Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NDPdwpkoXpC0z430LpmC4x1-pRQ.roa
File:                     NDPdwpkoXpC0z430LpmC4x1-pRQ.roa (raw, json)
Hash identifier:          KyCTg9i5R9XnENcXrYnO2i2iIeciaF0UINAiSh8Svb4=
Subject key identifier:   34:33:DD:C2:99:28:5E:90:B4:CF:8D:F4:2E:99:82:E3:1D:7E:A5:14
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       0183CB1FB6BD1A6C990A20F45D6F77A21B89
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NDPdwpkoXpC0z430LpmC4x1-pRQ.roa
Signing time:             Wed 12 Oct 2022 07:36:36 +0000
ROA not before:           Wed 12 Oct 2022 07:36:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        77.90.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:cb:1f:b6:bd:1a:6c:99:0a:20:f4:5d:6f:77:a2:1b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Oct 12 07:36:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3433ddc299285e90b4cf8df42e9982e31d7ea514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3d:93:96:22:04:f1:b4:36:9c:d5:9b:e2:5c:
                    ff:69:a2:b6:8a:10:60:33:b2:e1:ec:ae:b4:68:d9:
                    ac:12:7f:ab:c1:e4:bf:04:49:19:b1:dd:ba:74:49:
                    0d:2f:73:9f:4c:02:c2:a1:94:ea:77:5f:69:0a:66:
                    8e:1b:ac:9c:da:80:b0:eb:e9:ca:f8:aa:67:04:e2:
                    bb:6e:fe:b5:b9:88:3a:ed:30:c7:66:cf:be:93:66:
                    4c:87:dd:31:62:e1:70:bf:73:0c:5f:4d:fa:ca:b1:
                    47:07:ef:07:45:e9:49:d1:05:f7:c3:14:be:04:22:
                    4c:42:8b:47:c5:c7:c2:7d:12:d7:34:f2:f9:50:8b:
                    44:d2:32:39:34:43:93:75:8f:94:24:74:5e:a4:91:
                    16:26:5f:0c:87:32:11:46:90:d2:8f:ff:3e:1b:4c:
                    f7:8b:80:9d:48:6c:4f:06:f6:e7:90:e4:06:c2:29:
                    48:40:a7:1e:84:01:a7:22:d5:bb:b9:07:8d:34:43:
                    eb:80:8a:45:7b:50:58:41:b8:f6:95:27:c7:b0:ca:
                    9a:c7:ed:5a:44:09:a0:2f:d0:46:ee:90:27:c0:6c:
                    64:9a:86:e2:9a:f5:67:16:b9:17:c5:dd:92:d4:1b:
                    4c:6d:dc:a1:78:a2:d4:7c:f9:6a:c1:99:4b:5c:ed:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:33:DD:C2:99:28:5E:90:B4:CF:8D:F4:2E:99:82:E3:1D:7E:A5:14
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NDPdwpkoXpC0z430LpmC4x1-pRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b2:fb:8d:4e:69:d2:ec:eb:18:31:78:98:ea:1b:09:38:36:
         99:c7:16:22:a7:1e:02:f4:34:1b:dd:8b:78:dc:34:81:ab:ab:
         ce:0b:4f:e3:a5:f5:21:68:9d:1f:e7:3f:45:d1:5c:e6:57:ba:
         d4:12:9f:9e:68:77:93:68:76:84:16:1d:e7:f1:ca:ab:19:11:
         a3:86:43:b0:38:29:78:92:fa:74:92:6c:1e:6e:70:c2:55:15:
         b7:dd:5c:06:e9:32:9f:7a:34:72:86:f0:2b:fa:2e:d9:11:83:
         c4:51:35:e1:a8:73:71:52:ff:89:98:3b:b0:48:67:fe:82:4e:
         ca:bf:28:33:d8:22:ef:6a:6e:cd:3a:cf:5a:f7:7d:22:ca:28:
         23:83:26:2b:6e:11:ea:f6:e2:17:90:72:a0:75:dc:85:5a:f1:
         cb:b5:65:70:fb:28:d4:7c:c1:af:5a:ef:16:12:24:43:24:ec:
         2d:4f:38:56:ba:4c:d3:d0:22:34:b8:29:61:99:6a:31:5e:2c:
         cb:2a:7e:d9:e5:cc:eb:92:78:80:16:0d:df:dd:cd:c2:ce:5c:
         06:b6:46:8b:8a:e3:2c:82:4e:60:f1:3f:b1:6f:7f:05:b1:00:
         be:81:90:6d:00:ec:19:72:db:2c:d5:de:59:8f:4d:a4:0f:84:
         3c:d2:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org