173.0/24
                  77.90.179.0/24
                  77.90.188.0/24
                  77.90.191.0/24
                  185.230.12.0/24
                  213.209.129.0-213.209.130.255
                  213.209.133.0-213.209.134.255
                  213.209.138.0/24
                  213.209.144.0/23
                  213.209.147.0/24
                  213.209.149.0/24
                  213.209.151.0/24
                  213.209.157.0-213.209.158.255
                IPv6:
                  2a04:29c2::/32
                  2a04:29c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:7d:c2:7d:c8:1c:f2:a2:59:f1:20:49:40:99:ee:c8:16:bd:
         bf:74:c5:e8:76:fe:28:fe:cd:2e:52:65:ea:9c:a9:23:02:5e:
         24:f2:a1:d4:f8:c3:a7:12:33:19:d6:a2:09:b1:a9:40:28:9e:
         68:c7:43:5e:a4:f9:0a:73:21:89:e3:95:f1:92:49:79:12:27:
         66:69:d5:63:4c:fb:74:6c:07:cf:3b:3b:2a:ef:b2:6a:2a:43:
         ce:e7:f9:03:8d:48:bf:3e:d0:df:9e:e4:9a:82:e4:19:1f:0f:
         d9:7d:b5:b2:a1:b2:d5:98:0d:0a:2b:b2:f3:fd:e7:36:b4:e1:
         25:16:c7:2b:e7:a1:4c:ac:c4:7d:1a:b2:c8:8b:d1:61:c5:e2:
         ff:ea:f2:dd:e1:82:1f:c8:bb:ce:c0:0f:fc:24:0e:6d:c3:a6:
         77:b2:0a:42:9b:f0:9f:39:04:fa:29:75:c4:1c:cd:41:04:b4:
         07:c6:49:b8:c8:d4:0a:93:32:c0:c1:35:6a:9f:d2:4a:85:dc:
         a8:52:4c:2e:9e:17:d0:17:8b:1b:e4:91:75:56:0e:92:03:4b:
         d2:0d:db:9c:00:31:52:aa:11:8b:74:54:c8:d1:71:24:e1:01:
         96:cb:6e:07:88:bc:1a:b0:3e:57:68:8b:7d:d3:7c:c4:0d:99:
         a5:5d:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org