Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LBMpiLyOcreJgnwrhro0TOANLsI.roa
File:                     LBMpiLyOcreJgnwrhro0TOANLsI.roa (raw, json)
Hash identifier:          lurxnAMC+FwwnruvRxhSF69M9eADnNg2YujelDuNuCw=
Subject key identifier:   2C:13:29:88:BC:8E:72:B7:89:82:7C:2B:86:BA:34:4C:E0:0D:2E:C2
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       08761B19
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LBMpiLyOcreJgnwrhro0TOANLsI.roa
Signing time:             Wed 06 Apr 2022 15:32:35 +0000
ROA not before:           Wed 06 Apr 2022 15:32:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42821
IP address blocks:        77.90.129.0/24 maxlen: 24
                          77.90.128.0/24 maxlen: 24
                          77.90.130.0/24 maxlen: 24
                          77.90.132.0/24 maxlen: 24
                          185.230.13.0/24 maxlen: 24
                          185.230.14.0/24 maxlen: 24
                          77.90.136.0/24 maxlen: 24
                          77.90.135.0/24 maxlen: 24
                          77.90.138.0/24 maxlen: 24
                          77.90.137.0/24 maxlen: 24
                          77.90.133.0/24 maxlen: 24
                          77.90.134.0/24 maxlen: 24
                          77.90.143.0/24 maxlen: 24
                          77.90.142.0/24 maxlen: 24
                          77.90.145.0/24 maxlen: 24
                          77.90.144.0/24 maxlen: 24
                          77.90.140.0/24 maxlen: 24
                          77.90.150.0/24 maxlen: 24
                          77.90.147.0/24 maxlen: 24
                          77.90.146.0/24 maxlen: 24
                          77.90.148.0/24 maxlen: 24
                          77.90.157.0/24 maxlen: 24
                          77.90.153.0/24 maxlen: 24
                          77.90.155.0/24 maxlen: 24
                          77.90.154.0/24 maxlen: 24
                          77.90.180.0/24 maxlen: 24
                          213.209.130.0/24 maxlen: 24
                          213.209.133.0/24 maxlen: 24
                          213.209.138.0/24 maxlen: 24
                          213.209.136.0/24 maxlen: 24
                          213.209.147.0/24 maxlen: 24
                          2a04:29c2::/32 maxlen: 32
                          2a04:29c7::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141957913 (0x8761b19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Apr  6 15:32:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c132988bc8e72b789827c2b86ba344ce00d2ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:86:93:b1:22:59:be:56:2b:1c:9f:11:13:
                    64:dd:33:63:e6:8c:cd:7c:fc:d1:d8:34:3d:68:54:
                    bb:e6:b2:15:9b:4c:5f:ea:54:6e:ec:28:33:36:cc:
                    50:0c:3b:10:e1:53:5a:31:1f:02:d8:40:5a:d8:02:
                    74:66:46:75:a4:d5:35:4a:dd:02:7b:31:c9:08:3c:
                    ad:b1:16:96:16:d8:f3:e1:44:ae:8e:78:5d:fe:9e:
                    50:bb:cb:c4:71:a7:2d:9b:30:e8:a2:bf:b4:2a:6e:
                    9b:77:ed:ce:93:da:65:c7:12:2f:d1:4a:3b:92:41:
                    c2:91:08:4c:f2:d3:c3:ac:69:e6:d0:81:9d:aa:16:
                    f3:de:87:75:c2:2f:58:e8:c5:38:9a:d0:bd:20:5a:
                    e0:48:37:6f:25:65:90:d7:aa:6c:c8:bd:96:6e:8a:
                    e6:b7:9c:13:88:f9:ce:07:2e:5f:22:d4:9c:e8:e7:
                    b4:ac:fd:60:c9:f1:71:68:01:f2:85:c0:b7:6d:0b:
                    92:bd:42:7e:75:60:c5:72:04:e4:98:09:47:be:d4:
                    d5:51:e4:ed:cd:42:17:a6:34:82:12:9a:6d:f1:a4:
                    6b:75:60:5e:87:a0:70:fc:55:46:36:2e:11:db:b6:
                    fd:8f:f8:ac:ca:f4:2c:fd:3a:4d:6d:c7:b7:a9:f4:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:13:29:88:BC:8E:72:B7:89:82:7C:2B:86:BA:34:4C:E0:0D:2E:C2
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LBMpiLyOcreJgnwrhro0TOANLsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.128.0-77.90.130.255
                  77.90.132.0-77.90.138.255
                  77.90.140.0/24
                  77.90.142.0-77.90.148.255
                  77.90.150.0/24
                  77.90.153.0-77.90.155.255
                  77.90.157.0/24
                  77.90.180.0/24
                  185.230.13.0-185.230.14.255
                  213.209.130.0/24
                  213.209.133.0/24
                  213.209.136.0/24
                  213.209.138.0/24
                  213.209.147.0/24
                IPv6:
                  2a04:29c2::/32
                  2a04:29c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:8e:28:f2:cc:b2:01:d2:6d:7d:ae:47:8b:0a:4a:6c:4c:47:
         11:46:40:c0:d9:d7:ef:b8:b5:9d:9e:60:62:81:f2:cd:2f:b4:
         13:10:4d:8c:59:bc:0c:0d:5e:d6:99:f0:64:86:37:a0:55:07:
         42:85:2f:59:b4:b0:6e:cc:ed:5a:71:4d:2c:a9:25:05:f0:b9:
         2b:cd:a4:ad:e9:e0:aa:f5:a1:04:c1:37:ec:9f:02:55:17:88:
         6b:91:58:c0:86:a9:cc:b6:94:c9:16:38:d1:6a:27:41:26:44:
         41:18:d6:4d:0a:f7:0b:e9:68:65:08:4f:40:e0:52:ec:1f:d6:
         ec:40:71:7c:fe:62:99:f3:39:2f:f7:d9:d2:56:07:73:43:b5:
         ba:99:0f:a6:6f:1e:3a:ab:9a:cf:40:54:fc:96:5f:16:79:c5:
         7e:cc:84:e7:6d:d5:5a:34:92:7a:9b:1d:a7:c2:9c:a4:33:3d:
         2f:fc:3c:fc:2a:fd:78:67:49:61:40:a7:a9:8a:59:93:c0:15:
         8b:6f:1e:49:6a:d2:72:76:34:af:24:ca:bf:9c:b2:50:33:f9:
         37:ee:11:32:43:88:34:9d:0a:cc:77:56:2e:6d:3b:23:df:49:
         4e:b4:16:12:09:1a:0e:0d:c9:e2:5b:4f:0c:98:b3:85:b2:7e:
         80:11:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org