Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Gt1q3oHet_4EmErB0IznCsCurrQ.roa
File:                     Gt1q3oHet_4EmErB0IznCsCurrQ.roa (raw, json)
Hash identifier:          qnpHLpoGwpXb/1JxBbh1L5b1XQhbLQvrXfmq9ozOFG4=
Subject key identifier:   1A:DD:6A:DE:81:DE:B7:FE:04:98:4A:C1:D0:8C:E7:0A:C0:AE:AE:B4
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       092ED200
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Gt1q3oHet_4EmErB0IznCsCurrQ.roa
Signing time:             Wed 18 May 2022 08:06:16 +0000
ROA not before:           Wed 18 May 2022 08:06:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12695
IP address blocks:        77.90.189.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154063360 (0x92ed200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: May 18 08:06:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1add6ade81deb7fe04984ac1d08ce70ac0aeaeb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:ea:fe:e3:6c:ec:e4:be:d9:ab:7f:39:2d:
                    a2:28:cc:4f:59:50:a4:77:f4:5c:78:ef:36:34:1f:
                    0d:36:d4:a2:44:b7:9d:e8:61:c1:aa:a3:e3:2c:eb:
                    d4:b7:41:c1:86:3f:da:67:94:b8:29:2b:cb:a5:07:
                    e1:b0:38:78:89:b5:3f:da:6a:85:c1:a9:43:a2:43:
                    31:e5:8b:2a:b1:c1:d3:55:f9:8e:76:ca:c2:1e:66:
                    58:c7:e4:53:79:6a:ef:24:e5:89:24:94:74:ad:a2:
                    70:91:1c:50:44:88:c5:4c:54:d9:ec:6b:ac:33:bc:
                    5d:50:f8:41:8e:52:eb:88:70:3e:00:de:73:b5:a1:
                    60:f7:85:bc:4f:9e:e3:c7:58:70:8d:af:65:1c:8e:
                    62:1d:ee:10:70:c3:61:70:d2:64:c8:99:5a:d4:a2:
                    2c:74:4f:24:57:3b:97:b1:81:d4:c2:11:5f:4a:81:
                    4e:4c:64:d4:92:04:1c:79:ac:2d:63:69:01:41:ac:
                    04:7c:89:b5:08:a9:4f:26:1d:44:4d:cf:67:16:a4:
                    32:a0:4f:67:5e:c6:85:7b:ff:54:19:92:d3:48:c7:
                    00:fa:a5:11:0e:17:81:f7:0d:3a:da:87:b8:cc:4c:
                    23:7f:99:9e:b5:9c:3b:9a:b3:3c:99:e2:8e:3d:6f:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DD:6A:DE:81:DE:B7:FE:04:98:4A:C1:D0:8C:E7:0A:C0:AE:AE:B4
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Gt1q3oHet_4EmErB0IznCsCurrQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:15:b3:54:cb:ac:80:40:58:d2:a0:90:2f:41:0f:37:57:
         69:54:63:78:c6:d6:78:4c:c6:bb:13:c6:cd:73:31:16:c8:ce:
         e0:24:02:4f:41:89:48:8f:0a:94:57:1f:c4:d4:24:b3:10:f4:
         45:ce:c0:a7:6f:4c:3a:71:8e:78:5a:75:5f:f5:35:fa:df:37:
         a1:a5:8a:1b:d0:4e:3f:20:69:6c:ed:2e:4e:b8:38:1e:92:65:
         4e:af:b2:56:38:59:22:8b:30:cc:8f:90:e6:11:47:a2:4e:12:
         b0:26:c6:74:af:52:1b:f8:12:67:8c:63:88:7b:0b:ba:7d:de:
         6b:e2:04:3f:09:dc:ec:8e:bb:2c:86:7b:de:dc:09:3c:1a:fc:
         84:37:da:6e:e8:9c:99:06:ef:70:05:44:7e:b3:3f:1d:19:3c:
         80:ad:14:74:e0:02:75:13:d7:95:74:e1:61:27:e9:01:fb:4b:
         67:d7:91:16:a2:db:d3:92:a0:a1:7c:ba:fe:54:10:8c:cc:02:
         e1:c3:d2:0d:38:02:fa:fa:ea:96:11:ba:de:c4:e7:89:90:4f:
         d2:75:24:e1:47:64:a9:01:8f:ea:23:a1:5a:a0:66:b0:6a:d0:
         e4:2b:d2:e8:92:dc:33:0c:fe:04:63:08:21:c3:3f:d9:8d:07:
         90:de:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org