Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/C8P9PW7q1HwLgHXZLEWgcXssqzk.roa
File:                     C8P9PW7q1HwLgHXZLEWgcXssqzk.roa (raw, json)
Hash identifier:          DCiR500/q9hcWbJbPoWfEqWcZFwo67FG6t51/BTNwVo=
Subject key identifier:   0B:C3:FD:3D:6E:EA:D4:7C:0B:80:75:D9:2C:45:A0:71:7B:2C:AB:39
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       06E57E4A
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/C8P9PW7q1HwLgHXZLEWgcXssqzk.roa
Signing time:             Sat 01 Jan 2022 07:00:18 +0000
ROA not before:           Sat 01 Jan 2022 07:00:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15924
IP address blocks:        77.90.131.0/24 maxlen: 24
                          77.90.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115703370 (0x6e57e4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Jan  1 07:00:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0bc3fd3d6eead47c0b8075d92c45a0717b2cab39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:df:b4:15:44:f8:68:48:c6:29:35:8e:fe:
                    f0:0b:25:08:8c:52:16:69:ef:20:ed:02:51:b1:32:
                    72:3d:d6:61:ab:52:2c:17:75:fe:4d:8c:25:ed:1c:
                    84:cc:b0:89:18:6a:c8:52:c1:c8:c1:1a:52:d8:fe:
                    7f:61:96:29:db:0e:54:b1:a3:4c:8d:c1:78:a6:f7:
                    61:67:d2:d1:65:68:d4:ec:c1:13:58:7d:b3:20:aa:
                    97:9b:01:2e:77:8c:fd:54:da:8c:a0:f9:ba:d3:e5:
                    ad:fa:33:a5:37:93:72:14:2e:74:a1:76:e8:41:e7:
                    98:3b:bf:41:81:e9:f7:4a:45:77:60:44:4a:f1:5d:
                    27:e9:44:52:68:b4:8b:22:8a:f8:24:be:71:2d:67:
                    24:79:4a:91:51:f1:7e:7d:27:b4:69:40:15:61:e4:
                    2c:80:be:ca:f0:5d:39:15:88:02:bf:d1:f1:e1:cc:
                    fd:ed:52:68:0c:d6:e3:a2:5b:6d:36:0e:9f:10:58:
                    c0:93:5a:39:bc:90:ac:23:fa:7a:52:34:40:52:2c:
                    3a:6a:25:d3:c4:be:12:7d:4d:da:0d:92:a6:36:28:
                    7c:59:33:06:28:a1:25:1f:df:ed:3d:40:c0:f8:87:
                    9a:d4:73:2e:9e:aa:22:43:c8:fb:e3:de:ad:30:01:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C3:FD:3D:6E:EA:D4:7C:0B:80:75:D9:2C:45:A0:71:7B:2C:AB:39
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/C8P9PW7q1HwLgHXZLEWgcXssqzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.131.0/24
                  77.90.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:d9:d8:c5:90:0d:09:78:58:24:e9:9b:fe:dd:6c:06:2a:ec:
         b1:2f:52:58:cf:fc:e6:c7:9e:4b:ea:b7:06:c8:dc:f0:25:21:
         dc:f7:8c:e0:92:6e:e9:24:55:77:4e:ff:7d:1b:46:6f:ef:71:
         a9:f0:70:c2:25:b0:f0:c6:27:fa:89:22:cc:75:c3:d4:db:c1:
         23:b5:6a:61:16:cb:73:2e:97:2e:11:54:3f:8e:0c:1a:9b:67:
         d8:1f:1e:f7:8d:18:01:c6:d0:06:ee:86:b5:82:6e:df:e6:85:
         e1:78:e9:ca:15:49:e5:68:59:28:4f:7b:75:cc:c7:25:82:92:
         41:70:a5:08:5d:f2:69:73:94:82:4c:fe:d0:33:d1:35:71:c0:
         e7:35:4b:35:6b:a1:19:74:e7:df:b9:b9:3e:e3:f9:7f:ee:05:
         f5:39:55:39:df:7e:c9:13:4c:5f:29:c0:6d:87:65:53:ec:82:
         04:67:5f:d2:c3:64:93:08:ed:f1:a8:95:1f:be:b8:52:bc:da:
         cc:08:40:35:26:86:64:0a:5a:3a:39:94:22:8b:f5:da:5b:1b:
         46:d1:79:87:c8:eb:1e:58:5d:3f:1d:b0:f9:17:29:4f:2c:d9:
         07:2c:be:d2:17:cc:df:40:56:e0:90:07:c7:a6:f9:d1:0c:a2:
         7f:00:c6:d0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBuV+SjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDEw
MTA3MDAxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGJjM2ZkM2Q2ZWVh
ZDQ3YzBiODA3NWQ5MmM0NWEwNzE3YjJjYWIzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2637QVRPhoSMYpNY7+8AslCIxSFmnvIO0CUbEycj3WYatS
LBd1/k2MJe0chMywiRhqyFLByMEaUtj+f2GWKdsOVLGjTI3BeKb3YWfS0WVo1OzB
E1h9syCql5sBLneM/VTajKD5utPlrfozpTeTchQudKF26EHnmDu/QYHp90pFd2BE
SvFdJ+lEUmi0iyKK+CS+cS1nJHlKkVHxfn0ntGlAFWHkLIC+yvBdORWIAr/R8eHM
/e1SaAzW46JbbTYOnxBYwJNaObyQrCP6elI0QFIsOmol08S+En1N2g2SpjYofFkz
BiihJR/f7T1AwPiHmtRzLp6qIkPI++PerTABb0kCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQLw/09burUfAuAddksRaBxeyyrOTAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L0M4UDlQVzdxMUh3TGdIWFpMRVdnY1hzc3F6ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE1agwMEAE1ajTANBgkqhkiG9w0B
AQsFAAOCAQEABdnYxZANCXhYJOmb/t1sBirssS9SWM/85seeS+q3Bsjc8CUh3PeM
4JJu6SRVd07/fRtGb+9xqfBwwiWw8MYn+okizHXD1NvBI7VqYRbLcy6XLhFUP44M
Gptn2B8e940YAcbQBu6GtYJu3+aF4XjpyhVJ5WhZKE97dczHJYKSQXClCF3yaXOU
gkz+0DPRNXHA5zVLNWuhGXTn37m5PuP5f+4F9TlVOd9+yRNMXynAbYdlU+yCBGdf
0sNkkwjt8aiVH764UrzazAhANSaGZApaOjmUIov12lsbRtF5h8jrHlhdPx2w+Rcp
TyzZByy+0hfM30BW4JAHx6b50QyifwDG0A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org