Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/eZ4ttoaa0-ucUyt5-6plKHGWj6g.roa
File:                     eZ4ttoaa0-ucUyt5-6plKHGWj6g.roa (raw, json)
Hash identifier:          3T1uAjsnMAg4M/WIfhN25HgT3dmhVX/VwX+Fvzg4Ow0=
Subject key identifier:   79:9E:2D:B6:86:9A:D3:EB:9C:53:2B:79:FB:AA:65:28:71:96:8F:A8
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       077F75C6
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/eZ4ttoaa0-ucUyt5-6plKHGWj6g.roa
Signing time:             Fri 18 Feb 2022 13:49:20 +0000
ROA not before:           Fri 18 Feb 2022 13:49:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39144
IP address blocks:        77.90.138.0/24 maxlen: 24
                          77.90.157.0/24 maxlen: 24
                          185.230.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125793734 (0x77f75c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Feb 18 13:49:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=799e2db6869ad3eb9c532b79fbaa652871968fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:08:a0:2c:fe:96:33:c3:18:d4:df:04:21:0f:
                    54:28:df:a5:98:ee:e0:08:60:d8:bf:3f:0e:1d:4c:
                    52:ca:a1:77:46:fa:59:9b:05:c1:a7:74:f5:f3:38:
                    e5:64:6c:45:91:05:98:dd:5a:61:f3:1e:6a:57:e6:
                    0c:2e:7f:33:71:48:ec:8e:54:6f:c0:71:1f:e1:82:
                    6e:96:45:0e:35:50:47:dc:4b:7e:b5:5e:60:df:64:
                    74:2c:1b:c9:1e:ad:79:5c:e0:c3:5a:8b:d0:fe:96:
                    4b:4e:46:37:f6:22:0f:ab:b3:6b:04:36:be:f5:47:
                    6e:63:ef:2f:b4:0e:f6:09:ef:17:1d:2a:2d:62:a4:
                    49:4c:e9:12:11:07:8b:97:87:37:07:1c:51:49:56:
                    d3:4c:ec:2c:42:1a:8a:3f:b8:40:2a:82:3d:75:29:
                    f8:9d:fe:e6:8b:44:b3:58:20:01:14:bb:56:aa:8d:
                    35:a3:1b:1a:27:3b:25:89:36:42:79:f1:d7:fb:e4:
                    5a:bf:f9:d7:b5:16:97:18:47:f5:0a:ec:75:0e:c4:
                    fa:4d:de:ec:08:c2:a3:e7:db:93:92:e8:54:d9:89:
                    40:1f:7f:ba:7a:ba:11:cd:66:35:00:d2:1a:56:bb:
                    a2:a6:78:52:03:3a:c1:69:fb:80:2d:8b:2d:40:1b:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9E:2D:B6:86:9A:D3:EB:9C:53:2B:79:FB:AA:65:28:71:96:8F:A8
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/eZ4ttoaa0-ucUyt5-6plKHGWj6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.138.0/24
                  77.90.157.0/24
                  185.230.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d0:01:07:b1:12:ef:51:0b:b7:78:68:84:3d:e9:0d:26:fa:
         cd:1c:00:ad:3c:bb:2f:4b:18:70:eb:80:f2:02:09:05:ef:c9:
         f0:7f:34:85:f8:b1:99:81:ad:6f:f7:7a:74:7b:17:fd:49:47:
         88:ee:5a:f3:93:3b:e4:bd:7e:2f:25:10:d6:b9:7a:16:68:8a:
         0d:de:9c:d3:94:72:8e:98:df:da:89:9b:8e:ca:b0:5c:ae:7a:
         8e:64:b7:08:51:e8:18:02:cd:a4:b8:2b:8b:a1:18:7b:77:4b:
         44:47:0a:cd:e2:7b:bf:a6:d3:e0:c4:f7:2f:c2:26:87:2e:d4:
         6c:d0:e1:92:59:95:88:2b:3b:71:1e:a1:6f:aa:60:b8:01:13:
         ff:7e:0c:2c:51:06:ed:87:cd:52:5f:37:4d:8a:93:b6:f7:bd:
         10:d3:a0:85:dd:5e:02:fd:2e:85:07:6f:e0:f6:97:50:33:98:
         7c:c8:6d:ec:86:db:5f:47:21:99:9f:8d:50:5e:91:d5:aa:44:
         d7:73:75:f0:f2:5e:9f:6c:d6:11:62:4b:c5:1f:93:f4:1d:f9:
         c4:4e:f4:87:0f:4e:1a:1d:cb:30:d5:63:1b:8e:3d:97:d2:7a:
         c3:a7:5c:4b:8e:53:07:58:9f:16:57:4a:9f:1a:0b:ea:13:e6:
         2d:2e:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org