Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9WdDWxzIMR05TDs-bJ5XwMPegk4.roa
File:                     9WdDWxzIMR05TDs-bJ5XwMPegk4.roa (raw, json)
Hash identifier:          hBbbQdxcoXdWNDGO+IKQHqvIRsLuC0UWd0p84WWoQkQ=
Subject key identifier:   F5:67:43:5B:1C:C8:31:1D:39:4C:3B:3E:6C:9E:57:C0:C3:DE:82:4E
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       09C4EBA9
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9WdDWxzIMR05TDs-bJ5XwMPegk4.roa
Signing time:             Wed 22 Jun 2022 00:20:44 +0000
ROA not before:           Wed 22 Jun 2022 00:20:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42821
IP address blocks:        77.90.129.0/24 maxlen: 24
                          77.90.128.0/24 maxlen: 24
                          77.90.130.0/24 maxlen: 24
                          77.90.132.0/24 maxlen: 24
                          77.90.191.0/24 maxlen: 24
                          77.90.188.0/24 maxlen: 24
                          77.90.136.0/24 maxlen: 24
                          77.90.135.0/24 maxlen: 24
                          77.90.138.0/24 maxlen: 24
                          77.90.137.0/24 maxlen: 24
                          77.90.133.0/24 maxlen: 24
                          77.90.134.0/24 maxlen: 24
                          77.90.143.0/24 maxlen: 24
                          77.90.142.0/24 maxlen: 24
                          77.90.144.0/24 maxlen: 24
                          77.90.140.0/24 maxlen: 24
                          77.90.149.0/24 maxlen: 24
                          77.90.147.0/24 maxlen: 24
                          77.90.146.0/24 maxlen: 24
                          77.90.148.0/24 maxlen: 24
                          77.90.153.0/24 maxlen: 24
                          77.90.154.0/24 maxlen: 24
                          77.90.164.0/24 maxlen: 24
                          77.90.179.0/24 maxlen: 24
                          77.90.181.0/24 maxlen: 24
                          213.209.130.0/24 maxlen: 24
                          213.209.138.0/24 maxlen: 24
                          213.209.136.0/24 maxlen: 24
                          213.209.145.0/24 maxlen: 24
                          213.209.143.0/24 maxlen: 24
                          213.209.147.0/24 maxlen: 24
                          213.209.159.0/24 maxlen: 24
                          213.209.158.0/24 maxlen: 24
                          2a04:29c2::/32 maxlen: 32
                          2a04:29c7:1290:24::/64 maxlen: 64
                          2a04:29c7:1371:6027::/64 maxlen: 64
                          2a04:29c7:1280:27::/64 maxlen: 64
                          2a04:29c7:1420::/48 maxlen: 48
                          2a04:29c7::/32 maxlen: 32
                          2a04:29c7:1300:24::/64 maxlen: 64
                          2a04:29c7:1280:24::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163900329 (0x9c4eba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Jun 22 00:20:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f567435b1cc8311d394c3b3e6c9e57c0c3de824e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:5b:7d:66:5f:f5:dd:f7:1a:e1:29:35:31:
                    0a:fe:d8:73:a3:7f:fa:72:ca:9b:4e:24:63:59:39:
                    a0:1f:7e:73:4a:ab:17:c6:d4:0c:10:d9:8e:56:0c:
                    f4:35:c7:ae:f7:d0:4a:65:ac:9c:49:06:74:28:6b:
                    10:dd:4b:25:4e:a3:e5:bc:59:a5:59:83:15:a1:86:
                    60:8f:f8:b3:a3:29:10:dc:ce:85:8d:c6:0c:52:bd:
                    5c:87:62:92:14:f4:44:79:24:11:e4:e2:19:5c:1d:
                    a9:7b:ee:f7:4c:ab:e4:cc:8c:9b:39:7b:d9:cd:ed:
                    d5:6b:1e:08:78:22:3a:62:1f:51:24:e3:b8:55:e1:
                    fa:f6:6c:41:52:42:17:cd:e1:1a:d4:9b:aa:d2:93:
                    97:ca:0d:7a:e8:48:77:57:80:0b:24:ee:94:c5:b9:
                    4f:13:98:ce:14:72:93:8d:6a:02:f5:ae:fc:c1:87:
                    18:a7:08:0e:94:42:48:7f:6b:39:2c:06:e0:49:1c:
                    c4:f2:95:3a:30:76:66:0b:37:05:05:39:96:07:be:
                    fc:53:32:b7:9d:ab:15:7d:02:d3:4d:fc:2f:33:21:
                    7b:61:04:37:98:70:82:e4:3e:e1:d4:ee:3c:d6:73:
                    86:ca:b7:37:8d:72:9f:d5:ec:9b:0b:42:77:35:e0:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:67:43:5B:1C:C8:31:1D:39:4C:3B:3E:6C:9E:57:C0:C3:DE:82:4E
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9WdDWxzIMR05TDs-bJ5XwMPegk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.128.0-77.90.130.255
                  77.90.132.0-77.90.138.255
                  77.90.140.0/24
                  77.90.142.0-77.90.144.255
                  77.90.146.0-77.90.149.255
                  77.90.153.0-77.90.154.255
                  77.90.164.0/24
                  77.90.179.0/24
                  77.90.181.0/24
                  77.90.188.0/24
                  77.90.191.0/24
                  213.209.130.0/24
                  213.209.136.0/24
                  213.209.138.0/24
                  213.209.143.0/24
                  213.209.145.0/24
                  213.209.147.0/24
                  213.209.158.0/23
                IPv6:
                  2a04:29c2::/32
                  2a04:29c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:7b:f5:f6:19:64:18:b8:65:b6:77:09:94:55:71:15:d8:
         55:51:bf:ad:bd:79:14:bd:d7:51:6e:3e:27:41:e1:bb:72:45:
         66:66:d0:c9:71:19:b4:25:49:78:b3:58:6b:37:6a:3e:6f:78:
         8c:77:57:b0:da:8a:b0:aa:d0:2e:91:c9:0a:99:b1:1b:b1:47:
         1f:e2:2f:83:bb:ff:2e:52:aa:cf:74:37:18:a4:07:d4:ef:05:
         b4:72:13:fc:f3:f3:a7:e7:17:d8:c4:6e:c0:41:2c:c8:15:0b:
         e4:38:65:3b:60:86:8d:20:fb:7b:d7:42:12:e0:1f:a3:f4:6a:
         fd:de:70:5b:f9:50:57:5d:9e:93:b2:c7:79:fd:df:ec:57:49:
         90:63:59:7d:46:2f:79:36:73:e0:a2:e8:fc:06:0a:97:a0:aa:
         97:5a:64:bc:a2:bc:5d:fe:45:3c:12:2a:2f:2c:07:3f:4d:90:
         bd:7a:2f:05:6b:4b:03:3a:63:93:78:20:53:ed:07:c5:06:59:
         d6:6f:ba:a2:29:bb:0f:58:ff:f9:16:b1:98:4b:45:ca:ae:9a:
         95:5a:25:b6:04:d6:2f:22:6b:b0:49:2e:0a:32:88:7a:f4:d8:
         fd:b5:ae:5d:9f:68:9b:32:a4:39:06:78:33:73:d2:7e:c7:9d:
         15:19:77:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org