Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KfMlwgmC4ZFg-jv-klxyCSLWuIY.roa
File:                     KfMlwgmC4ZFg-jv-klxyCSLWuIY.roa (raw, json)
Hash identifier:          hr0T8TdAgQqvRJy01Q1O1B7Q3LIdfxuuEeTSn1EEqkI=
Subject key identifier:   29:F3:25:C2:09:82:E1:91:60:FA:3B:FE:92:5C:72:09:22:D6:B8:86
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       09D69421
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KfMlwgmC4ZFg-jv-klxyCSLWuIY.roa
Signing time:             Thu 23 Jun 2022 14:01:20 +0000
ROA not before:           Thu 23 Jun 2022 14:01:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208911
IP address blocks:        213.209.157.0/24 maxlen: 24
                          77.90.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165057569 (0x9d69421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Jun 23 14:01:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=29f325c20982e19160fa3bfe925c720922d6b886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:c0:e4:87:ce:84:1e:d8:41:36:f0:20:64:
                    fd:7f:06:73:57:33:84:98:b9:d6:09:fa:c0:0f:11:
                    71:94:fa:0f:4a:a2:1b:43:a7:a7:75:be:75:3a:47:
                    79:25:c9:1b:92:33:62:b5:dc:d7:d7:88:2d:4d:96:
                    94:43:10:39:49:74:9a:bf:45:61:0a:80:35:f1:01:
                    53:78:60:eb:31:07:1a:91:e5:c1:b4:d9:d4:75:c1:
                    75:43:ab:1f:f1:c5:79:e6:7e:62:6c:0b:36:83:00:
                    be:7f:01:30:40:dc:f0:b5:49:98:b5:2d:bb:b5:bf:
                    36:56:1b:a3:e5:51:07:6a:8b:e1:5e:02:0f:85:22:
                    00:83:a7:af:a2:db:09:8a:57:0f:90:4b:5c:bc:df:
                    fd:37:12:17:05:00:7d:26:1f:53:a5:93:cc:b6:36:
                    43:15:f4:42:17:b5:62:c1:69:e1:8a:32:4d:3f:42:
                    94:b9:ff:76:c3:bd:e4:76:5d:86:b2:3f:21:4d:dd:
                    50:48:ff:08:d4:55:c9:23:e8:48:0e:e4:86:1b:87:
                    ed:3e:3f:96:8c:bb:41:50:09:fc:62:3c:8c:39:cd:
                    77:a8:57:1b:c0:d0:21:13:bf:95:0b:b5:f5:e1:c2:
                    3d:c0:04:7c:d4:59:0d:5c:ec:d7:da:41:02:8b:de:
                    a9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F3:25:C2:09:82:E1:91:60:FA:3B:FE:92:5C:72:09:22:D6:B8:86
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KfMlwgmC4ZFg-jv-klxyCSLWuIY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.157.0/24
                  213.209.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:b1:84:74:69:78:2f:4e:c9:6a:81:04:b8:e7:f0:63:80:d5:
         a4:3e:60:6f:c1:47:ea:ca:94:a9:7f:a8:da:35:b4:ac:13:6d:
         7b:f0:ae:a3:fa:08:17:4f:30:7e:31:b7:74:da:97:c9:d9:b2:
         98:f7:76:b4:a8:03:b9:58:d4:a0:98:88:5d:c3:0e:22:c9:5b:
         54:7e:3d:12:4e:3e:8a:fc:23:ff:f5:a6:d6:48:d0:21:0a:0c:
         0a:e0:b7:a6:f8:bc:88:54:2a:d7:86:2e:0b:de:2d:b1:19:09:
         4a:4f:1e:5d:7d:26:95:16:3e:98:54:4a:e0:e4:17:d9:f0:d5:
         8b:eb:69:5f:78:ca:06:98:37:da:6f:91:6f:53:f0:14:f9:d2:
         b3:eb:c0:f1:ed:c5:6c:b6:54:7f:47:9f:16:d7:c8:d5:42:90:
         57:b3:8f:a9:43:b9:91:9a:c9:a8:2f:36:72:be:12:96:44:81:
         cb:08:45:44:04:ba:55:52:db:62:c2:b8:59:27:d7:a8:87:b2:
         2b:9c:89:d1:26:32:75:0b:7f:48:59:1c:6f:80:1d:d7:02:1b:
         c8:4e:7d:5a:bb:60:c8:23:77:cf:1a:88:a9:26:ff:d3:e8:37:
         27:c6:78:7c:7c:bf:c9:e1:d1:c8:82:62:b5:66:b7:cd:e2:d9:
         3b:46:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org